Privacy Policy

1. INTRODUCTION

From the Hot Zone ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our website and services (collectively, the "Service").

We've designed our Service with privacy as a priority, minimizing data collection while still providing personalized content. This policy is GDPR-compliant and explains your rights regarding your data.

2. INFORMATION WE COLLECT

2.1 Information You Provide

When using our Service, you may provide:

• Text inputs for generating Scorchlet™ or letters
• Selected feelings, emotions, or themes
• Feedback on generated content
• Payment information when purchasing unlimited access (processed securely by Stripe, not stored on our servers)

2.2 Information Collected Automatically

We collect limited non-identifying usage data, including:

• Anonymous session identifiers (not linked to personal information)
• Page views and features used
• Content generation metrics (e.g., number of Scorchlet™ created)
• General theme and tone selections
• Device type and browser information

We do NOT collect:

• Your name, email address, or contact information (unless you contact us directly)
• Demographic or personal information
• IP addresses or precise geolocation data
• Browsing history outside our Service
• Any information that directly identifies you

2.3 Cookies and Local Storage

We use:

• Session cookies to maintain your session state
• Local storage to track daily usage limits
• Essential technical cookies for Service functionality

We do NOT use:

• Third-party advertising cookies
• Cross-site tracking cookies
• Social media cookies or pixels

3. HOW WE USE YOUR INFORMATION

We use the information we collect to:

• Generate personalized content (Scorchlet™ and letters)
• Maintain usage limits for free content
• Process payments for unlimited access
• Improve our Service and content quality
• Monitor overall usage patterns for product development
• Ensure the technical functioning of our Service

All content generation occurs server-side using AI services (Anthropic Claude and OpenAI as fallback).

4. DATA SHARING AND THIRD-PARTY SERVICES

4.1 Third-Party Services

We use the following third-party services:

• Anthropic Claude and OpenAI: For AI content generation
• Stripe: For payment processing
• Replit: For hosting our application

Each of these services has their own privacy policies governing how they process data.

4.2 Sharing Your Data

We do NOT:

• Sell your data to third parties
• Share your inputs or content with marketing companies
• Allow third parties to track you across websites
• Use your data for targeted advertising

We may share anonymized, aggregated analytics internally or with trusted service providers to improve our Service.

5. DATA SECURITY

We implement appropriate security measures to protect your data, including:

• Secure, encrypted connections (HTTPS/TLS)
• Secure payment processing via Stripe
• Anonymous session management
• Privacy-focused analytics that avoid personal identifiers

6. DATA RETENTION

We retain session data and usage statistics for a limited period (typically 30 days). Generated content is not permanently stored after your session unless explicitly saved by you.

7. YOUR RIGHTS UNDER GDPR

As a user, you have the right to:

• Access any personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to our processing of your data
• Request restriction of processing
• Data portability (receive your data in a structured format)
• Withdraw consent at any time

To exercise these rights, please contact us at the email address in Section 11.

8. CHILDREN'S PRIVACY

Our Service is not directed to children under 16. We do not knowingly collect personal information from children under 16. If we learn we have collected personal information of a child under 16, we will delete such information.

9. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

10. CALIFORNIA PRIVACY RIGHTS

California residents have certain rights regarding their personal information under the California Consumer Privacy Act (CCPA). However, as our Service does not collect personal identifiers that could identify a particular consumer or household, most CCPA provisions do not apply.

11. CONTACT US

If you have any questions about this Privacy Policy, please contact us via the Contact link in the footer.