Holina Factory

Privacy

Effective August 27, 2026. Last updated October 21, 2026.

We collect as little as we can to run the app and take payment.

What we collect

• Email, for OTP login and receipts, and the name you give for a free still or a free account.
• Usage counts (Flux 2 stills, 1080p clips, H3 hooks) so the meter works.
• Payment status from Stripe. Card numbers stay with Stripe.
• Briefs you send on hub.holinafactory.app/order (name, contact, what you need).
• Basic logs (IP, browser) to keep the box up and stop abuse.

Cookies

Login, checkout, and the Accept cookies bar. Details on the cookie policy.

Who else sees it

Stripe (payments), PostHog (site and app analytics; it receives the name and email you give for a free still or a free account, your account email while you are signed in, and your plan and Stripe customer number when you start a trial or buy a plan; see the cookie policy), Cloudflare (hosting, access, and the sign-in server at auth.holinafactory.app for connected AI clients), Anthropic (it reads the photos you upload and frames of your clips, so your prompts and captions can say what is in them), email delivery for login codes, and GoHighLevel when you tap Ship. Ship sends the clip and caption to GoHighLevel, which posts to the Facebook and Instagram pages connected in that customer's GHL location (Meta). We do not store Facebook or Instagram passwords. We do not sell your list.

Connected AI clients

You can connect an AI client such as Claude to your factory through auth.holinafactory.app. Before anything is shared you see a consent screen that names the client, says where your browser will be sent afterwards, and lists what the client may do. Then you sign in with your email code, the same login as the app. A connector sign-in never asks for, receives, or stores GoHighLevel tokens.

A connected client can list your render presets, queue renders in your factory, and read their status. It cannot post, cannot see any other customer, and cannot approve a ship.

We keep which client you connected, the permissions you granted, your email, and your factory id. Access tokens last 5 minutes. A refresh token is replaced every time it is used, expires after 30 days unused, and never lives past 90 days from the day you connected; we store only SHA-256 hashes of them. Remove the connector inside the client to end access, or email [email protected] to cut it early. Connection attempts are logged without codes or tokens.

Where it lives

App data lives on Holina Factory servers in Huntersville. Export or delete via [email protected]. We keep invoices as long as tax rules require.

This is Holina Factory operating policy, not legal advice. Questions: [email protected].