Privacy Policy

This Privacy Policy (“Policy”) describes how Cinestry Private Limited (“Cinestry”, “we”, “us”, or “our”), a company incorporated in India with its registered office at B-401, 4th Floor, Richa Industrial Estate, Veera Desai Industrial Estate, Andheri West, Mumbai – 400058, Maharashtra, India, and operator of the Cinestry Flix on-demand streaming service for movies and web series (the “Service”), collects, uses, discloses, retains and protects information that relates to you when you access or use the Service. Cinestry is the entity responsible for the personal data described here, and can be reached at any time at contact@cinestry.com. By using the Service you consent to the practices described in this Policy. This Policy is published in accordance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 (to the extent applicable).

Browsing the Cinestry Flix catalogue does not require an account. We ask you to sign in only when you start playback or begin a purchase, and the data described below is collected accordingly.

1. Information We Collect

We collect the following categories of information:

• Account & identity data: we use Firebase Authentication (Google) to sign you in. Depending on the method you choose, we receive your name, email address and profile image from Google Sign-in, or your mobile number verified by a one-time password delivered through MSG91. In either case we hold a Firebase user identifier and the session tokens issued to your device. We do not operate a password login for the Service, and therefore neither see nor store a password for it. If you begin a purchase before signing in, we create an anonymous guest session so that checkout can complete; the resulting purchase is recorded against the mobile number you supply and is transferred to your account when you later sign in and that number is verified.
• Profile & library data: your user profile, the titles you save to My List, and your watch progress for each movie or episode, stored in Firestore so your account works consistently across devices.
• Purchase, Coin & entitlement data: the Plans and Coin packs you buy, your Coin wallet balance and the ledger of every Coin credit and debit, the unlock record for each movie or episode you spend Coins on, and transaction records (transaction reference, amount in INR, gateway used, status and timestamps). Payments are processed by PayU, Razorpay and Cashfree. We do not receive or store full card numbers, CVVs, UPI PINs, net-banking or bank credentials; these are handled directly by the payment gateway.
• Usage & viewing data: the movies and episodes you open and watch, your playback position and watch duration, play/pause events, search queries, browsing and recommendation interactions, and session information.
• Device & technical data: IP address, device type, operating system, browser, screen resolution, device identifiers, language, time zone, referring URLs, crash logs and approximate location derived from IP.
• Communication data: one-time passwords, verification codes, delivery receipts, support tickets and any information you provide when contacting us.
• Marketing & attribution data: where we have configured a Meta (Facebook) Pixel, we record the campaign parameters carried by our advertising links (such as UTM values and campaign, ad-set, ad and placement identifiers), Meta’s click identifier, Meta’s own browser cookies, the page a purchase started from and the country derived from your IP address, so that a purchase can be attributed to the advertisement that led to it. Where no Pixel is configured, none of this is collected.
• Cookies & similar technologies: cookies, local storage, pixels, SDK identifiers and analytics tags used to operate the Service, remember preferences, maintain sessions and measure performance.

2. How We Use Your Information

We use the information we collect to:

• create and manage your account and authenticate you;
• process payments, activate Plans, credit and debit Coins, record the movies and episodes you unlock, and maintain transaction records;
• decide whether you are entitled to play a given movie or episode, whether because it is free, because you unlocked it with Coins, or because you hold an active Plan;
• resume playback where you left off and keep your saved titles available;
• deliver, personalise, recommend and improve the Service and its content;
• enforce our Terms of Use, detect fraud, abuse, piracy and security incidents;
• send service-related messages (OTP, account alerts, transaction receipts) and, with your consent where required, marketing communications;
• measure the effectiveness of our advertising, where a Meta Pixel is configured;
• perform analytics, aggregate reporting and research;
• comply with applicable laws, regulations and lawful government requests.

3. Legal Bases

We process your information on one or more of the following bases: performance of a contract with you, your consent, our legitimate business interests (including fraud prevention, security and service improvement) and compliance with legal obligations.

4. Sharing & Disclosure

We do not sell your personal information. We may share it with the following categories of recipients, each of which is subject to confidentiality obligations or their own published privacy policies:

• Service providers & processors who support the Service on our behalf, including cloud hosting, authentication, database and storage services (Google Firebase and Google Cloud), content delivery, payment processing (PayU, Razorpay and Cashfree), SMS and OTP delivery (MSG91), email, analytics, customer-support and anti-fraud providers.
• Advertising measurement partners: where a Meta Pixel is configured, purchase and other conversion events are shared with Meta Platforms through the Meta Pixel in your browser and, for the same events, through the Meta Conversions API from our servers, so that a single conversion is measured once.
• Content partners & licensors, on an aggregated and de-identified basis, for royalty reporting and audit purposes.
• Law-enforcement, regulators and courts where required by law, legal process, enforceable governmental request or to protect the rights, property or safety of Cinestry, its users or the public.
• Successors in the event of a merger, acquisition, restructuring, insolvency or sale of all or part of our business or assets.

5. Cookies & Tracking

We and our service providers use cookies and similar technologies to keep you signed in, remember preferences, analyse traffic and measure the effectiveness of communications. Where a Meta Pixel is configured, we also set a first-party cookie recording which advertisement brought you to the Service, and Meta sets its own cookies in your browser. You can control cookies through your browser settings; however, disabling cookies may prevent the Service from functioning correctly (for example, you may be unable to sign in or play video). Your continued use of the Service with cookies enabled constitutes consent to their use.

6. Data Retention

We retain your information for as long as your account is active, as long as needed to provide the Service and for a reasonable period thereafter to comply with legal, tax, accounting, audit, fraud-prevention, dispute-resolution and contractual requirements. Transaction records, the Coin ledger and unlock records are retained for the periods required by applicable tax and accounting law, because they evidence what you paid for and what you are entitled to watch. De-identified or aggregated data may be retained indefinitely.

7. Your Rights

Subject to applicable law, you may have the right to access, correct, update or erase your personal data, to withdraw consent, to object to or restrict certain processing, and to port your data. You can exercise most of these rights directly through your account settings; otherwise, you may write to us at contact@cinestry.com or contact the Grievance Officer whose details are given below. We may require verification of your identity before acting on any request. Certain information must be retained to provide the Service or to comply with law, and such requests may be denied to that extent. Please note that erasing your account also removes the record of the Plans you hold and the movies and episodes you unlocked with Coins, and those entitlements cannot be restored afterwards.

8. Security

We maintain reasonable administrative, technical and physical safeguards designed to protect your information, including encryption in transit, access controls and regular security reviews. Playable video URLs are not published in the catalogue data your browser receives and are not stored on your device: they are held separately and resolved on our servers for each individual playback request, only after we have verified your session and your entitlement to that specific movie or episode. However, no method of transmission or storage is one hundred per cent secure. To the fullest extent permitted by law, Cinestry disclaims all liability for any unauthorised access to, disclosure of, loss of or damage to your information resulting from events outside our reasonable control, including cyber-attacks, security breaches at third parties, credential compromise at your end, device theft or any other circumstance not attributable to our gross negligence.

9. Children

The Service is not directed to, and we do not knowingly collect information from, persons under the age of eighteen (18). If you believe a minor has provided us personal information, please contact us and we will take reasonable steps to delete it. Parents and guardians are responsible for monitoring and supervising the use of the Service by minors in their care.

10. International Transfers

Your information may be stored and processed in India and in other countries where our service providers operate. Where such transfers take place, we take reasonable steps to ensure an adequate level of protection consistent with this Policy and applicable law.

11. Third-Party Links & Services

The Service may contain links to, or integrations with, third-party websites, applications and services. We are not responsible for the privacy practices or content of any third party. Your interactions with such third parties are governed by their own policies. We encourage you to read them.

12. Changes to this Policy

We may update this Policy from time to time. The “Last updated” date at the top indicates when it was last revised. Material changes will be communicated through the Service or by other reasonable means. Your continued use of the Service after the effective date constitutes your acceptance of the revised Policy.

13. Grievance Officer & Contact

General questions about this Policy or your personal data may be sent to contact@cinestry.com. In accordance with the Information Technology Act, 2000 and rules made thereunder, the contact details of our Grievance Officer are published below, and formal complaints should be addressed there:

We endeavour to acknowledge grievances within forty-eight (48) hours and resolve them within one (1) month of receipt, in accordance with applicable law.