Privacy Policy

Effective Date: 1 March 2026
Last Updated: 1 March 2026
Platform: AIO Cine Productions (aiocine.com)
Data Fiduciary: AIO Cine Productions
Contact: contact@aiocine.com

AIO Cine Productions is committed to protecting your personal data. This Privacy Policy explains what data we collect, how we use it, who we share it with, and what rights you have — in plain language, not legal jargon.

This Policy is written in compliance with the Digital Personal Data Protection Act, 2023 ("DPDP Act"), the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the IT (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021.

By using this platform, you consent to the practices described in this Policy. If you do not agree, please do not use the platform.

1. Who We Are

AIO Cine Productions is the Data Fiduciary as defined under the DPDP Act, 2023 — meaning we determine the purpose and means of processing your personal data. We operate an online marketplace connecting film production companies with crew and creative talent across Indian cinema.

For all data-related queries, contact us at: contact@aiocine.com

2. What Personal Data We Collect

We collect personal data in two ways: data you provide directly, and data generated automatically by your use of the platform.

2.1 Data You Provide to Us

Account Registration:

• Full name
• Email address
• Phone number
• Password (stored in encrypted form — we never see your plain-text password)
• Account type (Talent or Production House)

Talent Profile:

• Professional bio and headline
• Department and role (e.g., Camera, Direction, Art, Sound)
• Film credits and work history
• Skills, languages, and industry experience
• Profile photograph and showreel / portfolio links
• Location (city/state — not precise GPS coordinates)
• Languages spoken
• Availability status

Production House Profile:

• Company name and type
• Registered address (city/state)
• Contact person name and designation
• Company website and social media links
• Notable productions
• GST number and PAN (for Verified badge applicants only — handled with heightened security)

Job Postings and Applications:

• Job titles, descriptions, and requirements posted by Production Houses
• Applications, cover letters, and messages submitted by Talent

Communications:

• Messages exchanged between users on the platform
• Support tickets and emails sent to us

2.2 Data Collected Automatically

• Usage data: Pages visited, features used, search queries, time spent on pages
• Device data: IP address, browser type and version, operating system, device type
• Log data: Server logs, access times, referring URLs
• Cookies and similar technologies: See Section 8 for details

2.3 Data We Do Not Collect

Unless required as part of a future payment integration, we do not collect:

• Bank account numbers or credit/debit card details (payment processing, when introduced, will be handled by licensed third-party payment gateways)
• Aadhaar numbers
• Biometric data
• Precise real-time location

3. Why We Collect Your Data — Purposes of Processing

We process your personal data only for the following purposes, each grounded in a lawful basis under the DPDP Act, 2023:

We do not process your personal data for purposes other than those listed above without first obtaining your separate, specific consent.

4. How We Share Your Data

We do not sell your personal data to third parties. We share data only in the following circumstances:

4.1 With Other Users (Necessary for the Platform to Function)

• Your Talent profile (name, bio, credits, department, photo, portfolio) is visible to registered Production House accounts searching for crew.
• Job postings made by Production Houses are visible to registered Talent users.
• When you apply for a role, the Production House receives your application details and profile.
• You control your profile visibility through your account settings. You may set your profile to "Private" or "Available" at any time.

4.2 With Service Providers (Data Processors)

We engage trusted third-party service providers who process data on our behalf under strict data processing agreements. These include:

• Cloud hosting providers — for platform infrastructure and data storage;
• Email service providers — for transactional and notification emails;
• Analytics providers — for aggregated, anonymised platform usage analysis;
• Payment gateways — for processing subscription payments (when introduced).

These providers are permitted to process your data only for the specified purpose and are contractually bound to maintain security standards equivalent to or exceeding our own.

4.3 For Legal Compliance

We may disclose your data when required to do so by:

• A valid court order or judicial direction;
• A lawful government or regulatory authority directive;
• Our obligations under the IT Act, DPDP Act, or other applicable Indian law;
• Investigations into fraud, illegal activity, or violations of these Terms.

4.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to the successor entity. We will notify you of such a transfer and the successor entity's privacy practices before the transfer occurs.

5. Data Retention

We retain your personal data only for as long as necessary for the purposes it was collected, or as required by law.

• Active account data: Retained for as long as your account remains active.
• Account data after closure: Retained for up to 3 years after account closure to fulfil legal obligations, resolve disputes, and prevent fraud. After this period, data is deleted or irreversibly anonymised.
• Job applications and messages: Retained for 2 years from the date of the last interaction, then deleted.
• Verification documents (GST/PAN submitted by Production Houses): Retained for 5 years in accordance with applicable Indian record-keeping requirements, then securely deleted.
• Log and usage data: Retained for up to 90 days for security and debugging purposes, then deleted.
• Grievance and complaint records: Retained for 3 years from resolution.

Where you request deletion of your account and data (see Section 6), we will process your request promptly. Certain data may be retained beyond these periods where required by a legal obligation, ongoing dispute, or regulatory direction.

6. Your Rights as a Data Principal

Under the DPDP Act, 2023, you have the following rights regarding your personal data:

6.1 Right to Access

You have the right to obtain a summary of the personal data we hold about you and information about how it is being processed. Submit a request to contact@aiocine.com with the subject line "Data Access Request". We will respond within 30 days.

6.2 Right to Correction

You have the right to request correction of inaccurate or incomplete personal data. Most profile information can be edited directly through your account settings. For data you cannot edit yourself, contact us at contact@aiocine.com.

6.3 Right to Erasure

You have the right to request deletion of your personal data when it is no longer necessary for the purpose it was collected, or when you withdraw consent. To close your account and request data deletion, email us at contact@aiocine.com with the subject line "Account Deletion Request". We will process your request within 30 days. Some data may be retained as described in Section 5.

6.4 Right to Withdraw Consent

Where we process your data based on consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the legality of processing carried out before the withdrawal. You may withdraw consent for specific processing activities (e.g., marketing emails) through your account notification settings or by contacting us.

6.5 Right to Grievance Redressal

You have the right to raise a grievance with us regarding the processing of your personal data. Contact our Grievance Officer at contact@aiocine.com. We will acknowledge your grievance within 24 hours and resolve it within 15 days.

6.6 Right to Nominate

As provided under the DPDP Act, 2023, you have the right to nominate another individual to exercise your data rights in the event of your death or incapacity. To register a nominee, contact us at contact@aiocine.com.

To exercise any of the above rights, please email contact@aiocine.com with your registered email address and a clear description of your request. We may need to verify your identity before processing your request.

7. Consent

7.1 How We Obtain Consent

We obtain your consent at the time of registration through an explicit affirmative action — checking the "I agree to the Terms of Service and Privacy Policy" box. This consent is:

• Free: Not conditional on accessing the platform (to the extent possible);
• Informed: This Policy clearly explains what you are consenting to;
• Specific: Different types of consent (e.g., marketing emails) are obtained separately;
• Unambiguous: We use opt-in mechanisms, not pre-ticked boxes.

7.2 Children's Data

The platform is intended for users aged 18 and above. We do not knowingly collect personal data from anyone under the age of 18. If we become aware that we have inadvertently collected data from a minor, we will delete it promptly. If you believe a minor has created an account, please notify us at contact@aiocine.com.

8. Cookie Policy

8.1 What Are Cookies

Cookies are small text files stored on your device when you visit a website. They allow the website to recognise your device and remember information about your visit.

8.2 Cookies We Use

Strictly Necessary Cookies:
Required for the platform to function. These include session cookies that keep you logged in. You cannot opt out of these without affecting core functionality.

Preference Cookies:
Remember your settings and preferences (e.g., language, notification settings). You may disable these in your browser settings.

Analytics Cookies:
Help us understand how users interact with the platform so we can improve it. We use aggregated, anonymised data only. These are optional and subject to your consent.

Marketing Cookies:
Used only with your explicit consent to show relevant platform content. We do not currently use third-party advertising cookies.

8.3 Managing Cookies

You can control cookies through your browser settings. Note that disabling certain cookies may affect how the platform works. Our cookie consent banner allows you to accept or decline non-essential cookies when you first visit the platform.

9. Data Security

We implement industry-standard technical and organisational security measures to protect your personal data, including:

• HTTPS encryption for all data in transit;
• Hashed and salted passwords (we cannot read your password);
• Access controls limiting staff access to personal data on a need-to-know basis;
• Regular security reviews of our platform;
• Secure handling of sensitive documents (GST/PAN).

No system is 100% secure. In the event of a data breach that is likely to harm you, we will notify affected users and report to the relevant authorities as required under the DPDP Act, 2023.

10. Data Transfers Outside India

Your data may be processed by our service providers on servers located outside India (for example, cloud hosting infrastructure). Where data is transferred internationally, we ensure that the transfer is to countries or entities that provide an adequate level of data protection, consistent with the requirements of the DPDP Act, 2023 and applicable Indian law.

11. Changes to This Privacy Policy

We may update this Policy periodically. When we make material changes, we will notify registered users by email and display a clear notice on the platform. The revised Policy will specify its effective date. Continued use of the platform after the effective date constitutes acceptance of the updated Policy. If you object to the changes, you may close your account before the effective date.

12. Contact and Grievance Officer

For any questions, concerns, or requests related to this Privacy Policy or your personal data:

Grievance Officer / Data Contact
AIO Cine Productions
Email: contact@aiocine.com
Website: aiocine.com

Please use the subject line "Privacy: [your query]" for faster routing. We acknowledge all data-related queries within 24 hours and aim to resolve them within 15 days.

If you are not satisfied with our response, you may approach the Data Protection Board of India once it is constituted and operational under the DPDP Act, 2023.

This Privacy Policy was last updated on 1 March 2026.