Privacy Policy

Last updated: December 2025

AU Movies & Production House ("AU Movies", "we", "us", "our") respects your privacy and is committed to protecting the personal data you share with us. This Privacy Policy describes how we collect, use, store, and safeguard your information when you use aumovies.in or the AU Movies applications. This policy is compliant with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023.

1. Information We Collect

• Identity data — name, phone number, email address, date of birth (optional).
• Account data — login credentials (hashed), preferences, viewing history, watchlist.
• Transaction data — plan purchased, order ID, invoice, GST state, masked payment method (last 4 digits of card, UPI VPA handle) as returned by the payment gateway. We do NOT store full card numbers, CVV, UPI PINs, or bank credentials.
• Technical data — IP address, device model, OS, browser type, app version, crash logs, referral URL.
• Usage data — pages viewed, videos streamed, time spent, features used, click paths.
• Portfolio submissions (voluntary) — name, role, phone, email, portfolio links, message.

2. How We Use Your Information

• To create and maintain your account and provide the Service.
• To process subscriptions, refunds, and issue tax invoices.
• To personalise recommendations and improve product experience.
• To send transactional notifications (order confirmations, renewal reminders, cancellation acknowledgements).
• To send marketing communications where you have opted in (unsubscribe available in every email).
• To detect, prevent, and address fraud, security incidents, and abuse.
• To comply with legal obligations, court orders, or requests from competent authorities.

3. Third-Party Data Processors

We share personal data only with the following categories of trusted processors, under contractual data-protection obligations:

• Payment Aggregators — PayU Payments Pvt. Ltd. and PhonePe Payment Solutions Pvt. Ltd. (RBI-authorised, PCI-DSS certified) for processing subscription payments and refunds.
• Cloud Infrastructure — AWS / Google Cloud / Cloudflare for hosting, storage, and content delivery.
• Analytics — Google Analytics / self-hosted analytics for aggregated usage insights.
• Communications — email and SMS providers (e.g., SendGrid / MSG91 / Amazon SES) for transactional messages.
• App Stores — Google Play and Apple App Store for mobile subscription billing (where applicable).

We do not sell your personal data to any third party.

4. Cookies & Similar Technologies

We use cookies and similar technologies (local storage, session storage, mobile ad identifiers) to keep you signed in, remember preferences, secure the Service, and analyse aggregated usage. You can control cookies through your browser settings. Disabling essential cookies may impact functionality (e.g., staying signed in).

5. Data Retention

• Account data: retained while your account is active. Deleted or anonymised within 90 days of your written deletion request, unless retention is required by law.
• Transaction data (invoices, tax records): retained for a minimum of 8 years to comply with GST and Income Tax laws.
• Server / access logs: retained for up to 12 months for security and diagnostic purposes.
• Marketing preferences: retained until you unsubscribe.

6. Data Security

We implement industry-standard security measures including HTTPS/TLS in transit, encryption at rest for sensitive fields, hashed passwords (bcrypt / argon2), role-based access, and regular security reviews. Payments are handled by PCI-DSS certified aggregators. However, no method of transmission over the internet is 100% secure; we cannot guarantee absolute security.

7. Your Rights

• Access — request a copy of the personal data we hold about you.
• Correction — request correction of inaccurate or incomplete data.
• Erasure — request deletion of your data (subject to legal retention obligations).
• Portability — request your data in a machine-readable format.
• Withdrawal of consent — for any processing based on consent (e.g., marketing).
• Grievance redressal — via our Grievance Officer, contact details below.

To exercise any right, write to support@au-movies.com.

8. Children

The Service is not directed to children under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

9. Changes to this Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via the Service or by email at least 7 days before they take effect. The "Last updated" date at the top of this page reflects the most recent revision.

10. Grievance Officer

In accordance with the Information Technology Act, 2000 and Rule 3(2)(b) of the Intermediary Guidelines, the details of our Grievance Officer are: