Legal

Privacy Policy

Last Updated: June 7, 2026

1. Introduction

CineGrok ("we," "us," or "our") operates the website cinegrok.in (the "Platform"). CineGrok is an ecosystem of tools and services built to help emerging and independent filmmakers organise their work, build a professional identity, and connect with collaborators.

This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and what rights you have regarding your data. It applies to all users of the Platform, whether you browse as a visitor, create a free account, or subscribe to a paid plan.

By using CineGrok, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please discontinue use of the Platform.

2. Data We Collect

We collect the following categories of information when you use CineGrok:

2.1 Account Information

When you create an account (via email or Google sign-in), we collect your name, email address, and profile photo. This information is managed through our authentication provider, Clerk.

2.2 Profile Information

When you build your filmmaker profile, you may provide:

● Personal details — stage name, legal name, phone number, date of birth, pronouns
● Location — country, state, city (current and native), nationality
● Professional details — primary and secondary roles, years active, preferred genres, visual style, creative influences, philosophy, education, certifications
● Actor-specific attributes — height, weight, eye colour, hair colour, age range, theatre experience (collected only if you identify as an actor)
● Social and portfolio links — Instagram, YouTube, Vimeo, LinkedIn, Twitter, Facebook, Letterboxd, personal website, showreel URL
● Profile photo and film posters — image files you upload

All profile fields beyond name and email are optional. You choose what to share.

2.3 Filmography Data

Your filmography entries may include film titles, years, genres, synopses, loglines, watch/trailer links, poster images, awards and festival selections, and video performance metrics (views, likes, comments) synced from public YouTube or Vimeo APIs.

2.4 Payment Information

If you subscribe to a paid plan, payment is processed by Razorpay. We store your subscription plan type, billing cycle, and Razorpay subscription identifiers. We do not store your credit/debit card numbers, UPI IDs, or bank account details — Razorpay handles all sensitive financial data directly.

2.5 Usage & Analytics Data

We collect anonymised usage data to provide analytics features to filmmakers, including:

● Profile view counts and click events (which films, trailers, or social links are clicked)
● Referrer source (whether a visitor came from Instagram, YouTube, Twitter, or directly)
● Device type (mobile, desktop, or tablet)

2.6 Technical Data

Standard server logs may capture your IP address, browser type, and request timestamps. We also use browser localStorage to save profile drafts on your device for convenience.

3. How We Use Your Data

We use your personal data for the following purposes:

● Account creation and authentication — to register, verify, and manage your CineGrok account
● Profile display and discovery — to publish your filmmaker profile so producers, collaborators, and the public can discover your work
● AI-generated professional bios — your profile data is processed by an AI service (Groq) to generate a professional biography for your profile. You can review and edit this bio before publishing
● Analytics and insights — to provide you with data about who is viewing your profile and engaging with your work
● Collaboration facilitation — to enable other filmmakers to express interest in collaborating with you
● Payment processing — to manage subscriptions and billing through Razorpay
● Platform improvement — to understand usage patterns and improve our services
● Communications — to send you essential service-related notifications (e.g., subscription confirmations, policy changes)

We do not sell your personal data to third parties. We do not use your data for advertising purposes.

4. Legal Basis for Processing

Under the Digital Personal Data Protection Act, 2023 (DPDPA) and the Information Technology Act, 2000, we process your data on the following grounds:

● Consent — you provide consent when you create an account, build your profile, and choose to publish your information
● Contractual necessity — processing required to deliver the services you have subscribed to
● Legitimate interests — improving our platform, preventing fraud, and ensuring platform security

5. Data Sharing & Third-Party Services

We work with trusted service providers who process data on our behalf. We do not sell or rent your data to any third party. Our service providers include:

Clerk

Authentication and secure user session management. Receives your name, email, and profile photo.

Supabase

Secure database and cloud storage. Stores all profile data, filmography, and uploaded files (photos, posters).

Razorpay

Payment processing for subscriptions. Handles all financial data directly. We never see or store your card details.

Groq

AI inference for generating professional bios. Receives profile data needed to create your bio. Does not retain your data for training.

Vercel

Website hosting and serverless infrastructure. Standard server logs (IP address, request metadata).

YouTube & Vimeo APIs

Public video metrics sync. We fetch publicly available view/like/comment counts for films you link in your filmography.

6. Google OAuth Disclosure

CineGrok's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

When you sign in with Google, we receive only your name, email address, and profile picture. We use this data solely to create and manage your CineGrok account. We do not request access to your Google Drive, Gmail, Calendar, or any other Google service data.

7. Data Storage & Security

Your data is stored on secure cloud infrastructure provided by Supabase and Vercel. We implement the following security measures in accordance with the IT (Reasonable Security Practices) Rules, 2011:

● All data is transmitted over encrypted connections (TLS/HTTPS)
● Database access is controlled through Row-Level Security (RLS) policies, ensuring users can only access their own data
● Authentication tokens are managed by Clerk with industry-standard session management
● Payment data is handled entirely by Razorpay, which is PCI-DSS compliant
● Uploaded files (photos, posters) are stored in private cloud storage buckets with access controls

While we take reasonable steps to protect your data, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

8. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you services. Specifically:

● Account and profile data — retained while your account is active. Deleted upon account deletion request, subject to a reasonable processing period
● Payment records — retained for the period required under applicable Indian tax and financial regulations
● Analytics data — aggregated analytics are retained; identifying details are not linked to visitor identities
● Profile drafts — stored locally on your browser and on our servers. Server drafts are purged when you publish or delete your account

9. Your Rights

Under the Digital Personal Data Protection Act, 2023 and applicable Indian law, you have the following rights:

AccessRequest a summary of the personal data we hold about you
CorrectionUpdate or correct inaccurate personal data via your profile settings
ErasureRequest deletion of your account and associated personal data
GrievanceFile a grievance with us regarding the processing of your personal data
NominationNominate another individual to exercise your rights in case of death or incapacity, as provided under the DPDPA

To exercise any of these rights, please contact us at docmail1131@gmail.com. We will respond to your request within 30 days.

10. Children's Privacy

CineGrok is not intended for individuals under the age of 16. We do not knowingly collect personal data from children under 16. If we become aware that we have collected data from a child under 16 without verifiable parental consent, we will take steps to delete that information promptly. If you believe a child under 16 has provided us with personal data, please contact us at docmail1131@gmail.com.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will update the "Last Updated" date at the top of this page. For significant changes, we will notify you via email or a prominent notice on the Platform. Your continued use of CineGrok after any changes constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

CineGrok

Email: docmail1131@gmail.com

Website: cinegrok.in