Privacy Policy
Last Updated: January 1, 2025
1. Introduction
IndieMoves.ai ("we," "our," or "us") operates the indiemovies.ai platform. This Privacy Policy explains how we collect, use, disclose, and protect your personal information in accordance with the General Data Protection Regulation (GDPR) and applicable EU data protection laws.
2. Data Controller
Copenhagen Technologies
Slotbakken 38
Denmark
Email: privacy@indiemovies.ai
3. Information We Collect
3.1 Information You Provide
- Account Information: Email address, username, password (encrypted), display name
- Profile Information: Bio, profile picture, social media links (optional)
- Content: Movies, videos, images, comments, reviews, and other user-generated content you upload
- Communications: Messages sent through our platform, support inquiries
3.2 Information Collected Automatically
- Usage Data: Pages visited, features used, time spent on platform, interaction with content
- Device Information: IP address, browser type, operating system, device identifiers
- Cookies and Similar Technologies: See Section 8 for details
4. How We Use Your Information
We process your personal data on the following legal bases:
4.1 Contractual Necessity (GDPR Art. 6(1)(b))
- Create and manage your account
- Provide access to platform features
- Host and display your content
- Enable community interactions
- Provide customer support
4.2 Legitimate Interests (GDPR Art. 6(1)(f))
- Improve and optimize our services
- Detect and prevent fraud, abuse, and security threats
- Analyze platform usage and trends
- Send service-related communications
4.3 Consent (GDPR Art. 6(1)(a))
- Analytics and performance tracking (Google Analytics)
- Optional marketing communications
- Non-essential cookies
5. Data Sharing and Disclosure
We share your information with:
5.1 Service Providers (Subprocessors)
- Cloudflare (EU): Content delivery, DDoS protection, security services
- Google Analytics (USA): Website analytics and usage statistics (anonymized IP)
- Neon Database (EU): Data storage and hosting (PostgreSQL)
All subprocessors are bound by data processing agreements ensuring GDPR compliance and appropriate safeguards for data transfers outside the EU.
5.2 Legal Requirements
We may disclose information when required by law, court order, or to protect our rights, safety, or property.
5.3 Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your data is transferred and becomes subject to a different privacy policy.
5.4 We Do Not Sell Your Data
We never sell your personal information to third parties.
6. Data Storage and Security
- Location: All primary user data is stored on servers located within the European Union (Neon Database EU region)
- Security Measures: Encryption in transit (TLS/SSL), encrypted password storage, access controls, regular security audits
- CDN: Content delivery through Cloudflare EU data centers to optimize performance while maintaining data residency
- Retention: We retain your data as long as your account is active or as needed to provide services. See Section 9 for specific retention periods.
7. International Data Transfers
Our primary data storage and processing occurs within the European Union. However, some analytics data (Google Analytics) may be transferred to the United States. These transfers are protected by:
- Standard Contractual Clauses (SCCs) approved by the EU Commission
- Data Processing Agreements ensuring GDPR-level protection
- Google Analytics with IP anonymization enabled
- Cloudflare operations within EU data centers to minimize transfers
8. Cookies and Tracking Technologies
We use the following types of cookies:
8.1 Essential Cookies (No Consent Required)
- Session management and authentication
- Security features
- Basic functionality
8.2 Analytics Cookies (Requires Consent)
- Google Analytics: Tracks page views, user interactions, platform performance
- You can opt out at any time through our cookie preferences
8.3 Your Cookie Choices
You can manage cookie preferences through:
9. Data Retention
- Account Data: Retained while your account is active
- Content: Retained while your account is active or as required by law
- Analytics Data: Retained for 26 months (Google Analytics default)
- Logs: Retained for 90 days for security purposes
- After Account Deletion: All personal data deleted within 30 days, except where legal retention is required
10. Your Rights Under GDPR
You have the following rights regarding your personal data:
10.1 Right to Access (Art. 15)
Request a copy of the personal data we hold about you.
10.2 Right to Rectification (Art. 16)
Correct inaccurate or incomplete personal data.
10.3 Right to Erasure (Art. 17)
Request deletion of your personal data ("right to be forgotten").
10.4 Right to Restriction of Processing (Art. 18)
Request limitation on how we process your data.
10.5 Right to Data Portability (Art. 20)
Receive your data in a structured, machine-readable format.
10.6 Right to Object (Art. 21)
Object to processing based on legitimate interests.
10.7 Right to Withdraw Consent (Art. 7(3))
Withdraw consent for analytics cookies or marketing communications at any time.
10.8 Right to Lodge a Complaint
Contact your local data protection authority if you believe we've violated your rights.
To Exercise Your Rights: Email us at [privacy@indiemovies.ai] with your request. We will respond within 30 days.
11. Children's Privacy
Our service is not intended for users under 16. We do not knowingly collect personal information from children under 16. If we discover we have collected data from a child under 16, we will delete it immediately.
12. Third-Party Links
Our platform may contain links to third-party websites or services. We are not responsible for their privacy practices. Please review their privacy policies before providing any information.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by:
- Posting the updated policy on this page
- Updating the "Last Updated" date
- Sending an email notification (for significant changes)
Continued use of our services after changes constitutes acceptance of the updated policy.
14. Contact Us
For questions about this Privacy Policy or to exercise your rights:
Email: privacy@indiemovies.ai
Address: Slotbakken 38, Denmark
Your Consent
By using IndieMoves.ai, you acknowledge that you have read and understood this Privacy Policy and agree to its terms.