Privacy Policy

Draft for review. Replace the bracketed placeholders ([Movly entity], contact email, address, dates) and have this reviewed by counsel before launch.

This Privacy Policy ("Policy") explains how [Movly — legal entity name] ("Movly", "we", "us", or "our") collects, uses, shares, and protects information about you when you use the Movly website and any related applications, players, and services (together, the "Service"). It also describes the choices and rights you have regarding your information.

By accessing or using the Service, you confirm that you have read and understood this Policy and agree to the collection, use, and disclosure of your information as described here. If you do not agree, please do not access or use the Service. This Policy applies only to information processed by Movly through the Service; it does not apply to third-party websites, apps, or services that we do not control, even where they link to or from the Service.

1. Who we are

Movly is the controller responsible for your personal information processed through the Service. Movly is a streaming platform that offers short-form video series. Some content on the Service is licensed to us by third-party content owners; this Policy governs Movly's own data practices only.

2. Information we collect

We collect the following categories of information:

(a) Information you provide to us.

• Account information — if you create an account, your email address and a password (passwords are stored only in a salted, hashed form, never in plain text).
• Purchase information — records of the coin packs, episode unlocks, and series purchases you make, including amount, date, and what was unlocked. Payment card details are entered with our payment processor and are not collected or stored by Movly.
• Communications — information you provide when you contact support or otherwise communicate with us.

(b) Information we collect automatically. When you use the Service we automatically collect certain information, including:

• A randomly generated visitor identifier stored on your device so the Service can function for anonymous visitors and remember purchases.
• Device and technical information such as IP address, browser type and language, operating system, device type, and approximate location derived from your IP address.
• Usage and viewing activity, such as which episodes are played, how far you watch, and aggregated counts of views (used in part to report viewership to our content licensors).
• Standard server log information and information collected through cookies and similar technologies (see Section 4).

(c) Information from third parties. We may receive information from our payment processor (for example, confirmation that a payment succeeded and the email used at checkout) and, if you ever use an optional social or single sign-on method, basic profile information you authorize that provider to share.

3. How we use your information

We use the information we collect to:

• Provide, operate, and maintain the Service, including streaming video and remembering what you have unlocked;
• Create and manage your account and restore your coins and purchases across devices;
• Process payments and maintain your transaction and order history;
• Measure viewership and report aggregated viewing figures to content licensors as required by our licensing agreements;
• Improve, personalize, and develop the Service, and understand how it is used;
• Detect, prevent, and respond to fraud, abuse, security incidents, and unlawful activity, and to enforce our Terms of Service;
• Send you service-related messages (such as confirmations, security alerts, and account notices) and, where permitted, promotional messages you can opt out of;
• Comply with legal obligations and exercise or defend legal claims.

We may create aggregated or de-identified information that does not identify you and use it for any purpose.

4. Cookies and similar technologies

We use cookies and similar technologies (such as local storage) to keep you signed in, remember your visitor identifier and purchases, secure the Service, and understand usage. You can control cookies through your browser settings, but disabling them may affect how the Service works.

5. How we share information

We do not sell your personal information. We share information only as described below:

• Service providers. We use trusted third parties to operate the Service, including our payment processor (to process purchases and accept Apple Pay, Google Pay, and card payments), our video hosting and content-delivery provider (to store and stream video), and providers for hosting, email, analytics, and security. These providers may process your information only on our behalf and under confidentiality obligations.
• Legal and safety. We may disclose information if we believe it is reasonably necessary to comply with a law, regulation, legal process, or governmental request; to enforce our terms; or to protect the rights, property, or safety of Movly, our users, or others.
• Business transfers. If Movly is involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction.
• With your consent. We may share information for other purposes you have agreed to.

6. Data retention

We retain personal information for as long as needed to provide the Service and for the purposes described in this Policy, after which we delete or anonymize it, unless a longer retention period is required or permitted by law (for example, for tax, accounting, fraud-prevention, or legal-claim purposes). When you delete your account, we will delete or anonymize your personal information, subject to reasonable backup and legal retention practices.

7. Security

We use reasonable technical and organizational measures designed to protect personal information, including encryption in transit, hashed password storage, and access controls. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential.

8. Children's privacy

The Service is intended for adults and is not directed to children. We do not knowingly collect personal information from anyone under 18 (or the age of majority in your jurisdiction). If you believe a child has provided us personal information, please contact us and we will take steps to delete it.

9. International transfers

Movly serves users worldwide. Your information may be transferred to, stored in, and processed in the United States and other countries that may have data-protection laws different from those in your country. Where required, we take steps to ensure appropriate safeguards are in place for such transfers.

10. Your rights and choices

Depending on where you live, you may have rights to access, correct, delete, or port your personal information, to object to or restrict certain processing, and to withdraw consent. You can exercise your choices, opt out of marketing emails, or request access or deletion by contacting us using the details in Section 12. We will respond as required by applicable law and may need to verify your identity first. Specific rights for California and EEA/UK/Switzerland residents are described in the appendices below.

11. Changes to this Policy

We may update this Policy from time to time. If we make material changes, we will notify you by posting a notice on the Service or, where appropriate, by email. The "Last updated" date above shows when this Policy was last revised. Your continued use of the Service after changes take effect means you accept the updated Policy.

12. How to contact us

For questions, requests, or complaints about this Policy or your information, contact us at:

• Email: [privacy@movly.app]
• Mail: [Movly — legal entity name and mailing address]

If you are not satisfied with our response, you may have the right to lodge a complaint with your local data-protection authority.

Appendix A — Additional information for California residents

This section supplements the Policy for California residents under the California Consumer Privacy Act (CCPA/CPRA). In the past 12 months we may have collected the following categories of personal information: identifiers (such as email address, IP address, and a unique user/visitor ID); internet or electronic network activity (such as device information and viewing activity); commercial information (such as purchase and transaction history); geolocation data (approximate, based on IP address); and inferences drawn from the above. We collect this information from you and automatically through your use of the Service, and use and disclose it for the business purposes described in this Policy.

We do not sell or share (as those terms are defined under California law) your personal information. California residents have the right to know, access, correct, and delete their personal information, the right to opt out of any sale/share, and the right not to be discriminated against for exercising these rights. To exercise these rights, contact us using the details in Section 12. You may use an authorized agent, and we may need to verify your identity before responding.

Appendix B — Additional information for the EEA, UK, and Switzerland

If you are in the European Economic Area, the United Kingdom, or Switzerland, Movly is the controller of your personal data. We process your personal data on the following legal bases: performance of our contract with you (to provide the Service, manage your account, and support your purchases); your consent (for example, for marketing communications, which you may withdraw at any time); our legitimate interests (such as securing, debugging, and improving the Service and preventing fraud, where not overridden by your rights); and compliance with our legal obligations.

You have the right to access, correct, delete, and port your personal data, to object to or restrict certain processing, and to withdraw consent where processing is based on consent. Personal data may be transferred to and processed in the United States and other countries; where required, we rely on appropriate safeguards for such transfers. To exercise your rights, contact us using the details in Section 12. You also have the right to lodge a complaint with your local supervisory authority.