Privacy Policy

1. Introduction

AfroFlicks ("we," "us," "our," or "Company") is committed to protecting your privacy and ensuring transparent data practices. This comprehensive Privacy Policy explains how we collect, use, store, disclose, and otherwise process personal information in connection with our streaming platform, mobile applications, websites, and related services. We comply with applicable privacy laws including GDPR, CCPA, and other international privacy regulations.

2. Information We Collect

We collect information through various methods:

2.1 Information You Provide Directly

• Account Registration: Full name, email address, password, phone number, date of birth, postal code, and billing address.
• Payment Information: Credit/debit card details, PayPal account, mobile payment information. Processed securely via Stripe PCI-DSS compliant servers; we never store full card numbers.
• Profile Data: Avatar, bio, language preferences, parental control settings, and notification preferences.
• Communications: Messages to customer support, feedback, survey responses, and user-generated content (reviews, ratings).
• Filmmaker/Creator Data: Tax information (SSN, EIN, bank details), portfolio links, and professional credentials for filmmaker, advertiser, and ambassador accounts.

2.2 Information Collected Automatically

• Viewing Activity: Complete watch history, time spent per content, pause points, replay behavior, and search/browse patterns.
• Device Information: Device type, OS version, app version, browser type, hardware model, unique device identifiers (IDFA, AAID).
• Network Information: IP address, ISP, country/region, city (approximate via IP geolocation), WiFi/mobile connection type.
• Interaction Data: Clicks, feature usage, error logs, crash reports, and performance metrics.
• Advertising ID: Apple's IDFA and Google's AAID for personalized advertising and campaign measurement.

2.3 Information from Third Parties

• Social Login: When signing in via Google or Apple, we receive email, name, and basic profile information.
• Payment Processors: Fraud detection data and payment status from Stripe.
• Analytics Partners: Aggregated usage data from measurement services.
• Ad Networks: Device identifiers and interest segments for targeted advertising.

3. How We Use Your Information

We process information for the following purposes:

3.1 Core Service Delivery

• Creating and managing your account
• Delivering streaming content and handling playback
• Processing subscriptions and payments
• Managing account security and authentication
• Providing customer support

3.2 Personalization & Recommendations

• Building viewing history and watch progress tracking
• Generating personalized content recommendations using AI/ML algorithms
• Customizing interface based on language and accessibility preferences
• Creating watchlists and saved collections
• Displaying relevant content carousel sections

3.3 Communications

• Sending service updates, announcements, and platform changes
• Promotional emails (with unsubscribe options)
• Account notifications and alerts
• Billing and payment confirmations
• Security alerts and suspicious activity warnings

3.4 Analytics & Improvement

• Analyzing platform performance and user engagement
• Content performance measurement and trending analysis
• Testing new features and interface improvements
• Identifying technical issues and bugs
• Optimizing streaming quality based on network conditions

3.5 Advertising & Marketing

• Displaying targeted ads based on viewing interests and behavior
• Measuring advertising campaign effectiveness
• Creating audience segments for marketing
• Conducting market research and surveys

3.6 Legal & Security

• Fraud detection and prevention
• Enforcing Terms of Service and other agreements
• Complying with legal obligations and court orders
• Protecting rights, property, and safety of users and platform
• Responding to government requests within legal parameters

4. Information Sharing & Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share information in limited circumstances:

4.1 Service Providers & Processors

• Payment Processing: Stripe (PCI-DSS Level 1 compliant)
• Cloud Infrastructure: Hosting and database providers
• Analytics: Google Analytics, usage tracking services
• Email Services: Transactional email providers
• Customer Support: Support ticketing and CRM systems
• Fraud Prevention: Third-party fraud detection services
• Content Delivery: CDN providers for video streaming

4.2 Business Partners

• Filmmakers & Content Creators: Aggregated performance metrics (views, engagement, estimated earnings), non-personal analytics
• Ambassadors: Campaign performance data, referral metrics, aggregated filmmaker statistics from their referrals
• Advertisers: Campaign performance (impressions, clicks, conversions), audience size and demographics (aggregated, not individual user data)

4.3 Legal Requirements & Protection

• Law enforcement, government agencies, or courts with valid legal process (subpoena, warrant)
• Protecting against fraud, security threats, or illegal activity
• Establishing, exercising, or defending legal claims
• Protecting the rights, property, and personal safety of AfroFlicks, users, and the public

4.4 Business Transfers

In the event of a merger, acquisition, bankruptcy, or asset sale, personal information may be transferred as part of that transaction. We will provide notice and ensure confidentiality agreements are in place.

4.5 Aggregated & Anonymized Data

We may share aggregated, de-identified data (statistics that cannot identify you) with partners for market research, trend analysis, and industry reporting without restriction.

5. Data Security & Protection

We implement industry-leading security measures to protect your personal information:

• Encryption: HTTPS/TLS encryption for data in transit; AES-256 encryption for sensitive data at rest
• Payment Security: PCI-DSS Level 1 compliance; credit card numbers never stored on our servers
• Authentication: Password hashing with bcrypt; optional two-factor authentication (2FA)
• Access Controls: Role-based access; employee access logs; principle of least privilege
• Regular Audits: Security penetration testing; vulnerability assessments; third-party security audits
• Data Backups: Regular encrypted backups with disaster recovery protocols
• Breach Response: Incident response plan; notification within 72 hours if legally required

Important: While we employ comprehensive security measures, no system is 100% secure. You are responsible for maintaining confidentiality of your password. Please use strong, unique passwords and report suspicious activity immediately.

6. Your Privacy Rights & Choices

Depending on your jurisdiction, you have the following rights:

6.1 Universal Rights (All Users)

• Access: Request and receive a copy of your personal information
• Correction: Correct inaccurate or incomplete information
• Deletion: Request deletion of your account and associated data (some exceptions apply)
• Portability: Receive your data in a portable format (CSV, JSON)
• Opt-Out: Unsubscribe from marketing communications at any time
• Withdraw Consent: Revoke consent for specific data processing activities

6.2 GDPR Rights (EU/EEA Users)

• Right to be forgotten (erasure)
• Right to restrict processing
• Right to object to processing
• Right to lodge a complaint with your local data protection authority
• Automated decision-making and profiling transparency

6.3 CCPA Rights (California Users)

• Right to know what personal information is collected
• Right to know whether information is sold or disclosed
• Right to delete personal information
• Right to opt-out of sale/sharing of information
• Right to non-discrimination for exercising CCPA rights

6.4 How to Exercise Your Rights

To exercise any of these rights, contact us at:

7. Cookies, Tracking & Similar Technologies

We use cookies and similar tracking technologies to enhance functionality, personalize content, and measure performance:

7.1 Types of Cookies

• Essential Cookies: Required for login, security, and basic functionality
• Preference Cookies: Remember language, theme, and display preferences
• Performance Cookies: Analytics data on how you use the platform
• Marketing Cookies: Track ad effectiveness and create audience segments

7.2 Other Tracking Technologies

• Web Beacons: Transparent pixels in emails to track open rates
• Local Storage: Browser storage for watch progress and preferences
• Mobile Identifiers: IDFA (iOS) and AAID (Android) for app analytics
• Server Logs: IP addresses and access patterns

7.3 Your Cookie Choices

• Most browsers allow you to refuse cookies or alert you when they are sent
• Disabling essential cookies may affect platform functionality
• Use your browser's privacy/incognito mode to browse without tracking
• For iOS: Limit Ad Tracking in Settings → Privacy → Apple Advertising
• For Android: Opt out of personalized ads in Google Settings → Ads

8. Children's Privacy (COPPA Compliance)

AfroFlicks is not directed to children under 13. In compliance with the Children's Online Privacy Protection Act (COPPA):

• We do not knowingly collect personal information from children under 13
• We do not use cookies or tracking for children under 13 for marketing purposes
• If we discover a user is under 13, we will promptly delete their account and data
• For users 13-17: We limit data collection and do not share with third parties for marketing
• Parental controls are available for managing child access to content

If a parent/guardian believes their child has provided information, please contact support@afroflicks.com immediately.

9. International Data Transfers & Storage

AfroFlicks operates globally, and your information may be transferred to, stored in, and processed in countries outside your country of residence, including:

• United States (primary data center)
• Canada (backup servers)
• European Union (GDPR compliance region)
• Other countries where our service providers operate

Legal Framework: We ensure transfers comply with applicable law through:

• Standard Contractual Clauses (EU to US transfers)
• Data Processing Agreements with all third parties
• Adequate safeguards and security measures
• Your consent to this Privacy Policy constitutes consent to international transfers

10. Third-Party Links & Services

AfroFlicks may contain links to third-party websites, apps, and services, including:

• Creator/filmmaker websites and social media profiles
• Payment processors and financial services
• Social platforms (Google, Apple, Facebook)
• Advertiser websites

Disclaimer: This Privacy Policy applies only to AfroFlicks. Third-party services have their own privacy policies, and we are not responsible for their data practices. We encourage you to review their policies before providing information.

11. Data Retention

We retain personal information for as long as necessary to provide services and fulfill purposes described in this policy:

• Active Accounts: Retained while account is active and for 12 months after closure
• Payment Records: Retained for 7 years for tax and legal compliance
• Filmmaker/Creator Data: Retained for earnings settlement period plus 3 years
• Viewing History: Can be manually deleted; automatically retained for 12 months
• Logs & Analytics: Retained for 90 days for security and performance analysis
• Deleted Accounts: Data purged after 12 months unless legally required to retain

12. Policy Updates

We may update this Privacy Policy periodically to reflect operational changes, technology updates, legal requirements, or other factors.

• Material changes will be announced via email and/or prominent notice on the platform
• Non-material changes take effect upon posting
• Continued use of AfroFlicks after updates constitutes acceptance
• We will note the date of the most recent update at the top of this policy

13. Contact & Privacy Officer

For privacy questions, requests, or concerns, contact our Privacy Team:

Response Time: We will respond to all privacy requests within 30-45 business days.

14. Additional Information for Specific Regions

14.1 European Union (GDPR)

• Data Controller: AfroFlicks Inc.
• Lawful Basis: Legitimate interest, contract performance, consent, legal obligation
• Supervisory Authority: Contact your local data protection authority

14.2 California (CCPA)

• Sale of Information: We do not sell personal information
• Sharing for Marketing: We do not share personal information for direct marketing
• Opt-Out Right: Right to opt out is automatically granted; no tracking required

14.3 Canada (PIPEDA)

• Data Controller: AfroFlicks Inc.
• Individual Access: Right to access personal information upon request