Privacy Policy
Your privacy is important to Cinerail (“we,” “us,” or “our”). This Privacy Policy explains how we collect, use, disclose, and protect personal information when you use our online platform for watching and discovering movies, including our curated movie catalog, streaming services, movie database, trending movie features, film discovery tools, and our downloadable movie app (collectively, the “service”).
Who We Are
Cinerail
625 Bergen Street, New York, New York 11238, USA
Scope of This Policy
- This policy applies to personal information processed through this service.
- It does not cover privacy practices of other websites or services you may access through links from our service.
Personal Information We Collect
Information You Provide
Depending on how you use the service, we may collect personal information you voluntarily provide, such as:
- Account information (if you create or manage an account): for example, a username and password.
- Payment-related information: we do not accept or store full payment card details directly unless necessary for a specific arrangement; payment processing is typically handled by third-party payment providers.
- Customer support information: details you include when you contact us (such as messages, preferences, and troubleshooting information).
- Content preferences: e.g., the genres, titles, or features you select, and your viewing preferences.
Information Collected Automatically
When you use our service, we may automatically collect certain information, such as:
- Device and usage data: device type, operating system, app version, device identifiers, crash logs, and performance metrics.
- Log and network data: IP address, browser type, timestamps, pages or content viewed, streaming events (e.g., playback start/stop), and referring/landing URLs.
- Location data: approximate location derived from IP address (when permitted and available) to help with service availability and content localization.
- Cookies and similar technologies: to remember preferences, measure site/app usage, and support certain features.
Sensitive Personal Data
Our service is primarily focused on movie discovery and streaming. We do not intentionally request “special categories” of personal data under GDPR (such as health data or precise biometric identifiers). If you provide such information to us, we will handle it according to applicable law and our policies.
How We Use Personal Information
We use personal information to operate, protect, and improve our service and to communicate with you when appropriate. Typical purposes include:
- Providing the service: streaming content, delivering curated movie catalog experiences, supporting watch flows, and enabling discovery features.
- Account management: creating and maintaining user accounts (if applicable), authentication, and account security.
- Personalization and recommendations: tailoring movie discovery, trending features, and content suggestions based on your preferences and usage.
- Payment and subscription management: processing transactions, managing subscriptions, and preventing fraud.
- Analytics and measurement: understanding how people use the service to improve performance, content discovery, and feature design.
- Security and integrity: detecting and preventing fraud, abuse, unauthorized access, and ensuring technical and network security.
- Customer support: responding to requests and resolving issues.
- Legal compliance: fulfilling obligations under applicable laws and responding to lawful requests.
Legal Bases for Processing (GDPR)
If you are in the European Economic Area (EEA) or the United Kingdom, we rely on the following legal bases for processing personal information:
- Contract: to provide the service, fulfill a request, or manage an account or subscription.
- Legitimate interests: to improve the service, secure systems, prevent fraud, and conduct analytics and performance monitoring, provided these interests are not overridden by your rights.
- Consent: where required for certain activities (for example, certain cookie choices or marketing preferences).
- Legal obligation: to comply with applicable laws.
Where we process data based on legitimate interests or consent, you may have rights to object or withdraw consent, as described below.
Cookies and Similar Technologies
We use cookies and similar technologies to provide functionality, remember preferences, and understand how our service is used. Cookie types may include:
- Essential cookies: required for core features and security.
- Performance and analytics cookies: help us measure usage and improve the service.
- Preference cookies: remember your settings and choices.
You can manage cookies through your browser or device settings. For certain cookie categories, consent may be required where applicable. The effectiveness of cookie controls may vary by browser and device.
How We Share Personal Information
We may share personal information with:
- Service providers that help us operate the service (such as streaming delivery, analytics, hosting, customer support, and fraud prevention). These providers process data only as necessary to provide services to us.
- Payment processors for payment processing and billing, where applicable.
- Content delivery and infrastructure partners that help deliver streaming and app performance.
- Legal and regulatory entities when required to comply with applicable laws or respond to valid requests.
- Business transfers in connection with a merger, acquisition, or sale of assets, subject to applicable legal protections.
We do not sell your personal information in the traditional sense, and we limit sharing to what is necessary for our service and legal obligations.
International Data Transfers
Because the internet is global and we use service providers that may operate in multiple countries, your personal information may be transferred to and processed in countries outside your country of residence, including the United States.
Where required by GDPR, we implement appropriate safeguards for international transfers, such as standard contractual clauses or other transfer mechanisms recognized under applicable law.
Data Retention
We retain personal information only for as long as necessary for the purposes described in this policy, including to provide the service, maintain security, comply with legal obligations, resolve disputes, and enforce agreements.
Retention periods vary depending on the type of data, such as account information, transaction records, support records, and analytics logs.
Security
We use administrative, technical, and organizational measures designed to protect personal information. No method of transmission or storage is completely secure, but we work to protect data against unauthorized access, disclosure, alteration, or destruction.
Your Privacy Rights
Your rights depend on where you live and on applicable law. If you are in the EEA, the UK, or another jurisdiction with privacy rights, you may have the following rights:
- Access: request a copy of personal information we hold about you.
- Correction: request corrections to inaccurate or incomplete information.
- Deletion: request deletion of personal information in certain circumstances.
- Objection: object to processing based on legitimate interests, including for certain profiling or analytics activities, where applicable.
- Restriction: request restriction of processing in certain cases.
- Portability: receive certain personal information in a structured, commonly used format and, where applicable, transmit it to another controller.
- Withdraw consent: where processing is based on consent, you may withdraw it at any time (withdrawal will not affect processing already performed).
Depending on local law, you may also have rights relating to profiling and automated decision-making. We do not use your personal information to make decisions about you solely through automated means that produce legal or similarly significant effects, unless otherwise required and permitted by law.
Children’s Privacy
Our service is intended for general audiences. We do not knowingly collect personal information from children under applicable legal ages. If you believe a child has provided personal information to us, please contact us with the details needed to investigate and take appropriate action.
Marketing Communications
Where permitted, we may send service-related communications (such as updates, important notices, or support messages). If we offer marketing communications, we will process them according to applicable law, including providing opt-out choices where required.
California Privacy Rights
If you are a resident of California, you may have rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA). These may include:
- Right to know about personal information collected, used, disclosed, or sold.
- Right to request deletion of certain personal information.
- Right to correct inaccurate personal information where applicable.
- Right to opt out of certain processing (such as sale or sharing for cross-context behavioral advertising), if applicable.
We do not “sell” personal information for monetary consideration. If we engage in activities that could be considered “sharing” under CPRA for cross-context behavioral advertising, we will provide required choices.
Exercising Your Rights
To request access, correction, deletion, or to exercise other rights, please submit a written request to:
Cinerail
625 Bergen Street
New York, New York 11238
USA
To help us verify your request, we may ask for information necessary to confirm your identity. We will respond in accordance with applicable law.
Updates to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or service features. When we update this policy, the revised version will be posted on our site. Please review this page periodically.
Contact Information
If you have questions about this Privacy Policy or our privacy practices, you may contact us by writing to:
Cinerail
625 Bergen Street, New York, New York 11238, USA
Complaints
If you believe we have not handled your personal information in accordance with applicable law, you may have the right to lodge a complaint with a competent supervisory authority in your jurisdiction.