Privacy Policy

• Account data — managed through Supabase Auth: your email address, hashed credentials, handle, display name, and any avatar or bio you add.
• Content you publish — titles, videos, posters, synopses, AI-provenance manifests, comments and reports. Published content is public by design.
• Engagement — likes, watchlist entries and follows, tied to your account so your library works.
• View telemetry— which title or episode was played, how many seconds were watched and when. Signed in, it is linked to your account for "continue watching"; signed out, it is stored without a persistent identifier. IP addresses are used transiently for rate limiting and abuse prevention, not to build viewing profiles.

No ad tracking today. AIMovies sets no third-party advertising cookies, embeds no cross-site trackers, and does not sell or rent personal data. If this ever changes we will update this policy and notify you before the change takes effect.

• to operate the service: accounts, playback, publishing;
• to power your library — watchlist, likes and continue watching;
• to compute aggregate statistics such as view counts and 7-day trending (aggregates only, never individual viewing histories);
• for moderation, security and abuse prevention — including handling reports and enforcing rate limits;
• to send transactional email (account and moderation notices). No marketing email without your consent.

Where the GDPR or UK GDPR applies, we rely on:

• performance of a contract — providing the service you signed up for;
• legitimate interests — security, abuse prevention, moderation and aggregate analytics, balanced against your rights;
• consent — where required, for example optional communications; you can withdraw it at any time.

Authentication, database and file storage are provided by Supabase; the site runs on Vercel; and product analytics run on PostHog — each acting as our processor. If you opt into identity-verified features in the Studio, your verification materials are processed by our identity-verification provider (BytePlus Pte. Ltd.) under the separate, explicit consent you give in that flow. Beyond these processors we share personal data with no one, except where the law requires it or to protect the safety of the service and its users. Where data is transferred outside the EU/EEA, we rely on recognized safeguards such as the EU Standard Contractual Clauses.

Account and content data are kept while your account is active. View events feed rolling aggregates (such as 7-day trending) and lose relevance quickly; we keep them no longer than needed for statistics and abuse prevention. When you delete content or your account, associated personal data is deleted or anonymized within a reasonable period, allowing for transient backups and anything we must retain to comply with law or resolve open moderation or legal matters.

Depending on where you live, you may have the right to access, rectify, erase, restrict or object to the processing of your personal data, and to receive a portable copy. Exercise them at legal@aimovies.com — we answer within the statutory deadline. If you are in the EU/EEA or UK you can also lodge a complaint with your local supervisory authority.

We use strictly necessary cookies — the Supabase session cookie that keeps you signed in — plus first-party product analytics via PostHog to understand aggregate usage of the service. No advertising cookies, no cross-site tracking, and analytics data is never sold or shared for marketing.

AIMovies is not directed at children and requires users to be at least 16 (or the age of digital consent where they live). We do not knowingly collect data from children; if you believe a child is using the service, contact us and we will act. Our Community Guidelines apply zero tolerance to any sexualized depiction of minors.

We will update this policy as the service evolves and note the date above; material changes get advance notice. Data controller and contact: legal@aimovies.com.