Legal

Privacy Policy

Version 1.2 · Effective date: August 24, 2026 · Last updated: August 24, 2026

1. Who we are

Cinesoft Inc. ("Cinesoft," "we," "us," or "our") is a Delaware corporation providing release infrastructure for independent film and long-form video. Our business address is 1905 Sherman Street, Ste 200 1062, Denver, CO 80203, United States.

This policy explains what personal data we collect through our marketing website at cinesoft.io and our creator platform, how we use it, who we share it with, and the rights you have. It applies to visitors to our site and to creators who use the Cinesoft platform.

2. How this policy fits together (controller vs. processor)

Cinesoft operates a platform that lets creators sell and stream their own releases directly to their audiences. Creators are the merchant of record for those sales and own their customer relationships and data.

That means there are two distinct roles:

Cinesoft as controller or business. For data about visitors to our marketing site and about creators who hold a Cinesoft account, we decide how and why the data is processed. This policy governs that data.
Cinesoft as processor or service provider. For personal data about a creator's viewers and buyers (for example, a buyer's email address and purchase record), the creator is the data controller or business and we process that data on the creator's behalf and under their instructions, as set out in our agreement with the creator (including any data processing addendum). Each creator maintains their own privacy policy governing their viewers, published on their storefront. If you bought or streamed a release from a creator's storefront, that creator's privacy policy, not this one, governs how your data is used.

3. Information we collect

From marketing-site visitors:

Contact details you submit (name, email, company) when you request a demo, join a waitlist, or contact us.
Technical and usage data automatically collected when you visit the site (IP address, device and browser type, pages viewed, referring URL).
Cookie and similar-technology data (see Section 6).

From creators who use the platform:

Account and identity details (name, email, business name, role).
Business and payout information collected through payment-processor onboarding via Stripe Connect, or another payment processor we designate (the processor collects and verifies this directly. See Section 5).
Content and configuration you upload to run your storefront (release metadata, artwork, pricing, storefront settings).
Communications with our support team.
Platform usage and log data.

Viewer/buyer data we process on behalf of creators (as processor):

Buyer email address, purchase and rental records, access tokens, and streaming/entitlement data, processed to deliver purchases, access, and transactional email on the creator's behalf. As described in Section 2, the creator controls this data.

We do not collect payment card numbers. Card data is handled by our payment processor (Stripe or another processor we designate).

4. How we use information

We use the data we control to:

Provide, operate, and secure the marketing site and the creator platform.
Onboard creators and set up their storefronts, payouts, and streaming.
Respond to inquiries and provide support.
Send service and account communications, and, where permitted, marketing about Cinesoft (you can opt out).
Understand and improve how our site and platform are used, including by creating aggregated or de-identified data that does not identify you, which we may use for any lawful purpose.
Comply with legal obligations and enforce our terms.

5. Who we share information with

We share personal data with service providers who process it on our behalf, only as needed to run the platform. The categories of providers we use are:

Payment processing. We use Stripe, or another payment processor we designate, for payment processing and merchant-of-record infrastructure. When you provide personal data in connection with payments, the payment processor receives and processes it under its own privacy policy; for Stripe, see Stripe's Privacy Policy: https://stripe.com/privacy
Video hosting and streaming providers, which process streaming and playback data to deliver Releases.
Email service providers, which process recipient email addresses and message content to send transactional and service email.
Cloud hosting and database providers, which store and process platform data and uploaded images.
Authentication providers, which support secure administrator access to the platform.

We may also disclose personal data where required by law, to protect our rights or the safety of others, or in connection with a merger, acquisition, or sale of assets.

We do not sell personal data, and we do not share personal data for cross-context behavioral advertising.

6. Cookies and tracking

Our marketing site uses only cookies and similar technologies that are strictly necessary to operate the site. We do not use analytics cookies, advertising trackers, or third-party pixels on the marketing site.

7. Data retention

We keep personal data for as long as needed to provide our services, comply with legal obligations, resolve disputes, and enforce our agreements. Creator account data is retained for the life of the account and for a reasonable period afterward. Viewer/buyer data processed on behalf of creators is retained per the creator's instructions and our platform terms.

8. Your privacy rights

Depending on where you live, you may have rights to access, correct, delete, or port your personal data, to opt out of certain processing, and to withdraw consent. This includes rights under the California Consumer Privacy Act (as amended by the CPRA) and the Colorado Privacy Act.

For data Cinesoft controls, submit a request to privacy@cinesoft.io. For data tied to a purchase from a creator's storefront, the creator is the controller. Contact that creator, and we will support them in responding.

If we decline to act on your request, you may appeal our decision by replying to our response or emailing privacy@cinesoft.io with the subject line "Privacy Appeal." We will respond to appeals within the time required by applicable law. If you are a Colorado resident and your appeal is denied, you may contact the Colorado Attorney General at coag.gov.

We will not discriminate against you for exercising these rights.

9. Security

We use reasonable technical and organizational measures to protect personal data, including encryption in transit and access controls. No system is perfectly secure, and we cannot guarantee absolute security.

10. International transfers

We are based in the United States and process data there. If you access our services from outside the US, your data may be transferred to and processed in the US.

11. Children's privacy

Our services are not directed to children under 13 (or the minimum age in your jurisdiction), and we do not knowingly collect their personal data. If you believe a child has provided us data, contact us and we will delete it.

12. Changes to this policy

We may update this policy from time to time. We will post the updated version with a new "Last updated" date and, where required, provide additional notice.

13. Contact us

Cinesoft Inc.
1905 Sherman Street
Ste 200 1062
Denver, CO 80203
United States
privacy@cinesoft.io