Section 2
Privacy Policy
What we collect, why, how long we keep it, and your rights.
2.1 Our Approach
Chitram respects your privacy and processes personal data for legitimate platform purposes and in accordance with applicable Indian data-protection law, including the Digital Personal Data Protection framework as applicable from time to time.
2.2 Information We May Collect
Account information. Name, email, telephone number, username, password credentials and profile picture.
Professional information. Profession, film credits, portfolio, showreel, location, languages, skills, IMDb profile and professional biography.
Project information. Projects created, roles, applications, team membership and project activity.
Investor-interest information. Investment preference ranges, project interests, preferred genres, languages, project stages and verification information.
Identity verification information. Where required, identification or KYC-related information.
Payment information. Transaction references, payment status, billing information and tax information. Card/bank credentials may be handled directly by payment providers and not stored by Chitram.
Usage information. Device, browser, IP address, session activity, log information, clicks, project views, searches and feature interactions.
Communications. Messages sent through permitted Chitram communication channels and support communications.
Uploaded content. Scripts, pitch decks, videos, images, documents and other creator materials.
2.3 Why We Use Data
We may process data to:
- create accounts;
- operate project pages;
- provide recommendations;
- match projects and professionals;
- process payments;
- prevent fraud;
- verify accounts;
- provide deal-room access;
- administer courses;
- improve Chitram;
- provide customer support;
- send service communications;
- comply with law;
- investigate abuse;
- moderate content;
- protect intellectual property; and
- maintain security.
2.4 Consent and Choice
Where processing requires consent, we will request consent through an appropriate notice.
You may withdraw consent where applicable.
Withdrawal does not automatically affect processing already lawfully completed or information required for legal, fraud-prevention or contractual purposes.
2.5 Public Information
Project pages and professional profiles may contain public information.
Anything marked public may be discoverable by other users and potentially indexed by search engines.
Do not publish confidential personal information publicly.
2.6 Private Project Documents
Scripts, budgets and deal-room documents marked private are restricted through platform access controls.
Chitram personnel may access private information where reasonably necessary for:
- technical operations;
- support;
- abuse investigation;
- security;
- legal compliance; or
- authorised services requested by the creator.
2.7 Service Providers
We may use third parties for:
- cloud hosting;
- payments;
- analytics;
- email;
- authentication;
- file storage;
- customer support;
- AI processing;
- fraud prevention; and
- security.
They may process data only as permitted under their agreements with us and applicable law.
2.8 AI Processing
Content submitted to an AI-assisted feature may be transmitted to an AI service provider where necessary to deliver that feature.
We will provide appropriate disclosure and controls where required.
Do not submit highly sensitive or confidential material to AI features unless the feature is expressly designated for such use.
2.9 Data Retention
We retain personal data only for as long as reasonably required for:
- providing services;
- legal compliance;
- fraud prevention;
- disputes;
- financial records;
- security;
- intellectual property records; and
- legitimate platform operations.
Deleted accounts may leave limited audit, financial or legally required records.
2.10 Security
We use reasonable organisational and technical safeguards.
However, no online system is completely secure.
Users are responsible for protecting account credentials.
2.11 Your Rights
Subject to applicable law and exceptions, you may have rights to:
- receive information about processing;
- access information;
- correct inaccurate information;
- update information;
- request erasure;
- withdraw consent;
- nominate another individual where provided by law; and
- submit grievances.
Requests may be sent to privacy@chitramapp.com.
2.12 Children
Chitram's standard accounts are intended for adults.
Where services involving minors are introduced, appropriate parent/guardian consent and controls will be implemented as required by law.
2.13 Marketing
Where permitted, we may send product, project or promotional communications.
You may opt out of promotional messages.
Essential service and legal communications may still be sent.
2.14 Cookies and Analytics
Chitram may use cookies and similar technologies for:
- authentication;
- security;
- preferences;
- analytics;
- performance; and
- permitted marketing.
Appropriate preference controls will be offered where required.
2.15 International Processing
Our service providers may process information in jurisdictions outside your country.
Where applicable, such transfers will be handled subject to Indian law and any restrictions prescribed by competent authorities.
2.16 Data Breaches
Where required by law, Chitram will notify relevant authorities and affected individuals of qualifying personal-data breaches.
2.17 Grievances
Privacy concerns may be submitted to:
Privacy / Grievance Officer: [PRIVACY OFFICER NAME]
Email: privacy@chitramapp.com
Address: [PRIVACY POSTAL ADDRESS]