This Privacy Policy describes how Nichaza collects, uses, and protects your personal information. We are committed to transparency and your right to control your data.
We collect information you provide directly, including your email address, username, display name, and profile information.
We automatically collect usage data, including films watched, comments posted, and interactions with content.
We collect device information, IP addresses, and browser data for security and analytics purposes.
Your data is stored securely using Supabase infrastructure with encryption at rest and in transit.
Data is stored in compliance with applicable data protection laws.
We do not sell your personal data to third parties.
We use cookies and similar technologies for authentication, session management, and analytics.
Essential cookies are required for the platform to function. Analytics cookies may be disabled by the user.
We use analytics to understand platform usage, improve features, and identify issues.
Analytics data is aggregated and does not identify individual users unless necessary for security purposes.
Advertising on Nichaza may use aggregated, non-personally-identifiable data for ad targeting.
We do not share your personal information with advertisers for targeted advertising.
Creators may receive aggregated analytics about their audience.
Your account information includes email, username, display name, bio, and profile picture.
You may edit your profile information at any time through Settings.
Your email address is never displayed publicly.
Creators may provide additional information including social links, branding preferences, and payout details.
Payment information is processed securely through Stripe. We do not store full card details.
Creator analytics data is aggregated and used to improve the platform.
Payment processing is handled by Stripe. We receive transaction records but do not store complete card numbers.
Transaction records are retained for legal and tax compliance purposes.
We use the following third-party services: Supabase (database and authentication), Stripe (payments), Resend (email delivery), Mux (video hosting).
Each third-party service has its own privacy policy. We recommend reviewing their policies.
We implement industry-standard security measures including encryption, access controls, and regular security audits.
Row-level security policies protect user data from unauthorized access.
Security incidents are logged and affected users are notified when required by law.
You have the right to access your personal data, correct inaccuracies, and request deletion.
You may export your data through the Data & Downloads settings page.
You may request account deletion through the Danger Zone in Settings.
Account data is retained while your account is active. Upon deletion request, data is subject to a 30-day grace period before permanent removal.
Some data may be retained for legal compliance, fraud prevention, and tax purposes.
Deletion requests are processed and personal data is anonymized where retention is required.
You may request account deletion through Settings. Deletion requests are subject to a 30-day grace period.
During the grace period, you may cancel the deletion request. After the grace period, your data is permanently removed.
Some data may be retained for legal, tax, or compliance purposes as required by law.
For privacy-related questions or requests, please submit a legal contact request through our Legal page.
We respond to privacy requests within 30 days of receipt.