Privacy Policy

1. Introduction

Welcome to IndieFront ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform for discovering and watching independent films.

2. Information We Collect

2.1 Information You Provide

• Account Information: When you sign in with Google, we collect your name, email address, and profile picture from your Google account.
• Film Submissions: If you submit films, we collect metadata including film title, description, genre, crew information, and uploaded video files.
• User Preferences: Your watchlist, favorites, and viewing history to personalize your experience.

2.2 Automatically Collected Information

• Usage Data: Information about how you interact with our platform, including pages viewed, films watched, and features used.
• Device Information: Browser type, operating system, IP address, and device identifiers.
• Cookies: We use cookies and similar technologies to maintain your session and enhance user experience.

3. How We Use Your Information

We use the collected information for the following purposes:

• Authentication: To verify your identity and provide secure access to your account
• Content Delivery: To stream films and provide personalized recommendations
• Film Management: To process and review film submissions from creators
• Communication: To send you important updates about your account or submissions
• Platform Improvement: To analyze usage patterns and improve our services
• Security: To detect and prevent fraud, abuse, and security incidents

4. Google API Services User Data Policy

IndieFront's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

• We only request the minimum permissions necessary for authentication (email, profile, openid)
• We do not use Google user data for serving advertisements
• We do not sell Google user data to third parties
• We do not use or transfer Google user data for purposes unrelated to providing our core film streaming services

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

• With Your Consent: When you explicitly agree to share information
• Service Providers: With third-party vendors who assist in operating our platform (e.g., hosting, analytics) under strict confidentiality agreements
• Legal Requirements: When required by law, court order, or to protect our rights and safety
• Business Transfers: In connection with a merger, acquisition, or sale of assets (users will be notified)

6. Data Storage and Security

We implement industry-standard security measures to protect your information, including:

• Encryption of data in transit using HTTPS/TLS
• Secure authentication using OAuth 2.0 and JWT tokens
• Regular security audits and vulnerability assessments
• Access controls limiting who can view your personal information

Your data is stored on secure servers provided by Vercel and Google Cloud Platform. While we strive to protect your information, no method of transmission over the internet is 100% secure.

7. Your Rights and Choices

You have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your account and associated data
• Data Portability: Request your data in a structured, machine-readable format
• Opt-Out: Unsubscribe from promotional communications
• Revoke Consent: Disconnect your Google account at any time through your Google account settings

To exercise these rights, please contact us at braydenspencer04@gmail.com

8. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. If you request account deletion, we will delete or anonymize your information within 30 days, except where we are required to retain it for legal obligations.

9. Children's Privacy

IndieFront is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

10. International Users

IndieFront is operated in the United States. If you are accessing our platform from outside the U.S., please be aware that your information may be transferred to, stored, and processed in the United States where our servers are located.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. Significant changes will be communicated via email or prominent notice on our platform.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: