Back

Privacy Policy

Last updated: May 2026

BrandInGang Movies ("Platform," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our streaming platform and related services.

1. Information We Collect

Account Information: When you register, we collect your name, email address, date of birth, and account preferences. Creators additionally provide payout information through Stripe Connect.

Payment Information: Payment processing is handled entirely by Stripe. We do not store your full credit card number, CVV, or bank account details on our servers. We receive and store only a tokenized reference, last four digits, card brand, and billing address for transaction records.

Usage Data: We automatically collect watch history, search queries, content interactions (likes, watchlist additions, ratings), playback quality preferences, and time spent viewing.

Device Information: We collect device type, operating system, browser type and version, screen resolution, and unique device identifiers.

Network Information: We collect IP addresses, approximate geolocation (city/region level), ISP information, and connection type.

Creator Data: For Creators, we additionally collect uploaded content metadata, revenue and payout history, analytics data, and Stripe Connect account status.

2. How We Use Information

  • Service Delivery: To provide, maintain, and improve the Platform, including content streaming, account management, and customer support.
  • Personalization: To recommend content based on your viewing history, preferences, and interactions.
  • Analytics: To understand usage patterns, optimize performance, and improve user experience.
  • Payments: To process subscription payments, Creator payouts, and Shop transactions through Stripe.
  • Communications: To send account notifications, security alerts, billing confirmations, and (with your consent) promotional content and new release announcements.
  • Advertising: For Free Tier users, to serve relevant advertisements via server-side ad insertion. We use viewing context (genre, content category) for ad targeting but do not sell your personal data to advertisers.
  • Safety & Security: To detect fraud, prevent abuse, enforce our Terms of Service, and protect the rights and safety of our users.

3. Information Sharing

We do not sell your personal information to third parties. We share information only in the following circumstances:

  • Stripe: Payment processing, subscription management, and Creator payouts.
  • Amazon Web Services (AWS): Cloud hosting, content delivery (CloudFront CDN), video transcoding, and data storage.
  • Analytics Providers: Aggregated, anonymized usage data for platform improvement.
  • Legal Requirements: When required by law, subpoena, court order, or government request; to protect our rights, privacy, safety, or property; or to enforce our Terms of Service.
  • Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

Creators receive aggregated, anonymized analytics about their content's performance (view counts, demographics, watch time) but never personally identifiable viewer information.

4. Cookies & Tracking Technologies

We use the following cookies and tracking technologies:

  • Essential Cookies: Required for authentication, session management, and security. Cannot be disabled.
  • Functional Cookies: Remember your preferences (language, playback quality, volume).
  • Analytics Cookies: Help us understand how users interact with the Platform to improve performance and features.

We do not use third-party advertising tracking cookies. Free Tier ads are served via server-side insertion and do not require client-side ad tracking pixels.

5. Data Retention

  • Active Accounts: We retain your data for as long as your account remains active.
  • Account Deletion: Upon account deletion request, personal data is permanently deleted within thirty (30) days. Anonymized analytics data may be retained indefinitely.
  • Creator Content: Uploaded content is removed according to the terms specified in the Terms of Service (30-day notice period for voluntary removal).
  • Financial Records: Transaction and payout records are retained for seven (7) years as required by tax and financial regulations.
  • Legal Holds: Data subject to legal proceedings or government investigation may be retained beyond standard periods.

6. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

  • Access: Request a copy of the personal data we hold about you.
  • Correction: Request correction of inaccurate or incomplete personal data.
  • Deletion: Request deletion of your personal data, subject to legal retention requirements.
  • Data Portability: Request your data in a structured, machine-readable format (JSON or CSV).
  • Opt-Out: Unsubscribe from promotional communications at any time via email preferences or the unsubscribe link in any email.

To exercise any of these rights, contact us at [email protected]. We will respond within thirty (30) days.

7. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

  • Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected about you in the preceding 12 months.
  • Right to Delete: You may request deletion of your personal information, subject to certain exceptions.
  • Right to Opt-Out of Sale: We do not sell personal information to third parties. Therefore, there is no need to opt out, but we honor this right as a matter of policy.
  • Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

To submit a verifiable consumer request, email [email protected] with the subject line "CCPA Request."

8. Children's Privacy

We comply with the Children's Online Privacy Protection Act (COPPA). We do not knowingly collect personal information from children under thirteen (13) years of age. Kids Profiles are created and managed by parents or guardians and operate with the following restrictions:

  • No personal data collection beyond what the parent provides during profile creation
  • Content restricted to age-appropriate material as determined by content ratings
  • Social features, comments, and messaging are disabled
  • No targeted advertising
  • Watch history is visible only to the parent account

If we discover that personal information has been collected from a child under 13 without verifiable parental consent, we will delete that information immediately. Parents may contact us at [email protected] to review, modify, or delete their child's information.

9. Security Measures

We implement industry-standard security measures to protect your data:

  • Encryption: All data in transit is encrypted via TLS 1.3. Sensitive data at rest is encrypted using AES-256.
  • Signed URLs: Content delivery uses time-limited, cryptographically signed URLs to prevent unauthorized access.
  • Web Application Firewall (WAF): AWS WAF protects against common web exploits, DDoS attacks, and malicious traffic.
  • Audit Logging: All access to user data and administrative actions are logged and monitored.
  • Access Controls: Employee access to user data is restricted on a need-to-know basis with multi-factor authentication required.

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

10. International Users (GDPR/Global)

The Platform is operated from and data is processed in the United States. If you access the Platform from outside the United States, your information will be transferred to, stored, and processed in the United States. By using the Platform, you consent to the transfer of your information to the United States, which may have different data protection laws than your country of residence. We process data in accordance with applicable US federal and state privacy laws.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will provide at least thirty (30) days' advance notice of material changes via email and/or a prominent notice on the Platform. The "Last updated" date at the top of this page indicates when the policy was last revised. Your continued use of the Platform after the effective date of any changes constitutes acceptance of the updated Privacy Policy.

12. Contact Us

For privacy-related questions, data requests, or concerns:

We will respond to all privacy inquiries within thirty (30) days.