Privacy Policy

"Personal Information" means information about an identifiable individual.

"Processing" means any operation performed on Personal Information, including collection, use, storage, disclosure, retention, or destruction.

"Service Provider" means a third party that Processes Personal Information on Cenemai's behalf under contract.

"You," "Your" means the individual whose Personal Information is described in this Privacy Policy.

Other capitalized terms have the meanings given in the Terms of Service.

Cenemai is an independent operator of a global streaming service. This Privacy Policy describes how Cenemai collects, uses, discloses, retains, and safeguards Personal Information in connection with the Service, and how You can exercise Your rights.

This Policy is drafted to reflect widely recognized data-protection principles — lawful basis, purpose limitation, data minimization, transparency, security, retention limits, and individual rights. Where local law provides You with additional rights, Cenemai will endeavour to accommodate those rights consistent with applicable law.

3.1 Account Information. When You create an Account, we collect Your email address, a hashed representation of Your password (we never store passwords in plain text), Your chosen display name if any, and the date and time of Account creation.

3.2 Subscription and Billing Metadata. When You purchase Premium, our payment processors provide us with limited metadata such as transaction identifier, billing country, the last four digits of Your payment card (or PayPal account identifier), transaction status, and the amount charged. Cenemai does not collect, receive, or store Your full card number, CVV, bank account number, or similar sensitive payment credentials.

3.3 Viewing Activity. We collect information about how You use the Service, including titles viewed, playback position, playback duration, ratings, favourites, and other interactions with Content.

3.4 Device and Technical Information. When You access the Service, we automatically collect information about Your device and connection, including IP address, browser type and version, operating system, device identifiers, referring and exit URLs, language preferences, timezone, and general geolocation inferred from IP address (typically at the city or country level).

3.5 Cookies and Local Storage. The Service uses cookies and similar technologies to keep You signed in, remember Your preferences, attribute referrals, and secure the Service. See Section 6 for details.

3.6 Referral Attribution. When You arrive at the Service through a Creator's referral link, we record the referral code so that we can attribute Your Subscription to that Creator for revenue-share purposes.

3.7 Support Correspondence. When You contact Cenemai for support, submit a copyright complaint, or otherwise communicate with us, we retain the content of Your message, Your contact information, and any information You choose to include.

3.8 Creator Information. If You apply to become a Creator, we also collect the information You submit in the application (name, contact details, social handle, follower count, and any supporting materials) and, if approved, records of Content You upload, rights confirmations, and payout information.

We Process Personal Information for the following purposes, on the following bases:

(a) To provide the Service. Basis: performance of the contract created by Your acceptance of the Terms of Service, and Your consent. Uses include creating and authenticating Your Account, streaming Content, personalizing recommendations, and enabling core features.

(b) To process payments. Basis: performance of contract, and Your consent. Uses include forwarding payment data to Stripe or PayPal, tracking subscription status, and preventing fraud.

(c) To operate the referral program. Basis: performance of contract with Creators, and Your consent as a referred User. Uses include recording the referral code that brought You to the Service and calculating Creator revenue share.

(d) To secure the Service. Basis: legitimate interest, and legal obligation. Uses include detecting and preventing fraud, abuse, unauthorized access, chargeback manipulation, and violations of the Terms.

(e) To communicate with You. Basis: performance of contract and Your consent. Uses include transactional messages (billing receipts, password resets, security alerts, service notices), responses to Your support requests, and, where You have consented, product updates and marketing messages.

(f) To comply with law. Basis: legal obligation. Uses include tax reporting, responding to lawful requests from public authorities, and enforcing the Terms.

(g) To improve the Service. Basis: legitimate interest. Uses include aggregated analytics on viewing patterns, feature usage, error rates, and load. Where possible, we perform this analysis on de-identified data.

We do not use Personal Information for automated decision-making that produces legal or similarly significant effects.

Cenemai uses Stripe, Inc. and PayPal Holdings, Inc. as its payment processors. Payment card details, PayPal login credentials, and bank account information You provide are collected directly by the payment processor over encrypted connections and are never received or stored by Cenemai's own systems.

Payment processors are independent controllers of the payment data they collect, and their handling of that data is governed by their respective privacy policies. We encourage You to review Stripe's and PayPal's privacy notices before providing payment information.

6.1 Session Cookies. We use first-party session cookies (or equivalent local storage entries) to keep You signed in while You use the Service. These are strictly necessary for the Service to function.

6.2 Referral Cookies. When You arrive through a Creator's referral link, a short-lived cookie or storage entry records the referral code so that any subsequent Subscription can be attributed to the correct Creator.

6.3 Security Cookies. Cookies or tokens issued by our infrastructure or authentication providers are used to detect suspicious activity, prevent fraud, and secure the Service.

6.4 Analytics. We may use privacy-respecting analytics that rely on cookies or local storage to help us understand aggregate usage patterns. We do not knowingly permit third-party advertising trackers on the Service.

6.5 Managing Cookies. Most browsers allow You to view, manage, delete, or block cookies. Blocking strictly necessary cookies will prevent core features of the Service from working, including staying signed in.

Cenemai does not sell Personal Information. We share Personal Information only in the following circumstances:

(a) Service Providers. We share Personal Information with vendors that perform services on our behalf, including hosting and infrastructure providers, database and storage providers, authentication providers, payment processors (Stripe, PayPal), email delivery providers, analytics tools, and customer support tools. These providers are contractually required to protect Personal Information and to use it only to provide services to Cenemai.

(b) Creators. Aggregated, anonymized attribution counts (for example, the number of Subscriptions attributed to a Creator's referral code) may be surfaced in the Creator's dashboard for revenue-share purposes. Individual subscriber identities are not disclosed to Creators.

(c) Legal and Safety. We may disclose Personal Information where required by law, court order, or governmental request; to enforce or apply the Terms; to protect the rights, property, or safety of Cenemai, our Users, or others; or to detect, prevent, or address fraud, security, or technical issues.

(d) Business Transfers. If Cenemai is involved in a merger, acquisition, financing, reorganization, sale of assets, or bankruptcy, Personal Information may be transferred as part of that transaction, subject to appropriate confidentiality obligations.

We retain Personal Information only for as long as necessary to fulfill the purposes for which it was collected, to comply with our legal, tax, and accounting obligations, and to resolve disputes and enforce our agreements. Specific retention periods include:

Account Information: for as long as Your Account is active, and up to 90 days after Account deletion for security, fraud-prevention, and legal purposes.

Viewing Activity: for the duration of Your Account and up to 24 months after last activity, then aggregated or deleted.

Billing Metadata: for a minimum of seven (7) years to meet tax and accounting obligations.

Referral Attribution: for the life of any Subscription attributed to the Creator, plus the applicable payment-audit period.

Support Correspondence: up to 36 months after last contact.

Creator Applications and Rights Records: for the duration of the Creator relationship and at least seven (7) years thereafter to substantiate rights.

Logs (IP, device, security events): up to 12 months.

Cenemai takes reasonable administrative, technical, and physical safeguards to protect Personal Information against unauthorized access, disclosure, alteration, or destruction. Measures include encryption of data in transit using TLS, encryption at rest for stored files, hashed and salted password storage, role-based access controls, principle-of-least-privilege access for internal users, logging and monitoring of security-relevant events, and vetted service providers with contractual data-protection obligations.

No system can be perfectly secure. In the event of a security breach involving Personal Information that poses a real risk of significant harm, Cenemai will notify affected individuals and any competent supervisory authority as required by applicable law, and will take reasonable steps to mitigate the harm.

Subject to applicable law and reasonable identity verification, You have the following rights with respect to Your Personal Information:

(a) Access. You may request confirmation of whether we hold Personal Information about You and request a copy of that information.

(b) Correction. You may request that inaccurate or incomplete Personal Information be corrected. Many fields can be updated directly in Your Account settings.

(c) Deletion. You may request deletion of Your Personal Information, subject to our obligation to retain certain data for legal, tax, security, or dispute-resolution purposes.

(d) Withdrawal of Consent. Where processing is based on consent, You may withdraw consent at any time. Withdrawal will not affect the lawfulness of processing carried out before withdrawal and may prevent us from providing certain features or the Service as a whole.

(e) Complaint. You may raise a concern with our privacy contact at support@cenemai.com. You also have the right, where applicable, to lodge a complaint with the data-protection or privacy supervisory authority in Your place of residence.

To exercise any of these rights, contact support@cenemai.com from the email address associated with Your Account and include enough detail for us to locate Your record and verify Your identity. We will respond within thirty (30) days, or as otherwise required by applicable law.

The Service is not directed to children under the age of thirteen (13). We do not knowingly collect Personal Information from children under 13. If we learn that we have collected Personal Information from a child under 13, we will delete that information as promptly as practicable.

Parents or legal guardians who believe that their child under 13 may have provided us with Personal Information may contact us at support@cenemai.com to request review and deletion.

Cenemai operates a global service. Some of our Service Providers — including hosting, payment, email, and analytics providers — may store or process Personal Information in jurisdictions different from Your place of residence. When Personal Information is transferred internationally, it may be subject to the laws of the receiving jurisdiction, including lawful government access requests, which may differ from those where You live.

Where required, Cenemai uses contractual, technical, and organizational measures intended to provide a comparable level of protection wherever Personal Information is processed.

Cenemai does not sell Personal Information for money or other valuable consideration and does not share Personal Information for cross-context behavioural advertising.

Cenemai will notify affected individuals and any competent supervisory authority, and any organization or institution that may be able to reduce or mitigate the risk of harm, in the event of a security breach involving Personal Information under our control where it is reasonable in the circumstances to believe the breach creates a real risk of significant harm, in accordance with applicable law.

Cenemai will maintain records of security breaches as required by applicable law.

Cenemai may update this Privacy Policy from time to time. Where changes are material, we will provide notice by email or a prominent notice within the Service before the changes take effect. Non-material updates take effect on posting. The "Last updated" date above always reflects the current version.

Privacy questions, access or correction requests, and complaints may be sent to:

Cenemai — Privacy
Email: support@cenemai.com