Privacy Policy

This Privacy Policy explains how MOKHA FILM ("MOKHA FILM," "we," "us," or "our") collects, uses, discloses, retains, and protects personal information when you visit mokhafilm.com, create an account, subscribe, watch content, use Creator Studio, or otherwise interact with our streaming platform and related services (collectively, the "Platform").

We are committed to transparency and to handling personal data in accordance with applicable privacy laws, including the EU/UK General Data Protection Regulation (GDPR), the UK GDPR, the California Consumer Privacy Act as amended by the CPRA (CCPA/CPRA), and other U.S. state privacy laws where they apply.

By using the Platform, you acknowledge that you have read this Privacy Policy and our Cookie Policy. Where required by law, we will request your consent before placing non-essential cookies or sending certain marketing communications.

For purposes of the GDPR and similar laws, MOKHA FILM is the data controller for personal information processed through the Platform unless we state otherwise.

Contact for privacy matters: • Privacy requests: privacy@mokhafilm.com • General support: support@mokhafilm.com • Contact form: Contact us

If you are located in the European Economic Area (EEA), UK, or Switzerland and believe we are required to appoint an EU/UK representative, contact us at privacy@mokhafilm.com and we will provide current representative details if applicable.

This policy applies to personal information we process about: • Visitors and subscribers using the public website or apps • Creators and applicants to the Partner Program • Individuals who contact us, submit forms, or interact with support chat • Business contacts and press inquiries

This policy does not cover third-party websites, apps, or services linked from the Platform. Those services have their own privacy policies—for example Stripe, Cloudflare, Google, and Meta.

We collect information in the following categories:

A. Account & identity data — name, email address, password (stored hashed), account role (viewer, creator, admin), profile preferences, language/locale settings, and email verification status.

B. Authentication & security data — login timestamps, session identifiers, device/session limits, IP address, browser user agent, fraud-prevention signals, and (when enabled) Cloudflare Turnstile bot-verification results.

C. Subscription & billing data — plan type, subscription status, billing history references, Stripe customer ID, payment method metadata (we do not store full card numbers), invoices, promo/redemption codes, gift purchases, and TVOD transactions where offered.

D. Creator & verification data — legal name, country, phone number, portfolio links, biography, verification documents, tax/payout onboarding status via Stripe Connect, and Partner Program acceptance records.

E. Content & upload data — films, series, trailers, posters, captions, metadata, AI disclosure labels, moderation notes, review status, and encoding/streaming identifiers assigned by our video infrastructure.

F. Viewing & engagement data — watch progress, Continue Watching, My List, ratings, search queries, playback sessions, qualified watch time (used for creator revenue attribution), device/stream concurrency, and forensic watermark session codes where enabled.

G. Communications data — support messages, contact form submissions, email delivery logs, notification preferences, and (with consent where required) marketing preferences.

H. Technical & log data — server logs, error reports, CDN logs, webhook delivery records, and aggregated performance metrics.

I. Cookie & similar technologies data — see our Cookie Policy and the consent choices stored in your browser.

We collect personal information: • Directly from you when you register, subscribe, upload, verify, or contact us • Automatically when you use the Platform (cookies, logs, playback telemetry) • From payment processors (e.g., Stripe) when you pay or onboard for payouts • From OAuth providers (Google, Facebook) if you choose social login—limited to profile data they share per your provider settings • From service providers that help us operate the Platform (hosting, email, video encoding)

We do not buy personal information from data brokers for re-identification purposes.

Where the GDPR or UK GDPR applies, we rely on the following legal bases:

• Contract — to create your account, provide streaming access, process subscriptions, host creator uploads, calculate revenue share, and deliver services you request.

• Legitimate interests — to secure the Platform, prevent fraud and piracy, enforce Terms of Service, improve catalog discovery, perform analytics in accordance with your cookie choices, and communicate about service changes. We balance these interests against your rights.

• Consent — for non-essential cookies, certain marketing emails, optional push notifications, and any processing where consent is required by law. You may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

• Legal obligation — to comply with tax, accounting, anti-fraud, content-regulation, and law-enforcement requests where valid.

• Vital interests / public interest — only in rare circumstances required by applicable law.

We use personal information to: • Provide, maintain, and personalize the streaming experience • Authenticate users and manage sessions/device limits • Process payments, refunds, gifts, and creator payouts • Review, publish, or reject uploaded content per our Creator Guidelines • Calculate monthly creator revenue pools using qualified subscriber watch time • Send transactional emails (verification codes, password reset, payout notices, legal updates) • Provide customer support and respond to inquiries • Detect, investigate, and prevent fraud, abuse, credential sharing, and unauthorized redistribution • Apply playback protection (signed URLs, watermarks, rate limits) as described in our Terms • Measure site performance and improve features, subject to cookie consent where required • Comply with law and enforce our agreements

We do not use personal information for automated decisions that produce legal or similarly significant effects without human review, except where permitted by law and disclosed to you.

We use cookies, local storage, and similar technologies for authentication, consent records, preferences, analytics, and marketing. Details—including categories, retention, and your choices—are in our Cookie Policy.

When our cookie banner is enabled, non-essential analytics and marketing technologies are blocked until you consent, where configured. You can change preferences anytime via the banner or browser settings.

Necessary cookies (e.g., login sessions) are required for core functionality and cannot be disabled while using authenticated features.

We share personal information with service providers ("processors") that help us operate the Platform, under contracts requiring appropriate safeguards:

• Stripe — payments, subscriptions, billing portal, creator Connect payouts • Cloudflare — video hosting/streaming (Stream), image delivery, Turnstile bot protection, web_search/web security • Vercel — application hosting and deployment • Neon or equivalent — managed PostgreSQL database hosting • Resend or configured email provider — transactional email • Analytics/ad partners (only with consent where required) — e.g., Google Analytics, Google Tag Manager, Microsoft Clarity, Meta Pixel, Plausible, Yandex Metrica when enabled in admin settings

We may also disclose information: • To professional advisers (lawyers, accountants) under confidentiality • In connection with a merger, acquisition, or asset sale, with notice where required • To law enforcement or regulators when legally compelled or to protect rights, safety, and integrity of the Platform • With your direction or consent

We do not sell personal information for money. We do not share personal information for cross-context behavioral advertising unless you opt in to marketing cookies/tools where applicable.

MOKHA FILM may process and store information in the United States and other countries where we or our service providers operate. These countries may have data-protection laws different from those in your jurisdiction.

When we transfer personal data from the EEA, UK, or Switzerland to countries not deemed adequate, we implement appropriate safeguards such as Standard Contractual Clauses (SCCs) or equivalent mechanisms required by applicable law.

You may request more information about transfer safeguards by contacting privacy@mokhafilm.com.

We retain personal information only as long as necessary for the purposes described in this policy, including:

• Account data — while your account is active and for a reasonable period afterward to resolve disputes, enforce terms, and comply with law • Billing records — as required by tax and accounting regulations (often 7 years or as mandated locally) • Creator verification & payout records — for compliance, fraud prevention, and revenue audits • Watch-time logs — for revenue attribution, fraud review, and analytics, typically aggregated over time • Support communications — as needed to resolve issues and improve service • Cookie consent records — as required to demonstrate compliance

When data is no longer needed, we delete or anonymize it unless retention is required by law or legitimate business needs (e.g., security logs).

We implement administrative, technical, and organizational measures designed to protect personal information, including: • Password hashing and secure session management • HTTPS/TLS encryption in transit • Role-based access controls for admin and studio tools • API authentication for cron, admin, and upload endpoints • Signed playback URLs, optional forensic watermarks, and rate limiting • Secret redaction in admin interfaces (payment keys, OAuth secrets, API tokens not exposed to browsers) • Vendor security reviews for critical processors

No method of transmission or storage is 100% secure. You are responsible for maintaining the confidentiality of your password and notifying us of suspected unauthorized access.

Depending on your location, you may have rights including:

GDPR / UK GDPR — access, rectification, erasure, restriction, portability, objection, and withdrawal of consent; right to lodge a complaint with a supervisory authority such as the ICO (UK) or your local EU authority (list).

CCPA/CPRA (California) — know/access, delete, correct, opt out of sale/share (we do not sell personal information), limit use of sensitive personal information where applicable, and non-discrimination for exercising rights.

Other U.S. state laws — similar rights may apply in Virginia, Colorado, Connecticut, Utah, and other states with comprehensive privacy laws.

How to exercise rights — email privacy@mokhafilm.com with "Privacy Request" in the subject, describe your request, and verify your account email. We respond within timelines required by law (typically 30–45 days). Authorized agents may submit requests with proof of authorization.

Subscription billing — manage payment methods and invoices via your account and Stripe customer portal where available.

Categories collected in the last 12 months may include: identifiers (name, email, IP); commercial information (subscription history); internet/network activity (viewing logs, device data); geolocation (approximate, from IP); professional information (creators); and inferences (recommendations/discovery scores).

Purposes: provide the Platform, billing, security, analytics (with consent), creator payouts, and legal compliance.

Retention: see Section 11.

Sale/Share: We do not sell personal information. We do not share personal information for cross-context behavioral advertising unless you consent to marketing cookies/tools.

Sensitive personal information: We do not use sensitive personal information to infer characteristics about you. Creator tax/payout data is used only for compliance and payments.

To opt out of non-essential cookies/analytics, use our Cookie Policy controls.

We may send service-related messages (account verification, billing receipts, security alerts, payout notices) without marketing consent because they are necessary for the service.

Promotional emails about new films, creator features, or offers are sent only where permitted by law and, where required, with your consent. You can unsubscribe using the link in any marketing email or by contacting support@mokhafilm.com.

Push notifications (if enabled) require browser permission and can be revoked in device settings.

The Platform is not directed to children under 13 (or the minimum age required in your country). We do not knowingly collect personal information from children under 13.

If you believe a child under 13 has provided us personal information, contact privacy@mokhafilm.com and we will take steps to delete it.

In the EEA/UK, if our service is offered to minors, parental consent may be required under local law for users under 16 (or the age specified by member state law). MOKHA FILM content may include mature ratings; parents and guardians are responsible for supervising viewing.

Creators submit additional information for verification, moderation, and payouts. By uploading content you confirm you have rights to distribute it and agree to our Terms, Content Upload Policy, and Creator Guidelines.

Public metadata (title, synopsis, poster, creator display name) may appear in the catalog. Legal name and tax information are kept confidential except as required for payouts and law.

Watch-time attributed to your content is used to calculate revenue share under the Partner Program. Aggregated analytics may be shown in Creator Studio.

If we become aware of a personal data breach likely to result in risk to your rights and freedoms, we will notify affected users and regulators as required by applicable law (for example, within 72 hours to supervisory authorities under GDPR where feasible).

We may update this Privacy Policy to reflect legal, technical, or business changes. Material updates will be posted on this page with a revised effective date. Where required, we will notify you by email or prominent notice before changes take effect.

Continued use after the effective date constitutes acceptance of the updated policy, except where your consent is required by law.

Privacy questions and rights requests: • Email: privacy@mokhafilm.com • Support: support@mokhafilm.com • Web: Contact form

Related policies: Terms of Service · Cookie Policy · Creator Guidelines