Privacy Policy

Last Updated: July 2026

This Privacy Policy explains how A2S Cinemas ("we", "us" or "our") collects, uses and protects information when you use the A2S Cinemas mobile application and website (collectively, the "Service"). By using the Service, you agree to this policy.

1. Information We Collect

Account Information

When you create an A2S Cinemas account, we collect:

  • Your name (provided during registration)
  • Email address (used for login via OTP verification)
  • Authentication method (email OTP)
  • Account role and status

Payment Information

A2S Cinemas uses Razorpay as our payment processor. When you purchase access to content, Razorpay processes your payment. We store:

  • Razorpay Order ID and Payment ID (for verification)
  • Amount paid and purchase date
  • License/access expiry date
  • Payment status

We do not store your card number, UPI ID or banking credentials. These are handled exclusively by Razorpay.

Usage Information

We may collect:

  • Movies and content you purchase and access
  • Watch history and license usage
  • Ratings and reviews you submit
  • App interactions and preferences (theme settings)

Device and Technical Information

Our servers may automatically log:

  • IP address (for rate limiting and security)
  • Device type and operating system
  • App version
  • Request timestamps

2. How We Use Your Information

We use the information we collect to:

  • Provide and maintain the A2S Cinemas Service
  • Verify your identity through email OTP
  • Process and verify your payments
  • Manage your content licenses and access
  • Send OTP verification codes to your email
  • Respond to support requests
  • Detect and prevent fraud or abuse
  • Improve the platform

3. Authentication

A2S Cinemas uses email OTP (one-time password) for authentication. When you log in, we generate a 6-digit code and send it to your email address. This code expires in 10 minutes and can only be used once. We do not store passwords in plaintext — authentication data is handled securely.

4. Content Protection

A2S Cinemas implements screenshot and screen recording prevention on all content. Video streaming uses time-limited signed URLs via AWS CloudFront. These measures are in place to protect the rights of content creators and distributors.

5. Third-Party Services

We use the following third-party services:

  • Razorpay — Payment processing (India). Razorpay's privacy policy applies to payment data.
  • MongoDB Atlas — Database hosting. Data is stored on secure cloud infrastructure.
  • AWS S3 and CloudFront — Video storage and delivery.
  • Cloudinary — Movie poster image hosting.
  • Brevo (Sendinblue) — Email delivery for OTP codes.

Each third-party service operates under its own privacy policy. We only share the data necessary for each service to function.

6. Data Sharing

We do not sell your personal information. We share data only:

  • With payment processors (Razorpay) to complete transactions
  • With email delivery services (Brevo) to send OTP codes
  • When required by law or legal process
  • To protect the rights and safety of A2S Cinemas and its users

7. Data Security

We implement appropriate technical and organisational measures to protect your information, including:

  • JWT-based authentication with secure token expiry
  • Rate limiting on authentication endpoints
  • HTTPS encryption for all data in transit
  • Secure cloud infrastructure (MongoDB Atlas, AWS)
  • Input validation and injection prevention

No method of transmission over the internet or electronic storage is 100% secure. While we take reasonable steps to protect your data, we cannot guarantee absolute security.

8. Data Retention

We retain your account information for as long as your account is active or as needed to provide the Service. Purchase records and transaction data may be retained for longer periods as required by applicable financial and tax regulations.

OTP codes are automatically deleted from our database after verification or expiry (10 minutes).

You may request deletion of your account and associated data. See our Account Deletion page for details.

9. Children's Privacy

A2S Cinemas is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately.

10. Your Rights

Depending on your location, you may have rights regarding your personal data, including the right to:

  • Access the personal data we hold about you
  • Correct inaccurate data
  • Request deletion of your data
  • Object to or restrict processing

To exercise any of these rights, please contact us at support@a2scinemas.com.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of significant changes by updating the "Last Updated" date at the top of this page. Continued use of the Service after changes constitutes acceptance of the revised policy.

12. Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us at:

Email: support@a2scinemas.com
Business: A2S Cinemas, Trichy, Tamil Nadu, India