Privacy Policy
Last Updated: October 2026 · Effective Date: October 2026 · Kiru Chitra (kiruchitra.in)
1. Introduction & Commitment
Welcome to Kiru Chitra (operated under Bhitthichitra Cinemas / Kiru Chitra Media, Bengaluru, Karnataka, India). We are dedicated to providing a premier, studio-grade digital theater for independent short cinema while uncompromisingly protecting your personal privacy.
This Privacy Policy explains how we collect, use, process, and safeguard your data when you visit kiruchitra.in, rent a 48-hour screening pass, or submit your film through our Filmmaker Studio. We operate in strict compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology Act, 2000, and international digital data ethics standards.
2. Information We Collect
We only collect information strictly necessary to provide cinema ticketing, playback security, and creator payouts:
Phone number and email address verified via Firebase Authentication OTP. Transaction reference IDs for 48-hour rental passes. We never store payment card or UPI secrets.
Director name, film master links, synopsis, cast credits, and payout details (bank account / IFSC / PAN) collected strictly for statutory TDS and 90% creator revenue share.
To protect creators against digital theft, an encrypted dynamic session hash (combining ticket ID and timestamp) is generated to watermark screen playback.
HLS streaming bitrates, buffer health, device resolution, and anonymous playback completion rates to calibrate audio/video delivery.
3. How We Use Your Information
- To grant immediate, authenticated 48-hour access to rented short films.
- To calculate and disburse the 90% ticket revenue share to verified filmmakers.
- To prevent screen pirating, illicit recording, and unauthorized content redistribution.
- To issue statutory GST tax invoices and regulatory compliance documentation.
4. Third-Party Infrastructure & Security
Kiru Chitra relies on enterprise cloud infrastructure hosted on Google Cloud Platform (GCP) and Firebase in Indian data regions (Mumbai / Bengaluru). All data in transit is encrypted using TLS 1.3, and stored databases are secured with AES-256 hardware encryption.
Payment transactions are processed securely through RBI-licensed payment aggregators (e.g., Razorpay). Kiru Chitra does not store or process debit/credit card numbers, CVVs, or NetBanking credentials on its servers.
5. Your Rights & Data Deletion
Under the DPDP Act 2023, you have the right to request a summary of your personal data, request corrections, or request complete account erasure. You may request account deletion at any time by contacting our Grievance Desk.
Grievance Redressal Officer
In accordance with the Information Technology Act 2000 and the Digital Personal Data Protection Act 2023, the details of the Grievance Officer for Kiru Chitra are as follows:
Entity: Bhitthichitra Cinemas / Kiru Chitra Media
Designation: Data Grievance Officer
Email: bhitthichitracinemas@gmail.com / grievance@kiruchitra.in
Location: Bengaluru, Karnataka - 560085, India