Privacy Policy

BlueCrown Motion Pictures LLC, operating the CrownPlay platform ("CrownPlay", "we", "our", or "us"), is committed to protecting your privacy. This Privacy Policy explains what information we collect, why we collect it, how we use it, and your rights regarding that information.

By creating an account or using the CrownPlay platform, you agree to this Privacy Policy. This policy is incorporated by reference into our Terms & Conditions. If you do not agree, please do not use our platform.

You must be at least 18 years of age to use CrownPlay. We do not knowingly collect personal information from anyone under 18.

1. Information We Collect

1.1 Information You Provide Directly

When you register, submit content, or use platform features, we may collect:

• Account Information: Name, email address, password (stored as a secure hash — never in plain text), company name, website, and professional bio.
• Filmmaker Profile: Genre preferences, distribution goals, experience level, content rating preferences, and territory rights.
• Content & Metadata: Film titles, synopses, cast/crew information, production year, poster images, trailer links, and all associated metadata you submit.
• Tax & Payment Information: W-9 details (SSN or EIN, business classification, tax address) and banking information for royalty payments. This data is used solely for payment processing and IRS compliance and is stored with strict access restrictions.
• Support Communications: Messages, attachments, and correspondence sent through our support system.
• Affiliate Applications: Profile photos, professional background, and application details submitted when applying to the affiliate/rep program.
• Buyer Information: Company name, contact details, and business credentials for content buyers and distributors.

1.2 Information Collected Automatically

When you use CrownPlay, we automatically collect:

• Log Data: IP address, browser type and version, operating system, pages visited, referring URLs, and timestamps of activity.
• Session Data: Login times, session duration, and authentication events.
• Usage Data: Features used, submissions made, dashboard interactions, and navigation patterns within the platform.
• Device Information: Device type and screen resolution, used to optimize your experience.

1.3 Information from Third Parties

• Payment Processors: We receive transaction confirmations and payment status from Stripe. We do not store full card numbers on our servers.
• Distribution Platforms: We receive royalty reports and viewership data from streaming platforms for the purpose of calculating and paying your royalties.
• Referral Data: If you were referred by a CrownPlay affiliate, we record the referral relationship to calculate commission earnings.

2. How We Use Your Information

2.1 Operate and Deliver the Platform

• Create and manage your account.
• Process content submissions and track their review status.
• Distribute your content to streaming platforms and manage licensing agreements.
• Calculate, process, and deliver royalty payments.
• Manage subscription plans and billing.
• Respond to support requests and communicate with you about your account.

2.2 Comply with Legal Obligations

• Collect W-9 information and issue 1099 forms as required by U.S. tax law.
• Maintain records required for financial audits and regulatory compliance.
• Respond to lawful requests from government authorities or courts.

2.3 Improve the Platform

• Analyze usage patterns to improve features and user experience.
• Diagnose technical issues and fix bugs.
• Develop new features based on how users interact with the platform.

2.4 Communications

• Send transactional emails — account verification, submission status updates, payment notifications, and account alerts.
• Send platform announcements and policy updates.
• Send marketing communications about CrownPlay features and programs (you may opt out at any time).

2.5 Security and Fraud Prevention

• Detect, investigate, and prevent fraudulent activity, abuse, and security threats.
• Enforce our Terms & Conditions.
• Verify user identity and content ownership claims.

3. How We Share Your Information

We do not sell your personal information. We share information only in the following circumstances:

3.1 Distribution Partners

To distribute your content, we share content metadata (title, synopsis, cast, genre, ratings, posters, trailer links, and territory rights) with streaming platforms and distribution partners. We do not share your personal contact information, payment details, or account credentials with these partners.

3.2 Service Providers

• Payment Processing: Stripe — for subscription billing and payment management.
• Email Delivery: SendGrid — for transactional and notification emails.
• Cloud Infrastructure: Hosting and database services that store platform data on our behalf.
• File Storage: Services used for secure storage of uploaded content files.

All service providers are contractually required to handle your data only as directed by us and in accordance with applicable privacy laws.

3.3 Buyers and Content Licensing

If your content is made available in our Buyer Marketplace, content buyers may view your film's title, synopsis, genre, ratings, poster, trailer, and distribution availability. Your personal contact details are not shared with buyers through the platform.

3.4 Legal Requirements

We may disclose your information if required by law, court order, subpoena, or government request, or if we reasonably believe disclosure is necessary to protect the rights, property, or safety of CrownPlay, our users, or the public.

3.5 Business Transfers

If CrownPlay or BlueCrown Motion Pictures LLC is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. You will be notified via email and/or a prominent notice on the platform of any change in ownership or control.

4. Data Retention

• Account Data: Retained while your account is open and for up to 3 years after account closure to fulfill outstanding legal, financial, or contractual obligations.
• Financial & Tax Records: W-9 information, royalty statements, and payment records are retained for a minimum of 7 years as required by U.S. tax law.
• Content Metadata: Retained for the duration of any active platform distribution agreements, plus the post-termination period described in our Terms.
• Support Records: Retained for 2 years from the date of the last interaction.
• Unverified Accounts: Accounts not verified within 48 hours of registration are automatically deleted along with all associated data.

When retention periods expire, we securely delete or anonymize your data.

5. Data Security

• Password Security: Passwords are stored as one-way cryptographic hashes — we cannot access your plain-text password.
• Sensitive Data Masking: SSNs, EINs, and banking information are masked in the interface and access is restricted to authorized personnel only.
• Session Management: Secure session tokens with expiration and secure cookie handling.
• Encrypted Transmission: All data transmitted between your browser and our servers is encrypted using HTTPS/TLS.
• Access Controls: Role-based access controls ensure users can only access their own data; admin access is logged and monitored.
• Payment Security: We do not store full credit card numbers. All payment data is handled by Stripe, which is PCI-DSS compliant.

No system is 100% secure. You are responsible for keeping your account credentials confidential and for notifying us immediately at acquisitions@bluecrownmotionpictures.com if you suspect unauthorized access.

6. Cookies and Tracking

• Essential Cookies: Required for the platform to function — session authentication, CSRF protection, and login state. You cannot opt out of these while using the platform.
• Preference Cookies: Remember your settings, such as UI theme preferences.
• Analytics: We may use anonymized usage data to understand platform usage. We do not use third-party advertising trackers.

You can control cookies through your browser settings. Disabling essential cookies will prevent you from logging in.

7. Your Rights and Choices

7.1 All Users

• Access: View and update most of your account information directly from your dashboard.
• Correction: Correct inaccurate data in your profile settings.
• Account Deletion: Request deletion of your account by contacting us. Note that certain records may be retained as required by law (see Section 4).
• Marketing Opt-Out: Unsubscribe from marketing emails using the unsubscribe link in any marketing email. Transactional emails cannot be opted out of while your account is active.
• Data Portability: Request a copy of your personal data in a common format by contacting us.

7.2 California Residents (CCPA)

• Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected about you.
• Right to Delete: Request deletion of your personal information, subject to certain exceptions (e.g., legal obligations).
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.
• Do Not Sell: We do not sell your personal information.

To exercise CCPA rights, contact us at acquisitions@bluecrownmotionpictures.com. We will respond within 45 days.

7.3 EEA / UK Residents (GDPR)

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate data.
• Right to Erasure: Request deletion of your data where we no longer have a legal basis to retain it.
• Right to Restrict Processing: Request that we limit how we use your data in certain circumstances.
• Right to Data Portability: Receive your data in a structured, machine-readable format.
• Right to Object: Object to processing based on legitimate interests.
• Right to Complain: Lodge a complaint with your local data protection authority.

Legal Basis for Processing (GDPR): (a) contract performance — to deliver the services you signed up for; (b) legal obligation — for tax and regulatory compliance; (c) legitimate interests — for security and platform improvement; and (d) consent — for marketing communications.

GDPR requests will be responded to within 30 days. Contact: acquisitions@bluecrownmotionpictures.com.

8. Children's Privacy

CrownPlay is intended for users who are at least 18 years of age. We do not knowingly collect, use, or disclose personal information from anyone under 18. If we become aware that a minor has provided us with personal information, we will delete that information promptly. If you believe a minor has created an account, please contact us immediately.

9. Third-Party Links

The CrownPlay platform may contain links to third-party websites or streaming platforms. This Privacy Policy does not apply to those external sites. We encourage you to review the privacy policies of any third-party services you access through our platform.

10. International Data Transfers

CrownPlay is based in the United States. If you access the platform from outside the U.S., your information will be transferred to, stored, and processed in the United States. By using the platform, you consent to this transfer. We take steps to ensure that international transfers comply with applicable data protection laws, including standard contractual clauses where required under GDPR.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email and/or by posting a notice on the platform at least 30 days before the changes take effect. Your continued use of the platform after the effective date constitutes acceptance of the changes.

12. Contact Us

For any privacy-related questions, requests, or concerns — including data access, deletion, or correction requests — please contact:

---