1. Introduction

Welcome to Movieo ("we," "our," or "us"). We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, and protect your information when you use our service at movieo.me.

2. Information We Collect

2.1 Information You Provide

• Account Information: Email address, username, profile picture, bio, location, and website
• Social Media: When you sign in with Google, we receive your basic profile information (name, email, avatar)
• Content: Movie lists (seenlist, watchlist, blacklist), comments, discussions, and ratings you create
• Premium Features: For premium subscribers, we generate and store a taste profile (favorite genres, directors, AI-generated insights) used to power AI recommendations

2.2 Automatically Collected Information

• Usage Data: Pages visited, features used, time spent on the service
• Technical Data: IP address, browser type, device information, session data
• Cookies: Session cookies for authentication and functionality

3. How We Use Your Information

We use your information to:

• Provide and maintain our service
• Authenticate your account and manage sessions
• Generate personalized movie recommendations using AI
• Send you notifications about your account activity
• Send newsletters and product updates (with your consent)
• Improve our service and develop new features
• Prevent fraud and ensure security
• Comply with legal obligations

4. Legal Basis for Processing (GDPR)

We process your personal data based on:

• Consent: When you sign up and agree to our terms
• Contract Performance: To provide the service you requested
• Legitimate Interest: To improve our service, prevent fraud, and ensure security
• Legal Obligation: To comply with applicable laws

5. Third-Party Services

We share your data with the following third-party services:

5.1 Authentication Providers

• Google OAuth2: For Google sign-in (we use only Google authentication)

5.2 Email Services

• Amazon SES: For transactional emails (account notifications, password recovery)

5.3 Payment Processing

• Stripe: For subscription billing. We never store your payment card details — Stripe is PCI-DSS Level 1 certified and handles all payment data directly. We only store a Stripe customer ID and your subscription status.

5.4 Monitoring & Error Tracking

• Bugsnag: Error tracking (production only)

5.5 Storage & Infrastructure

• DigitalOcean Spaces: File storage for images
• AWS S3: Backup storage

5.6 AI Services

• OpenAI / Anthropic: For generating personalized movie recommendations, taste reports, AI roasts, and Movie Night picks. Only structured taste data is sent (lists, ratings, genres) — no comments, discussions, or personally identifying content.

5.7 Content Providers

• TMDB, IMDB, Rotten Tomatoes, Metacritic: For movie information (we only fetch public data)

6. Your Rights (GDPR)

Under GDPR, you have the following rights:

6.1 Right to Access

You can export all your data in JSON format. Export My Data

6.2 Right to Erasure

You can delete your account at any time. Your personal data will be anonymized, but your lists and comments will be preserved (anonymized). Delete My Account

6.3 Right to Rectification

You can update your personal information in your account settings.

6.4 Right to Restrict Processing

You can disable email communications and make your lists private in your settings.

6.5 Right to Data Portability

You can export your data in a machine-readable JSON format.

6.6 Right to Object

You can object to processing by deleting your account or opting out of emails.

6.7 Movie Night For Two

The Movie Night For Two feature lets you find movies you and a partner will both enjoy. When you enter a partner's email, we look up their account if they're a registered Movieo user with sufficient viewing history. We do NOT email or notify the partner. Lookups are rate-limited (5 per hour, 20 per day per user) to prevent abuse and email enumeration. To opt out of being matched as a partner, delete your account or contact us.

7. Data Retention

7.1 Active Accounts

We retain your data as long as your account is active.

7.2 Subscription Cancellation

When you cancel a paid subscription, you keep full access until the end of your billing period. After that, you retain read-only access to all premium features you've already generated — recommendations history, AI Taste Reports, AI Movie Roasts, Movie Night picks, and your Taste Poster. Generation of new content requires an active subscription. Cached AI-generated reports persist for 30 days from generation; Movie Night results persist for 7 days.

7.3 Deleted Accounts

When you delete your account:

• Personal data is anonymized immediately
• User-generated content (lists, comments) is preserved but anonymized
• Audit logs are retained for 7 years for compliance

7.4 Backups

Database backups are retained for 30 days. Deleted user data in backups will be purged after backup rotation.

8. Security

We implement appropriate security measures:

• SSL/TLS encryption for all connections
• Database and file storage encryption
• Secure session management with CSRF protection
• OAuth-based authentication (no passwords stored)
• Regular security audits and monitoring
• Access controls and role-based permissions

9. Cookies

9.1 Essential Cookies

We use the following essential cookies:

• _movieome_session: Required for authentication and session management
• CSRF token: Required for security

9.2 Analytics Cookies (Optional)

Google Analytics: We use Google Analytics to understand how visitors use our site. This service uses cookies to collect anonymous usage data. You can opt-out of Google Analytics by declining cookies in our cookie consent banner.

• Purpose: Analyze site usage, improve user experience
• Data Collected: Page views, session duration, anonymized IP addresses
• Retention: 26 months (Google's default)
• Your Control: You can accept or decline analytics cookies via our cookie consent banner
• IP Anonymization: Enabled (GDPR compliant)

10. International Data Transfers

Your data may be transferred to and processed in countries outside your country of residence. We ensure appropriate safeguards are in place for such transfers.

11. Children's Privacy

Our service is not intended for children under 16. We do not knowingly collect personal data from children under 16. If you believe we have collected data from a child, please contact us immediately.

12. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes by email or through a notice on our website. Your continued use of the service after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this privacy policy or want to exercise your rights, please contact us:

• Email: privacy@movieo.me
• Contact Form: Contact Us
• Settings:

14. Data Protection Officer

For GDPR-related inquiries, you can contact our Data Protection Officer at:
Email: dpo@movieo.me