Privacy Policy

1. Information We Collect

1.1 Personal Information You Provide

We may collect the following when you voluntarily provide it:

• Account Information: name, email address, username, password, and profile details when you create an account.
• Waitlist & Newsletter: email address and signup source when you join the WatchHUE waitlist.
• Contact & Inquiry Forms: name, email address, inquiry type, and message content when you submit a contact form.
• Payment Information: billing address and payment method details when you subscribe to premium services or purchase content. Payment processing is handled by third-party processors; we do not store full credit card numbers.
• Creator Submissions: name, email, portfolio links, and any materials submitted through creator application forms.
• Communications: information you provide when you contact us directly via email, social media, or other channels.

1.2 Information Collected Automatically

When you access the Service, we may automatically collect certain information, including:

• Device Information: device type, operating system, unique device identifiers, browser type and version, and screen resolution.
• Log Data: IP address, access dates and times, pages viewed, time spent on pages, referring/exit URLs, and click data.
• Usage Data: content viewed, search queries, playback activity, feature interactions, and user preferences.
• Location Data: approximate geographic location derived from your IP address.

1.3 Cookies and Similar Technologies

We use cookies, web beacons, pixels, and similar tracking technologies to collect information about your browsing activity. These technologies help us:

• Remember your preferences and settings
• Authenticate and maintain your session
• Analyze Service performance and usage patterns
• Deliver relevant content and measure effectiveness

You can control cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or be notified when a cookie is set. Note that disabling cookies may affect Service functionality.

Types of cookies we use:

• Essential Cookies: required for basic Service functionality (authentication, security, load balancing).
• Analytics Cookies: help us understand how visitors interact with the Service (page views, session duration, traffic sources).
• Preference Cookies: remember your settings and choices (language, region, display preferences).
• Marketing Cookies: used to deliver relevant communications and measure campaign effectiveness.

2. How We Use Your Information

We use the information we collect for the following purposes:

2.1 Service Delivery & Operations

• Provide, operate, maintain, and improve the Service
• Process account registration and manage your account
• Process transactions and send related information (confirmations, invoices, receipts)
• Deliver streaming content and manage content access rights
• Facilitate creator submissions and partnership inquiries

2.2 Communications

• Respond to your comments, questions, requests, and customer service inquiries
• Send technical notices, security alerts, and administrative messages
• Send promotional communications about WatchHUE content, features, events, and offers (with your consent where required by law)
• Send waitlist updates and launch notifications

2.3 Analytics & Improvement

• Monitor and analyze usage trends, traffic patterns, and user behavior
• Personalize and improve your experience, including content recommendations
• Conduct research and analysis to develop new features and services
• Measure the effectiveness of our marketing campaigns

2.4 Safety & Legal

• Detect, investigate, and prevent fraud, abuse, and security incidents
• Enforce our Terms of Service and other policies
• Comply with legal obligations and respond to lawful requests
• Protect the rights, property, and safety of HUE Media, our users, and the public

3. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

• Service Providers: We share information with third-party vendors who perform services on our behalf, including hosting (Railway), database management (Supabase), email delivery (Resend), analytics, payment processing, and customer support. These providers are contractually obligated to use your information only as directed by us.
• Business Transfers: In connection with a merger, acquisition, reorganization, sale of assets, or bankruptcy, your information may be transferred as a business asset. We will notify you before your information is transferred and becomes subject to a different privacy policy.
• Legal Requirements: We may disclose your information if required by law, regulation, legal process, or governmental request, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
• With Your Consent: We may share your information for any other purpose with your explicit consent.
• Aggregated or De-identified Data: We may share aggregated or de-identified information that cannot reasonably be used to identify you.

4. Third-Party Services

The Service integrates with or relies on the following third-party services, each of which has its own privacy policy governing their use of your data:

• Supabase — database and authentication services
• Railway — application hosting and deployment
• Cloudflare — DNS, CDN, and security services
• Resend — transactional and notification email delivery
• Analytics Provider — website analytics and usage tracking

We encourage you to review the privacy policies of any third-party service before providing information to or through them. We are not responsible for the content, privacy policies, or practices of third-party websites or services linked from the Service.

5. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. Specifically:

• Account Data: retained for the duration of your account and for a reasonable period thereafter to comply with legal obligations.
• Waitlist Data: retained until you unsubscribe or request deletion.
• Contact Submissions: retained for up to 2 years after your last interaction unless ongoing business correspondence requires longer retention.
• Transaction Data: retained as required by applicable tax and financial record-keeping laws (typically 7 years).
• Log and Analytics Data: retained for up to 26 months unless required for an ongoing investigation or legal matter.

When personal information is no longer needed, we will securely delete or anonymize it.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using TLS/SSL
• Encryption of sensitive data at rest
• Access controls limiting employee access to personal data on a need-to-know basis
• Regular security assessments and monitoring
• Secure password hashing for user credentials

Despite our efforts, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security. If you have reason to believe that your interaction with us is no longer secure, please contact us immediately.

7. Your Privacy Rights

Depending on your jurisdiction, you may have certain rights regarding your personal information. We honor the following rights for all users, regardless of location:

7.1 General Rights

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete personal information.
• Deletion: Request deletion of your personal information, subject to certain exceptions.
• Opt-Out: Unsubscribe from marketing communications at any time by clicking the "unsubscribe" link in any email or by contacting us.
• Data Portability: Request a machine-readable copy of your personal information.
• Restriction: Request that we restrict processing of your personal information under certain circumstances.
• Objection: Object to our processing of your personal information based on legitimate interests.

7.2 California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

• Right to Know: You may request that we disclose the categories and specific pieces of personal information we have collected, the categories of sources, our business purposes for collecting it, and the categories of third parties with whom we share it.
• Right to Delete: You may request that we delete personal information we collected from you, subject to certain exceptions.
• Right to Correct: You may request that we correct inaccurate personal information.
• Right to Opt-Out of Sale/Sharing: We do not sell your personal information. We do not share personal information for cross-context behavioral advertising.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

To exercise these rights, contact us at privacy@watchhue.com. We will verify your identity before processing your request. You may designate an authorized agent to submit a request on your behalf.

7.3 European Economic Area & UK Residents (GDPR)

If you are located in the European Economic Area (EEA) or the United Kingdom, we process your personal data based on the following legal bases:

• Consent: Where you have given consent (e.g., marketing emails, cookies).
• Contract: Where processing is necessary for the performance of a contract with you (e.g., providing the Service).
• Legitimate Interests: Where processing is necessary for our legitimate business interests (e.g., fraud prevention, analytics), balanced against your rights.
• Legal Obligation: Where processing is required by law.

You have the right to lodge a complaint with your local data protection authority if you believe we have not complied with applicable data protection laws.

7.4 Other U.S. State Privacy Laws

Residents of Colorado, Connecticut, Virginia, Utah, and other states with comprehensive privacy laws may have similar rights to access, correct, delete, and port their personal information, as well as the right to opt out of certain data practices. To exercise these rights, contact us using the information below.

8. Children's Privacy

The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@watchhue.com, and we will promptly delete such information. Users between 13 and 18 years of age must have parental or guardian consent to use the Service.

9. International Data Transfers

Your information may be transferred to and processed in countries other than the country in which you reside. These countries may have data protection laws that differ from those in your jurisdiction. By using the Service, you consent to the transfer of your information to the United States and other jurisdictions where our service providers operate. We take appropriate safeguards to ensure your information receives an adequate level of protection.

10. Do Not Track Signals

Some browsers include a "Do Not Track" (DNT) feature that signals to websites that you do not want your online activity tracked. There is currently no uniform standard for how companies should respond to DNT signals. At this time, we do not respond to DNT signals, but we will revise this policy if a standard is established.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by posting the updated policy on this page with a revised "Effective Date" and, where required by law, by sending you an email notification. Your continued use of the Service after the effective date of the revised Privacy Policy constitutes your acceptance of the changes. We encourage you to review this Privacy Policy periodically.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We will respond to all privacy-related inquiries within 30 days, or as required by applicable law.