Privacy Policy

1. Overview & Scope

("MiMi TV") is committed to honoring global privacy rights under the European Union General Data Protection Regulation (GDPR), California Consumer Privacy Act as amended by the CPRA (CCPA/CPRA), Virginia Consumer Data Protection Act (VCDPA), and Singapore Personal Data Protection Act (PDPA).

This policy applies to all registered subscribers, guest visitors, mobile app users, and streaming clients accessing short dramas, web series, pay-per-view titles, or subscription tiers across our global Content Delivery Networks (CDNs).

2. Categories of Information We Collect

We process personal data provided directly by you, generated automatically during streaming, or obtained through authorized partners:

3. Legal Bases for Processing Data

In compliance with Art. 6 GDPR, we process your personal data under the following legal grounds:

• Performance of Contract: To deliver streaming video chunks, authenticate account credentials, and fulfill VIP subscription benefits.
• Legitimate Interests: To detect digital rights management (DRM) breaches, prevent account sharing abuse, optimize CDN cache routing, and improve content recommendations.
• Legal Obligations: To retain invoice records for tax compliance and respond to lawful court orders.
• Consent: For opt-in marketing newsletters and promotional notifications.

4. Cookies & Local Storage Matrix

We use essential cookies and storage tokens to maintain stateful user sessions securely:

5. Data Sharing & Subprocessors

We do not sell your personal data. We share anonymized or necessary data only with trusted infrastructure vendors under strict Data Processing Agreements (DPAs):

• Cloud Infrastructure & CDNs: Amazon Web Services (AWS), Cloudflare, and PostgreSQL Supabase for video streaming and database hosting.
• Payment Processors: Stripe, Razorpay, Apple App Store Billing, and Google Play Billing for processing payment authorizations.
• Analytics & Performance: Google Analytics and Sentry for monitoring video playback crash reports and network latency.

6. Data Retention & Security Standards

Account data is maintained for the lifetime of your active profile plus 3 years following subscription cancellation to satisfy legal auditing requirements. Streaming telemetry and temporary IP logs are anonymized or purged after 90 days. All stored data is encrypted at rest using AES-256 and in transit using TLS 1.3 encryption protocols.

7. Your Rights Under GDPR & CCPA/CPRA

Depending on your location, you hold the following rights regarding your personal information:

8. Children's Privacy (COPPA Compliance)

MiMi TV services are intended for general audiences aged 13 and older. We do not knowingly solicit or collect personal information from children under the age of 13 without verifiable parental consent. If we learn that a child under 13 has provided personal data, we will delete the account immediately.

9. International Data Transfers

operates globally with server nodes located in Singapore, the United States, and Europe. By using our platform, you acknowledge that your personal information may be transferred across international borders subject to Standard Contractual Clauses (SCCs) approved by the European Commission.