Privacy Policy

1. Introduction

Welcome to Odisha Katha ("we," "our," or "us"). We are a fast-growing integrated media, entertainment, digital promotion, and technology startup based in Odisha, India. We operate at the intersection of culture, cinema, digital media, events, government initiatives, and modern technology.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you:

• Visit our website: https://odishakatha.com
• Use our Android mobile application
• Engage with our services (talent registration, auditions, digital marketing, events)
• Interact with our content on YouTube, Instagram, Facebook, X (Twitter), and Threads
• Use our technology services (website/app development, design)
• Participate in government projects or business services

1.1 About Odisha Katha

Odisha Katha is a registered and compliant organization:

• GST Registered (Service & Government Supply)
• MSME / UDYAM Registered
• Skill India Aligned
• GeM (Government e-Marketplace) Registered
• Eligible for Government Projects, Tenders & Supplies

2. Information We Collect

2.1 Personal Information You Provide

We collect personal information that you voluntarily provide when you:

• Register as a talent, audition poster, or business client
• Subscribe to our newsletter, blog, or email updates
• Contact us through forms, email, phone, or WhatsApp
• Make payments for premium services or support us financially
• Engage us for digital marketing, event management, or technology services
• Apply for government projects or tenders through us
• Interact with our social media platforms
• Download and use our mobile app
• Submit content, reviews, or feedback

This information may include:

• Full Name
• Email Address
• Mobile Number / WhatsApp Number
• Date of Birth and Age
• Gender
• Location (City, State, Country)
• Profile Photos, Videos, and Portfolio Materials
• Professional Information (skills, experience, qualifications)
• Company/Organization Name and Details
• GST Number, MSME/UDYAM Number (for business clients)
• PAN Number (for payments and invoicing)
• Bank Account Details (for payments)
• Payment Information (processed securely via Instamojo, Razorpay, or bank transfer)
• Project Requirements and Specifications
• Social Media Handles

2.2 Information for Different User Types

For Talents (Actors, Models, Singers, Dancers, etc.):

• Full Name - Publicly Visible
• Email - Private (used for login & notifications)
• Mobile - Private (shown only after login or to verified users)
• Date of Birth & Age - Publicly Visible
• Gender & Location - Publicly Visible
• Profile Photos & Videos - Publicly Visible
• Skills, Experience & Portfolio - Publicly Visible
• Social Media Links - Publicly Visible (if provided)

For Audition Posters (Production Houses, Casting Directors):

• Contact Person Name - Publicly Visible
• Contact Person Mobile - Publicly Visible
• Company/Production Name - Publicly Visible
• Email - Private (login only)
• Audition Details - Publicly Visible

For Business Clients (Digital Marketing, Events, Technology):

• Company Name & Contact Details
• Project Requirements & Budget
• GST & Business Registration Details
• Payment and Invoicing Information

2.3 Automatically Collected Information

When you visit our website or use our app, we automatically collect:

• IP Address and Device Information
• Browser Type, Version, and Language
• Operating System
• Pages Visited, Time Spent, and Navigation Patterns
• Referring Website/Source
• Geographic Location (City, Country)
• Device Identifiers (for mobile app)
• App Usage Statistics

2.4 Information from Third-Party Sources

We may receive information from:

• Social Media Platforms (Facebook, Instagram, YouTube, X)
• Payment Processors (Instamojo, Razorpay)
• Analytics Services (Google Analytics, Facebook Pixel)
• Government Portals (GeM, MSME, Skill India)
• Business Partners and Collaborators

3. Google AdSense and Third-Party Advertising

3.1 How Google AdSense Works

Google AdSense uses cookies and other tracking technologies to collect information about your visits to our website and other websites to provide targeted advertising. Google may use:

• DoubleClick DART cookies
• Google Analytics cookies
• Advertising ID (for mobile apps)
• Web beacons and pixel tags

3.2 Information Collected by Google AdSense

Google and its partners may collect:

• Your IP address and device information
• Pages you visit and ads you view/click
• Time and date of your visits
• Information from cookies stored on your device
• Demographic information (age range, gender, interests)

3.3 Third-Party Ad Networks

In addition to Google AdSense, we may partner with other advertising networks such as:

• Media.net
• PropellerAds
• AdPushup
• Affiliate Marketing Networks (Amazon Associates, etc.)

Each of these partners has their own privacy policies governing data collection and use.

3.4 Your Advertising Choices

You have control over personalized advertising:

3.5 Google's Privacy Policy

For more information about how Google collects and processes data, please review:

• Google Privacy Policy: https://policies.google.com/privacy
• Google AdSense Privacy: https://policies.google.com/technologies/partner-sites

4. Cookies and Tracking Technologies

We use cookies, web beacons, pixels, and similar tracking technologies to enhance your experience and collect information about how you use our services.

4.1 What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They help websites remember your preferences and improve functionality.

4.2 Types of Cookies We Use

Essential Cookies (Required):

• Login authentication and session management
• Security and fraud prevention
• Shopping cart and payment processing
• Website functionality and navigation

Performance & Analytics Cookies:

• Google Analytics - Traffic and user behavior analysis
• Facebook Pixel - Social media engagement tracking
• Page load performance monitoring
• Error tracking and debugging

Functionality Cookies:

• Remember your language and region preferences
• Save your login credentials (if you choose)
• Remember your customization settings
• Video player preferences

Advertising & Marketing Cookies:

• Google AdSense and DoubleClick
• Facebook Ads and Instagram Ads
• Third-party ad networks
• Affiliate marketing tracking
• Retargeting and remarketing campaigns

4.3 Managing Cookies

You can control cookies through:

• Browser Settings: Most browsers allow you to refuse or delete cookies
• Cookie Consent Tools: Use our cookie banner to manage preferences
• Privacy Extensions: Install browser extensions for cookie management

5. How We Use Your Information

We use the collected information for the following purposes:

5.1 Core Services

• Create and manage your account (talents, auditions, business clients)
• Process transactions and payments
• Provide customer support and respond to inquiries
• Deliver our services (digital marketing, event management, technology)
• Match talents with audition opportunities
• Execute government projects and business contracts

5.2 Communication

• Send updates about auditions, events, and opportunities
• Deliver newsletters and blog updates (with your consent)
• Provide service notifications and account alerts
• Share promotional offers and marketing content
• Conduct surveys and gather feedback

5.3 Marketing & Promotion

• Promote films, artists, and entertainment content
• Execute digital marketing campaigns for clients
• Manage social media promotions and influencer collaborations
• Analyze campaign performance and ROI
• Display targeted advertisements through Google AdSense and partners

5.4 Analytics & Improvement

• Analyze website/app usage patterns and trends
• Improve user experience and interface design
• Develop new features and services
• Optimize content and recommendations
• Measure advertising effectiveness

5.5 Legal & Security

• Prevent fraud, spam, and abuse
• Ensure platform security and integrity
• Comply with legal obligations (GST, MSME, government reporting)
• Enforce our Terms & Conditions
• Protect our rights and property
• Respond to legal requests and court orders

6. How We Share Your Information

6.1 Public Profiles & Content

Certain information is made publicly visible:

• Talent Profiles: Name, photo, age, location, skills, experience, portfolio
• Audition Listings: Production details, contact information, requirements
• Blog Comments & Reviews: Name and comment content
• Event Participation: Photos and videos from public events

6.2 Service Providers & Partners

We share information with trusted third parties who help us operate:

• Payment Processors: Instamojo, Razorpay, bank partners
• Hosting & Infrastructure: Web hosting, cloud storage, CDN services
• Email Services: Newsletter and transactional email providers
• Analytics: Google Analytics, Facebook Pixel, social media insights
• Advertising: Google AdSense, ad networks, affiliate partners
• Communication: SMS gateways, WhatsApp Business API
• Government Platforms: GeM, MSME portals, Skill India

6.3 Business Clients & Collaborators

For business services, we may share relevant information with:

• Film production houses and casting directors (for talent matching)
• Event organizers and venue partners
• Digital marketing clients (campaign performance data)
• Technology clients (project requirements and specifications)
• Government departments (for project execution)

6.4 Legal Requirements

We may disclose information when required by law:

• In response to court orders, subpoenas, or legal processes
• To comply with government investigations
• To enforce our policies and protect our rights
• To prevent fraud or illegal activities
• To protect the safety of users and the public

6.5 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new owner, subject to this Privacy Policy.

7. Data Security

We take the security of your personal information seriously and implement industry-standard measures:

7.1 Technical Security Measures

• SSL/TLS Encryption: All data transmission is encrypted using HTTPS
• Secure Password Storage: Passwords are hashed and encrypted
• Firewall Protection: Advanced firewall systems protect our servers
• Regular Security Audits: Periodic vulnerability assessments and penetration testing
• Secure Payment Processing: PCI DSS compliant payment gateways
• Data Backup: Regular encrypted backups to prevent data loss
• Access Controls: Role-based access with multi-factor authentication

7.2 Organizational Security

• Limited employee access to personal data (need-to-know basis)
• Confidentiality agreements with all staff and contractors
• Security training for team members
• Incident response procedures
• Regular policy reviews and updates

7.3 Your Security Responsibilities

• Use strong, unique passwords
• Enable two-factor authentication if available
• Keep your login credentials confidential
• Log out from public or shared devices
• Report suspicious activity immediately
• Keep your contact information updated

8. Your Privacy Rights

You have several rights regarding your personal information:

8.1 Access & Portability

• Right to Access: Request a copy of your personal data
• Data Portability: Receive your data in a structured, machine-readable format
• Account Dashboard: View and download your information from your account

8.2 Correction & Update

• Right to Rectification: Correct inaccurate or incomplete information
• Profile Editing: Update your profile, skills, and contact details anytime
• Contact Us: Request changes that you cannot make yourself

8.3 Deletion & Erasure

• Right to Erasure: Request deletion of your account and personal data
• Account Deletion: Use the delete button in your dashboard
• Data Removal Request: Email us at contact@odishakatha.com
• Deletion Page: Visit Delete My Data

8.4 Objection & Restriction

• Object to Processing: Object to certain uses of your data (e.g., marketing)
• Restrict Processing: Limit how we use your information
• Opt-Out: Unsubscribe from marketing emails anytime

8.5 Withdraw Consent

• Email Marketing: Click "Unsubscribe" in any promotional email
• SMS/WhatsApp: Reply "STOP" or contact us to opt-out
• Personalized Ads: Use Google Ads Settings and cookie controls
• App Notifications: Disable in your device settings

8.6 How to Exercise Your Rights

To exercise any of these rights, contact us at:

• Email: contact@odishakatha.com
• Phone/WhatsApp: +91 9583312127
• Data Deletion Page: Delete My Data

We will respond to your request within 30 days. For security purposes, we may need to verify your identity before processing your request.

9. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law.

9.1 Retention Periods

• Active Accounts: Data retained while your account is active
• Inactive Accounts: Deleted after 2 years of inactivity (with prior notice)
• Deleted Accounts: Data removed within 7 days of deletion request
• Transaction Records: Retained for 7 years (GST and tax compliance)
• Communication Logs: Retained for 1-3 years for customer service
• Analytics Data: Anonymized after 26 months (Google Analytics default)
• Legal/Security Records: Retained as required by law or ongoing investigations

9.2 Post-Deletion Considerations

• Backup copies may persist for up to 30 days
• Public content may be archived or anonymized
• Legal and accounting records remain for compliance
• Aggregated/anonymized data may be retained indefinitely for analytics

10. Children's Privacy

Our services are intended for users who are 18 years of age or older. We do not knowingly collect personal information from children under 18.

10.1 Exceptions

For child artists/talents under 18:

• Registration must be completed by a parent or legal guardian
• Parental consent is required for profile creation
• Guardian information must be provided
• Enhanced privacy protections apply
• We may request additional verification documents

11. International Data Transfers

Odisha Katha is based in India. If you access our services from outside India, please note that your information may be transferred to, stored, and processed in India.

11.1 Cross-Border Transfers

When we transfer data internationally (e.g., to cloud service providers), we ensure:

• Compliance with applicable data protection laws
• Use of standard contractual clauses or similar safeguards
• Adequate security measures are in place
• Data is processed only as authorized

11.2 GDPR Compliance (For EU Users)

If you are located in the European Economic Area (EEA), you have additional rights under GDPR:

• Right to lodge a complaint with a supervisory authority
• Right to data portability in a structured format
• Enhanced consent requirements
• Right to restrict processing

12. California Privacy Rights (CCPA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA):

12.1 Your CCPA Rights

• Right to Know: Request information about data we collect and how it's used
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: Opt-out of the sale of personal information (we do not sell personal data)
• Right to Non-Discrimination: Equal service regardless of privacy rights exercise

12.2 "Do Not Sell My Personal Information"

13. Third-Party Links and Services

Our website and app may contain links to third-party websites, services, and social media platforms:

13.1 External Links

• YouTube videos and channels
• Instagram and Facebook pages
• X (Twitter) and Threads profiles
• Partner websites and platforms
• Payment gateways (Instamojo, Razorpay)
• Government portals (GeM, MSME)
• Google services (AdSense, Analytics, Play Store)

13.2 Social Media Plugins

We use social media plugins (share buttons, embedded posts) which may:

• Set cookies on your device
• Track your interactions
• Share data with the respective social media platforms
• Personalize content and ads

14. Mobile App Privacy

Our Android mobile app (available on Google Play Store) may collect additional information:

14.1 App Permissions

Our app may request the following permissions:

• Internet Access: To load content and sync data
• Storage: To cache images and videos
• Camera & Photos: To upload profile pictures and portfolio content (only with your permission)
• Location: To show location-based auditions and events (optional)
• Notifications: To send updates about auditions and opportunities

14.2 Device Information

We collect:

• Device model and manufacturer
• Operating system version (Android)
• App version and build number
• Unique device identifiers (Advertising ID)
• Network information (carrier, connection type)
• App usage statistics and crash reports

14.3 Managing App Permissions

You can manage app permissions in your device settings:

• Android: Settings > Apps > Odisha Katha > Permissions
• Disable specific permissions if not needed
• Uninstall the app to stop all data collection

15. Business Services and B2B Privacy

For business clients using our services (digital marketing, events, technology, government projects):

15.1 Business Information We Collect

• Company/Organization Name and Registration Details
• GST Number, MSME/UDYAM Registration
• Business Contact Details (phone, email, address)
• Project Requirements and Specifications
• Budget and Payment Terms
• Authorized Signatory Information
• Bank Account Details for Invoicing

15.2 Use of Business Information

• Project execution and service delivery
• GST invoicing and tax compliance
• Government tender participation (GeM, etc.)
• Contract management and legal documentation
• Payment processing and financial reporting
• Business communication and updates

15.3 Data Processors

When we provide services to business clients, we act as a:

• Data Controller: For our own business operations
• Data Processor: When handling client audience/customer data (for campaigns)

We maintain separate data processing agreements with B2B clients when required.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

• Changes in our business practices
• New legal or regulatory requirements
• Introduction of new features or services
• Changes in technology or security measures
• Updates to third-party services (Google AdSense policies, etc.)

16.1 Notification of Changes

When we make significant changes, we will:

• Update the "Last Updated" date at the top of this page
• Send an email notification to registered users
• Display a prominent notice on our website/app
• Post an announcement on our social media channels

17. Legal Basis for Processing (GDPR)

For users in the European Union, we process personal data based on:

• Consent: When you explicitly agree (e.g., marketing emails, cookies)
• Contract Performance: To provide services you've requested (talent registration, business services)
• Legitimate Interests: For analytics, security, fraud prevention, and business operations
• Legal Obligation: To comply with Indian and international laws (GST, tax, court orders)

18. Dispute Resolution and Governing Law

This Privacy Policy is governed by the laws of India. Any disputes arising from this policy shall be subject to the exclusive jurisdiction of courts in Bhubaneswar, Odisha, India.

18.1 Grievance Officer

In accordance with Indian IT Act 2000 and Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, we have appointed a Grievance Officer to address privacy concerns:

19. Consent and Acknowledgment

By using Odisha Katha's website, mobile app, or services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.

19.1 Specific Consents

You specifically consent to:

• Collection and processing of your personal information as described
• Use of cookies and tracking technologies (including Google AdSense)
• Display of personalized advertisements based on your interests
• Sharing of information with service providers and partners
• International data transfers (if applicable)
• Public display of certain profile information (for talents)

19.2 Right to Withdraw Consent

You may withdraw your consent at any time by:

• Deleting your account
• Opting out of marketing communications
• Disabling cookies in your browser
• Contacting us directly