Privacy Policy

This notice explains how Tech Innocrux Private Limited (“Innocrux”, “we”, “us”) handles personal data. It covers the Innocrux website, the Innocrux OTT platform and the AI video services supplied with it.

Innocrux sells to businesses. Our customers are broadcasters, studios, sports rights holders, creators and enterprises who operate their own branded streaming services. Innocrux is not a consumer streaming service and does not run a direct-to-viewer product of its own.

1. Two different roles

The most important thing to understand about this notice is that Innocrux acts in two distinct capacities, and different rules apply to each.

1.1 Innocrux as a controller. For the people we deal with directly — visitors to this website, prospects who contact our sales team, and the named users at a customer who administer a platform — Innocrux decides why and how data is used. We are the controller for that data.

1.2 Innocrux as a processor. For the viewers of a customer’s streaming service, Innocrux is a processor. The customer decides what is collected and why; Innocrux processes it on their written instructions, under the agreement between us. We do not use viewer data for our own purposes, we do not sell it, and we do not use it to train models for anyone other than the customer whose data it is.

If you are a viewer of a streaming service powered by Innocrux and want to exercise a right over your data, the organisation that runs that service is your first point of contact. We will support them in responding, but we cannot act on viewer data without their instruction.

2. What we collect as a controller

• Enquiry details. Name, work email, phone number, company, job title, country and whatever you write in the message when you submit the contact form. This is sent to our CRM so that a person can reply.
• Account and administrative data. The names, business contact details and access rights of the people a customer nominates to administer their platform.
• Website usage. Pages requested, approximate location derived from IP address, referrer, and device and browser type. Used to understand which pages are useful and to keep the site secure.
• Support correspondence. What you send us when you raise a support request, and our replies.

We do not ask for special category data, and we ask that you do not send it to us. Do not include passwords, payment card numbers or content you are not entitled to share in a support ticket or an enquiry form.

3. What we process as a processor

Running a streaming service necessarily involves data about the people watching it. Depending on what a customer configures, the platform may process viewer account identifiers, entitlement and subscription status, playback and viewing history, device and player diagnostics, approximate location for geo-restriction, and transaction records for pay-per-view and rental purchases.

The AI video services — dubbing, subtitling, metadata tagging, clip generation and recommendations — operate on the customer’s own media library and on the behavioural signals their platform generates. The output belongs to the customer. We do not pool one customer’s content or audience data with another’s.

4. Why we use it, and on what basis

As a controller we rely on legitimate interests to respond to enquiries, to operate and secure the website and to maintain a customer relationship; on performance of a contract to deliver the services a customer has bought; and on consent where consent is required, such as for non-essential cookies. Where Indian law applies, we rely on the corresponding grounds under the Digital Personal Data Protection Act, 2023.

As a processor our basis is the customer’s instruction. Establishing a lawful basis for processing viewer data is the customer’s responsibility, because the customer is the one with the relationship to the viewer.

5. Who we share it with

We use sub-processors to deliver the services — cloud infrastructure and content delivery providers, transcoding and AI processing services, communications and CRM tools, and payment processors where a customer has enabled transactional monetization. A current list of sub-processors, with the categories of data each one handles and where it operates, is available to customers on request.

We do not sell personal data. We do not share it for anyone else’s advertising. We disclose it to a government or law-enforcement body only where we are legally required to, and where we are permitted to tell the affected customer, we will.

6. Where it is processed

Innocrux operates from India and serves customers internationally, so data may be processed outside the country where it was collected. Where data moves out of a region whose law restricts transfers, we rely on the appropriate safeguard for that region — standard contractual clauses for the EEA and the UK, and the equivalent mechanism elsewhere.

Customers with data residency requirements should raise them before deployment. The platform supports private CDN and on-premise GPU transcoding, which means delivery and encoding can run on infrastructure the customer controls, inside a jurisdiction they choose.

7. How long we keep it

Enquiry and account data is kept for as long as the relationship is active, and then for the period we are required to retain business records. Website usage data is kept in aggregate. Viewer data processed on a customer’s behalf is kept according to that customer’s configuration, and is deleted or returned at the end of the agreement on the terms set out there.

8. Your rights

Depending on where you are, you may have the right to access the personal data we hold about you, to have it corrected, to have it erased, to restrict or object to how we use it, to receive it in a portable form, and to withdraw consent where we relied on it. Under India’s Digital Personal Data Protection Act, 2023 you may also nominate another person to exercise your rights, and may raise a grievance with us before approaching the Data Protection Board.

To exercise any of these, write to [email protected]. We will acknowledge and respond within the period the applicable law allows. If you are a viewer of a customer’s service, see section 1 — your request goes to them first.

9. Cookies

This website uses cookies that are necessary for it to function and to understand which pages are read. Any cookie that is not strictly necessary is set only with consent, and consent can be withdrawn at any time through your browser settings. The cookies a customer’s own streaming service sets are configured by that customer and are governed by their notice, not this one.

10. Security

Content protection, encryption, access control and incident handling are described on our Security page. No system is immune and we do not claim otherwise — that page describes what we actually do rather than what sounds reassuring.

11. Children

The Innocrux website and the platform’s administrative tools are business products and are not directed at children. Where a customer’s streaming service carries content for children, the obligations that follow — age assurance, restrictions on profiling, parental consent — sit with that customer as the controller. The platform provides the controls to meet them; the decision to apply them is theirs.

12. Changes to this notice

When this notice changes materially we will update the effective date above and tell customers through the agreed channel. We do not treat a silent edit to a privacy notice as notification.

13. Contact

Tech Innocrux Private Limited, No. 28, Padma Street, VGN Avenue, Mogappair, Chennai – 600 037, India.

Privacy and data protection enquiries, including grievances under the Digital Personal Data Protection Act, 2023: [email protected]. Commercial enquiries: [email protected].