Privacy policy

Last updated 13 November 2026.

Kissa Cinema turns your photos and videos into a private, streaming-style story website, usually given as a gift. This policy covers this website (kissa.aarclabs.in) and every story page we host. It explains what we collect, why, who can see it, and what you can ask us to do with it.

1. Who we are

Kissa Cinema is run by AarcLabs, based in Gurgaon, Haryana, India ("we", "us"). For anything about your data, write to support@aarclabs.in or message us on WhatsApp.

2. What we collect

When you order

• Your name, phone number and email, so we can deliver your order and keep you updated.
• The plan you chose and details about the gift, such as names, the occasion and any notes you add.
• Payment status, amount and reference from Razorpay. Razorpay handles the payment itself, so we never see your card, UPI or bank details.

The story you give us

• The photos, videos and links you share with us, plus captions, names, dates and song choices.
• The story password you set, and the profile names and pictures shown on the "Who's watching?" screen.

When anyone visits the website

• On our marketing pages only: pages visited, clicks, device and browser type, rough location from your IP address, and which ad brought you here. We use Mixpanel, Microsoft Clarity and the Meta Pixel for this, and they set cookies in your browser.
• On story, upload and editing pages we load no analytics or ad tools at all.

3. How we use it

• To make your story, check it, host it and send you the link.
• To send order updates on WhatsApp, SMS or email, and to answer support requests and refunds.
• To keep payment and invoice records, as the law requires.
• To understand how people find and use the site, and to measure our ads.
• To keep stories secure and stop fraud or misuse.

We never sell your personal data. We never send your photos, the story, its link or the recipient's name to advertising platforms, and we never use your photos in our ads without your permission.

4. Who can see your story

• Anyone you share the link with can open your story, and they also need the password if one is set.
• Our team can open your story to build it, check it and help you with support.
• We show a story as a public example only if you say yes.

5. Services that handle data for us

We use trusted providers that work for us under contract and only for that purpose:

• Google Cloud and Firebase, to host the site and store your data, mainly in Mumbai, India.
• Amazon Web Services, to prepare your videos for streaming.
• Razorpay, for payments.
• WhatsApp and email providers, for messages about your order.
• Mixpanel, Microsoft Clarity and Meta, for analytics and ads on our marketing pages.
• Other cloud services that help us prepare and arrange your story.

Some of these providers may process data outside India under their own safeguards. We may also share information when the law requires it.

6. How long we keep it

• Original uploads are deleted 30 days after your story is published.
• Your story stays online for your plan's hosting period plus a short grace period, or until you ask us to remove it.
• Order and payment records are kept as long as Indian tax and accounting law requires.
• Analytics data follows each provider's retention settings.

7. Your choices and rights

• Ask for a copy of your data, or correct it.
• Ask us to delete your story, your uploads or your order details.
• Change your story password at any time from your story editor.
• Turn off analytics and ad cookies by blocking or clearing cookies in your browser settings.

Write to support@aarclabs.in. We reply within 7 days and complete requests within 30 days. This is also our grievance contact under India's Digital Personal Data Protection Act, 2023.

8. Security

All traffic to Kissa Cinema uses HTTPS. Access to each story is checked with signed cookies, passwords are stored only as secure hashes, and repeated wrong guesses are limited.

9. Children

Kissa Cinema is for adults, and you must be 18 or older to order. You may include a child's photo only if you are their parent or guardian or have their permission. If we learn we hold a child's data without that permission, we delete it.

10. Changes

When we change this policy we update the date at the top, and we tell customers about important changes on WhatsApp or email.