Privacy Policy

Who We Are

FluxFilm (fluxfilm.in) is a subscription reseller platform that helps users purchase, renew, and manage access to digital streaming services like Netflix, Prime Video, Crunchyroll, and YouTube Premium.

By using our website or services, you agree to the collection and use of information as described in this policy. This policy applies to all users of fluxfilm.in and its subdomains (including go.fluxfilm.in).

What We Collect

We collect only what is necessary to provide and support your subscription:

• Phone number — used as your primary identifier to look up and manage orders
• Email address — used to send OTPs, order confirmations, invoices, and credentials
• UPI payment reference / OrderID — used to verify your payment and fulfill your order
• Service preferences — the subscription plan and service you select (e.g. Netflix 1 Month)
• Device type — only for Prime Video plans where device type affects allocation
• Google/Gmail address — only when purchasing YouTube Premium (required for activation)

How We Use Your Data

Your data is used strictly to run the platform. Here's exactly how:

• Verify payment and fulfill your subscription order
• Send you credentials, invoices, and important account updates via email
• Allow you to recover access using OTP verification
• Allow you to manage, renew, or resume your subscription
• Prevent duplicate or fraudulent orders
• Send internal alerts for order monitoring (Telegram, admin-only)

We do not use your data for advertising, profiling, or selling to third parties.

Where Your Data Is Stored

All order and customer data is stored in Google Sheets (Google Workspace), managed by FluxFilm's admin account. The backend runs on Google Apps Script, which is hosted within Google's infrastructure.

A lightweight proxy runs on Hostinger (go.fluxfilm.in) to relay API requests between the frontend and backend. No customer data is permanently stored on this proxy.

• Google Workspace is used for order management and email delivery
• Hostinger server is a stateless pass-through — no logs retained beyond the request
• QR codes are generated via api.qrserver.com (UPI string only — no personal data)

Who We Share Data With

We do not sell or rent your personal data. We only share data in these limited circumstances:

• Google (infrastructure) — data is stored and processed using Google Workspace and Apps Script
• Streaming providers — your allocated credentials (email/password) are sourced from shared or private accounts managed by FluxFilm. Your personal email is not shared with them
• Telegram (admin alerts) — order events trigger admin-only Telegram notifications. These are internal operational alerts, not shared externally

How We Protect Your Data

• OTP verification — access recovery requires a time-limited one-time password sent to your email
• OrderID matching — payments are verified using a unique deterministic order reference (FF-XXXXX), not guessable patterns
• API key protection — all backend calls require a private API key; public requests are rejected
• HTTPS everywhere — all pages are served over TLS/SSL
• No plaintext passwords stored — credential access is rate-limited and OTP-gated

Despite these measures, no system is 100% secure. Please do not share your OTPs, order IDs, or credentials with anyone claiming to be FluxFilm support.

Cookies & Browser Storage

FluxFilm uses browser localStorage only to resume an incomplete payment session if you accidentally close the page mid-checkout. This data contains your in-progress order details and is stored only on your own device.

We do not use tracking cookies, advertising cookies, or third-party analytics scripts. No cookies are dropped by our backend or proxy.

Your Rights

You have the right to:

• Access — request what data we hold about your phone/email
• Correction — ask us to correct inaccurate data
• Deletion — ask us to delete your data after your subscription has expired (subject to legal retention requirements)
• Portability — receive your order history in a readable format

To exercise any of these rights, email us at support@fluxfilm.in with your registered phone number.

How Long We Keep Your Data

We retain your order and subscription records for as long as your subscription is active, plus a reasonable period afterward (typically 90 days) for support and dispute resolution purposes.

After this period, personal identifiers may be anonymised or deleted from active records. Billing records may be retained longer if required for financial compliance.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, the "Effective date" at the top of this page will be updated. Continued use of our services after any changes constitutes acceptance of the updated policy.

For significant changes, we will attempt to notify active users via their registered email address.