Privacy Policy

Last updated: July 2026 · Applies to fridaygrid.vercel.app and successor domains

Plain-language summary: We collect your mobile number or email (whichever you use to verify), the details you choose to put in a listing or a screening request, and basic technical data to keep the site secure. We never sell your data. We don't process payments or hold your money. You can ask us to delete your data at any time.

1. Who this policy covers

Friday Grid is operated by Friday Pictures ("we", "us", "our"). This policy explains how we collect, use, store, and protect personal data of anyone who visits, browses, or creates an account on Friday Grid ("you", "user"), in line with India's Digital Personal Data Protection Act, 2023 (DPDP Act).

2. What we collect

Data	When	Why
Mobile number	When you verify via the "Mobile" tab	Primary identity verification (OTP)
Email address	When you verify via the "Email" tab	Fallback identity verification (OTP)
Listing details you submit	When you list your business	Displayed publicly on the directory
Screening requests	When you use the Demand Engine	Aggregated, shown to distributors/theatres
Fan club membership	When you join a fan club	Membership count, community features
Browser errors, page URL, user agent	Automatically, on a JS error	Fixing bugs (see Section 6)

We do not collect passwords (verification is OTP-only), payment details, or government ID numbers. We do not use cookies for advertising or tracking.

3. How we use your data

To verify you're a real person before you can list a business, vote, or join a fan club.
To display your listing (name, city, rate, tags) publicly to other users browsing the directory — this is the core purpose of Friday Grid.
To aggregate anonymous-looking demand signals (film + theatre + area + language) for distributors and exhibitors.
To detect and fix bugs via automatic error reporting.
To communicate with you about your account, if needed (e.g. a moderation action on your listing).

We do not use your data to train AI models, and we do not sell or rent your personal data to third parties for marketing.

4. Who else sees your data (processors)

We use the following service providers to operate Friday Grid. Each only processes data as needed to provide their service to us:

Supabase (database, authentication, hosting) — stores all data described above.
SMS/Email OTP provider (e.g. Twilio, Resend) — delivers your one-time verification code. They see your mobile number or email and the code, nothing else.
Vercel — hosts the website itself.

We do not share your data with data brokers, advertisers, or any party not listed here, except where required by law.

5. Your rights (DPDP Act, 2023)

As a Data Principal under the DPDP Act, you have the right to:

Access the personal data we hold about you.
Correct inaccurate or outdated data (e.g. edit your own listing).
Erase your data — request full account and listing deletion at any time.
Withdraw consent — stop using the platform and request deletion; this does not affect the lawfulness of processing done before withdrawal.
Grievance redressal — raise a complaint with us (see Section 9), and escalate to the Data Protection Board of India if unresolved.

To exercise any of these rights, contact us using the details in Section 9. We aim to respond within 15 days.

6. Error monitoring

If something breaks while you're using Friday Grid, our system automatically logs the error message, the page URL, and your browser's user-agent string to help us fix it. If you were signed in, your account ID is attached so we can investigate account-specific issues. These logs are visible only to Friday Grid administrators, never to other users, and are not used for any purpose other than debugging.

7. Security

All data is protected by Row Level Security (RLS) at the database level — even if our application code had a bug, the database itself enforces who can read or write what.
All traffic is encrypted in transit (HTTPS).
We do not store passwords — verification is one-time-code based, so there's no password database to leak.

8. Data retention

We retain your account and listing data for as long as your account is active. If you request deletion, we remove your personal data within 30 days, except where we're legally required to retain it longer. Error logs are retained for a maximum of 90 days.

9. Contact & Grievance Officer

[To be completed by Friday Pictures before public launch]
Grievance Officer Name: _______________
Email: _______________
Address: Friday Pictures, Hyderabad, Telangana, India
This section must be filled in with a real, monitored contact before Friday Grid is opened to the general public — it's a DPDP Act requirement, not optional.

10. Children's data

Friday Grid is intended for business/professional use by adults in the film industry. We do not knowingly collect data from anyone under 18. If you believe a minor has created an account, contact us and we will remove it.

11. Changes to this policy

We may update this policy as Friday Grid evolves (e.g. when payments or additional features are introduced in future phases). Material changes will be reflected by updating the "Last updated" date above.

Legal disclaimer: This document was drafted to align with the DPDP Act, 2023 based on publicly available guidance, but it has not been reviewed by a lawyer. Please have it reviewed by a qualified legal professional before relying on it for a public launch.