Effective Date: 10 April 2026

This Privacy Policy describes how SoTrue Technologies Pvt. Ltd., a company incorporatedunder the laws of India, having its registered office at Building No./Flat No.: HD-036, No8/2A, 8/2B, 9, Amarajyothi Muss, M/S Golf Link Software Park, Udhay VJ Realty pvt ltd,near Challaghatta village, Challaghatta, Bengaluru, Bengaluru Urban, Karnataka, 560071, collects, uses, processes, stores, shares, and protects personal data of users accessingthe SoTrue platform.

References to “SoTrue”, “we”, “us”, or “our” refer to this entity and its affiliates.By accessing or using SoTrue, you agree to the collection and use of your personal data inaccordance with this Privacy Policy.

Scope and Applicability

This Privacy Policy applies to all users of the platform, including viewers, filmmakers,production houses, advertisers, and any individuals interacting with SoTrue across mobileapplications, web interfaces, and related services.

Categories of Personal Data Collected

SoTrue collects personal data that you provide directly, including your name, email address,phone number, profile information, and account credentials.

We also collect content related data, including films, shows, segmented content units(“Slices”), full length content streams, audio, images, reactions, chats, collections, and otheruser interactions within the platform. Slices are structured segments of full length films andshows and together represent the complete content experience.

The platform collects behavioural data, including viewing patterns, engagement patternsincluding Slice consumption behaviour, full-length viewing behaviour on supported devices,reactions, collection activity, following behaviour interactions within private chats, searchqueries, preferences, interaction patterns,responses to content and other engagementpatterns.

As part of the platform’s core functionality, SoTrue may collect and process interactionsignals that reflect how users respond to content, including emotional engagement indicatorsexpressed through platform features.

Technical data such as IP address, device identifiers, browser type, operating system, logdata, and usage metadata is collected to ensure platform performance, security, andanalytics.

Purpose of Processing

SoTrue processes personal data to operate and improve the platform, enable contentdiscovery, personalise user experience, facilitate social interaction, ensure platform safety,prevent misuse, and comply with legal obligations.

Data is also used to develop recommendation systems, improve content relevance, enhanceengagement models, and optimise platform features.

Behavioural and Emotion Based Processing

A defining feature of SoTrue is its ability to personalise content and experiences based onuser interaction patterns.

The platform may analyse behavioural signals, including engagement patterns andexpressed emotional responses, to infer user preferences and deliver relevant content andadvertisements.

Such inferences are probabilistic and may not always reflect actual user intent. Thesesystems are designed to enhance relevance and user experience and are not intended tomanipulate or cause harm.

SoTrue implements safeguards to reduce bias, avoid harmful amplification, and ensureresponsible use of such data.

Advertising and Personalisation

SoTrue may display advertisements, including personalised advertisements based on useractivity, preferences, and behavioural signals.

Advertising may also be influenced by contextual factors such as content being viewed andinferred user engagement states.

All advertising practices are designed to comply with applicable Indian laws and industryguidelines. Where feasible, data used for advertising is processed in aggregated oranonymised form.

Users may be provided with controls to manage personalisation preferences whereapplicable.

Legal Basis for Processing

SoTrue processes personal data based on user consent, contractual necessity for providingservices, and compliance with legal obligations under applicable Indian laws, including theDigital Personal Data Protection Act, 2023.

Where consent is required, users are provided with clear options and may withdraw consentsubject to operational and legal constraints.

Data Sharing and Disclosure

SoTrue may share personal data with trusted service providers, including cloud infrastructureproviders, analytics partners, payment processors, and other vendors required to operatethe platform.

Data may also be disclosed to government authorities, law enforcement agencies, orregulatory bodies where required under applicable law.

SoTrue does not sell personal data to third parties.

Data Retention

Personal data is retained only for as long as necessary to fulfil the purposes described in thisPrivacy Policy or to comply with legal obligations.

Upon expiry of retention periods, data may be deleted, anonymised, or securely archived.SoTrue implements appropriate technical and organisational measures to protect personaldata against unauthorised access, loss, misuse, or disclosure.

User Rights

Subject to applicable law, users have the right to access their personal data, requestcorrection of inaccuracies, request deletion of data, and withdraw consent.Users may exercise these rights by contacting SoTrue through designated channels.Requests will be processed in accordance with applicable laws.

Data Security

SoTrue implements appropriate technical and organisational measures to protect personaldata against unauthorised access, loss, misuse, or disclosure.

While reasonable safeguards are in place, no system can guarantee absolute security.

Data Breach and Incident Response

In the event of a data breach involving personal data, SoTrue will assess the nature, scope,and impact of the incident and take appropriate steps to contain and mitigate risks.

Where required under applicable law, SoTrue will notify affected users and relevantauthorities within prescribed timelines.

Corrective actions will be implemented to prevent recurrence.

Children’s Data Protection

SoTrue is not intended for unsupervised use by individuals under eighteen years of age.

The platform implements safeguards to protect minors, including restrictions on certainfeatures and content.

Where required, parental consent mechanisms or additional protections may be applied.

User Controls and Rights

Users have control over how their personal data is used on SoTrue.

Users may access, update, or correct their account information through in app settingswhere available. Users may request access to their personal data, request correction ofinaccurate data, or request deletion of their data by contacting SoTrue through designatedchannels.

Users may withdraw consent for certain types of data processing, including personalisationand marketing communications, subject to platform functionality and legal obligations.

Where applicable, users may manage preferences related to notifications,recommendations, and advertising personalisation through account settings.

Advertising and Data Sharing Transparency

SoTrue may use personal data to deliver relevant advertisements and measure theireffectiveness.

This includes the use of behavioural data, engagement patterns, and interaction signals topersonalise advertising experiences.

SoTrue does not sell personal data. However, limited data may be shared with advertisingpartners, analytics providers, and service providers to enable ad delivery, measurement, andplatform functionality.

Where possible, such data is shared in aggregated or anonymised form.

Tracking Technologies and Analytics

SoTrue uses tracking technologies and analytics tools to understand user behaviour,improve platform performance, and enhance user experience.

These may include:● Device identifiers● Log data and usage analytics● Cookies or similar technologies (for web interfaces)● Third party analytics and advertising SDKs

These technologies help SoTrue analyse trends, measure engagement, prevent misuse, andoptimise content delivery.

Automated Decision Making and AI Transparency

SoTrue uses automated systems to personalise content recommendations and advertising.

These systems analyse user behaviour, engagement patterns, and interaction signals,including emotional engagement indicators.

Users are not subject to decisions based solely on automated processing that produce legalor similarly significant effects.

These systems are designed to enhance user experience and are subject to safeguards toreduce bias and prevent harm.

Account Deletion and Data Retention

Users have the right to delete their account at any time through in app settings or bycontacting prithvirajprasad@sotrue.co.in.

Upon initiating account deletion, the account will be placed in a deactivation state for aperiod of thirty days. During this period, the user may log back into their account and cancelthe deletion request, in which case the account and associated data will be restored as itexisted prior to the deletion request.

If the user does not log in or cancel the deletion request within this thirty day period, theaccount will be permanently deleted.

Following permanent deletion, personal data associated with the account will be deleted oranonymised within a reasonable timeframe, except where retention is required for legalcompliance, fraud prevention, enforcement of agreements, or resolution of disputes.

Certain non identifiable data or aggregated information may be retained for analytics andoperational purposes

Grievance Redressal and Data Contact

For concerns relating to personal data, privacy, or this Privacy Policy, users may contact:

Email: prithvirajprasad@sotrue.co.inGrievance Officer: Prithviraj PrasadAddress: SoTrue Technologies Pvt. Ltd., Flat No.: HD-036, No 8/2A, 8/2B, 9, AmarajyothiMuss, M/S Golf Link Software Park, Udhay VJ Realty pvt ltd, near Challaghatta village,Challaghatta, Bengaluru, Bengaluru Urban, Karnataka, 560071

Requests and complaints will be acknowledged within twenty four hours and addressedwithin fifteen days, in accordance with applicable law

Cross Border Data Transfers

Where personal data is transferred outside India, SoTrue ensures that such transfers complywith applicable legal requirements and that appropriate safeguards are implemented.

Updates and Amendments

SoTrue reserves the right to update this Privacy Policy to reflect changes in legalrequirements, platform functionality, or data practices.

Continued use of the platform after such updates constitutes acceptance of the revisedpolicy