The short version
- · We collect only what we need to operate the platform
- · We do not sell your personal data to third parties
- · Watch history is used to improve recommendations — not sold or shared for advertising
- · You can request deletion of your account and data at any time
- · EU, UK, and Australian privacy rights apply
1. Who We Are
Oyra Pty Ltd (“Oyra”, “we”, “us”) operates the Oyra platform at oyra.tv. We are the data controller for personal information collected through the platform.
Our privacy contact: privacy@oyra.tv
2. Information We Collect
Information you provide
- Account information: name, email address, password (hashed)
- Payment information: processed by Stripe — we do not store full card details
- Creator information: payout details (PayPal email, bank details), film submissions, tax documentation where required
- Communications: emails or support requests you send us
Information collected automatically
- Usage data: pages visited, films watched, watch duration, completion rate, interactions
- Device information: browser type, operating system, device identifiers, IP address
- Transaction data: credits purchased, films purchased, purchase timestamps
- Cookies and similar technologies: see Section 7
3. How We Use Your Information
Platform operation
- Providing access to purchased content and your credit wallet
- Processing payments and credit top-ups via Stripe
- Calculating and issuing creator payouts
- Maintaining your purchase history and watchlist
Platform improvement
- Personalising film recommendations based on your watch history and favourites
- Calculating Oyra Scores (completion rates, aggregate viewer ratings)
- Detecting and preventing fraud, abuse, and content policy violations
Communication
- Transactional emails: receipts, payout notifications, credit expiry warnings
- Product updates and new feature announcements (you can opt out)
- Legal notices, including changes to these Terms
We do not sell your personal data. We do not use your watch history for third-party advertising targeting.
5. Data Retention
We retain personal data for as long as your account is active or as needed to provide services. Account data is retained for 7 years after closure for financial record-keeping purposes required by Australian law.
Watch history and usage data are retained for up to 3 years to power recommendations. After deletion of your account, aggregated and anonymised analytics data may be retained indefinitely as it no longer identifies you.
6. Your Rights
All users
- Access: request a copy of personal data we hold about you
- Correction: request correction of inaccurate data
- Deletion: request deletion of your account and personal data (subject to legal retention requirements)
- Opt-out: opt out of marketing communications at any time via the unsubscribe link in any email
EU / UK users (GDPR / UK GDPR)
In addition to the above, EU and UK residents have the right to:
- Restrict processing of your personal data
- Object to processing based on legitimate interests
- Data portability (receive your data in a machine-readable format)
- Lodge a complaint with your national data protection authority
Our legal basis for processing EU/UK personal data is: (a) contract performance for account and purchase data; (b) legitimate interests for analytics and fraud prevention; (c) consent for marketing communications.
Where we transfer personal data outside the EEA or UK (e.g., to US-based service providers), we use Standard Contractual Clauses approved by the European Commission.
Australian users (Privacy Act 1988)
Australian residents have rights under the Australian Privacy Principles (APPs), including the right to access and correct personal information we hold about you. Contact us at privacy@oyra.tv to exercise these rights.
To exercise any of the above rights, contact privacy@oyra.tv. We will respond within 30 days (or within any shorter period required by applicable law).
8. Children's Privacy
Oyra is not intended for children under 13. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has provided us with personal data, contact privacy@oyra.tv and we will delete it promptly.
Users between 13 and 17 may use the platform only with verifiable parental consent as described in the Terms of Service.
9. Security
We implement industry-standard security measures including TLS encryption for data in transit, hashed passwords, and access controls on personal data. Payment card data is processed entirely by Stripe and never stored on our servers.
No system is completely secure. In the event of a data breach that is likely to result in high risk to your rights and freedoms, we will notify you and relevant regulators as required by applicable law.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be notified by email (where we hold your email address) and by a notice on the platform at least 14 days before they take effect.