Maahoul Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") explains how Dozen Productions Pvt Ltd, operating the live concert streaming platform Maahoul (the "Platform", "we", "us", or "our"), collects, uses, discloses, and protects information in connection with the Platform's services, including live and on-demand streaming of concert performances, subscriber accounts, and the tools we provide to artists, venues, and event organizers who supply recorded content to the Platform.

maahoul is a child of Dozen Productions Pvt Ltd.

This Policy applies to three categories of stakeholders, each of whom may have different data touchpoints with the Platform:

• Subscribers: individuals who create an account to view, purchase, or subscribe to livestreams and on-demand concert recordings.
• Artists and Performers: musicians, bands, and other performing talent whose performances are recorded and made available on the Platform.
• Venues, Promoters, and Organizers ("Content Providers"): entities that own, host, capture, or otherwise supply concert recordings and associated metadata to the Platform.

By creating an account, accessing, or using the Platform, you acknowledge that you have read and understood this Policy. If you do not agree with this Policy, please do not use the Platform.

2. Information We Collect

2.1 Information Collected from Subscribers

• Account information: name, email address, username, password (hashed), date of birth, and country of residence.
• Billing information: billing address, payment card details or other payment credentials (processed via our third-party payment processors — we do not store full card numbers on our own servers).
• Subscription and transaction data: plan type, purchase history, ticketed events attended, renewal and cancellation history.
• Viewing and usage data: concerts viewed, watch duration, playback quality, pause/rewind behavior, device used, and interaction with interactive features (chat, tipping, reactions).
• Device and technical data: IP address, device identifiers, browser type, operating system, approximate location derived from IP, and connection data used for content delivery and geographic licensing enforcement.
• Communications: support tickets, survey responses, and correspondence with our customer service team.
• User-generated content: comments, chat messages, ratings, and reviews submitted during or after a stream.

2.2 Information Collected from Artists and Performers

• Identity and contact information: legal name, stage name, contact details, and management/agent contact information.
• Payment and tax information: bank account or payment processor details, tax identification numbers, and royalty payment history, collected to facilitate revenue-share payments described in our Terms of Service.
• Rights and licensing information: documentation confirming ownership or authorization to license performance recordings, publishing splits, and setlists.
• Performance metadata: concert date, venue, setlist, run time, and promotional materials (photos, bios, press kits) supplied for listing purposes.
• Analytics shared back to artists: aggregated and, where contractually agreed, subscriber-level viewership and engagement data related to their own performances, for royalty reporting and promotional purposes.

2.3 Information Collected from Venues, Promoters, and Organizers

• Business and contact information: company name, authorized signatory details, business address, and tax/registration identifiers.
• Content and rights metadata: confirmation of recording rights, releases obtained from performers and, where applicable, audience members, and technical specifications of submitted recordings.
• Payment information: for revenue-share or licensing-fee payments owed to the venue or organizer.

2.4 Information Captured Within Recorded Content

Concert recordings supplied to the Platform may incidentally capture images, likenesses, or voices of performers, crew, and members of the audience present at the venue. Content Providers are solely responsible for obtaining any consents, releases, or notices required under applicable law prior to submitting recordings to the Platform (see Section 8 and our Terms of Service). We treat such incidental audience imagery as part of the licensed content itself rather than as information collected directly by us from those individuals, except where an identifiable subscriber's own submitted content (e.g., a profile photo) is involved.

3. How We Use Information

We use the information described above for the following purposes:

• Providing, operating, and maintaining the Platform, including authenticating accounts and delivering purchased or subscribed content.
• Processing payments, subscriptions, refunds, and artist/venue royalty or revenue-share disbursements.
• Personalizing recommendations, curating concert listings, and improving the streaming experience.
• Enforcing geographic and territorial licensing restrictions required by rights holders.
• Communicating with users about transactions, service updates, new releases, and — where permitted — marketing offers.
• Detecting, preventing, and investigating fraud, unauthorized account sharing, unauthorized recording or redistribution, and other violations of our Terms of Service.
• Generating aggregated analytics and reporting provided to artists, venues, and organizers regarding the performance of their content.
• Complying with legal obligations, tax reporting, and responding to lawful requests from public authorities.

4. Legal Bases for Processing (EEA/UK Users)

Where applicable data protection law (such as the GDPR) requires a legal basis for processing, we rely on one or more of the following:

• Performance of a contract — to provide the subscription, artist, or venue services you have requested.
• Legitimate interests — to secure the Platform, prevent fraud, and improve our services, balanced against your rights.
• Consent — for optional marketing communications and certain cookies, which you may withdraw at any time.
• Legal obligation — to comply with tax, accounting, and other regulatory requirements.

5. Cookies and Tracking Technologies

We and our service providers use cookies, pixels, SDKs, and similar technologies to authenticate sessions, remember preferences, deliver adaptive-bitrate streaming, measure engagement, and support advertising where applicable. You can manage cookie preferences through your browser settings or the cookie preference tool available on the Platform. Disabling certain cookies may limit playback functionality or personalization.

6. How We Share Information

We do not sell subscribers' personal information for monetary consideration. We do share information in the following circumstances:

• Service providers: payment processors, cloud hosting and content-delivery-network (CDN) providers, customer support tools, and analytics vendors, under contractual confidentiality and data-protection obligations.
• Artists, venues, and organizers: aggregated or, where required for royalty accounting, subscriber-level viewership data related specifically to their own content, so they can verify streams and royalty calculations.
• Rights holders and performing-rights organizations: information reasonably necessary to demonstrate licensing compliance (e.g., territory of viewership, number of streams).
• Corporate transactions: in connection with a merger, acquisition, financing, or sale of assets, subject to standard confidentiality protections.
• Legal and safety purposes: to comply with law, respond to valid legal process, or protect the rights, property, or safety of the Platform, our users, or the public.
• With your consent: for any other purpose disclosed to you at the time of collection.

7. Data Retention

We retain personal information for as long as necessary to provide the Platform's services, comply with legal, tax, and accounting obligations, resolve disputes, and enforce our agreements. Viewing history and royalty-relevant data are generally retained for the duration of the applicable artist or content-licensing agreement plus a reasonable audit period thereafter. When information is no longer needed, we delete, anonymize, or securely archive it in accordance with our internal retention schedules.

8. Content Provider Responsibilities and Third-Party Consents

Artists, venues, and organizers who submit recordings warrant that they have obtained all consents, releases, and clearances required by applicable law from performers, crew, and, where legally required, attendees, before providing content to the Platform. The Platform is not responsible for obtaining such underlying consents and relies on the representations and warranties made by Content Providers under the Terms of Service. Individuals who believe their likeness appears in a recording without appropriate consent should contact the Content Provider directly or reach us at the contact details in Section 14, and we will coordinate with the relevant Content Provider as appropriate.

9. Data Security

We implement administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, alteration, disclosure, or destruction, including encryption in transit, access controls, and regular security reviews. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. International Data Transfers

Maahoul operates internationally. Information may be transferred to, stored, and processed in countries other than your own, including India, which may have data protection laws different from those of your jurisdiction. Where required, we implement appropriate safeguards such as standard contractual clauses to protect information transferred internationally.

11. Your Privacy Rights

Depending on your jurisdiction, you may have some or all of the following rights regarding your personal information:

• Access — request a copy of the personal information we hold about you.
• Correction — request correction of inaccurate or incomplete information.
• Deletion — request deletion of your personal information, subject to legal retention requirements.
• Portability — request your data in a portable format.
• Objection/Restriction — object to or request restriction of certain processing, including direct marketing.
• Opt-out of sale/sharing — where applicable under laws such as the CCPA/CPRA, opt out of the sale or sharing of personal information (we do not currently sell personal information for monetary consideration).
• Withdraw consent — where processing is based on consent, withdraw it at any time without affecting prior lawful processing.
• Non-discrimination — we will not discriminate against you for exercising your privacy rights.

To exercise any of these rights, contact us at privacy@maahoul.com. We may need to verify your identity before fulfilling certain requests.

12. Children's Privacy

The Platform is not directed to children under the age of 16 (or the minimum age required by local law), and we do not knowingly collect personal information from children below that age. If we learn that we have inadvertently collected such information, we will take steps to delete it.

13. Third-Party Links and Embedded Services

The Platform may contain links to, or embed features from, third-party websites and services (e.g., social media sharing, payment gateways). This Policy does not apply to those third-party services, and we encourage you to review their respective privacy policies.

14. Contact Us

If you have questions, concerns, or requests regarding this Policy or our data practices, please contact:

Dozen Productions Pvt Ltd
70/9 B, Swarmala, Block 12, Karve Road, Pune 411004
Privacy inquiries: privacy@maahoul.com
Data Protection Officer (if applicable): dpo@maahoul.com

15. Changes to This Policy

We may update this Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will post the updated Policy on the Platform with a revised "Last Updated" date, and where changes are material, we will provide additional notice (such as an email or in-app notification) before the changes take effect.