Privacy Policy

Effective date: 30 June 2026 · Operator: J-19 group LLP

This Privacy Policy explains how the Kinobaza mobile application — a marketplace for castings and film production services — collects, uses, stores, and shares your personal data, and what rights you have in relation to that data. The application is intended for an audience in the Republic of Kazakhstan and is available in the following languages: Russian, English, Kazakh, and Uzbek.

The application is intended solely for persons aged 18 and over. By using Kinobaza, you confirm that you are at least 18 years old.

1. Who We Are

The data controller is:

For any questions regarding the processing of your personal data, the exercise of your rights, or to submit a complaint, you may contact us at the email address above.

2. What Data We Collect

We collect the following categories of data depending on how you use the application.

2.1. Account Data

2.2. Sensitive Talent Data (Profiles and Cards)

Please note: when creating profiles and talent cards, an extended set of data may be processed, some of which constitutes sensitive (special category) personal data. Such data is processed on the basis of your consent and is published in your profile at your discretion. It includes:

If you provide the contact details of an agent or other third parties, you confirm that you are entitled to share such data.

2.3. Business Account Data

2.4. Project and Production Data

2.5. Geolocation

2.6. Communication Data

2.7. Behavioral Data

2.8. Technical Data

3. Purposes and Legal Grounds for Processing

We process your data for the following purposes and on the following legal grounds in accordance with the applicable legislation of the Republic of Kazakhstan:

Upon registration, you provide consent to: the processing of personal data; the terms of use; confirmation that you are at least 18 years old; the publication of your profile; the receipt of casting notifications; and the use of data for artificial intelligence features. You may withdraw your consents at any time (see Section 8).

4. Processing Using Artificial Intelligence

The application includes artificial intelligence features under the name "DurusAi": smart search, generation of "about me" descriptions, an AI assistant (chat, with conversation history retained), and script analysis (an uploaded file is processed by AI). All AI requests are routed through our backend to third-party large language model providers.

AI outputs may be inaccurate and do not constitute professional advice, including legal advice.

Processing of data using AI is carried out on the basis of your consent. Further details are set out in a separate AI Policy. The list of AI providers and the countries to which data is transferred is set out in Section 5.

5. Whom We Share Data With and Cross-Border Transfers

To operate the application, we engage sub-processors. Some of them are located outside the Republic of Kazakhstan, which involves cross-border data transfers. The list of sub-processors:

In addition, data is shared between platform users — contact information and other details within shared projects and deals become available to other participants.

5.1. International users

The application is operated from the Republic of Kazakhstan and is primarily intended for users in Kazakhstan. If you use the application from another country, please note that your data may be processed and stored in the Republic of Kazakhstan and in other countries (including the USA, by our sub-processors), whose data protection laws may differ. By using the application, you agree to such cross-border processing.

6. Geolocation

We use precise GPS coordinates only when the application is open and active (in the foreground) and solely to obtain a weather forecast at the filming location. Background geolocation is not used. Coordinates or the city name are transferred to the Open-Meteo service (Germany) to generate the forecast.

7. Retention Periods

8. Your Rights

In accordance with the applicable legislation of the Republic of Kazakhstan, you have the following rights in relation to your personal data:

We handle ordinary requests within 30 days. Complaints about offensive or inadmissible content are handled within 24 hours.

You also have the right to lodge a complaint regarding the operator's actions or inaction in relation to the processing of your personal data with the authorized state body for personal data protection of the Republic of Kazakhstan.

9. Security

We implement technical and organizational measures to protect your data, including:

10. Children

The application is intended solely for persons aged 18 and over. We do not knowingly collect data from persons under 18. Upon registration, you confirm that you are of legal age.

11. Identifiers and Analytics

We use Firebase services to the minimum extent necessary: a push token (FCM) for notifications, crash reports (Crashlytics) for diagnostics, and basic Firebase telemetry to ensure the stable operation of the application.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of changes within the application.

13. Contacts

For all matters relating to this Policy and the processing of your personal data, please contact:

The governing law is the legislation of the Republic of Kazakhstan, including the applicable legislation of the Republic of Kazakhstan on personal data and its protection.