Privacy policy
Last updated 18 September 2026
This policy explains how OnsetFrame ("we") handles your personal data when you use onsetframe.com or order from us. We follow India's Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000.
1. What we collect
- Contact details: your name, email address, brand name and website when you send a project request or chat with us.
- Project content: your brief, messages, and the photos, videos, documents and audio you upload.
- Payment records: the amount, date, status and payment reference. Card, UPI and bank details are handled by our payment provider. We never see or store them.
- Technical data: the cookies listed in section 5, and your network address, which we use in a scrambled (hashed) form to block spam and abuse, and to show prices in the currency of your country. That country lookup happens on our own server using the IP to Country Lite database by DB-IP; your address is not sent to anyone for it.
Our public pages use the Meta pixel, Google Analytics and the Google Ads tag, described in section 5, to measure our own ads and how the site is used. Your private project page is never tracked.
2. Why we use it
- To make and deliver the videos you order, and to reply to your messages
- To take payment, issue GST invoices and keep the accounting records the law requires
- To keep the website secure and stop spam and misuse
We do not sell your data, and we do not share it with anyone for their own marketing.
4. How long we keep it
| Project files, briefs and messages | Up to 12 months after final delivery, then deleted |
|---|---|
| Requests that never become an order | Up to 12 months after your last message, then deleted |
| Invoices and payment records | As long as Indian tax and accounting law requires, currently up to 8 years |
| Chat cookie | 90 days |
| Project page sign-in cookie | 7 days |
You can ask us to delete your project files sooner. We will, unless the law requires us to keep them.
5. Cookies
These cookies keep the website working:
- of_guest keeps your chat and project requests linked to your browser, for 90 days.
- of_portal keeps you signed in to your project page, for 7 days.
- of_staff is used only by our team to sign in to the studio.
Our public pages also load the Meta pixel. Meta may set its own cookies (such as _fbp) and receives page visits and actions like starting an order or a chat, so we can measure our ads on Facebook and Instagram. It never receives your files, brief or payment details. You can limit this in your Facebook or Instagram ad settings, or with your browser's tracking protection.
Our public pages also load Google Analytics and the Google Ads tag. Google may set its own cookies (such as _ga and _gcl_au) and receives page visits and actions like starting an order, plus the order number and amount of a completed purchase, so we can see which pages, searches and ads bring visitors. It never receives your files, brief or payment details. You can opt out with your browser's tracking protection or Google's Analytics opt-out add-on.
6. How we protect it
The website uses HTTPS. Uploaded files are stored privately and are never public web links. Project pages open only with a private link, which we store in scrambled form. Only our team can see your project, after signing in.
7. Your rights
You can ask us to:
- Tell you what personal data we hold about you
- Correct or update it
- Delete it, where the law does not require us to keep it
- Withdraw your consent to further use
- Name someone to act for you if you are unable to
Email care@onsetframe.com from the address you used with us. We acknowledge your request within 2 business days and complete it within 30 days.
8. Grievance officer
If you have a complaint about how we handle your data, contact our grievance officer:
- Contact
- Grievance officer, OnsetFrame
- care@onsetframe.com
- Response
- Acknowledged within 2 business days, resolved within 30 days
If you are not satisfied with our answer, you can complain to the Data Protection Board of India.
9. Children
OnsetFrame is a service for businesses. It is not meant for anyone under 18, and we do not knowingly collect their data.
10. Changes to this policy
If we change this policy, we update the date at the top of this page. If a change affects how we use data you have already given us, we tell you on your project page first.