Privacy Policy

1. Who we are

ONTHEGOFLIX (also referred to as “OnTheGoFlix”, “we”, “us”, or “our”) operates the services covered by this policy and determines why and how personal data is processed.

Privacy and data requests can be sent to contact@onthegoflix.com.

2. Personal data we collect

Depending on how you use our services, we may collect:

• Identity and contact data: name, email address, phone number, company, role, and the contents of enquiries or other communications.
• Account and authentication data: account email, profile name, role, verification and login state, and security events. Authentication credentials are handled by Supabase Auth; we do not receive your password in readable form.
• Business and billing data: bill-to name, business email and phone, GST number, billing address, purchase-order or reference details, invoices, payment status, and transaction identifiers.
• Campaign and partner data: campaign names, brands, objectives, audiences, budgets, selected locations and dates, uploaded creatives, approval information, reporting data, and venue, fleet, or partner details relevant to providing the service.
• Attribution and consent data: approved UTM fields, campaign intent, placement and source tags, landing page, normalized referrer when consented, Meta click/browser identifiers, and the date and status of your marketing analytics choice.
• Technical and security data: device and browser information, IP address, user agent, timestamps, sanitized page location, page title, normalized referrer, page or feature activity, diagnostic events, and hashed IP or user-agent values used to prevent abuse and secure submissions.

Please do not include sensitive personal data in an enquiry, campaign creative, or free-text field unless it is necessary and we have specifically asked for it.

3. How we use personal data

We use personal data to:

• respond to enquiries and waitlist requests;
• create and secure accounts, authenticate users, and provide portal features;
• plan, review, schedule, deliver, bill, and report on advertising campaigns;
• communicate about campaigns, payments, service changes, and support requests;
• process payments, issue invoices, maintain business records, and meet legal obligations;
• prevent spam, fraud, misuse, and security incidents; and
• measure advertising and service performance when you allow optional marketing analytics.

We process data for the service or steps you request, with consent where required, to meet legal obligations, and on other grounds permitted by applicable law. We do not sell personal data.

4. Service providers and sharing

We share personal data only as needed to operate the service, follow your instructions, protect the service, or comply with law. Relevant providers include:

• Supabase for authentication, databases, storage, and server functions;
• Vercel for website hosting and performance delivery;
• Cloudflare for Turnstile bot and abuse protection on forms;
• Google for map functionality and Google Analytics website traffic measurement;
• Razorpay when online payments are enabled. Razorpay processes payment credentials; we receive transaction identifiers, status, and related billing records rather than full card details;
• transactional email, media-processing, storage, and digital-signage providers; and
• Meta for optional advertising measurement, as described below.

We may also disclose information to professional advisers, authorities, or other parties when required by law, needed to protect rights or safety, or as part of a business reorganisation subject to appropriate safeguards.

5. Meta Pixel and Conversions API

Meta Pixel and Meta advertising events load only after you choose Allow analytics. If you choose Continue without analytics, we do not load the Pixel or send Meta CAPI identifiers for your form submission.

With consent, browser events may measure page and content views, accepted contact forms, waitlist actions, and completed portal registrations. For an accepted non-waitlist contact form, our server may also send a matching Lead event through Meta’s Conversions API. The browser and server copies use the same event identifier so Meta can deduplicate them into one conversion.

Meta matching data may include one-way hashed versions of normalized email, phone, and name tokens, together with Meta _fbp/_fbc identifiers, event URL and identifier, IP address, and browser user agent. Hashing helps protect data in transit but does not make it non-personal data. Company names and enquiry messages are not sent to Meta. Waitlist measurement does not include form contents.

A valid Meta click identifier may be held in session storage before you decide. It is not durably saved with an enquiry or used to create _fbc unless you grant consent. A consented _fbcmay be retained for up to 90 days. Meta processes information under its Privacy Policy and Business Tools terms.

You can change your OnTheGoFlix analytics choice below. You can also review Meta’s ad preferences.

6. Cookies and local storage

Essential storage supports authentication, security, form protection, and your privacy preference. Optional Meta cookies and identifiers are used only after marketing analytics consent. Google Analytics may use analytics identifiers to measure website traffic and receives sanitized page location, page title, and normalized referrer data rather than arbitrary query parameters or form contents. Google processes related technical information under its own privacy policy and controls.

• Your analytics preference is synchronized through a first-party cookie across OnTheGoFlix subdomains for 180 days and a local browser copy that remains until you change it or clear site data.
• Approved campaign attribution is generally kept in the browser for the current session.
• Approved attribution fields may be saved with an enquiry as a business record; a normalized referrer is included only with marketing analytics consent.

7. How long we keep data

We use purpose-based retention rather than promising an unsupported fixed period. We keep personal data only while it is reasonably needed to handle an enquiry or waitlist request, provide and secure an account, manage a campaign or partner relationship, resolve a dispute, enforce agreements, or meet accounting, tax, fraud-prevention, and other legal obligations.

When data is no longer needed, we delete or anonymize it where reasonably practicable. Some data may remain for longer in restricted legal records, security logs, or backups until the relevant obligation or backup cycle ends. Third-party providers apply their own documented retention periods.

8. Your choices and privacy requests

Subject to applicable law, you may request information about our processing, access to a summary of your personal data, correction of inaccurate data, withdrawal of consent, deletion, or grievance redressal.

Email contact@onthegoflix.com with the subject Privacy Request. Include the email address or phone number used with the service and describe the data or account involved. We may ask for proportionate information to verify your identity before acting.

We will respond within the period required by applicable law. Deletion may be limited where retention is required for tax, accounting, legal claims, fraud prevention, security, or another lawful purpose. Withdrawing optional analytics consent does not affect processing already completed before withdrawal.

9. Security

We use access controls, restricted service credentials, encryption in transit, hashing for selected abuse-prevention and Meta matching fields, row-level database protections, form validation, rate limiting, and bot protection. No system is completely secure, so we cannot guarantee absolute security.

10. International processing

Some service providers operate infrastructure outside India. Personal data may therefore be processed in other countries, subject to provider commitments, contractual safeguards, and restrictions required by applicable law.

11. Children

Our advertising and partner services are intended for businesses and adults and are not directed to children. If you believe a child has provided personal data to us, contact us so we can review and remove it where appropriate.

12. Changes to this policy

We may update this policy when our services, providers, or legal obligations change. We will publish the revised version here and update the date above. We will provide additional notice when required by law or when a change materially affects your choices.

13. Contact us

For questions, deletion requests, corrections, consent withdrawal, or grievances, email contact@onthegoflix.com.