Who controls your data
ONCREATION AND WEBSERVICES PRIVATE LIMITED (“Oncreation”, “we”, “us” or “our”) is responsible for the personal information described in this policy. You can contact us at priyesh@oncreationandwebservices.com.
Information we collect
We may receive information in the following ways:
- Information you send directly, such as your name, email address, phone number, agency details and project information.
- Scheduling information you provide when booking a call through Cal.com.
- Basic website, device and interaction information collected through Google Analytics and Microsoft Clarity after you give analytics consent, such as pages viewed, approximate location, browser type, referral source, clicks, scrolling and session interactions.
- Communications sent through email, phone, WhatsApp or LinkedIn.
- Website screenshots, page URLs and code that you choose to submit through the website QA tool.
- A public page URL submitted to Oncreation Website Audit, the public HTML and response data fetched from that URL, and the limited linked-page responses used to perform the requested audit.
- Information submitted through the project brief form, including your name, work email, agency or company, project requirements, timing, budget range, additional context and files or links you choose to provide.
This website does not process subscription or invoice payments. Commercial arrangements are handled separately after a discussion.
How and why we use information
We use relevant information to:
- respond to enquiries and arrange calls;
- understand, scope and deliver requested services;
- maintain business records and protect our legal interests;
- understand how the website is used and improve its content, where analytics consent has been given; and
- prevent misuse and maintain website security.
- generate the website QA report that you request.
- perform the Oncreation Website Audit check that you request and return the results to the requesting client.
Depending on the circumstances, we rely on your consent, steps requested before entering a contract, performance of a contract, legal obligations or our legitimate business interests.
Oncreation Website Audit
Oncreation Website Audit is a free, read-only MCP service. A user or MCP client sends one complete public HTTP or HTTPS page URL. Our server fetches that page and may check a strictly limited number of public links found in its HTML. It processes response status and headers, redirects, page HTML, headings, text, links, form markup, image attributes, social metadata, structured data and contact details that are already present in the public HTML. The requested website will receive an HTTP request from our hosting infrastructure and may apply its own logging and privacy practices.
The audit runs in transient server memory. Oncreation does not save submitted URLs, fetched HTML or audit results in an application database. The service does not use the submitted material for advertising, lead generation or model training.
To prevent abuse, the service converts the requesting IP address into a one-way hash and keeps a request counter in server memory for a 60-second rate-limit window. Expired entries are removed during subsequent requests or when the server instance ends. Oncreation does not use this rate-limit record to identify or profile a user.
Submit only a public page URL. URLs can contain personal or confidential information in their path or query string, so do not submit passwords, tokens, private preview links or sensitive data. If a submitted URL inadvertently contains personal data, it is processed only to run the requested audit and is subject to the same non-database storage and infrastructure-log rules described in this policy. Contact us if you have a privacy concern about a request.
Project brief form
The “Send your brief” form is provided by Tally. When you use it, the information and optional files you submit are processed by Tally on our behalf so that Oncreation can receive, review and respond to your enquiry. We use this information only to assess the requested work, ask relevant follow-up questions, recommend a possible delivery route and maintain an appropriate record of the conversation.
Do not upload passwords, API keys, account credentials, confidential source code, special-category personal data or information that you are not authorised to share. A private cloud link with access controls is preferable when a brief contains client-confidential material.
The form receives a limited source label, such as “header” or “service hero”, to help us understand where the enquiry began. We do not place names, email addresses or the contents of the brief into analytics events. A successful form submission may be counted as a lead only after analytics consent has been given.
Resource requests
The agency website brief template request form is provided by Tally. It asks for a first name, work email, agency or company name and an optional delivery challenge. Tally processes the submission so Oncreation can provide access to the requested resource and understand which delivery topics are most useful to agency teams.
A resource request is not treated as a project enquiry in our analytics. After analytics consent, a successful request may be counted as a resource conversion without sending the submitted name, email, company or free-text answer to analytics.
Any optional email follow-up must be clearly offered in the form and requires a separate affirmative choice. You can unsubscribe from those messages at any time. Do not include confidential client information, credentials or sensitive personal data in the optional answer.
Cookies and external services
We use Google Analytics and Microsoft Clarity only after analytics consent is given. Clarity helps us understand website interactions through aggregated behaviour data, heatmaps and session recordings. You can decline analytics through the consent notice. Necessary browser storage may be used to remember that choice.
The website also links to or loads services operated by Cal.com, Tally, Google, LinkedIn, Instagram, WhatsApp and other providers. Tally hosts the project brief form and its submitted responses and files. When you use these services, their own privacy terms apply. Some providers may process information outside your country using their own legal safeguards.
Oncreation Website Audit is hosted by Vercel, which processes request and infrastructure data to deliver and protect the service. The current Vercel Hobby plan retains runtime logs for one hour. These logs contain operational request information such as request path, method, status, timing and identifiers; the application does not deliberately log the submitted URL or request body. If the hosting plan or log configuration changes, we will update this policy before relying on a longer retention period for this service.
When you use the website QA tool, the screenshot, URL and code you submit are sent to OpenAI to generate the requested report. Oncreation does not save these uploads in its own database, and the API request is configured with storage disabled. OpenAI may still process limited data for safety and abuse monitoring under its applicable service terms. Do not submit passwords, personal information or confidential client material.
We do not sell personal information. We share it only with service providers that help us operate the website or business, professional advisers, or authorities when legally required.
Retention and security
We keep personal information only for as long as reasonably necessary for the purpose it was collected, including enquiry, contractual, accounting and legal requirements. We use reasonable organisational and technical safeguards, but no internet transmission or storage system is completely secure.
For Oncreation Website Audit specifically, submitted URLs, fetched HTML and results are not stored in an application database. The in-memory rate-limit record is configured for a 60-second window, and Vercel runtime logs are retained for one hour under the current hosting plan. Support emails are kept only as long as needed to respond, maintain an appropriate record of the issue and meet applicable legal obligations.
Project brief responses and uploaded files remain in our Tally workspace until Oncreation deletes them or closes the account. We review them as part of our business records and delete them when they are no longer reasonably needed for the enquiry, prospective engagement, contractual record or applicable legal obligations. If you want us to delete a brief sooner, contact us using the address below.
Your choices and rights
Depending on where you live, you may have rights to request access, correction, deletion, restriction, objection or a copy of your personal information, and to withdraw consent. You may also have the right to complain to your local data-protection authority.
To make a request, email us using the address below. We may need to verify your identity before responding.
Changes to this policy
We may update this policy when our website, providers or legal obligations change. The effective date at the top shows when it was last revised.
Contact
For privacy questions or requests, email priyesh@oncreationandwebservices.com or visit the contact page.