Legal

Privacy Policy

Last updated August 15, 2026

Chakra Productions (“we”, “us”, “our”) is a video content studio. We produce, edit, schedule and publish video and social media content for the businesses that hire us, and we run this website and an internal staff and client portal at chakragroups.in. This policy explains what personal data we collect, why we collect it, who we share it with, how long we keep it, and how you can have it deleted.

It applies to this website, to our client and staff portal, and to any content or advertising accounts we operate on a client’s behalf — including accounts on Meta’s platforms (Facebook and Instagram).

1. Who is responsible for your data

Chakra Productions is the data controller for the data described in this policy, except where we handle a client’s own audience or customer data on their instructions — there, the client is the controller and we act as their processor.

• Email: hello@chakragroups.in

2. What we collect

Enquiries from this website

When you send us an enquiry we collect the name, email address, phone number, project description and message you type into the form, together with your IP address and which page of the site you came from. We need this to reply to you and to understand which of our pages actually bring in work.

Portal accounts

Our staff and clients sign in to a private portal. For an account holder we store a name, email address, phone number, a hashed password, an optional profile photo and short bio, and the role that decides what they are allowed to see. Depending on the role we also store work records such as timesheets, shoot schedules, tasks, invoices and expenses.

Client account credentials

Where a client asks us to publish on their behalf, the portal can hold the credentials or access tokens for the accounts we have been asked to post to — for example a Facebook Page, an Instagram Business account, a YouTube channel or a website login. These are supplied by the client, held only for as long as we work on that account, and are visible only to the specific staff whose job requires them. Every time such a credential is revealed in the portal, we record who revealed it and when.

Technical data

Our servers keep standard logs (IP address, browser type, pages requested, timestamps) for security and troubleshooting. We use strictly necessary cookies to keep you signed in and to protect forms against cross-site request forgery. We do not use advertising or cross-site tracking cookies on this website.

3. Data we access through Meta’s platforms

When a client connects their Facebook Page or Instagram Business account to us, or grants us access through Meta’s tools, we may access and process the following on their instructions:

• The public profile and basic account details of the connected Page or Instagram account, and of the person who authorises the connection.
• Access tokens that let us publish and manage content on the connected account.
• Content on the account — posts, reels, stories, captions, comments and messages — where managing them is part of the work.
• Page and content insights, such as reach, views, engagement and follower counts, used to report on how the content we produced performed.

We use this data only to deliver the service the client has asked for: creating, scheduling, publishing and reporting on their content. We do not sell it, do not use it to build advertising profiles, do not use it to train machine learning models, and do not transfer it to data brokers or any party other than those listed in section 5. We handle it in line with Meta’s Platform Terms and Developer Policies, and a client can disconnect our access at any time from their Facebook or Instagram settings, or by asking us to.

4. Why we are allowed to use it

• To perform a contract — delivering the production, publishing and reporting work our clients engage us for.
• Consent — when you send us an enquiry, or when a client authorises us to connect to their social accounts. Consent can be withdrawn at any time.
• Legitimate interests — running and securing our site and portal, and keeping records of the work we have done.
• Legal obligation — keeping invoices, tax and employment records for the periods the law requires.

5. Who we share it with

We do not sell personal data. We share it only with:

• Our own staff and contractors, limited to what their role in the portal permits.
• Service providers who run our infrastructure on our behalf — web hosting, email delivery and backups — under confidentiality obligations.
• The platforms a client has asked us to publish to, such as Meta, YouTube or a client’s own website, which then handle that content under their own privacy policies.
• Authorities, where we are required to by law.

6. How long we keep it

• Website enquiries: up to 24 months from your last contact with us, then deleted.
• Portal accounts and work records: for the life of the engagement, and afterwards only as long as our accounting, tax and legal obligations require.
• Client account credentials and platform access tokens: deleted when the engagement ends, or immediately on request. Revoking our access on the platform also makes any token we hold useless.
• Server logs: a rolling short-term window for security and troubleshooting.

7. How we protect it

The site and portal are served over HTTPS. Passwords are stored hashed and are never recoverable in plain text. Access inside the portal is controlled by role, so staff see only the records their job needs, and sensitive items such as client credentials are restricted further and their disclosure is logged. No system is perfectly secure, but if a breach affects your data we will notify you and any relevant regulator as the law requires.

8. Your rights

You can ask us to give you a copy of the personal data we hold about you, correct it if it is wrong, delete it, restrict or object to how we use it, or withdraw a consent you previously gave. Write to hello@chakragroups.in and we will respond within 30 days. If you believe we have handled your data badly, you may also complain to your local data protection authority.

9. Deleting your data

To have your data deleted, email hello@chakragroups.in from the address you contacted us with, or from the address on the account, with the subject line “Delete my data”. Tell us which of the following applies so we can find your records:

• An enquiry you sent through this website — give us the email address or phone number you used.
• A portal account — give us the email address you sign in with.
• A Facebook Page or Instagram account connected to us — give us the account name or handle.

We confirm receipt within 7 days and complete the deletion within 30 days, then confirm to you in writing. We will keep only what we are legally required to keep, such as invoices and tax records, and nothing more.

If you connected a Facebook or Instagram account to us, you can also cut off our access yourself at any time: in Facebook, under Settings & Privacy → Settings → Business Integrations; in Instagram, under Settings → Website Permissions → Apps and Websites. Removing us there revokes our access token immediately. Deleting the data we already hold still needs the email above.

10. Children

Our website and portal are not directed at children under 13, and we do not knowingly collect their personal data. Where a child appears in content we produce, we do so only with the consent of a parent or guardian obtained by our client. If you believe we hold a child’s data without that consent, contact us and we will delete it.

11. Where your data is held

Our website and portal are hosted on servers operated by our hosting provider, and some of the platforms we publish to store data outside your country. Where data is transferred internationally, we rely on our providers’ contractual safeguards for that transfer.

12. Changes to this policy

We may update this policy as our services change. The date at the top always shows when it was last revised, and material changes will be notified to account holders by email.

13. Contact us

Questions about this policy, or about anything we hold on you, go to hello@chakragroups.in.