Privacy Policy

1. Introduction & Scope

This Privacy Policy describes how OG Media, operating the brand Only Graphics (“OG”, “we”, “our” or “us”), collects, uses, shares, and protects your personal information when you visit our website at onlygraphics.in, use the OG mobile application, or interact with our communications (collectively, the “Platform”).

For the purpose of this Policy, OG Media is the “Data Fiduciary” (controller) of the personal data processed through the Platform under the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and applicable Indian laws, including the Information Technology Act, 2000 and the rules made thereunder.

2. Information We Collect

We collect the following categories of information:

3. How We Use Your Information

We use the information we collect for the following purposes:

• To create and manage your account, verify your identity, and authenticate logins;
• To provide the Platform’s features, including rendering customised templates, custom frames, and downloads;
• To process payments and send subscription receipts, renewal reminders, and other transactional communications;
• To send service notifications via in-app messages, email, SMS, and WhatsApp (see Section 5);
• To provide customer support and respond to your requests;
• To analyse usage trends, diagnose technical issues, prevent fraud, and improve the Platform;
• To send marketing communications — only where you have given a separate opt-in — about new templates, features, and offers;
• To comply with legal obligations and enforce our Terms & Conditions.

4. Legal Basis for Processing

We process your personal data on one or more of the following bases under the DPDP Act, 2023 and applicable law:

• Consent — where you have given us free, specific, informed, and unambiguous consent (for example, when signing up or opting in to marketing messages);
• Performance of contract — to deliver the services you have subscribed to;
• Legal obligation — to comply with applicable laws, court orders, or regulatory requests;
• Legitimate uses — such as fraud prevention, information security, and safeguarding the Platform.

5. WhatsApp Business Messaging

We use the WhatsApp Business Platform (operated by Meta Platforms, Inc.) to communicate with you on WhatsApp. The following describes how this works:

5.1 Opt-in

By signing up for OG, subscribing to a plan, or providing your mobile number through any OG form, you provide your opt-in to receive WhatsApp messages from us in connection with the services. Where we send marketing or promotional messages, we obtain a separate, explicit opt-in.

5.2 Categories of messages we send

• Authentication messages — one-time passwords (OTPs) and login verification codes.
• Utility messages — subscription confirmations, payment receipts, renewal reminders, account alerts, and customer-support replies.
• Marketing messages — new templates, features, offers, and announcements (only with separate opt-in).

5.3 Opt-out

You can opt out at any time by:

• Replying “STOP” to any WhatsApp message you receive from us;
• Adjusting notification preferences within the OG app or your account settings;
• Emailing us at [email protected] with the subject line “Unsubscribe”.

Opt-out is processed promptly. Even after opting out of marketing messages, we may still send strictly necessary service messages (such as OTPs and important account notices) where required to operate your account.

5.4 Data shared with Meta / WhatsApp

To send WhatsApp messages, your mobile number and message content are processed by Meta’s WhatsApp Business infrastructure. Meta’s handling of this data is governed by WhatsApp’s own privacy policy. We share the minimum information necessary to deliver the message.

5.5 Policy compliance

Our use of WhatsApp Business is subject to and complies with Meta’s WhatsApp Business Messaging Policy and WhatsApp Commerce Policy. We do not send unsolicited messages, do not message users without a valid opt-in, do not use WhatsApp to share prohibited content, and respect user opt-out requests.

6. Third-Party Service Providers

We share information with the following categories of service providers strictly for the purposes described in this Policy. These providers act as processors and are bound by appropriate confidentiality and data-protection obligations.

• Razorpay Software Private Limited — processes online payments. Card, UPI, and bank details are collected by Razorpay; OG receives only transaction status and identifiers.
• Meta Platforms, Inc. (WhatsApp Business Platform) — delivers messages to your WhatsApp number on our behalf.

We may also engage providers for cloud hosting, email delivery, analytics, and customer support. Where we do, we will update this Policy. We do not sell your personal data to third parties.

7. Cookies & Similar Technologies

Our website uses cookies and similar technologies to:

• Keep you signed in and remember your preferences (essential cookies);
• Measure traffic and understand how the Platform is used (analytics cookies).

You can control cookies through your browser settings. Disabling essential cookies may affect the functionality of the website.

8. Sharing & Disclosure

We disclose personal data only in the following circumstances:

• With service providers listed in Section 6, for the purposes described;
• With your consent, including any disclosure you specifically authorise;
• For legal reasons, where we are required to comply with applicable law, lawful requests from public authorities, or court orders;
• To enforce our terms, protect our rights, property, or safety, and to prevent fraud or security issues;
• In a business transfer, such as a merger, acquisition, or sale of assets, in which case we will notify you and ensure your data continues to be protected.

9. Data Retention

We retain personal data only for as long as is necessary for the purposes for which it was collected, including:

• Account and profile data — for as long as your account is active and for a reasonable period thereafter to allow reactivation and to comply with legal obligations;
• Billing and tax records — for the period required under Indian tax and accounting laws (typically up to 8 years);
• Messaging logs — for the period required by the WhatsApp Business Platform and applicable law;
• Diagnostic and security logs — for shorter, defined periods consistent with operational and security needs.

When data is no longer required, we will delete or anonymise it.

10. Security

We implement reasonable security practices and procedures to safeguard your personal data, including encryption of data in transit, access controls, secure infrastructure, and periodic reviews. No method of transmission or storage over the internet is, however, 100% secure, and we cannot guarantee absolute security.

If you suspect any unauthorised use of your account, please notify us immediately at [email protected].

11. Your Rights

Subject to applicable law, including the DPDP Act, 2023, you have the right to:

• Access the personal data we hold about you;
• Correct data that is inaccurate or incomplete;
• Erase your personal data, subject to legal retention requirements;
• Withdraw consent previously given, at any time, without affecting the lawfulness of processing carried out before withdrawal;
• Nominate another individual to exercise your rights in the event of your death or incapacity;
• Grievance redressal — raise concerns about how we handle your data (see Section 14).

To exercise any of these rights, email us at [email protected]. We will respond within the timelines required by applicable law.

12. Children’s Privacy

The Platform is intended for users aged 18 and above. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will take appropriate steps to delete it.

13. Cross-Border Transfers

Some of our service providers (including Meta / WhatsApp and Razorpay) may process data on infrastructure located outside India. Where such transfers occur, we ensure they are carried out in compliance with applicable Indian law and that appropriate safeguards are in place to protect your personal data.

14. Grievance Officer

In accordance with the Information Technology Act, 2000 and rules made thereunder, and the DPDP Act, 2023, the details of the Grievance Officer are as follows:

15. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or for other operational reasons. The updated Policy will be posted on this page with a revised “Last Updated” date. Where the changes are material, we will provide additional notice through the Platform.

16. Contact

For any questions, concerns, or requests related to this Privacy Policy or our handling of your personal data, please contact us at:

OG Media (Brand: Only Graphics)
MIG-99, Padmanabhpur, Durg, Chhattisgarh 491001, India
Email: [email protected]
Phone: +91 93007 40000