Privacy Policy

1. Introduction & Commitment

Welcome to OnPrime Labs ("we," "our," "us"), operating at onprime.in and headquartered in Kharadi, Pune, Maharashtra, India. We are committed to protecting your privacy, maintaining data security, and safeguarding the proprietary interests of our clients, partners, and website visitors.

This Privacy Policy details how we collect, process, store, and protect information when you interact with our primary website, use our Client Portal, or utilize our bespoke multi-tenant development and subdomain staging platforms.

2. Information We Collect

We only collect information that is strictly necessary to provide engineering services, respond to project briefs, and manage platform security:

• Direct Inquiries & Project Briefs: When you submit a quote request or contact form, we collect your name, email address (onprimelabs@gmail.com inbound), phone number, company name, project scope, budget range, and message contents.
• Client Portal Accounts: For authorized clients, we maintain administrative credentials (business email, secure hashed passwords, role assignments) to facilitate ticket submissions and staging environment reviews.
• Technical & System Logs: When connecting to our web servers, standard server logs record your IP address, browser type, referral URLs, and request timestamps to monitor system health, verify TLS issuance, and protect against malicious cyberactivity.

3. Use of Information

Your information is utilized solely for legitimate business operations:

• Engineering, configuring, and deploying isolated client showcase applications and private subdomains.
• Direct communication regarding technical specifications, demo reviews, SLA guarantees, and project updates.
• Automating DNS verification and TLS certificate provisioning via our reverse proxy infrastructure.
• Maintaining platform security, diagnosing errors, and preventing denial-of-service or unauthorized access attempts.

We do not sell, rent, monetize, or trade your personal or business data to third-party advertisers or data brokers under any circumstance.

4. Client Staging Isolation & Confidentiality

A core pillar of the OnPrime Labs architecture is tenant isolation. Each bespoke client website hosted on a subdomain (client.onprime.in) operates within an isolated modular application directory. We implement rigorous confidentiality controls:

• Client staging code, brand assets, mock data, and internal feedback tickets are treated as strictly confidential proprietary information.
• Showcase staging links are kept unindexed from search engines via custom robots.txt and noindex headers unless public showcase display is explicitly authorized by the client.
• Client database fixtures created during export workflows are delivered directly and securely to authorized client repositories.

5. Cookies & Local Storage

OnPrime Labs uses minimal, non-invasive cookies and client-side storage:

• Theme Preference: We store your UI visual preference (onprime-theme: dark/light) in your local storage to prevent screen flicker upon reload.
• Session & Security: We utilize standard encrypted Django session cookies and CSRF tokens (csrftoken) required for secure form transmissions and authenticated Client Portal sessions.
• We do not utilize cross-site tracking pixels or invasive third-party ad beacons.

6. Data Retention & Security Standards

We apply enterprise-grade security controls including HTTPS-enforced TLS 1.3 encryption, automated Caddy certificate rotation, strict HTTP security headers (HSTS, X-Content-Type-Options, X-Frame-Options), and secure database configurations. Inquiry submissions are retained only as long as necessary to service client requirements or comply with Indian statutory recordkeeping obligations.

7. Your Rights & Contact Details

Under applicable data protection laws, you retain the right to inspect, correct, update, or request the complete deletion of your personal contact data from our active records. To exercise these rights, please contact our engineering privacy desk: