Vetro

Legal

Privacy Policy

Effective date: 3 August 2026 · vetro.co.in

01 · Overview

Overview

This Privacy Policy describes how Vetro ("we", "us", or "our") collects, uses, and safeguards personal data in connection with vetro.co.in and our marketing services.

We are a marketing studio. We produce content and advertising creative, run search and generative-engine optimisation, work with creators and influencers, and build lead-conversion systems for the brands we work with.

This policy applies to four groups of people:

  • Website visitors - anyone who browses vetro.co.in.
  • Prospective and current clients - individuals who submit our enquiry form, book a call, or engage us.
  • Creators and influencers - individuals we hold records on and may contact about brand campaigns. See section 04, which explains where that data came from.
  • End customers of our clients - whose data we may encounter while working inside a client's advertising or analytics accounts. See section 05.

This policy is written under India's Digital Personal Data Protection Act, 2023 ("DPDP Act"). Under that Act we are a Data Fiduciary and you are a Data Principal.

02 · Information We Collect

What We Collect

From the enquiry form

We collect only what you type into it:

  • Name and work email - required, so we can reply.
  • Company and your role - optional context.
  • Monthly ad spend and main channel - optional, to judge whether we are a sensible fit before either side spends time.
  • What you want to improve - whatever you choose to write.

The form is delivered by Web3Forms, a third-party form service, and arrives in our email inbox. It is not stored in a database on this website.

Automatically, when you visit

This site sets no cookies and runs no analytics. We do not build a profile of your browsing.

Loading this page contacts no third-party server at all. The typeface, the hero video and every graphic are served from this site, so no font service, CDN, or analytics provider is told that you visited. Third parties are involved only if you take an action: submitting the enquiry form, or following the booking link.

When you book a call

The booking link takes you to Cal.com, a separate service with its own privacy policy. Whatever you enter there is collected by Cal.com and shared with us as the meeting host.

03 · Purpose

How We Use It

We use personal data only for the purpose it was given for:

  • To reply to you - answering enquiries, preparing an ad audit, scoping work.
  • To deliver the work - running campaigns, producing content, matching creators to briefs, and reporting on results.
  • To administer the relationship - contracts, invoicing, and statutory accounting records.
  • To improve how we match creators to briefs - see section 07 on what we retain and for how long.

We do not sell personal data, and we do not share your contact details with other brands, creators, or advertisers for their own marketing.

04 · Creators

Creators & Outreach

We maintain a database of creators and influencers so we can shortlist people for brand campaigns. If you are a creator and we have contacted you, this section explains how we got your details.

Where the data came from

In most cases we compiled it from publicly available sources - your public social profile, a public creator directory, or a business contact address you chose to publish. We did not buy it from a data broker, and we did not obtain it from a private or restricted source.

What we hold

  • Public handle and platform, and a link to your profile.
  • Niche and audience characteristics - the categories you visibly create in.
  • Publicly visible engagement metrics - follower counts and similar.
  • A business contact address, where you have published one.
  • Our correspondence with you, and whether you asked not to be contacted again.

Contacting you

We may send you a small number of messages about specific paid brand opportunities. Every message identifies us and tells you how to stop. If you reply asking us to stop, or use the opt-out below, we stop - and we keep a minimal suppression record (your handle or email) purely so that our system does not contact you again.

Creator opt-out. Email vetro.team.admin@gmail.com with the subject "Creator data removal". We will remove your record and confirm within 30 days. You do not need to give a reason, and you do not need to have replied to us before.

05 · Client Accounts

Client Platform Access

To audit and run campaigns, clients grant us delegated access to their own platforms - typically Meta Business Manager, Google Ads, Google Analytics 4, and Search Console.

  • Access is granted through each platform's own permission system, against our own named accounts.
  • We never ask for, store, or accept passwords. If you are a client and someone asks you for a password on our behalf, refuse and tell us.
  • We request the narrowest role that lets us do the work, and we ask to have access revoked when an engagement ends.

Some of what these platforms expose relates to a client's own customers - audience segments, conversion events, and aggregate analytics. Where that data is personal data, the client is the Data Fiduciary and we handle it only on their instructions, for the purpose of delivering their campaigns. We do not extract it, copy it into our own systems, or reuse it for any other client.

06 · AI

AI-Assisted Processing

We use AI tools to speed up parts of our work - drafting content, summarising campaign metrics into audit findings, and generating creative concepts. A human reviews the output before anything reaches a client or gets published.

Where this involves sending data to an AI provider, we send the minimum needed for the task, and we avoid including personal data in prompts wherever the work does not require it.

We do not use AI to make automated decisions that produce a legal or similarly significant effect on any individual. Creator shortlists are generated as suggestions; a person decides who is actually approached.

07 · Retention

Retention

We keep personal data only as long as it serves the purpose it was collected for:

  • Enquiries that do not become clients - deleted after 24 months of no contact.
  • Creator records - deleted after 24 months with no engagement, or immediately on request.
  • Suppression records - kept indefinitely, because their entire function is to remember not to contact you. They hold the minimum needed to do that.
  • Client records - kept for the engagement, then as long as Indian tax and companies legislation requires us to retain financial records.
  • Campaign performance data - retained without a fixed limit in aggregate, de-identified form, so we can learn what works. This holds no names or contact details and is not linked back to individuals.

Deletion requests are honoured regardless of these periods, except where we are legally required to keep a record.

08 · Third Parties

Third-Party Services

These are every third party involved in running this website and our service. None of them is contacted by simply loading a page - they engage only when you submit the form or follow the booking link.

  • Web3Forms - delivers the enquiry form to our inbox. web3forms.com/privacy
  • Cal.com - call booking. cal.com/privacy
  • Meta and Google advertising platforms - accessed under delegated client permission, as described in section 05.
  • AI providers - used for the drafting and summarising described in section 06.

Some of these operate outside India. Where personal data is transferred abroad, it is transferred only as necessary to provide the service described.

09 · Cookies

Cookies & Tracking

This website sets no cookies at all. There is no analytics script, no advertising pixel, no localStorage use, and no cross-site tracking. That is why you are not being shown a cookie banner - there is nothing to consent to.

If we ever add analytics, this section will be updated before it goes live, and a consent mechanism added if the tool requires one.

10 · Your Rights

Your Rights

Under the DPDP Act, as a Data Principal you have the right to:

  • Access - a summary of the personal data we hold about you and how we are processing it.
  • Correction and completion - to have inaccurate or incomplete data fixed.
  • Erasure - to have your data deleted, unless we are legally required to keep it.
  • Withdraw consent - at any time, as easily as you gave it.
  • Grievance redressal - to complain to us first, and then to the Data Protection Board of India if we do not resolve it.
  • Nomination - to nominate someone to exercise these rights on your behalf in the event of death or incapacity.

To exercise any of these, email vetro.team.admin@gmail.com. We respond within 30 days. We may need to confirm your identity first, and we will not charge you for this.

11 · Contact

Grievance Officer

The DPDP Act requires us to publish a contact point for privacy complaints. That is:

If you are not satisfied with how we handle your complaint, you may escalate it to the Data Protection Board of India.

Changes to this policy

If we change how we handle personal data, we will update this page and move the effective date at the top. Material changes will be communicated directly to active clients and, where we hold a contact address for you, to affected creators.

This policy took effect on 3 August 2026.