Privacy Policy

1. Introduction & Platform Scope

Welcome to ONE CLAP ("Platform", "we", "us", or "our"), operated at https://oneclaphub.live. ONE CLAP is a Telugu cinema talent discovery and collaborative creative ecosystem. We provide actors, singers, dancers, musicians, directors, and crew members an opportunity to showcase their artistic skills through live takes, audition submissions, collaborative team-ups, and industry scouting.

This Privacy Policy details how we collect, store, utilize, and protect your personal information, audition media, and authentication credentials when you visit or interact with our platform.

2. YouTube API Services & Google OAuth Disclosure

By using the video upload and audition features on ONE CLAP, you acknowledge and agree that:

• You are bound by the YouTube Terms of Service.
• Your data is handled in accordance with the Google Privacy Policy.
• When you authorize ONE CLAP via Google OAuth (Scope: https://www.googleapis.com/auth/youtube.upload), we only use the granted access token to upload your watermarked audition take to your connected YouTube channel as an Unlisted video and retrieve its generated video ID for playback on the platform. The access token is held in browser memory for the active session, is not written to our database or browser storage, expires automatically, and is cleared when you sign out or revoke access.
• ONE CLAP does not access, read, modify, or delete any of your other private YouTube videos, playlists, or analytics.
• You may revoke ONE CLAP's access to your Google account at any time via the Google Security Permissions Console.

3. Information We Collect

We collect the following categories of information to administer auditions and talent scouting:

• Account & Profile Information: Full name, stage name, email address, contact phone number, city, primary discipline (Acting, Direction, Singing, Music, Dance, Crew), bio, and profile headshot.
• Audition Media & Performance Content: Video recordings, audio tracks, rehearsal clips, monologues, scene pitches, performance titles, and descriptions submitted for challenges.
• Google Account Data: When signing in with Google, we collect your verified email, display name, profile avatar URL, and Google UID.
• Local Studio Data: Temporary in-browser caches used to preview, trim, and composite official ONE CLAP watermarks onto your video before final upload. Authentication and registration caches are session-scoped and are cleared during sign-out; they are not intended to be a permanent backup of your profile.

4. How We Use Your Information

Your information is used strictly for the following platform functions:

• To review, evaluate, and verify your audition submissions for ONE CLAP Season 1 challenges.
• To display approved audition takes and creator cards on the public Spotlight Feed wall (watch.html) for audience voting, industry scouting, and panel review.
• To enable collaboration networking on the Workstation Desk (collaborate.html).
• To prevent fraudulent entries, multiple duplicate accounts, and unauthorized impersonation.
• To contact shortlisted creators regarding studio callbacks, live rehearsals, and production contracts.

5. Video Watermarking & Brand Protection

To protect talent from unauthorized re-uploads and establish authentic provenance, ONE CLAP composites the official ONE CLAP TELUGU brand clapperboard watermark onto video frames before final submission. Approved submissions displayed on the platform are streamable via embedded YouTube players.

6. Data Security & Retention

We maintain security safeguards using Firebase Authentication, server-side authorization, declarative Cloud Firestore Security Rules, and Firebase Storage Security Rules. Profile and audition media are stored in Firebase Storage and access is restricted to the owner or an authorized administrator. We retain submission records for the duration of the talent season or until an applicant requests removal, subject to legal, safety, fraud-prevention, and backup-retention requirements. We do not store Google OAuth access tokens in our database.

7. India's Digital Personal Data Protection Act, 2023 (DPDP Act) Compliance

As an Indian entity operating from Hyderabad, Telangana, ONE CLAP strictly adheres to the provisions of the Digital Personal Data Protection Act, 2023 ("DPDP Act") and applicable IT Rules:

• Data Fiduciary Identification: The Data Fiduciary responsible for determining the purpose and means of processing your personal data is ONE CLAP, Hyderabad, Telangana, India.
• Grounds for Processing: We process your personal data strictly based on your explicit, informed, affirmative consent provided at the time of registration, or for legitimate performance-verification and legal compliance uses permitted under Section 4 and Section 7 of the DPDP Act.
• Right to Withdraw Consent: You have the right to withdraw your consent at any time as easily as giving it. Upon withdrawal of consent, we will cease processing your data within statutory timelines, unless retention is required by law.
• Processing of Children's Personal Data (Section 9): ONE CLAP requires verifiable parental or lawful guardian consent for any creator under the age of 18 years prior to processing personal data or publishing audition takes. We do NOT engage in behavioral tracking, targeted profiling, or directed advertising toward minors, nor do we process any data likely to cause detrimental effects on a child's well-being.
• Obligations of the Data Fiduciary (Section 8): We implement reasonable technical and organizational security safeguards to prevent data breaches, including end-to-end cryptographic hashing, TLS 1.3 transit encryption, and strict Cloud Firestore security rules. In the unlikely event of a personal data breach, we will notify the Data Protection Board of India and affected Data Principals in accordance with statutory rules.

8. Statutory Rights of Data Principals

Under Chapter III of the DPDP Act and international privacy frameworks, you are entitled to exercise the following statutory rights free of charge:

• Right to Access Information (Section 11): You may request a summary of personal data being processed, identity of all entities with whom data has been shared, and any other information prescribed by the Data Protection Board.
• Right to Correction & Erasure (Section 12): You may request the correction of inaccurate or misleading data, the completion of incomplete data, and the deletion/erasure of data that is no longer necessary for the purpose for which it was collected.
• Delete my account & data (self-service erasure): Signed-in users can permanently delete their ONE CLAP account and data at any time from Delete my account & data. The page lists exactly what is deleted and what is kept before anything happens. Prize payout records are kept for 7 years under the Income Tax Act (Sections 194B/194BA) in anonymised form, and one audit-log entry records that the deletion happened. నా ఖాతా & డేటాను తొలగించండి
• Right of Grievance Redressal (Section 13): You have the right to register grievances with our designated Grievance Officer and receive formal resolution within prescribed timelines.
• Right to Nominate (Section 14): You have the right to nominate another individual who, in the event of death or incapacity, shall exercise your rights in accordance with the provisions of the DPDP Act.

To exercise any of these rights, use the Delete my account & data page or contact our Grievance Redressal Officer as detailed below.

9. Data Protection Officer & Grievance Redressal Office

In compliance with Section 8(9) of the DPDP Act and Rule 3(2) of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, the details of our designated Grievance Redressal Officer are published below:

If you are unsatisfied with our grievance resolution, you retain the statutory right to escalate the complaint to the Data Protection Board of India in accordance with Section 28 of the DPDP Act, 2023.