Privacy policy

30fps is run by 30fps.in, a sole proprietorship owned by Ravikant Joiya and registered as an MSME (Udyam registration UDYAM-RJ-11-0090221), at Flat 4, Stay Home, Shark Fitness Studio (SGR), Marathahalli, Bengaluru, Karnataka 560037, India. In this policy, “30fps”, “we” and “us” mean 30fps.in.

For your account and the content you upload, we are the data fiduciary under India’s Digital Personal Data Protection Act, 2023 — the business that decides why and how your personal data is used.

This policy covers the 30fps website, the 30fps web app, ReelSync (captions) and Automate (Instagram comment and message automation). It does not cover Google’s or Instagram’s own handling of your data, which their own privacy policies govern.

Your account

• You sign in with Google. We receive and keep your name and your verified email address. We never see your Google password, and we do not store your Google profile photo.
• For each device you sign in on, we keep a session record with the browser’s name (its “user agent”), so you can see your signed-in devices and sign them out.

Videos and captions (ReelSync)

• The videos you upload, with their file name, size, length and dimensions.
• The audio track of each video, which your browser copies out and uploads separately so it can be transcribed.
• The transcript — the words, the time each word is spoken, and the language.
• Your projects: the captions, styles and edits you make, your saved presets and template changes, and any fonts you upload.
• Exported videos, and a record of the minutes you use each month so your plan’s limits work.

Your Instagram account (Automate)

• When you connect Instagram through Instagram’s official login, we receive your username, display name, account ID, follower and post counts, a link to your profile picture, and the permissions you granted. We never see your Instagram password.
• An access token from Instagram, which lets 30fps act on your account within those permissions. We encrypt it before storing it.
• Your account’s insights — reach, profile views, accounts engaged, interactions and follower count — kept briefly to show on your dashboard. Your posts and reels are fetched when you open them, not stored.
• The automations you build: keywords, reply and message text, links, tags and settings.

People who comment on or message your Instagram account

Automations run on other people’s comments and messages, so when your Instagram account is connected, Instagram sends us:

• Comments on your posts: the commenter’s username and Instagram ID, the comment text, and which post it was on.
• Messages sent to your account — direct messages, story replies and taps on reply buttons: the sender’s Instagram ID and the message text.
• Where an automation needs it, the sender’s name and username, and whether they follow your account, looked up from Instagram.
• A record of what each automation did: who it replied to, what it sent, and whether it worked. People an automation reached appear in your contacts.

Billing

If you add billing details for invoices, we keep the name, email, address and GST number (optional) you enter. When you pay for a plan, the payment is handled by our payment gateway: we never receive your card number, UPI PIN or bank login.

When you contact us

The emails you send us and our replies.

Technical information

The servers that run 30fps keep standard logs — your IP address, the time, and what was requested — to keep the service working and secure. We do not use analytics tools, advertising pixels or trackers.

• To sign you in and keep your account secure.
• To transcribe your videos, show the captions in the editor, and export the videos you ask for.
• To run the automations you set up: matching comments and messages to your rules, and sending the replies and messages those rules specify.
• To show you your history, contacts, insights and usage.
• To enforce plan limits, bill you, and keep the tax records the law requires.
• To answer support requests, prevent abuse, and fix problems.

We do not sell your data, use it for advertising, or share it with anyone for their own purposes.

• To transcribe a video, we send its audio in short clips to our speech recognition provider — Sarvam AI, or Bhashini, the Government of India’s language platform, if we switch to it. They receive the audio only, for transcription. The video itself is not sent to them.
• The temporary audio file is deleted as soon as the transcript is ready.
• We do not use your videos, audio, transcripts or captions to train any AI model, and we do not send them to chatbots or large language models.
• Exports made with “Export in this browser” are built on your own device and are never uploaded to us.
• Only you can open your videos. Files are fetched through private links that expire, and download links for exports stop working after 6 hours.

Only with the service providers that run 30fps for us, and only what each one needs to do its job:

We may also disclose information when Indian law requires it, to protect someone’s safety, or to a buyer if 30fps is ever sold or merged — in which case this policy keeps applying to your data.

Your data is stored and processed on our providers’ servers in India and in other countries. Wherever it is, it is protected as this policy describes, and transferred only as Indian law allows.

30fps does not set cookies, and runs no analytics or advertising trackers. Our fonts are served from our own site, not from Google.

The web app keeps a few things in your browser’s own storage so it works: your sign-in session, a copy of your name and email, your appearance and editor preferences, cached styles, and progress on unfinished uploads and exports. Exports made in your browser use a temporary file in its private storage. Signing out, or clearing your browser data, removes them.

• Everything travels over encrypted HTTPS connections.
• Instagram access tokens are encrypted before they are stored, and are never sent to your browser.
• Session tokens are stored only in hashed form, so a copy of our database would not let anyone sign in as you.
• Every record belongs to one account, and no customer can read another’s data.
• Your files are private and opened only through links that expire.
• Events from Instagram are checked to be genuinely from Meta before we act on them.

No system is perfectly secure. If a breach ever affects your personal data, we will tell you, and the Data Protection Board of India, as the law requires.

Under India’s Digital Personal Data Protection Act, 2023, you can:

• ask what personal data we hold about you and how we use it;
• ask us to correct, complete or update it;
• ask us to erase it, or withdraw your consent at any time;
• nominate someone to act for you if you are unable to; and
• complain to us, and then to the Data Protection Board of India.

Much of this you can do yourself: edit or delete projects, disconnect Instagram, sign out devices, or delete your account in Settings. For anything else, email hello@30fps.in from your account’s email address. We reply within 30 days. If you live in the EU or UK, you have the equivalent rights under the GDPR, and we handle those requests the same way.

30fps uses Instagram’s official login and asks for four permissions: basic profile, comments, messages and insights. They let us read and reply to comments on your posts, send direct messages, and show your account’s numbers.

• Disconnecting Instagram in 30fps deletes the access token straight away. Your automations and contacts stay, so you can reconnect.
• Removing 30fps from your Instagram settings makes Meta notify us. We then delete the access token, and the comments, messages, contacts and automation history for that Instagram account, and issue a confirmation code you can use to check the deletion’s status.
• Deleting your 30fps account removes everything, as the next section describes.

You can delete your account at any time in Settings. It takes effect immediately: we delete your profile, sessions, Instagram connection and token, automations, contacts and history, projects, transcripts, uploaded videos, exports and fonts.

A few things outlive it: records we must keep for tax purposes; server logs, until they expire; and your sign-in record with our login provider (your email address), which we remove on request — email hello@30fps.in.

If a creator’s automation replied to your comment or sent you a message, that creator chose to run it, and we process your details on their behalf. You can still ask us directly: email hello@30fps.in with your Instagram username, and we will delete your comments, messages and contact records from every 30fps account.

30fps is for people aged 18 and over. Anyone younger may use it only with the consent of a parent or guardian. If you believe a child is using 30fps without that consent, email us and we will delete the account.

When we change this policy, we update the date at the top of this page. If a change affects how we use your data in a significant way, we will also tell you in the app or by email before it takes effect.

For any question, request or complaint about your personal data, contact our Grievance Officer:

We acknowledge every request within 7 days and resolve it within 30 days. If you are not satisfied with our answer, you can complain to the Data Protection Board of India.