Privacy policy
How FirstFrame handles and protects information
This Privacy Policy explains what information may be processed when you visit getfirstframe.com, purchase FirstFrame or contact us, why it is used, where it is stored, how it is protected, when third parties may receive it, and how cookies are handled.
FirstFrame is operated by Farhan Khan, author of the FirstFrame course, from Rajnandgaon, Chhattisgarh, India. The website has no account registration and no login. It does collect a small number of details at checkout, described below, so that a purchase can be completed and delivered. Payments, support email and certain external services are handled separately as explained below.
1. Types of information that may be processed
Information collected directly by this website
The FirstFrame website does not ask you to create an account or set a password, and has no newsletter form, chat widget or lead-capture form.
At checkout we ask for three things and nothing more: your name, your email address and your mobile number. The email address is used to deliver or re-send your download link. Your name and mobile number help us identify the correct order when providing purchase support. We never ask for your payment-card number, CVV, UPI ID, UPI PIN or banking password on this website — those are entered only on the payment provider's own page.
When a purchase is created or completed, we store your name, email address, mobile number, order reference, amount, payment status and date. We also store a non-secret download-token reference, expiry and usage counter. Download audit records use one-way keyed hashes of the requesting IP address and browser identification rather than storing those identifiers in plain text. They are used to detect link sharing, prevent repeated requests from incorrectly consuming the allowance and investigate delivery problems.
If you accept marketing measurement, Meta Pixel and Meta Conversions API may process information about page visits, product views, checkout initiation and confirmed purchases. This may include the page URL, event time, order reference, purchase value and currency, browser or device information, IP address, Meta browser identifiers such as _fbp and _fbc, and normalized email address or phone number converted to a SHA-256 hash before transmission. FirstFrame does not send card numbers, CVVs, UPI PINs, banking passwords or the contents of support messages to Meta.
Technical website information
When you visit any website, the hosting infrastructure may automatically process ordinary technical request information such as your IP address, browser and device type, requested page or file, referring page, date and time, and security or error information. This information is used for website delivery, security, abuse prevention, diagnostics and uptime. Hosting logs are not used to build a FirstFrame customer profile. If you accept marketing measurement, the separate Meta tools described in this policy may use relevant technical information for advertising measurement and attribution.
Information you provide by email
If you contact support@getfirstframe.com, we receive the information you voluntarily include, such as your email address, name, message, order or payment reference, screenshots, device details and our replies. We use this information to answer questions, provide files, verify a payment, investigate a complaint, process an eligible refund and prevent misuse.
Payment information
Rupee payments are completed on a payment page operated by PhonePe Payment Gateway (PhonePe Private Limited), our payment provider. PhonePe may collect your name, contact details, billing information, payment instrument details, UPI or bank information, device information and transaction data under its own privacy policy. To create your order we send PhonePe an order reference and the amount payable; your card, UPI and banking details are entered on PhonePe's page and never pass through this website. FirstFrame may receive or view limited order information such as a customer name or contact detail, order ID, amount, payment status, date and payment reference through the provider's notification email or merchant dashboard. We do not receive or store your full card number, CVV, banking password or UPI PIN.
2. How information is used
- To load, operate, secure and troubleshoot the website.
- To complete or confirm a purchase through the selected payment provider.
- To deliver the digital product and resolve download or file-access problems.
- To answer support messages and investigate complaints, duplicate payments, cancellation requests or eligible refunds.
- To maintain payment, accounting, dispute and compliance records where required.
- To protect FirstFrame, its customers and payment systems from fraud, abuse or unlawful activity.
- If you consent, to measure advertising performance, attribute visits, checkouts and purchases to campaigns, prevent duplicate conversion reporting and improve future advertising.
FirstFrame does not send unsolicited newsletters. Meta may use information received through its Business Tools according to your settings, consent choice and Meta's own terms and privacy policy, including for measurement, attribution and audience or advertising functions available to FirstFrame.
3. How information is stored and retained
- Accounts: The site has no customer accounts, usernames or customer passwords. Checkout and delivery records are stored in the order database described below.
- Support: Messages and attachments you send are stored in the support mailbox and by the email provider. They are kept only as long as reasonably needed to resolve the matter, maintain support and transaction history, prevent disputes, or meet legal and accounting obligations.
- Payments: Payment and order records are stored by PhonePe under its own security and retention rules. Limited notifications may also remain in our merchant email account or provider dashboard.
- Order and delivery records: Your checkout details, order status and delivery information are stored in a database on our hosting account, accessible only for authorised operational use. Financial order records are kept as long as reasonably needed for purchase support and applicable accounting, dispute and tax obligations. Download audit records and expired download-token references are automatically removed after 90 days.
- Marketing attribution data: If you consent, browser identifiers and the checkout IP address and browser information may be held temporarily with a pending order so a later PhonePe confirmation can be attributed correctly. After the Purchase event is successfully transmitted to Meta, these temporary raw attribution fields are removed from the FirstFrame order record. Failed transmissions are retried for a limited period.
- Technical logs: Hosting and infrastructure providers may retain security, access and error logs according to their own retention schedules.
When information is no longer reasonably required, we delete it or allow it to expire, subject to legal, accounting, fraud-prevention, dispute and backup requirements.
4. How information is protected
The website is served over HTTPS. We deliberately keep the amount of personal information small: there are no customer accounts, no customer passwords and no stored payment instruments, and card, UPI and banking details are handled entirely on PhonePe's secured systems rather than on this website. The course files are stored outside the public web folder and can only be reached through a signed personal link tied to a completed order. New links expire after 24 hours and allow three fresh download starts. Access to support email, the merchant dashboard, server configuration and the order database is limited to authorised use.
No method of internet transmission or electronic storage can be guaranteed to be completely secure. Customers should never send passwords, UPI PINs, CVVs, one-time passwords or complete card details by email.
5. Sharing with third parties
FirstFrame does not sell or rent personal information and does not share it with advertisers or data brokers. Information may be processed by the following third parties only where needed to operate the website, complete a transaction or provide support:
- Our hosting and infrastructure provider, which delivers the website, stores the order database and customer package, and processes technical request or security logs under its own privacy policy.
- PhonePe, banks, UPI systems and card networks that process payments, prevent fraud, settle transactions and handle reversals or disputes.
- Email providers that transmit and store customer-support messages.
- Google Fonts, from which the browser requests font files; this request may include your IP address and browser information.
- Meta Platforms, if you accept marketing measurement, which receives browser and server events through Meta Pixel and Conversions API for advertising measurement, attribution, deduplication and related Meta Business Tools functions.
- Professional advisers, regulators, courts or authorities where disclosure is reasonably necessary to protect rights, investigate fraud, comply with law or respond to a lawful request.
Some providers may process information on servers located outside India. Their handling of information is governed by their own privacy policies, contracts and applicable law.
6. Cookies and similar technologies
Cookies set by FirstFrame
FirstFrame uses a first-party preference cookie named ff_marketing_consent to remember whether you accepted or rejected optional marketing measurement. It normally lasts for 180 days. Checkout and link-recovery forms continue to use signed, time-limited server values rather than login or account cookies.
Third-party cookies
If you accept marketing measurement, Meta Pixel may create or read Meta-related identifiers such as _fbp and _fbc and communicate with Meta. These identifiers help associate browser activity with advertising interactions and deduplicate matching browser and server events. If you reject, FirstFrame does not intentionally load Meta Pixel or send optional Meta conversion events.
When you leave FirstFrame and visit the PhonePe payment page, LinkedIn, the portfolio or another external service, that third party may set essential, security, fraud-prevention, preference, authentication or analytics cookies on its own domain. Those cookies are controlled by the third party and are governed by its privacy and cookie policies, not by FirstFrame.
A payment provider may require essential security or fraud-prevention cookies for checkout to work. Blocking all third-party or essential cookies in your browser may prevent a payment, login or download from completing correctly.
Cookie choices
The marketing-choice banner allows you to accept or reject optional Meta measurement. Rejecting does not prevent you from viewing the site, checking out, paying through PhonePe or downloading FirstFrame. You may also block or delete cookies using your browser settings, although blocking cookies required by PhonePe or another external provider may prevent that provider's service from working correctly.
7. Website features and external requests
- Prompt sample, tabs, FAQ and lightboxes: These show or copy content already loaded in your browser. No personal information is sent to FirstFrame.
- Purchase buttons: These take you to our checkout page, and from there to PhonePe's payment page. Payment information entered on PhonePe's page is handled by PhonePe.
- Advertising measurement: If you consent, PageView, ViewContent, InitiateCheckout and verified Purchase events may be sent to Meta. Browser and server versions use matching event identifiers where applicable so the same action is not counted twice.
- Downloads: The course ZIP is released only through FirstFrame's protected download endpoint after a completed payment. It is not exposed through a direct public file URL.
- Clipboard: Copy buttons write selected text to your device's clipboard. FirstFrame does not receive the copied content.
8. Your choices and rights
You may ask us to confirm whether we hold personal information about you through support email, and where applicable request access, correction or deletion. We may need enough information to verify the request and may retain records that are required for payment, accounting, fraud prevention, disputes or legal obligations.
For information held directly by a payment, hosting, email, download or other third-party provider, you may also need to contact that provider. We will help identify the relevant provider where reasonably possible.
9. Children's privacy
FirstFrame is intended for adult creators and is not directed to children under 18. The website does not knowingly request age information or knowingly collect personal information from children.
10. Changes to this Privacy Policy
This policy will be reviewed when the website's data practices, payment flow, cookies, analytics, service providers or legal obligations change. Material updates will be published on this page and the “Last updated” date will be revised. Customers should review this page periodically.
11. Contact and privacy complaints
For a privacy question, request or complaint, email support@getfirstframe.com. Include enough detail for us to identify the issue, but do not send passwords, UPI PINs, CVVs, one-time passwords or complete payment-card details.