Privacy Policy

SetuBuild Technologies (“we”, “us”, “our”) operates the Setubuild.OS platform. We are the Data Fiduciary under India’s Digital Personal Data Protection Act, 2023 (DPDPA).

Grievance Officer: setubuildtechnologies@gmail.com · +91 97667 44746

• Account data: name, email, company, role, hashed password.
• Project data: project details, materials, equipment, team members.
• Site content: photos, voice recordings, incident notes you upload.
• Attendance: face descriptor (128-float vector, not the image), selfie, GPS coordinates, timestamps — for workers registered by you.
• WhatsApp messages: outbound reports (with recipient consent) via Twilio.
• Payment: subscription plan + status. Card/UPI data is handled entirely by Razorpay — we never see it.
• Technical: IP address, browser type, action logs.

• Provide, secure, and operate the platform for you.
• Run AI features (photo inspection, chat, DPR, voice transcription).
• Verify attendance & prevent fraud.
• Send site reports to your designated recipients (only with their opt-in).
• Process subscription payments via Razorpay.
• Meet legal, tax, and safety compliance obligations.

We rely on your explicit consent (given at signup) and legitimate uses as defined in Section 7 DPDPA (contractual necessity, safety, compliance).

• AI processors: Emergent LLM Gateway (Anthropic, Google, OpenAI) — text/image/audio you submit is sent for processing and returned. No permanent training on your data.
• Twilio: WhatsApp message delivery.
• Razorpay: payment processing.
• Emergent Auth: Google social login (Google is the identity provider).

We do not sell your data. Ever.

Face descriptors (numeric embeddings) are stored server-side; the raw selfie is stored only if you enable it in settings. Descriptors cannot be reversed into a photo. You can delete any worker (and their biometric data) at any time.

• Access: download all your data any time from Settings → “Export my data”.
• Correction: edit any field in Settings.
• Erasure: click “Delete my account” — we permanently wipe within 24 hours.
• Withdraw consent: stop the flow of data by deleting your account.
• Grievance: email setubuildtechnologies@gmail.com. We respond within 30 days.

Account data is kept while your account is active + 90 days after deletion request (for legal/tax records where applicable). AI outputs older than 12 months are auto-purged.

Bcrypt password hashing, HTTPS everywhere, HttpOnly cookies for social login, JWT for API auth, rate-limiting on sensitive endpoints, per-user data isolation in the database, audit logs of all sensitive actions.

If a data breach occurs, we notify affected users and the Data Protection Board of India within 72 hours as required by DPDPA.

The platform is not intended for users under 18. We do not knowingly collect children’s data.

We will post updates on this page with a new “Last updated” date. Material changes will be emailed 14 days in advance.

SetuBuild Technologies, Bharat · Grievance Officer — setubuildtechnologies@gmail.com · +91 97667 44746

Reach us anytime via our Contact page.