Privacy Policy

🏢 Who We Are

SetuLytix Private Limited is an AI-native business services company that develops intelligent systems to transform customer interactions and build advanced data annotation pipelines. Incorporated in December 2025, the company is headquartered in Anandpur kalu, Rajasthan, India.

This Privacy Policy applies to our website setulytix.com and any services or products we offer. When we say "SetuLytix", "we", "us", or "our", we mean SetuLytix Private Limited.

📋 What Information We Collect

We keep data collection minimal. Here is what we may collect and why:

• Contact Form Information: When you fill our contact form, we collect your name, email address, company name, and your message. This is only used to respond to your enquiry.
• Browser & Technical Data: When you visit our website, your browser communicates with Google's servers to load fonts (Google Fonts). This may include your IP address being sent to Google. We do not store this ourselves.
• Demo Booking: When you book a demo via cal.com, that information is handled by cal.com under their own privacy policy.
• Account Logs / Audit Logs: We may collect technical logs such as authentication events, IP addresses, browser information, API activity, and security-related logs to operate, secure, and troubleshoot the platform.
• Payment Processing: Payment information is processed by Razorpay. We do not store full payment card information.

We do not use any analytics tools, advertising trackers, or retargeting pixels on this website. We do not place any cookies on your browser.

⚙️ How We Use Your Information

We use the information you provide only for the following purposes:

• To respond to your enquiry or message submitted through our contact form
• To schedule a product demo if you request one
• To send you relevant information about SetuLytix if you have given us permission to do so
• To improve our website and how we communicate with visitors

We will never sell your personal information to any third party. We will never use your contact details to send you unsolicited marketing without your consent.

We process your personal data under the following legal bases and retention periods in accordance with applicable data protection laws (including the Indian DPDPA and GDPR):

🔗 Third-Party Services

To operate this website, we use a small number of trusted third-party services:

• Web3Forms (web3forms.com): When you submit our contact form, your name, email, company, and message are sent to Web3Forms, which forwards the message to our email inbox.
• Google Fonts (fonts.googleapis.com): We use Google Fonts to display text on this website. Loading these fonts may cause your browser to send your IP address to Google's servers.
• cal.com: Demo bookings are handled by cal.com. When you book a slot, cal.com's privacy policy applies to the information you provide there.
• Razorpay: Subscription and service payments are processed securely by Razorpay. We do not store or access your complete payment card details.

These services have their own privacy policies and we recommend reviewing them if you have concerns.

🔐 Data Storage, Security & Retention

The information you submit through our contact form is delivered to our email inbox via Web3Forms. We do not run a dedicated database for website visitor data. We implement industry-standard security controls, including modern encryption in transit and at rest, to protect your information:

• Our website is served over HTTPS, which uses modern encryption in transit between your browser and our server
• We limit access to contact information to only team members who need it to respond to your query
• We retain contact form submissions only for reasonable retention periods in compliance with applicable law.

Please note that no method of transmission over the internet is 100% secure. While we do our best to protect your information, we cannot guarantee absolute security.

🛡️ Access Control & Data Responsibility

Customer Responsibility: You are responsible for ensuring that you have the necessary rights, permissions, and legal basis to upload and process datasets through SetuVision.

Support Access: Access to customer data is restricted to authorized personnel and only when necessary for support, security, maintenance, or legal obligations.

Restricted Internal Access: Access to customer datasets is limited to authorized personnel and only when required for support, maintenance, security investigations, legal compliance, or customer-requested assistance.

🌍 Data Storage & Cross-Border Transfers

While SetuLytix Private Limited is located in India, we store and process data using global cloud infrastructure providers (primarily Amazon Web Services) located in the United States and other territories. By interacting with our website or platform, you acknowledge that your personal data may be transferred outside your country of residence.

We ensure that all cross-border data transfers comply with applicable local laws. For European users, we execute Standard Contractual Clauses (SCCs) with our sub-processors. For Indian users, we ensure transfers align with Section 16 of the Digital Personal Data Protection Act, 2023 (DPDPA).

💾 Backup Retention & Deletion Timelines

Upon receiving a deletion request, we remove personal information from our active databases within a reasonable retention period in compliance with applicable law. However, encrypted, archival backup copies of our mail and message logs may remain in our disaster recovery systems for reasonable retention periods in compliance with applicable law before being permanently deleted and overwritten.

🚨 Security Incident & Breach Notification

In the event of a security breach or technical incident affecting your personal data, we will assess the severity of the breach. If there is a risk of harm to you, we will notify you and the appropriate supervisory authorities (such as the Data Protection Board of India or European data protection authorities) within a reasonable timeframe in compliance with applicable law.

💼 Legal Disclosures & Business Transfers

We may disclose your personal information under the following corporate and legal circumstances:

• Legal Obligation: To comply with a subpoena, court order, or search warrant, or to establish, exercise, or defend our legal rights.
• Business Transfers: In the event of a corporate merger, acquisition, consolidation, restructuring, or the sale of all or substantially all of our assets. You acknowledge that your personal information may be transferred to the acquiring or successor entity in such transactions.

🙋 Your Rights & Duties (DPDPA & GDPR Compliance)

Depending on your jurisdiction (such as India under DPDPA or the EU/UK under GDPR), you possess specific rights as a Data Principal or Data Subject. To exercise these rights, email us at info@setulytix.com. We will respond within thirty (30) days.

1. Rights of the Data Principal / Data Subject:

• Access & Summary: Request a summary of the personal data we process and the third parties with whom it has been shared.
• Correction & Erasure: Ask us to update inaccurate data or erase your data once the purpose of collection is completed.
• Consent Withdrawal: Withdraw consent to data processing at any time.
• Right to Nominate (DPDPA): Nominate an individual to exercise your rights on your behalf in the event of death or incapacity.
• Right to Object & Restrict Processing (GDPR): You have the right to object to processing based on legitimate interests, and request the restriction of processing of your personal data under certain conditions.
• Right to Avoid Automated Profiling (GDPR): You have the right to not be subject to automated decision-making or profiling that has legal or significant effects on you.
• Escalation to DPBI (DPDPA): If you have an unresolved complaint, you have the right to escalate the matter to the Data Protection Board of India (DPBI). Please note that under DPDPA rules, you must first exhaust our internal grievance redressal mechanism before approaching the DPBI.

2. Duties of the Data Principal (Under Section 15 of DPDPA):

Under Indian law, you have the following duties when interacting with us:

• You must provide only authentic and correct personal information.
• You must not impersonate any other person or suppress material facts.
• You must not register any false or frivolous grievances or complaints. A breach of these duties may subject individuals to penalties under DPDPA rules.

🍪 Cookies & Browser Data

Our website itself does not set any cookies on your browser. We do not use tracking cookies or advertising cookies.

However, when your browser loads fonts from Google Fonts (fonts.googleapis.com), Google may store information according to its own policies. We are in the process of self-hosting our fonts to eliminate this external call entirely.

Do Not Track (DNT) & Global Privacy Control (GPC): We do not track visitors across third-party websites or services, and therefore we do not respond to automated "Do Not Track" signals. However, we support and respect the Global Privacy Control (GPC) signal sent by web browsers, which serves as a request to limit data collection.

👶 Children's Privacy

Our website and services are intended for business use and are not directed at children under the age of 18. We do not knowingly collect personal information from anyone under 18.

If you believe a child has submitted information through our website, please contact us and we will delete it promptly.

📝 Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes to this Privacy Policy, we will notify you by email or through a prominent notice on our platform prior to the change becoming effective. Your continued use of the platform after the effective date will be subject to the updated policy.

📬 Contact Us & Grievance Redressal

If you have any questions, concerns, or requests regarding this Privacy Policy, your rights, or wish to withdraw your consent, please contact us. Under the Indian Digital Personal Data Protection Act, 2023 (DPDPA), we have designated a Grievance Officer to handle your queries.

🌴 California Consumer Privacy Act (CCPA/CPRA) Notice

This section applies solely to California residents. It describes how we collect, use, and disclose personal information, and your rights under California law.

1. Information Collected, Sources, and Purposes (Past 12 Months)

In the preceding 12 months, we have collected the following categories of personal information:

• Identifiers: Name, email address, IP address, and unique online identifiers.
  Source: Directly from you (e.g., contact forms, account creation) and automatically from your browser (e.g., network logs).
  Business Purpose: Providing, maintaining, and protecting our services; responding to inquiries; and managing account access.
• Commercial Information: Details regarding demo bookings or services inquired about.
  Source: Directly from your interactions with our scheduling portal (cal.com).
  Business Purpose: Arranging product demonstrations and managing customer relationships.

Sensitive Personal Information: We do not collect or process Sensitive Personal Information (as defined under California law) for the purpose of inferring characteristics about consumers, and we do not use such information for any purposes other than those permitted by the CCPA/CPRA.

2. Disclosures to Third Parties

In the preceding 12 months, we have disclosed the above categories of personal information for business purposes to the following categories of third parties:

• Cloud Infrastructure Providers (AWS): For secure data hosting and application delivery.
• Scheduling Integration Services (cal.com): For booking and organizing demo requests.
• Form Processing Subprocessors (Web3Forms): For transmitting contact inquiries to our email systems.
• Payment Processors (Razorpay): For securely processing payments and transactions.

No Sale or Sharing: We do not sell your personal information to third parties, nor do we "share" it for cross-context behavioral advertising. We have not done so in the preceding 12 months.

3. Your California Rights

You have the right to request access, deletion, and correction of your data, the right to know what personal information has been collected and disclosed, and the right to non-discrimination for exercising these rights. To submit a request, email us at info@setulytix.com.

Authorized Agents: You may designate an authorized agent to submit requests on your behalf. To do so, you must provide the agent with signed written permission, and verify your identity directly with us or confirm that you provided the agent with power of attorney.