01 About this policy
This Privacy Policy explains how AGSH, the entity that operates Setu ("we", "us"), collects, uses, stores, and protects your personal data when you use our website (makemysetu.com) or our digital marketing services.
This policy is designed to comply with the Indian Information Technology Act 2000, the Digital Personal Data Protection Act 2023 (DPDP Act), and the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules 2011.
By using Setu, you consent to the practices described here. If you don't agree, please don't use the service.
02 What we collect
We collect only the data we genuinely need to deliver our service. Specifically:
Information you give us directly
- Business details: business name, industry, city, GSTIN (if applicable)
- Contact details: name, WhatsApp number, email address, phone number
- Online presence: website URL, Instagram handle, social media links
- Brand assets: logo files, brand guidelines, photos, copy you share with us
- Brief & preferences: what you want to grow, tone, references, creative direction
- Payment information: handled by our payment processor (we don't directly store card details)
Information we collect automatically
- Usage data: pages visited, time on site, referring URL, browser/device type
- IP address & approximate location (city-level, derived from IP)
- Cookies & similar technologies — see Section 05 below
Information from third parties
If you connect your social media accounts (e.g., Instagram, Facebook) to our service, we may receive information from those platforms as permitted by their APIs and your privacy settings.
03 How we use it
We use your data only for these purposes:
- Service delivery: creating your monthly content, running ad campaigns, sending samples on WhatsApp
- Communication: responding to your messages, sending invoices, sharing updates about your account
- Improvement: understanding how clients use our service to make it better
- Legal compliance: tax records, regulatory requirements
- Marketing (with consent): if you opt in via the form on /book-demo, we may send occasional updates and offers — but only if you tick the box
We do not use your data to:
- Sell to third parties
- Send spam or unsolicited communications
- Profile you for advertising outside the scope of our service
- Train AI models on your private data without explicit consent
04 Who we share with
We share your data only with parties who help us run Setu, and only as needed:
Trusted service providers
- Hosting: MilesWeb (our website hosting provider)
- Payment processing: Razorpay or similar (for collecting plan fees)
- Communication: WhatsApp Business / Meta Business Suite (for sending you samples and updates)
- Ad platforms: Meta (Facebook/Instagram) when running campaigns on your behalf
- Analytics: Google Analytics 4, Meta Pixel (anonymized usage data only)
- AI tools: selected AI content-generation vendors — input data is processed per their respective privacy policies
Each of these has its own privacy policy and we choose providers that meet reasonable security standards.
Legal disclosures
We may disclose data if legally required by Indian authorities (e.g., court order, regulatory investigation), or to protect our rights and safety. We'll resist overly broad requests where possible.
Business transfers
If Setu is ever acquired or merges with another company, your data may be transferred as part of the deal. We'd notify you in advance and you'd have the option to delete your data before the transfer.
We never sell your personal data. Full stop.
05 Cookies & tracking
We use cookies and similar technologies to:
- Remember your preferences (e.g., dismissed promo strips)
- Understand which pages are popular (Google Analytics)
- Measure ad campaign performance (Meta Pixel — only set after we add Meta Ads in Phase 4)
- Keep you logged in (if/when we add a client portal)
Essential cookies are needed for the site to work. Analytics and marketing cookies are optional — you can opt out via your browser settings or via our cookie consent banner (when added).
We do not use cookies to track you across other websites for our own marketing purposes.
06 How long we keep data
- Active client data: retained while you're a client and for up to 3 years after cancellation for tax, billing, and audit purposes
- Demo form submissions (no signup): retained for up to 12 months, then deleted unless you've actively engaged with us
- Marketing opt-in lists: retained until you unsubscribe
- Website analytics: aggregated, anonymized data may be retained indefinitely for trends
- Brand assets you've shared: deleted within 60 days of cancellation unless you ask us to keep them in case you return
You can request earlier deletion at any time — see Section 08.
07 Data security
We take reasonable steps to protect your data:
- SSL/TLS encryption for all website traffic (HTTPS)
- Access controls — only authorized team members can access client data
- Strong password requirements and two-factor authentication on critical systems
- Regular security reviews of our hosting and database
- Vetted third-party providers with their own security commitments
Honest note
No system is perfectly secure. While we work hard to protect your data, we can't guarantee absolute security against all threats. If a breach occurs, we'll notify affected clients within 72 hours of discovery, as required by Indian law.
08 Your rights
Under the DPDP Act 2023 and other applicable laws, you have the right to:
- Access the personal data we hold about you
- Correct any inaccurate or outdated data
- Delete your data (with some exceptions for legal/tax retention)
- Withdraw consent for marketing communications at any time
- Port your data — receive your data in a usable format
- Object to processing for specific purposes
- Lodge a complaint with the Data Protection Board of India if you believe we've mishandled your data
To exercise any of these rights, email us at hello@makemysetu.com or WhatsApp +91 92748 26006. We'll respond within 30 days.
09 Children
Setu is a B2B service for businesses. We do not knowingly collect personal data from individuals under 18 years of age. If you believe a minor has provided us with personal data, contact us and we'll delete it promptly.
10 International data transfers
Some of our service providers (e.g., Google Analytics, Meta, certain AI tools) may process data on servers outside India. When this happens:
- We use providers who comply with international data protection standards
- We rely on legal mechanisms permitted under Indian law and the DPDP Act
- Sensitive personal information is processed within India where reasonably possible
11 Changes to this policy
We may update this policy as our service evolves or as Indian privacy law changes. When we do:
- We'll update the "Last updated" date at the top
- For material changes, we'll notify active clients via WhatsApp/email at least 14 days before they take effect
- You can review the current version anytime at makemysetu.com/privacy
12 Contact us
For privacy questions, data requests, or concerns:
- Email: hello@makemysetu.com
- WhatsApp: +91 92748 26006
- Address: Plot No. 266, Jay Laxmi Bunglows, Opp. Southern Gujarat Chamber of Commerce, Sarsana Main Road, Surat, Gujarat 395007, India
- Operating entity: AGSH Studios
- Grievance Officer: Abhishek Gandhi — hello@makemysetu.com / WhatsApp — for data-related grievances under the IT Rules 2011 and DPDP Act 2023