LEGAL

Legal & Privacy

We believe in full transparency about how we handle your data and what we ask of you as a user. If you have any questions, email us at legal@setu.ai.

01

Information We Collect

We collect information you provide directly to us when you create an account, subscribe to a plan, contact us, or otherwise communicate with us:

  • Account information: name, email address, phone number, and password
  • Profile data: grade level, target exams (JEE, NEET, CBSE, UPSC), current institution
  • Parent/guardian information when linked to a student account
  • Institution details for school or coaching centre accounts
  • Payment information (processed securely — we never store card numbers)
  • Communications you send us via email or support channels

We also collect information automatically when you use our platform, including device information, usage patterns, learning performance metrics, and IP address data for security purposes.

02

How We Use Your Information

We use the information we collect to provide, maintain, and improve our services:

  • Personalise your learning path and adapt content to your performance patterns
  • Generate performance reports for students, parents, and institutions
  • Process payments and manage subscriptions
  • Send service communications, weekly progress reports, and product updates
  • Provide customer support and respond to your queries
  • Conduct research to improve our adaptive learning algorithms
  • Protect against fraudulent activity and ensure platform security

We will never sell your personal data to third parties or use your information for advertising purposes unrelated to SetuAI services.

03

Data Sharing

We do not sell your personal information. We share data only in the following limited circumstances:

With your consent

When a parent account is linked to a student, relevant progress data is shared between the accounts. Institution administrators see aggregate and individual data for enrolled students.

Service providers

We share data with trusted third-party vendors who help us operate our platform — cloud hosting (Supabase), payment processors, and analytics tools. All vendors are bound by strict data processing agreements.

Legal requirements

We may disclose information if required by law, court order, or to protect the rights, property, or safety of SetuAI, our users, or the public.

Business transfers

In the event of a merger, acquisition, or sale of assets, user data may be transferred. We will notify you before your data becomes subject to a different privacy policy.

04

Data Security

We take data security seriously and implement industry-standard measures to protect your information:

  • All data transmitted to and from SetuAI is encrypted using TLS 1.3
  • Data at rest is encrypted using AES-256 encryption
  • Access to production systems is restricted and logged
  • Regular security audits and vulnerability assessments
  • We use Supabase, which is SOC 2 Type II compliant
  • Passwords are hashed and never stored in plaintext

Important: While we implement strong security measures, no method of transmission over the internet is 100% secure. We encourage you to use a strong, unique password and enable two-factor authentication when available.

05

Children's Privacy

SetuAI serves students as young as 13 years of age. We take special care to protect younger users:

  • Students under 18 are encouraged to use SetuAI with parental oversight via our Parent Dashboard feature
  • We do not knowingly collect personal information from children under 13 without verifiable parental consent
  • If we discover that we have inadvertently collected data from a child under 13, we will delete it promptly
  • Parents can request access to, correction of, or deletion of their child's data at any time
  • We do not display personalised advertising to students under 18

To request data deletion for a minor or to raise a concern, contact us at privacy@setu.ai.

06

Your Rights

Under applicable Indian data protection law (IT Act 2000 and DPDPA 2023), you have the following rights:

Right to Access

Request a copy of all personal data we hold about you.

Right to Correction

Request correction of inaccurate or incomplete data.

Right to Erasure

Request deletion of your personal data (subject to legal obligations).

Right to Portability

Receive your data in a portable, machine-readable format.

Right to Withdraw Consent

Withdraw consent for data processing at any time.

Right to Nominate

Nominate another person to exercise your rights in case of death.

To exercise any of these rights, email us at privacy@setu.ai. We will respond within 30 days.

07

Cookies & Tracking

We use cookies and similar technologies to operate and improve SetuAI:

  • Essential cookies: required for the platform to function (session management, authentication)
  • Performance cookies: help us understand how users interact with the platform (we use privacy-friendly analytics)
  • Preference cookies: remember your settings and personalisation preferences

You can control cookie preferences through your browser settings. Note that disabling essential cookies will affect platform functionality.

08

Contact & Updates

For any privacy-related queries, concerns, or requests:

SetuAI Privacy Team

Setu AI Technologies Pvt. Ltd.

privacy@setu.ai

We will respond to all privacy requests within 30 business days.

We may update this Privacy Policy periodically. We will notify you of material changes via email and a notice on the platform. Continued use of SetuAI after changes constitutes acceptance of the updated policy.

This Privacy Policy was last updated on January 15, 2025. Setu AI Technologies Pvt. Ltd. reserves the right to update these terms at any time. Users will be notified of material changes via email.

Contact our legal team