Privacy Policy

1. Information we collect

Depending on how you use the Platform, we may collect:

• Account data — email address, phone number (where provided), Google account identifier when you use Google sign-in, and internal user ID from our authentication provider (Supabase Auth).
• Hotel guest activity — hotel slug or scan events, Mudra discount balance and transactions, offer claims, and redemption status.
• Merchant data — shop name, KYC documents, campaign creatives, contact details on offers, and claim redemption records.
• Payment data — order references, amounts, and payment status from PhonePe. We do not store full UPI PINs, card numbers, or CVV.
• Technical data — browser type, device information, IP address, and cookies or session tokens needed to keep you signed in.

2. How we use information

We use personal information to:

• Provide and secure the Platform, including authentication and session management.
• Display hotel-scoped offers, Mudra discount balances, and audiobook access for your account.
• Process payments and audiobook unlocks through PhonePe.
• Verify merchants, review KYC, and prevent fraud or abuse of offers and Mudra discount.
• Improve reliability, debug errors, and comply with legal obligations.
• Respond to support requests sent to support@setuvan.com.

3. Legal bases (where applicable)

We process data as necessary to perform our contract with you (providing the service you request), with your consent where required (for example optional marketing if we introduce it later), and for legitimate interests such as security, analytics, and fraud prevention, balanced against your rights.

4. Sharing with third parties

We share limited data with service providers who help us operate the Platform:

• Supabase — authentication, database, and file storage hosting.
• Google — when you choose "Continue with Google" for sign-in (subject to Google's privacy policy).
• PhonePe — payment processing and webhooks for transaction status.
• Vercel — website hosting and delivery.
• Merchants — when you claim an offer, the merchant receives information needed to validate and redeem your claim (such as claim code and offer details), not your full payment credentials.

We do not sell your personal information. We may disclose data if required by law, court order, or to protect rights, safety, and integrity of the Platform.

5. Cookies and local storage

We use essential cookies and similar technologies to maintain login sessions and protect against cross-site abuse. These are required for signed-in features. We do not use third-party advertising cookies on the core guest experience at launch.

6. Data retention

We retain account and transaction records for as long as your account is active and as needed for legal, tax, and dispute resolution purposes. Setu Mudra discount balances and stay-linked data may expire per campaign and hotel rules. You may request deletion subject to obligations we must keep (for example completed payment records).

7. Security

We use industry-standard measures including HTTPS, row-level access controls in our database, and server-side validation. No method of transmission over the internet is 100% secure; please use a strong account and report suspicious activity promptly.

8. Your rights

Subject to applicable law (including the Digital Personal Data Protection Act, 2023 where it applies), you may request access, correction, or deletion of your personal data, or withdraw consent where processing is consent-based. Contact support@setuvan.com. We will verify your identity before fulfilling requests.

9. Children

The Platform is not directed at children under 18. We do not knowingly collect personal data from children. If you believe a child has provided data, contact us for deletion.

10. Changes to this policy

We may update this Privacy Policy from time to time. The effective date at the top will change when we do. Material changes may be highlighted on the Platform where appropriate.

11. Contact

For privacy questions or requests, email support@setuvan.com.