Privacy Policy

1. Information We Collect

We collect information that you provide directly to us, including:

• Personal Information: Name, email address, phone number, and address.
• Business Information: Business name, type, GSTIN, Udyam number, industry, investment amount, turnover, and project details.
• Documents: Identity documents, financial statements, project reports, and other documents uploaded for service delivery.
• Records you ask us to fetch: where you give permission, details we receive from government systems or licensed data providers about your registration or notices.
• Usage Data: Pages visited, features used, and interaction patterns to improve our platform.
• Consent records: what you agreed to, the exact wording you saw and its version, the date and time, the form you used, and your IP address and browser type. We keep these so that we can show what you agreed to.

2. Why We Use It, One Purpose at a Time

We use your information only for the purposes below, and we do not use information collected for one purpose for an unrelated one. Where we need your agreement, we ask for each purpose separately.

• Delivering the service you ask for: checking which schemes you may qualify for, preparing Detailed Project Reports (DPRs) and application filings, replying to your enquiry, and keeping you informed about your case by phone, WhatsApp, email or SMS. Each form has a required box for this.
• Updates and offers (marketing): newsletters and offers by email or WhatsApp. This is optional. Each channel has its own unticked box, and it is never a condition of using a form or a service. We will add SMS marketing only after the required registration is complete.
• Compliance reminders: where you ask for them, reminders of your own filing due dates by email or WhatsApp. These are part of the service you ask for, not marketing. Each channel has its own unticked box, and you can stop them at any time.
• Saving a form to finish later: where a form offers it and you tick its box, we keep the answers you have entered so far (never documents, phone numbers or tax identifiers) and email you one link to come back to them. The link works for 7 days. How long we keep the saved answers is covered in section 8.
• Questions you ask us: where our questions page is available, we use your question and contact details to answer it and to tell you when it is answered. If you choose to make a question public, it can appear on this website with our answer, without your contact details, after our team has checked it.
• Fetching your records from government systems: where we offer this, only through a licensed data provider with your one-time code, or from documents you upload, and only after you agree.
• Setu AI: see section 4.
• Recording calls: we record a call only if we tell you first and you agree.
• Using your case as an example: in an article or on our site, only if you agree separately, and with your name removed unless you agree otherwise.
• Payments, invoices and legal duties: to take payment, issue invoices, keep tax and accounting records, and comply with legal and regulatory requirements.
• Improving the website: usage data, looked at in aggregate.

3. Your Consent

• On each form the first box, which is required, covers the purpose of that form. Marketing boxes are separate, optional and unticked.
• We record each consent on its own: what it covers, the channel, the wording and its version, and when you gave it.
• You can withdraw any consent at any time: through the grievance page (no account needed), a withdrawal link, where a message from us includes one, or “My consents” in the client portal once it is available to you.
• Withdrawing does not affect what we did before you withdrew, and it does not delete records we are required to keep.

4. Setu AI

Setu AI is our name for the assistant software we use to help prepare drafts and answers. It is provided to us by a specialist technology provider, and text sent to it is processed on servers outside India.

• Setu AI features are being introduced. Until they are switched on, we do not send your information to it.
• We use it on your documents or details only after you give a separate AI-processing consent, and we send only what the task needs. The one exception is a question you ask on our questions page: the question form tells you that Setu AI may help our team draft the answer, and we send it the question you wrote, not your contact details. A person checks every answer before it is sent or published.
• Whatever it helps prepare is labelled “Prepared with Setu AI assistance”. A paid draft is reviewed by a qualified professional on our team before it reaches you.

5. Government Portal Passwords

We have stopped saving new passwords for government portals (such as the GST portal). A password saved earlier is kept in encrypted form and is covered by the erasure request process in section 10.

6. Data Security

• Information travels over encrypted connections (HTTPS), uploaded documents are stored encrypted, and we choose hosting providers that encrypt stored data.
• Access to client information is limited to the team members who work on it, and admin actions are logged with IP address and timestamp.
• We review the site’s security and fix what we find.
• No system is perfectly secure. If a personal data breach affects you, we will tell you and the authorities as the law requires.

7. Data Sharing

We do not sell your personal data. We share it only:

• with service providers that help us run the website and our services, such as hosting and database, email and message delivery, payment processing, analytics and, on articles, advertising. These providers handle data to provide their service to us, and some may store or process it on servers outside India;
• with the authority, bank or lender you ask us to file an application with, to the extent that filing needs it; and
• where the law or a regulatory authority requires it.

8. Data Retention

We keep personal data for as long as it is needed for the purposes above and as the law requires. For example, tax invoices and accounting records must be kept for the period the law prescribes. Our specific retention periods for each kind of record are being finalised, and we will publish them here. Answers saved from a form to finish later stay with us until that period is set, and are then deleted on that schedule; you can ask us to delete them sooner. You can ask us to erase your data at any time (section 10), subject to the records we must keep.

9. Children

Our services are for business owners and their representatives. We do not knowingly collect personal data of anyone under 18. If you believe a child’s data has been given to us, tell us through the grievance page.

10. Your Rights, Withdrawal of Consent and Grievances

You may ask what personal data we hold about you and how we use it, have it corrected, ask us to erase it, withdraw any consent you have given, and raise a complaint. Use the grievance page; you do not need an account. You get a reference number straight away. We check that the request is yours, and a member of our team acts on it. We never delete anything automatically, and some records, such as tax invoices, we must keep by law; if that applies we will explain which and why.

Grievance Officer: being appointed. Until the appointment is published here, please use the form on the grievance page. You can also write to info@subsidysetu.com or call +91 94668 55953. Requests made on the grievance page are acknowledged at once with a reference number; requests by email or phone are acknowledged within 48 hours. We aim to resolve each request within 30 days. If you are not satisfied, you may complain to the Data Protection Board of India.

11. Advertising and cookies

Articles in our Knowledge Hub may carry advertisements served by Google AdSense. Google and its partners may use cookies and similar identifiers to show ads based on your visits to this and other websites. You can opt out of personalised advertising at Google Ads Settings and learn how Google uses data at policies.google.com. We do not show ads on the eligibility checker, forms or client areas.

We also advertise this website on Google. When you visit, a Google tag may set a cookie, and it tells Google Ads when someone who came from one of our ads sends a form, taps WhatsApp or taps to call, so that we can see which ads bring enquiries. It does not send your name, phone number or email address, and we have turned off its use for personalising ads.

When you send us an enquiry, we also store how you first reached our website — the campaign tags or ad-click reference in the link, the referring website and the first page you visited, kept in a first-party cookie for 90 days and containing no name, email address or phone number — so we can understand which pages bring enquiries.

The home page leads with the banners for one State: we infer your approximate State from your connection only to choose those banners, and we do not store it or link it to you, while a State you pick yourself on the home page is remembered in a first-party cookie on your device (ss_state, one year, holding only the State you chose) that you can clear in your browser, and your choice always overrides our guess.

12. Changes to this policy

We may update this policy. The date at the top shows the current version, and each consent record notes the version in force when you agreed.