Privacy Policy

Last updated: August 14, 2026

Setva ("we", "our", or "us") operates the Setva platform at setva.in. This Privacy Policy explains how we collect, use, and protect your personal information when you use our services.

1. Information We Collect

We collect information you provide directly when using Setva:

• Account Information: Name, email address, mobile number, and password (stored as a cryptographic hash, never in plain text)
• Society Data: Society name, address, unit/flat details, maintenance amounts, and payment records
• Financial Records: Income entries, expense records, vendor details, and payment references
• Demo Requests: Name, society name, city, phone number, email, and message
• Uploaded Documents: Expense receipts, invoices, and supporting documents

2. How We Use Your Information

We use your information to:

• Provide and maintain the Setva platform
• Authenticate your identity and manage your account
• Enable society financial management (tracking income, expenses, and dues)
• Send transactional emails (password resets, invite notifications)
• Respond to demo requests and support inquiries
• Improve our services and fix issues

3. Data Storage and Security

Your data is stored in a secure PostgreSQL database hosted by Supabase with encryption at rest and in transit. Passwords are hashed using PBKDF2-SHA512 with 120,000 iterations and unique salts — we never store or have access to your plain-text password.

We use HTTPS for all data transmission and implement session-based authentication with automatic expiry.

4. Data Sharing

We do not sell, rent, or trade your personal information. We may share data only in these cases:

• Within Your Society: Members can see society-level financial data (income, expenses, dues) as configured by the society admin
• Service Providers: We use Supabase (database hosting) and Gmail (transactional emails) to operate the platform
• Legal Requirements: If required by law, court order, or government regulation

5. Your Rights

Under the Digital Personal Data Protection Act, 2023 (DPDPA) and applicable Indian laws, you have the right to:

• Access your personal data held by us
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Withdraw consent for data processing
• File a complaint with the Data Protection Board of India

To exercise any of these rights, contact us at the email below.

6. Data Retention

We retain your data for as long as your account is active or as needed to provide our services. If you request account deletion, we will remove your personal data within 30 days, except where we are required by law to retain it.

7. Cookies and Sessions

Setva uses session tokens stored in your browser's local storage to keep you logged in. We do not use third-party tracking cookies or analytics services. Session tokens expire after 7 days of inactivity.

8. Children's Privacy

Setva is not intended for use by individuals under 18 years of age. We do not knowingly collect personal data from children.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by updating the "Last updated" date at the top of this page.

10. Contact Us

If you have any questions about this Privacy Policy or your personal data, contact us at:

• Email: support@setva.in
• Phone: +91-8482952352