Privacy Policy

This Privacy Policy explains how SignSetu ("we", "us", or "our") collects, uses, discloses, and protects your personal information when you use our platform and services (the "Service"). We are committed to safeguarding your privacy and ensuring your personal data is handled responsibly.

1. Information We Collect

Information You Provide

• Account Information: Name, email address, and phone number when you create an account.
• Payment Information: Billing details processed through our payment partners (Dodo Payments / Razorpay). We do not store your full payment card details.
• Documents: Files you upload for electronic signing. Documents are stored securely and accessed only for providing the Service.
• Communications: Messages you send to us via our contact form or email.

Information Collected Automatically

• Usage Data: Pages visited, features used, time spent on the Service, and interaction patterns.
• Device Information: Browser type, operating system, device type, and IP address.
• Cookies: We use cookies and similar technologies as described in our Cookie Policy.

Information from Third Parties

• Authentication Providers: If you sign in using a third-party service (e.g., Google), we receive your name and email address from that provider.
• eSign Service Providers: Transaction status and signed document data from our authorized eSign ASP/CA partners.

2. How We Use Your Information

We use the collected information to:

• Provide the Service: Process your documents, facilitate Aadhaar eSign, and manage your account.
• Process Payments: Handle credit purchases and maintain transaction records.
• Communicate: Send service updates, respond to inquiries, and provide customer support.
• Improve the Service: Analyze usage patterns to enhance features and user experience.
• Ensure Security: Detect and prevent fraud, unauthorized access, and abuse.
• Legal Compliance: Comply with applicable laws, regulations, and legal processes.

3. Aadhaar Data

We take your Aadhaar privacy seriously:

• We do not store your Aadhaar number. Your Aadhaar number is transmitted directly to the authorized eSign service provider during the signing process.
• OTP verification is handled entirely by the UIDAI infrastructure through the licensed eSign ASP. We do not have access to your OTP.
• Biometric data is never collected by us.
• Our use of Aadhaar data complies with the Aadhaar (Targeted Delivery of Financial and Other Subsidies, Benefits and Services) Act, 2016, and the Information Technology Act, 2000.

4. Data Storage and Security

• Your data is stored on secure cloud infrastructure with encryption at rest and in transit.
• We implement industry-standard security measures including access controls, firewalls, and regular security audits.
• Signed documents are stored securely and are accessible only to authorized parties.
• Despite our efforts, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your data with:

• eSign Service Providers: Licensed ASPs and Certifying Authorities to facilitate Aadhaar eSign.
• Payment Processors: To process credit purchases and refunds.
• Cloud Service Providers: For hosting and infrastructure (data processed under strict agreements).
• Legal Authorities: When required by law, court order, or governmental regulation.
• Business Transfers: In connection with a merger, acquisition, or sale of assets (with prior notice).

6. Data Retention

• Account Data: Retained as long as your account is active. Upon account deletion, your data is removed within 90 days.
• Signed Documents: Retained as per your account settings or until you delete them.
• Transaction Records: Retained for a minimum period as required by applicable tax and financial regulations.
• Usage Logs: Retained for up to 12 months for analytics and security purposes.

7. Your Rights

Under applicable data protection laws, you have the right to:

• Access: Request a copy of your personal data.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data, subject to legal retention requirements.
• Portability: Request your data in a structured, machine-readable format.
• Objection: Object to the processing of your data for certain purposes.
• Withdraw Consent: Withdraw consent for data processing where consent is the legal basis.

To exercise any of these rights, contact us at contact@mail.signsetu.in.

8. Children's Privacy

The Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal data, we will take steps to delete it.

9. Third-Party Links

Our Service may contain links to third-party websites. We are not responsible for the privacy practices of these websites. We encourage you to review their privacy policies.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last Updated" date. Your continued use of the Service constitutes acceptance of the updated policy.

11. Contact Us

If you have any questions about this Privacy Policy, please contact us:

• Email: contact@mail.signsetu.in
• Address: Office 46, 10th Floor, Sushma Infinium, Chandigarh Ambala Highway, Zirakpur, Punjab 140603, India