Privacy Policy
Last updated: 1 August 2026
UPSC Setu is operated by Setulabs. This policy explains what we collect, why, and who it goes to. We have tried to describe what the system actually does rather than list everything we could conceivably collect.
What we collect
Your email address. Provided when you sign in with Google or request a sign-in link. It identifies your account and is how we would contact you.
Your study activity. Which questions you attempted and what you chose, which thematic breakdowns you have opened, notes you have saved and any edits you made to them, and the practice tests you created along with your answers and scores.
Subscription records. Your subscription status, the price applying to it, whether it carries the founding rate, and the identifiers Razorpay uses for your subscription and customer record.
Payment event records. When Razorpay notifies us about your subscription, we store that notification so we can reconcile a disputed or failed payment later. It can include the identifiers and contact details Razorpay attaches to the payment.
We never see or store your card, UPI, or bank details. Those are entered on Razorpay's own checkout and never reach our servers.
Why we collect it
To provide the service: to know who you are, to show your own notes and progress back to you, to apply free-tier allowances correctly, and to grant paid access to people who have paid for it. Payment records exist so we can answer questions about charges and fix mistakes.
We do not sell your data. We do not use it for advertising, and we do not run advertising on the service.
Who it is shared with
We use a small number of processors, each for one purpose:
- Supabase — authentication and database hosting. Your account and study data live here.
- Razorpay — payment processing. They handle your payment details under their own privacy policy.
- Vercel — application hosting and request logs.
- Google — only if you choose to sign in with Google.
We may also disclose information where the law requires it. Otherwise we do not share your data with anyone.
How long we keep it
Your account and study data are kept while your account exists, so that your notes and progress are there when you come back — including after a subscription ends. Payment and payment-event records are kept as long as needed for accounting and dispute resolution.
Your choices
You can ask us for a copy of your data, ask us to correct it, or ask us to delete your account and everything associated with it. Write to team@setulabs.co.in from the email address on the account and we will action it.
Deleting your account removes your study data. Records of payments already made are kept where we are required to retain them.
Security
Access to the service requires a sign-in link sent to your email or a Google sign-in; there is no password to be stolen or reused. Data is held by Supabase in managed, access- controlled infrastructure, and traffic to the site is encrypted in transit.
No service can promise perfect security. If we ever become aware of a breach affecting your data, we will tell you.
Children
The service is intended for candidates preparing for the UPSC Civil Services Examination and is not directed at children under 13.
Contact
Privacy questions or requests: team@setulabs.co.in.
