SETU · legal
DPDP compliance
SETU is designed around purpose-limited processing, clear consent and auditable disclosure under India’s Digital Personal Data Protection framework.
Last updated 26 August 2026
Consent and notice
The product explains what each disclosure tier contains before release. Consent records and subsequent withdrawals are retained as auditable events.
Data minimisation
Employers see only information that is required for the active tier. Identity and references stay sealed until the final reciprocal step.
Rights requests
Authenticated candidates can export their account data and submit a confirmed erasure request in Settings. Erasure runs in a background worker, retries temporary S3 or Cognito failures, and reports pending, processing, completed or failed status to operators. Correction and grievance requests can also be sent from the registered address.
Security and residency
Aurora, private S3 objects, Cognito and application processing are configured in AWS ap-south-1. Data is encrypted in transit and at rest, administrative actions are audited, and public job pages expose only published facts and minimum-sample aggregates.
Questions about these terms or your data? Write to privacy@setu.careers.