Privacy Policy

In short

SETU Technologies is the Data Fiduciary for your personal data under the Digital Personal Data Protection Act, 2023 (“DPDP Act”). This policy also meets the requirements of the Information Technology Act, 2000 and the rules made under it.

What we collect

Information you give us

• Account: mobile number, name and a 6-digit PIN. The PIN is stored only in a protected, one-way hashed form that no one, including us, can read.
• Addresses: the addresses you save for deliveries and repairs.
• Orders, bookings and rides: items, amounts, pickup and drop points, and your ratings and reviews.
• Support: what you tell us when you contact support or raise a grievance.
• Early access: if you join the early-access list on axworld.in, your mobile number and city, used only to tell you when AXWorld launches near you, and deleted on request or once you have been told.
• Pulse: the posts, photos, videos, comments and messages you choose to share.

Information collected when you use AXWorld

• Location: with your permission, to show nearby stores and services, fill in your address, and track deliveries and rides. You can turn this off in your phone settings.
• Device and app: device model, operating system, app version, a device identifier, a notification token, crash reports and performance data.
• Usage: the screens you visit and the features you use, so we can improve the app.
• Calls: when you call a Partner through the app, we record the time, duration and parties of the call. We do not record what is said.

Information from your phone, only with permission

• Contacts: if you allow it, we check the phone numbers in your contacts to show which of your contacts use AXWorld. We use them for nothing else and never message your contacts without your action.
• Camera, microphone and photos: only when you use features that need them, such as posting, scanning, chatting or calling.
• SIM information: to let you choose which number to verify on dual-SIM phones.

Payments

Online payments are handled by our RBI-authorised payment partner. We receive the payment status and a transaction reference. We never receive or store your full card number, CVV, UPI PIN or net banking password.

Why we use it

We process your personal data on the basis of your consent and for the legitimate uses permitted under the DPDP Act, to:

• verify your number, create and secure your account;
• take, fulfil, deliver and support your orders, rides and repairs;
• process payments and refunds and keep the records the law requires;
• send you service messages, such as order updates and security alerts;
• keep the Platform safe: prevent fraud, abuse and spam, and enforce our Terms;
• fix problems and improve AXWorld; and
• comply with law and with lawful requests from authorities.

We send promotional messages only if you have agreed to receive them, and you can opt out at any time.

Who we share it with

• Partners: the Seller, delivery partner, engineer or driver handling your request receives what they need to complete it, such as your name, address and pickup point. Phone calls between you are connected through masked numbers.
• Service providers: companies that host our systems, process payments and deliver notifications, under contracts that require them to protect your data and use it only for us.
• Authorities: when required by law, a court order, or a lawful request from a government agency, or to protect the safety of a person.
• Other users: what you post publicly on Pulse is visible to other users.

We do not sell or rent your personal data to anyone.

How long we keep it

• Account and profile data: while your account is active, and erased within 30 days of your account being deleted.
• Order, payment and invoice records: for as long as tax and accounting laws require, generally up to 8 years.
• Security logs: at least 180 days, as required by CERT-In directions.
• Pulse content: until you delete it or your account is deleted, unless we must keep it longer to comply with law or a legal order.

Your rights

Under the DPDP Act you have the right to:

• obtain a summary of the personal data we process about you and how we process it;
• correct, complete or update your personal data;
• erase your personal data, subject to records we must keep by law;
• withdraw consent at any time, as easily as you gave it (this will not affect processing already done, and some services may stop working);
• nominate another person to exercise your rights if you die or become incapable; and
• have your grievance redressed.

Write to privacy@axworld.in from your registered number’s account. We respond within the time the law allows. If you are not satisfied with our response, you may complain to the Data Protection Board of India.

How we protect it

We use reasonable security practices in line with the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011. Data is encrypted in transit, PINs are stored only as one-way hashes, sign-in attempts are rate-limited and locked after repeated failures, and access to personal data inside the company is limited to people who need it. If a personal data breach affects you, we will inform you and the Data Protection Board as the law requires.

Children

AXWorld is for adults. We do not knowingly create accounts for, or collect personal data from, anyone under 18. If you believe a child has created an account, write to us and we will delete it.

Changes to this policy

We will update this policy as AXWorld and the law change, and show the date of the latest version at the top. For significant changes we will notify you in the app before they take effect.

Contact

SETU Technologies, Bulandshahr, Uttar Pradesh, India.
Privacy questions and requests: privacy@axworld.in.
Grievance Officer: Zeeshan, grievance@axworld.in.