Privacy Policy
Last updated: 21 October 2026
This Privacy Policy explains how Websetu (owned and operated by Khaleelullah H, “we”, “us”) collects, uses and protects personal data when you visit websetu.in, book a demo, or use the Websetu software and apps. We follow the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000.
1. Data we collect
- Demo bookings and enquiries: name, mobile number, email (optional), business name and type, city, preferred call time, your messages to us, and how you found us (for example Instagram).
- Website chat: the messages you type in the chat on our website.
- Client accounts: login email, business details, billing details and plan.
- Data our clients store in Websetu: menus, orders, bills, stock, expenses; their customers’ names, phone numbers, addresses and order history; their staff’s details, attendance (including location at punch-in) and payroll. For this data, the client business decides what is collected and why — we process it on their behalf.
- Technical data: basic device and browser information and error logs needed to keep the Service running and secure.
2. How we use it
- To arrange and give your demo, answer your questions and send you updates about your booking.
- To set up and run the Service, provide support, and send service messages (such as password-reset emails).
- To keep the Service secure, prevent misuse and fix problems.
- To meet legal, tax and accounting obligations.
We do not sell personal data, and we do not use our clients’ customer or staff data for our own marketing.
3. Legal basis and consent
We process your data with your consent (for example when you tick the box on the demo form), to perform a contract with you, or where required by law. You can withdraw consent at any time by messaging us; this does not affect processing already done.
4. Who we share it with
Only with service providers who help us run Websetu, under confidentiality and security obligations:
- Supabase — secure cloud database and logins (data stored in the Mumbai, India region).
- Cloudflare — website hosting and security.
- Google — email delivery for support notifications (where the client enables it).
- Map providers (OpenStreetMap) — to show maps and delivery routes.
- Payment providers chosen by a client — only when that client turns them on.
We may also share data if required by law or a valid order from an authority.
5. How long we keep it
- Demo leads that do not become clients: up to 12 months after our last conversation, then deleted.
- Client data: for as long as the account is active, and 30 days after it ends (so it can be exported), then deleted — except records we must keep by law (such as invoices).
6. Security
Data is encrypted in transit (HTTPS). Each client business has its own isolated data space protected by database security rules; only logins added by that business can read it. Staff use individual PINs, and owners can remove access at any time. No system is 100% secure, but we take reasonable steps to protect your data and will inform affected clients without delay if a breach occurs.
7. Your rights
You may ask to see, correct or delete your personal data, withdraw consent, or name someone to act for you. If you are a customer or employee of one of our clients, please contact that business first; we will help them respond. Message us using the details below — we reply within 7 working days.
8. Cookies and local storage
We do not use advertising cookies. The site and apps use your browser’s local storage only to keep you signed in, remember your cart, booking or preferences, and make the apps work offline.
9. Children
The Service is meant for businesses and is not directed at children under 18.
10. Grievance officer
Khaleelullah H, Websetu — [email protected], +91 80885 97087.
11. Changes
We may update this policy. The latest version is always on this page with its date.
Contact us
Websetu (owned and operated by Khaleelullah H)
WhatsApp / phone: +91 80885 97087
Email: [email protected]
Website: websetu.in