Privacy policy

Setubo, Inc. (“Setubo”, “we”, “us”) is the data controller for personal data collected through setubo.com. Our address is 4500 Cypresswood Dr, Apt 825, Spring, TX 77379-8361, USA.

Our engineering center is operated by our affiliate, Setubo Private Limited, Main Raiwind Road, Lahore, Pakistan.

This policy covers our website. Personal data we process for clients while delivering a project is governed by the agreement for that project.

• Details you send us. When you use our contact, free estimate, or project quote forms: your name and email, and optionally your phone number, company, the service you're interested in, your budget range, and your project description. We also note which form and page you used.
• Call bookings. If you book a call, the details you enter on our scheduling page (name, email, time, and any notes).
• Usage data. With your consent where required, analytics data such as pages visited, approximate location (from IP address), device and browser type, and how you arrived at the site.
• Technical data. Our hosting provider keeps standard request logs (such as IP address, browser, and time) to run and secure the site. To stop form spam, we count recent submissions per IP address and per email address; email addresses are one-way hashed first, and the counters expire automatically within a day.

Please don't send sensitive data (such as health or financial account details) or confidential business information through our forms. If your project needs it, ask for an NDA first.

• To respond to your enquiry: confirming we received it, replying, scheduling calls, and preparing estimates or proposals. Legal basis (GDPR/UK GDPR): steps taken at your request before entering a contract, and our legitimate interest in replying to business enquiries.
• To understand and improve the site through analytics. Legal basis: your consent, which you can withdraw at any time.
• To keep the site secure and prevent spam and abuse. Legal basis: legitimate interests.
• To meet legal obligations, such as record-keeping and responding to lawful requests.

We don't add you to a marketing mailing list because you contacted us, we don't sell your personal data, and we don't use it for automated decision-making.

We use Google Analytics, loaded through Google Tag Manager, to measure site traffic. If you are in the European Economic Area, the United Kingdom, or Switzerland, analytics cookies are only set after you click “Accept” in our cookie banner. If you click “Decline”, Google receives only cookieless, aggregated signals as described in Google's Consent Mode.

To change your choice, clear this site's data in your browser settings; the banner will appear again on your next visit. Otherwise the site only uses storage that's strictly necessary, such as remembering your cookie choice.

We don't use advertising cookies or cross-site tracking for ads. Browsers' “Do Not Track” signals have no agreed standard, so we don't respond to them specifically; we do honor Global Privacy Control signals where the law requires.

We share personal data only with our affiliate and with service providers that help us run the site and our business, under terms that require them to protect it:

• Setubo Private Limited (Pakistan) — our affiliate and engineering center, whose team may read enquiries to scope projects and prepare proposals.
• Brevo (Sendinblue SAS, France) — delivers form submissions to us and confirmation emails to you.
• Cal.com (USA) — call scheduling.
• Google (USA / Ireland) — website analytics, tag management, and our business email.
• Vercel (USA) — website hosting and request logs.
• Upstash (USA) — short-lived, anonymized counters used to limit form spam.

We may also disclose data where the law requires it, to protect our rights or the safety of others, to our professional advisers, or to a successor business in a merger or acquisition.

Setubo is based in the United States, our engineering center is in Pakistan, and some of our providers process data outside the EEA and UK. When we transfer personal data from the EEA or UK, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (including between Setubo, Inc. and Setubo Private Limited), the UK International Data Transfer Addendum, or the EU-U.S. Data Privacy Framework where the recipient is certified.

We keep enquiries and related correspondence for up to 24 months after our last contact. If you become a client, we keep records for as long as the engagement and our legal obligations require.

Spam-prevention counters expire within a day. Hosting logs are kept for a short period set by our hosting provider. Analytics data is kept according to our Google Analytics retention settings. You can ask us to delete your data sooner.

You can ask us to access, correct, delete, or export your personal data, to restrict or object to how we use it, and to withdraw consent at any time (this doesn't affect processing that already happened). Email support@setubo.com; we'll respond within one month. We may need to confirm your identity first.

If you're unhappy with how we handle your data, you can complain to your local data protection authority — in the UK, the Information Commissioner's Office (ico.org.uk). We'd appreciate the chance to resolve it with you first.

Residents of California and other US states with privacy laws (such as Colorado, Connecticut, Texas, and Virginia) may have the right to know what personal data we collect and how we use it, to access it, to correct it, and to delete it. We won't treat you differently for using these rights.

In the past 12 months we have collected the categories described in What we collect: identifiers and contact details, professional information you choose to share, and internet activity on our site. We use them only for the purposes above, and we don't sell or share personal data for cross-context behavioral advertising, or process it for targeted advertising or profiling.

To make a request, email support@setubo.com. We'll confirm your identity and respond within 45 days. You can use an authorized agent, and if we decline your request you can ask us to reconsider by replying to our decision.

We protect personal data with encryption in transit, access controls, and by limiting access to people who need it. No method of transmission or storage is completely secure, but we work to protect your data and will notify you and regulators of a breach where the law requires.

Our site and services are for businesses and aren't directed at children under 16. We don't knowingly collect their data; if you believe a child has sent us personal data, contact us and we'll delete it.

Our site links to other websites, such as our scheduling page and social profiles. Their own privacy policies apply when you use them. See also our Terms of use.

We'll post any changes on this page and update the date at the top. For significant changes, we'll make that clear on the site.

Setubo, Inc., 4500 Cypresswood Dr, Apt 825, Spring, TX 77379-8361, USA. Email support@setubo.com or call +1 (346) 522-4405.