1. Introduction
Setu, Inc., operating under the brand name Arpan ("Company," "we," or "us"), respects your privacy and is committed to protecting it through our compliance with this policy. This Privacy Policy describes our practices for collecting, using, maintaining, protecting, and disclosing information that we collect from you or that you provide to us when you use the Arpan platform available at arpan.io (the "Platform") or any services offered through it (collectively, the "Services").
Please read this policy carefully. By accessing or using the Services, you agree to this Privacy Policy. If you do not agree, please do not use the Services.
2. Changes to This Privacy Policy
We may update this policy from time to time. When we do, we will update the "Last Updated" date at the top of this page and notify you of material changes via email or in-app notice. Your continued use of the Services after any changes become effective constitutes your acceptance of the revised policy.
3. Information We Collect
3.1 Information You Provide Directly
Account Registration. When you create an account, we collect your name and email address. If you sign in using Google Single Sign-On, we receive only your name and email address from Google. We do not receive your Google password, contacts, calendar, or any other Google account data.
Profile Information. You may optionally provide additional information to personalize your experience, including your current job title, years of experience, target role or company type, and the types of behavioral interviews you are preparing for.
Payment Information. If you purchase a subscription, payment is processed by our third-party payment processors — Razorpay for Indian users and Stripe for international users. We do not receive or store your full card number, UPI credentials, or bank account details. We receive only a transaction confirmation, your billing name, and the last four digits of your payment method as provided by the processor.
Support Communications. If you contact us by email or WhatsApp, we retain a record of your message and contact details to provide support and improve the Services.
3.2 Interview Session Data
This is the core data collected through your use of the Services:
- Audio recordings of your interview responses, captured via your device microphone during audio and video sessions
- Video recordings of yourself, captured via your device webcam during video sessions
- Transcripts of your spoken responses, generated from your audio by speech processing services
- AI-generated analysis outputs, including dimension scores, cultural pattern flags, side-by-side response rewrites, and priority alerts
- Session metadata, including session start and end times, question identifiers, session type (audio or video), and subscription tier at time of session
Audio and video recordings are processed to generate transcripts and analysis. Recordings are retained indefinitely as part of your account history unless you request deletion. You may request deletion of your raw audio and video recordings by contacting support@arpan.io; note that deletion of recordings does not delete derived analytical data, transcripts, or anonymized model training data, which are retained indefinitely regardless of recording deletion.
3.3 Information Collected Automatically
When you use the Platform, we automatically collect certain technical and behavioral information, including:
- Device information: browser type and version, operating system, screen resolution, and device identifiers
- Usage data: pages visited, features accessed, session duration, button clicks, and navigation patterns within the Platform
- Connection data: IP address, approximate geographic location derived from IP address (country and region level), and time zone
- Referral data: the URL that linked you to the Platform and UTM parameters from marketing campaigns
- Engagement event data: session start events, analysis delivery events, upgrade prompt views, and other in-product behavioral signals used to optimize the product and deliver relevant in-app messages
This information is collected using cookies, local storage, and similar tracking technologies, as well as through our analytics and customer communication tools. See Section 6 for more detail on cookies and your choices.
3.4 WhatsApp Opt-In
After you complete your first interview session, you may optionally provide your WhatsApp number to receive session reminders and re-engagement messages. This is voluntary. If provided, your WhatsApp number is stored in your account profile and used only for the purposes described in Section 4. You may withdraw this consent at any time by contacting support@arpan.io or replying STOP to any WhatsApp message.
4. How We Use Your Information
We use the information we collect to:
- Provide, operate, and maintain the Services, including conducting AI interview sessions, generating analysis and feedback, and delivering your results
- Score your interview responses against our proprietary cultural communication rubric and generate personalized coaching content
- Track your progress over time, display your Cultural Readiness Score trend, and surface pattern recognition data across sessions
- Send transactional communications, including purchase confirmations, session summaries, and account notices
- Send re-engagement messages via email and, where you have opted in, WhatsApp, to support your practice cadence
- Deliver in-app messages and upgrade prompts based on your product behavior, including your session completion and analysis delivery events
- Provide customer support and respond to your inquiries
- Measure and analyze usage patterns, funnel performance, and product effectiveness using analytics tools
- Improve our AI models, scoring rubric, benchmarking frameworks, and cultural analysis systems using anonymized and aggregated session data
- Detect and prevent fraud, abuse, and violations of our Terms of Service
- Comply with applicable legal obligations
We do not use your personal information for purposes materially inconsistent with this policy without notifying you in advance.
5. AI-Generated Data and Model Training
The interview analysis, cultural pattern scores, dimension breakdowns, and response rewrites generated through the Platform are AI-produced outputs derived from your session data. These outputs are stored in your account and form part of your coaching history.
We use anonymized and aggregated session data — including transcripts, scores, and pattern flags from which all personally identifying information has been removed — to train and improve our AI models, develop benchmarking frameworks, and build derivative analytical data products. Anonymized derivatives are not personal data and remain the sole property of Setu, Inc. This use survives termination of your account.
We do not attribute individual session content to you in any public-facing product, publication, or marketing material. Benchmarking percentiles and aggregate statistics displayed within the Platform are derived from anonymized data across the user base and do not expose any individual user's responses.
6. Cookies and Tracking Technologies
We use cookies and similar technologies to operate the Platform and collect the usage data described in Section 3.3. Specifically:
- Essential cookies: required for authentication, session management, and secure payment flows. These cannot be disabled without breaking core functionality.
- Analytics cookies: used to understand how users navigate the Platform, which features are used, and where users drop off in key flows. This data is processed by third-party analytics tools operating under our instructions.
- Communication cookies: used to deliver in-app messages, track message engagement, and support behavioral triggers such as upgrade prompts.
You can control non-essential cookies through your browser settings. Disabling analytics or communication cookies will not prevent you from using the Platform but may result in less relevant in-app messaging. We do not use advertising cookies and do not serve third-party ads on the Platform.
Do Not Track. We do not currently respond to browser Do Not Track signals.
7. Disclosure of Your Information
We do not sell, rent, or trade your personal information to third parties for their own marketing purposes.
We may share your information with:
- Service providers who operate under our instructions to help us deliver the Services, including cloud hosting providers, speech processing services, voice synthesis services, payment processors, analytics tools, and customer communication platforms. These providers are contractually prohibited from using your data for their own purposes.
- A buyer or successor entity in connection with a merger, acquisition, asset sale, or change of control. In such a transaction, your information — including session data and AI-derived analytics — is a transferred asset. We will notify you via email or in-app notice before your data becomes subject to a materially different privacy policy.
- Government authorities or other third parties where required by law, legal process, or to protect the rights, property, or safety of Setu, Inc., our users, or the public.
We may share anonymized, aggregated, non-identifying statistics about Platform usage, cultural communication patterns, and user performance benchmarks with current or prospective business partners, investors, and for research or publication purposes. This aggregate data cannot be used to identify you.
8. Data Retention
We retain your personal information and session data for as long as your account is active and for a reasonable period thereafter to fulfill the purposes described in this policy, comply with legal obligations, and support potential dispute resolution.
Audio and video recordings, transcripts, scores, and analysis outputs are all retained indefinitely as part of your account history and as valuable data assets used to improve our Services. You may request deletion of your audio and video recordings specifically by contacting support@arpan.io; however, transcripts and AI-generated analytical outputs derived from those recordings are retained regardless of recording deletion, as they do not constitute raw personal data in the same sense and form part of our core data infrastructure.
Anonymized and aggregated derivatives of your session data — from which all personal identifiers have been removed — are retained indefinitely and are not subject to deletion requests, as they do not constitute personal data.
To request deletion of your personal account data, contact support@arpan.io. We will process deletion requests within 30 days, subject to any legal retention obligations.
9. Your Rights and Choices
Depending on your location, you may have certain rights regarding your personal information:
- Access: request a copy of the personal information we hold about you
- Correction: request that we correct inaccurate or incomplete personal information
- Deletion: request deletion of your personal information, subject to the limitations described in Section 8
- Portability: request a machine-readable export of your account data
- Objection: object to certain uses of your data, including direct marketing communications
To exercise any of these rights, contact us at support@arpan.io. We will respond within 30 days. We may need to verify your identity before processing your request.
Marketing opt-out. You may unsubscribe from marketing emails at any time using the unsubscribe link in any email. To opt out of WhatsApp messages, reply STOP or contact support@arpan.io. Opting out of marketing does not affect transactional communications related to your account or active subscription.
10. Indian Users — Additional Disclosures
Setu, Inc. is a US-based entity. If you access the Services from India, your personal data will be transferred to and processed in the United States, which may not have data protection laws equivalent to those in India.
By using the Services, you consent to this transfer and processing. We take reasonable steps to protect your data during transfer and in storage, including use of encrypted transmission and access controls on our systems.
As a foreign digital services provider under OIDAR regulations, Setu, Inc. collects and remits applicable GST on subscriptions purchased by Indian users. This tax processing requires us to retain your billing name, email address, and transaction records for the period required by Indian tax law.
11. Minimum Age
The Services are intended for individuals who are at least 18 years old. We do not knowingly collect personal information from anyone under 18. If we become aware that we have collected data from a person under 18, we will delete that information promptly. If you believe we may have collected data from a minor, please contact us at support@arpan.io.
12. Security
We take reasonable technical and organizational measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. These measures include encrypted data transmission (TLS), access controls on systems that store personal data, and contractual security requirements imposed on our service providers.
No Internet transmission or electronic storage system is completely secure. We cannot guarantee the absolute security of your data. If you have reason to believe your account has been compromised, please contact us immediately at support@arpan.io.
Payment transactions are processed by PCI-compliant payment processors. We do not store full payment card numbers or UPI credentials on our systems.
13. Third-Party Links
The Platform may contain links to third-party websites or services. This Privacy Policy applies only to the Arpan Platform. We are not responsible for the privacy practices of any third-party sites you access through links on the Platform. We encourage you to review the privacy policies of any third-party services you use.
14. Google Sign-In
We offer Google Single Sign-On as an account creation and login option. When you use Google Sign-In, Google shares your name and email address with us for the purpose of creating or authenticating your account. We do not request access to your Google Drive, Gmail, contacts, calendar, or any other Google services. Google's handling of your data during the sign-in process is governed by Google's Privacy Policy.
15. International Data Transfers
The Platform is operated from the United States. If you access the Services from outside the United States, your personal information will be transferred to and processed in the United States. By using the Services, you acknowledge and consent to this transfer. We apply this Privacy Policy uniformly to all users regardless of location.
16. Contact Us
If you have questions, concerns, or requests relating to this Privacy Policy or our data practices, please contact us at:
Website: arpan.io
We will respond to privacy-related inquiries within 30 days.