Privacy policy
Last updated: 2026-09-11 · Governed by the Digital Personal Data Protection Act, 2023 (India)
Who we are
CitySetu ("we") is a brand of Onescai Solutions Pvt. Ltd., the company accountable for your data under the DPDP Act. We connect customers with independent local shops. We are a marketplace: shops sell to you directly, deliver themselves, and are paid by you directly.
Data we collect, and why
| Data | Why (purpose) |
|---|---|
| Phone number | Login (OTP), order updates, account security |
| Name (optional) | So the shop knows who the order is for |
| Delivery addresses & location | Showing shops that deliver to you; delivering your order |
| Order history, ratings, tickets | Running the service, resolving disputes, shop records |
| Payment references you enter (UPI UTR) | The refund/payment handshake between you and the shop — we never process or hold money |
| Device push token | Order status notifications |
| App diagnostics (crashes, handled errors) | Fixing problems — tied to a reference id, not sold or shared |
What we don't do
- No sale of personal data. No third-party advertising SDKs. No third-party trackers on this website.
- No payment processing — money moves directly between you and the shop over UPI/cash.
Sharing
The shop fulfilling your order sees your name, address and order contents — that's the service. Infrastructure providers (cloud hosting in India region, SMS delivery, push notifications) process data on our instructions. Legal requests are honored as required by Indian law.
Consent & choices
- Promotional notifications are opt-out anytime (Profile → Offers & promotions). Order updates are part of the service.
- Location is used only when you set an address; you can type an address without granting location permission.
Retention & deletion
You can delete your account on the web or in-app. After a 30-day grace period your identity (name, phone, addresses) is permanently anonymised. Order and rating records are retained in de-identified form — shops need their sales records and the platform needs integrity of history. Sessions and push tokens are purged immediately at completion.
Grievance officer (DPDP)
Chetan Chopda · grievances@citysetu.com
We acknowledge complaints within 72 hours and resolve within 30 days.