Privacy Policy

1. Who we are

TerraSetu is an engineering and construction company based in Gurugram, Haryana. We design and build rainwater harvesting and groundwater recharge systems, revive ponds and lakes, and build schools, sanitation, commercial and industrial projects, including CSR projects for companies. For the purposes of this policy, TerraSetu is the "data fiduciary" for the personal data described here.

2. What we collect

• Enquiries: your name, phone number, email, the location of your site and what you tell us about your project, when you call, WhatsApp, email us or book a free site visit.
• Site and project details: addresses, plot and roof measurements, drawings, soil and water test results, photos of the site, and the names and contact details of the people we deal with at your organisation.
• Billing details: company name, billing address, GSTIN and purchase order numbers on quotations and invoices. We do not take card, UPI or bank login details on our website.
• Field app and client logins: for team members and clients we invite, your email address, a password if you set one, the sites you can see, and what you add, such as daily reports, photos, comments and approvals. When you choose to use a location feature, such as measuring a roof on a map, your device shares its location for that one action.
• Website use: pages visited, the page you came from, device and browser type, approximate location from your IP address, and taps on our call and WhatsApp buttons, collected through Google Analytics on our public pages. The Field app and shared client links do not load Google Analytics.
• Free tools: what you type into our calculators and checkers, such as plot size or district. These run in your browser and are not stored against your name.

3. How we use it

We rely on your consent, on steps you ask us to take before signing a contract, on performing our contract with you, and on our legal obligations. We do not sell your personal data, and we do not use it for anything unrelated to the purposes above.

• To answer your enquiry, plan a site visit and prepare a quotation, proposal, drawing or bill of quantities.
• To carry out the project: scheduling teams, daily site reports, quality checks, progress updates and handover documents.
• To give clients and CSR partners secure access to their site's progress, photos and reports.
• To issue invoices, keep accounts and meet tax, GST, labour and other legal obligations.
• To understand which pages and services people look for, so we can improve the website.
• To send you updates about your own project. We only send marketing messages if you have asked for them, and you can opt out at any time.

4. Who we share it with

We share personal data only as far as needed, with:

• Our engineers, site supervisors and subcontractors working on your project.
• Service providers who run our systems for us: website hosting (Vercel), database, file storage and sign-in (Supabase), email delivery, Google Analytics, and an AI service that helps our engineers read uploaded drawings. They process data on our instructions.
• For CSR projects, the funding company and its implementing partners, who receive project reports and photos.
• Government bodies, auditors or courts where the law requires it, for example for approvals, tax filings or a legal claim.

5. Where it is stored and for how long

Some of our service providers store data on servers outside India. Where they do, we choose providers with strong security and contractual protections, and we follow any restrictions the Government of India places on transfers.

We keep enquiry details for up to two years if no project follows. Project records, drawings, invoices and accounts are kept for as long as the project's defect liability period lasts and for at least eight years after, as tax and company law require. Field app access is removed when a team member leaves, and a client can ask us to close their login at any time after handover.

6. How we protect it

All pages are served over HTTPS. Field app and client data is behind sign-in, each person sees only the sites they are added to, and shared report links use long random addresses. Access inside our team is limited to people who need it. No system is completely secure, but if a breach affects your personal data we will tell you and the Data Protection Board of India as the law requires.

7. Your rights

You can ask us to:

• Tell you what personal data we hold about you and who we have shared it with.
• Correct, complete or update it.
• Delete it, where we no longer need it and the law does not require us to keep it.
• Withdraw a consent you gave. This does not affect anything done before you withdrew it, but we may then be unable to continue a service that depends on it.
• Nominate another person to exercise these rights if you die or are unable to.

8. Cookies

Our public pages use Google Analytics cookies to count visits and see which pages are useful. The Field app uses a sign-in cookie that keeps you logged in; without it the app cannot work. You can block or clear cookies in your browser settings, and you can opt out of Google Analytics with Google's browser add-on.

9. Children

Our website and services are meant for adults and organisations. We do not knowingly collect personal data from children. If you believe a child has shared personal data with us, contact us and we will delete it. On school projects we take care that site photos shared outside our team do not identify children.

10. Grievance Officer and contact

To use any of these rights, or to raise a concern about how we handle your data, write to our Grievance Officer. We will reply within 7 days and resolve the matter within 30 days. If you are not satisfied, you can complain to the Data Protection Board of India.

Email: vivek@terrasetu.com · Phone or WhatsApp: +91 97119 61946 · Office: Satyam Plaza Shopping Complex, Fountain Chowk, Police Lines, Gurugram, Haryana 122001, India. We are available Monday to Saturday, 8 am to 6 pm IST.

11. Changes to this policy

We may update this policy as our services or the law change. The date at the top shows when it was last changed. If a change materially affects how we use your data, we will tell our clients and Field app users by email.