Privacy policy
Who we are
Setu connects AI agents to the apps people use. Questions about this policy: [email protected].
What we collect
- Developer accounts: the name and email you give us, and your API keys (stored only as hashes).
- Connected accounts: when an end user authorizes an app, we store the access and refresh tokens that app issues, encrypted, plus the account's name or ID and the permissions granted.
- Activity logs: which action ran, when, whether it succeeded, and how long it took. We do not store the content you send to or receive from the connected app.
How we use it
Only to run the service: to act on a connected account when the developer's application asks us to, to refresh tokens, to prevent abuse, and to fix problems. We do not sell personal data, use it for advertising, or use data from connected apps to train models.
Third-party data from connected apps
Data returned by a connected app (for example Slack messages or GitHub issues) passes through our servers so it can be returned to the application that requested it. It is not retained after the request completes.
Security
Tokens are encrypted at rest. Access is limited to the project that owns a connection. See how we protect tokens on our security page.
Your choices
Disconnecting an app deletes its stored tokens immediately. To delete a developer account or ask about your data, email [email protected] and we will respond within 30 days. You can also revoke Setu's access from inside the connected app's own settings at any time.
This website
This site sets no cookies, runs no analytics, and loads no third-party scripts or fonts.
Changes
If we change this policy materially we will update the date above and, for account holders, notify them by email.