What SuryaSetu does with your details.

SuryaSetu is operated by Drevan, contactable at founder@drevan.io. For the purposes of India’s Digital Personal Data Protection Act, Drevan is the Data Fiduciary for the enquiry data described here, and you are the Data Principal.

Drevan is not a solar installer. We do not survey roofs, sell equipment, or carry out installations. We connect people who have asked about solar with installers empanelled by the relevant state agency.

Your details reached us in one of these ways, and in every case because you submitted them yourself:

• A lead form on a social media platform.We run advertisements on platforms including Meta (Facebook and Instagram). If you tapped an advertisement and submitted the form attached to it, the platform passed your responses to us through its advertising interface. Your use of that platform is also governed by the platform’s own privacy policy.
• A form on a website we operate. Submitted directly by you.
• You asked an installer to contact you through a partner who uses the SuryaSetu portal.

We do not buy contact lists, scrape numbers, or call people who have not asked to be contacted.

• Your name and phone number.
• Location details — typically pincode, district, and where you provided it, street address and city.
• What you told us about your requirement: property type, roof availability, approximate monthly electricity bill, and ownership.
• The consent record itself: what you agreed to, and the date, time, and IP address of that agreement.
• A recording and/or transcript of the call, kept to check that the agent behaved correctly.

We do not collect financial account details, identity document numbers, or any special category data through this process.

We process this data on the basis of the consent you gave when submitting the form. We use it to:

• Call you to understand your requirement and answer questions about rooftop solar and applicable subsidies.
• Estimate an indicative subsidy and system size from your location and electricity usage.
• Introduce you to a solar installer empanelled by the relevant state agency, if you agree to that introduction.
• Keep records showing consent was obtained and honoured, and check the quality of our own agent.

We do not use your data to train models that are shared outside this service, and we do not sell your data.

The call you receive is placed and conducted by an automated voice agent, not a person. It is identified as such. It does not make binding offers, take payment, or enter into a contract on anyone’s behalf.

You can ask it to stop, ask it to remove you, or hang up at any time. Asking to be removed is recorded and honoured, and you will not be dialled again.

• One solar installer — only if you agree during the call. They receive your name, contact number, and location so they can arrange a survey. They then act as an independent business with their own obligations to you.
• Service providers we use to run the system — telephony, speech processing, and hosting. They process data on our instructions and are not permitted to use it for their own purposes.
• Nobody else. We do not share your details with multiple installers, resell them, or add you to a marketing list.

• Enquiry and qualification data: up to 24 months from your last interaction, then deleted.
• Call recordings and transcripts: up to 6 months, kept to review agent quality, then deleted.
• Consent and opt-out records: kept for as long as needed to prove we honoured your choices.
• If you ask for deletion, we act on it promptly and keep only the minimum record needed to ensure you are not contacted again.

Under the DPDP Act you can ask us to:

• Tell you what data we hold about you and who it has been shared with.
• Correct anything inaccurate or incomplete.
• Delete your data.
• Withdraw your consent — as easily as you gave it.
• Nominate someone to exercise these rights if you are unable to.

Email founder@drevan.io from any address, or simply tell the agent on the call. We respond within 30 days and usually much sooner. If you are not satisfied, you may complain to the Data Protection Board of India.

Say “remove me” or “do not call” on any call, or email founder@drevan.io with the number to remove. Removal is applied at the dialler, so it takes effect before the next call is placed.

Data is held on access-controlled infrastructure in India, backed up regularly, and restricted to the people who need it to run the service. No system is perfect; if a breach affects you, we will notify you and the Board as required.

If this notice changes materially, the date above changes and the previous version is available on request.