Privacy Policy

Insurance Guard ("we", "our", "us") is committed to protecting your privacy and the security of your personal information. This Privacy Policy describes how we collect, use, disclose, store, and protect your information when you use our website, our AI tools, and our related services.

By accessing or using Insurance Guard, you agree to the terms of this Privacy Policy.

1. Scope and Applicability

This Privacy Policy applies to:

• users visiting our website
• users interacting with our AI chat assistant
• users uploading documents (policy documents, medical bills, emails, claim letters, etc.)
• users booking consultations through third-party platforms (e.g., Calendly / Topmate)

This Policy complies with:

• Information Technology Act, 2000
• Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (SPDI Rules)
• Applicable IRDAI guidelines for data handling & customer confidentiality
• Relevant data protection best practices

2. Information We Collect

2.1 Personal Information

When you interact with Insurance Guard, you may provide:

• Name
• Email address
• Phone number
• Google OAuth basic profile information
• Login timestamps
• Consultation booking details

2.2 Sensitive Personal Data (SPDI)

Under Indian law, the following qualify as Sensitive Personal Data:

• Health information
• Medical records
• Insurance policy details
• Claim-related documents
• Hospital invoices, prescriptions, discharge summaries
• Identity documents (if voluntarily provided for claim evaluation)

We treat all uploaded documents as Sensitive Personal Data and apply the highest security safeguards.

2.3 Usage Data

We automatically collect:

• IP address
• Browser type
• Device information
• Cookies
• Chat interactions (for service improvement)
• Feedback (thumbs up/down)

2.4 AI Training Data

We do NOT use your personal or sensitive data to train any external AI models. Your documents are used only to answer your queries through our secure RAG engine.

3. How We Use Your Information

3.1 Provide Services

• Analyze documents you upload
• Provide personalised claim evaluation
• Generate AI-powered responses
• Assist with escalation pathways (grievance / Ombudsman guidance)
• Enable expert consultation bookings

3.2 Improve User Experience

• Improve AI accuracy and reduce errors
• Monitor system reliability
• Personalize content and recommendations

3.3 Safety & Compliance

• Prevent fraud, misuse, or malicious uploads
• Comply with legal/regulatory obligations
• Respond to customer support requests

3.4 Communications

We may contact you via email or phone regarding:

• Your queries
• Document clarifications
• Service updates
• Consultation confirmations

We do not send promotional SMS without consent.

4. How We Store & Protect Data

4.1 Secure Storage

Your data is stored using:

• Supabase (Postgres + secure bucket storage)
• Pinecone Vector Database (for embeddings)
• Industry-grade encryption (AES-256 / HTTPS / TLS 1.2+)
• Separate tenant namespaces to isolate your data

4.2 Access Controls

• Strict role-based access for our internal team
• No access without authentication & logging
• Limited access for troubleshooting (only when necessary)

4.3 Retention Policy

We retain your data only as long as necessary for:

• providing services
• compliance with applicable laws
• resolving disputes

You may request deletion of your user account, documents, or chat history by emailing support@insuranceguard.in.

5. Data Sharing & Third Parties

We never sell or rent your personal data.

We may share limited information with:

• AI service providers (e.g., OpenAI, Gemini), only for generating responses
• Analytics tools (anonymized events)
• Consultation partners when you voluntarily book a call
• Legal/regulatory authorities if required by law

Third-party tools include:

• Supabase (data storage)
• Pinecone (vector embeddings)
• OpenAI/Gemini (LLM inference only)
• Calendly / Topmate (for booking calls)
• n8n automation (notifications/triggers)

Each third-party tool follows its own privacy policy. We ensure they meet reasonable security standards.

6. User Rights (Under Indian Law)

You have the right to:

• Access your personal data
• Correct inaccurate information
• Withdraw consent
• Request deletion of data
• Request information on how your data is processed

Contact: support@insuranceguard.in

We may require identity verification before processing requests.

7. Cookies & Tracking

We use cookies for:

• session management
• login persistence
• chat history preservation
• website analytics

You can disable cookies from your browser, but some features may stop working.

8. Children's Privacy

Insurance Guard is not intended for children under 18. We do not knowingly collect data from minors.

9. Data Transfer Outside India

Your data may be processed on servers located outside India (e.g., US/EU), depending on third-party infrastructure providers. We ensure reasonable security practices as required under SPDI Rules.

10. Data Breach Policy

In case of a data breach:

• We will notify affected users as mandated under IT Act/SPDI Rules
• Take immediate containment & forensic steps
• Cooperate with legal authorities

11. Changes to This Policy

We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised "Last Updated" date.

12. Contact

For privacy-related inquiries or complaints, contact: