Privacy Policy

This Privacy Policy explains how Insoora (“we”, “us”) handles information when you use our website and the Insoora platform for insurance agents, sub-agents and their customers.

Needs review: Insert the legal entity name, registered address and grievance officer details.

We collect only what is needed to run the service:

• Account information: name, email address, mobile number and role (agent, sub-agent, customer or admin).
• Insurance policy documents uploaded by agents, and the details extracted from them (such as policy number, insurer, insured name, vehicle registration, dates and premium).
• Contact form enquiries: name, email, optional phone, enquiry type and message.
• Basic technical data such as IP address, browser type and sign-in times, used for security.

Needs review: Confirm against the database schema and logs which fields are actually stored.

We use information to provide and secure the service — reading uploaded policies, organizing them by customer, showing renewal dates, signing users in, processing subscriptions and responding to enquiries. We do not sell personal information.

Policy documents are uploaded by agents who confirm they are authorized to do so. Details are extracted automatically and may contain errors; the original document remains the source of truth. Customers can see only the policies their agent has shared with them.

Documents are kept in private storage and opened through short-lived links. Access is limited by role, and connections use HTTPS.

Needs review: Confirm hosting region, storage provider and encryption-at-rest status before stating them.

We use service providers to host the platform, store files, process payments and send email. They process data only to provide those services to us.

Needs review: List the actual providers in use (hosting, storage, OCR, payment gateway, email).

We keep information for as long as an account is active and as needed for legal and accounting obligations. You can request deletion of your account information.

Needs review: Set specific retention periods for documents, extracted data, logs and contact enquiries.

You may ask to access, correct or delete your personal information, or withdraw consent, by contacting us. Customers should contact their agent first for corrections to policy records.

Needs review: Confirm obligations under India’s Digital Personal Data Protection Act, 2023 with legal counsel.

We use cookies that are necessary to keep you signed in and to protect the service.

Needs review: State whether any analytics or marketing cookies are used; add a consent banner if so.

For privacy questions or requests, use our Contact Us page and choose “Account support”.

Needs review: Add a dedicated privacy email address once confirmed.

We may update this policy. Material changes will be announced on the website or by email before they take effect, and the date above will change.