Privacy Policy

1. Privacy for DigitalInsurance24x7.com

This Privacy Policy applies to https://digitallnsurance24x7.com and the Digital Insurance Policy Desk operated for the advisory practice of Rahul Yadav, Chief Insurance Advisor (UIIC — United India Insurance Company).

We handle personal data for Indian insurance advisory work — motor, health, and life enquiries, renewals, and service — under applicable Indian law, including the Digital Personal Data Protection Act, 2023 (DPDP Act) where it applies.

If you are an agency on this desk, you decide what customer data goes into your tenant. We host and process that tenant data to run the desk for you.

2. Data we hold on the Policy Desk

Depending on how you use digitallnsurance24x7.com, we may hold:

• Staff accounts: name, work email, mobile, role (Admin / Agent), theme preference, and sign-in audit events.
• Customer book: name, mobiles, WhatsApp, email, DOB, anniversary, gender, profession, income, address, district, state, PIN, PAN, Aadhaar, GST, nominee, bank/IFSC, office contacts, and asset/vehicle fields.
• Sales pipeline: leads, meetings (including Google Meet links), complaints, claims desk notes, and lead sources.
• Policies: type (motor / life / health), insurer, numbers, premiums, GST break-up, IDV/NCB where relevant, renewal dates, and commission slabs.
• Files: PDFs and images in Documents (policy copies, KYC, photos) with size counting toward plan storage.
• Messages: SMS via your plugins, email via server SMTP, and WhatsApp share logs (recipient and draft summary — not Meta Cloud delivery from our servers).
• Avatars: optional profile photos for users, customers, and sales personnel stored on the private disk and served only to signed-in users who may view that record.

3. Why Rahul Yadav’s desk uses that data

We use personal data only to run this advisory practice and the software that supports it.

• Serve customers who call +91 95303 83030 or visit digitallnsurance24x7.com for motor, health, and life guidance.
• Let agencies manage renewals, commissions, claims follow-up, and assigned agent books.
• Send renewal reminders, birthday/anniversary wishes (email via SMTP; WhatsApp only when staff share), and meeting invites.
• Secure the desk (rate-limited login, tenant scoping, encrypted plugin secrets, audit log).
• Meet bookkeeping, dispute, or regulatory requests that lawfully apply to the practice.

4. Consent and DLT SMS

Agencies must only store PAN, Aadhaar, bank details, or health-related notes when they have a lawful reason and the customer’s informed cooperation.

Indian commercial SMS through MSG91, Kaleyra, or similar must use DLT-approved sender IDs and templates. You configure those plugins; we do not send SMS on your behalf without that setup.

5. Who else may see data

We do not sell the customer book. Sharing is limited to running Digital Insurance:

• Hosting and database infrastructure that stores tenant data under our control.
• Your chosen SMS gateway when you trigger an SMS from renewals or tests.
• Your SMTP provider when the desk sends email (wishes, renewal emails, password resets).
• UIIC or another insurer only when you or the customer already deal with them outside or through advisory placement — the desk does not auto-push full KYC to insurers.
• Courts, IRDAI-related processes, or police when Indian law requires disclosure.

6. India-first hosting

The Policy Desk is built for Indian agencies and customers (PIN, IFSC, Indian mobiles, DLT SMS). If a hosting or mail vendor keeps backups outside India, we keep that to what is needed to run the Service and use contractual safeguards where required.

7. How long we keep desk records

Active workspace data stays while the agency tenant is live. After an agency leaves, we keep encrypted backups and audit/message logs only as long as needed for security, fee disputes, or legal holds, then delete or anonymise them.

Soft-deleted customers remain recoverable for owners with restore rights until permanently purged under our retention routine.

Password-reset tokens expire in 60 minutes. Session cookies end when you sign out or the session expires.

8. Security on this desk

We use CSRF protection, hashed passwords, encrypted messaging credentials, permission scopes (all vs assigned), and private storage for documents and avatars.

PAN may be masked for users who do not see the full book. Still choose strong passwords and limit who has “users.manage” or export rights.

9. Your choices and rights

Staff can update their profile (name, mobile, avatar) inside the desk. Customers should ask their agency or call +91 95303 83030 to correct cover details.

Under the DPDP Act you may request access, correction, erasure, or withdrawal of consent for data we hold as Digital Insurance, subject to legal retention (for example policy and claim history an agency must keep).

If your data sits in an agency tenant, start with that agency; we will help the owner process a reasonable request.

10. Children and nominees

Desk accounts are for adult staff and adult customers. Nominee or dependent names and DOBs entered on a policy are stored only as part of that insurance record, not as separate marketing profiles.

11. Cookies and device storage

We use session cookies for staff sign-in, and browser local storage for dark/light theme and which sidebar groups (Services, MIS, and so on) you left open. We do not run third-party ad pixels on the Policy Desk.

12. Changes and contact for privacy

When this Policy changes, we update the effective date on https://digitallnsurance24x7.com/legal/privacy.

Privacy or data requests: Rahul Yadav, Chief Insurance Advisor · +91 95303 83030 · digitallnsurance24x7.com · Context: UIIC — United India Insurance Company.