Privacy Policy
Effective: 2026-01-01
InsuRaj AI (“InsuRaj”, “we”, “our”) provides AI‑assisted workflow tools for insurance teams. This Privacy Policy explains what information we collect, why we collect it, and how we protect it. This policy is intended to align with applicable Indian regulations (including IRDAI guidance) and common global privacy principles.
Scope
This policy applies to the InsuRaj web application, APIs, and related services. It covers data we process as a controller for our own operations and as a processor on behalf of tenant customers for their business purposes.
Information We Collect
- Account and Profile: name, email, phone, role, tenant affiliation, authentication identifiers, and user preferences (e.g., theme, language).
- Customer/Business Data: records you or your organization upload or generate (e.g., leads, clients, policies, reminders, communications metadata, documents).
- Usage and Device Data: logs of actions (audit trail), IP address, browser and device details, timestamps, crash/diagnostic data.
- Cookies and Local Storage: to maintain sessions, preferences, and offline/PWA capabilities.
How We Use Information
- To provide and secure the application (authentication, access control, audit).
- To operate product features (CRM, reminders, templates, analytics).
- To power AI‑assisted workflows when explicitly invoked by users.
- To improve reliability, performance, and user experience.
- To comply with law and enforce terms, where required.
AI/LLM Features
AI features may leverage third‑party AI providers (configured by InsuRaj or your tenant) to generate suggestions or summaries. We restrict prompts and outputs to the minimum necessary for the requested operation and apply role‑based access controls.
- Data Ownership: Your organization retains ownership of business data submitted to AI features.
- Training: We do not use your tenant data to train generalized AI models. Any retrieval‑augmented generation (RAG) uses your tenant’s knowledge sources only for your session.
- Processor Protections: Where third‑party AI providers are used, we seek contractual and technical commitments to safeguard confidentiality and to prevent model training on your data by default.
Legal Basis
We process personal data based on one or more of the following: performance of a contract, legitimate interests in operating a secure and effective service, consent (where required), and compliance with legal obligations.
Data Sharing
We share data with service providers (e.g., hosting, databases, analytics, AI processors) strictly to operate the service, under confidentiality and data‑processing terms. We may disclose information if required by law or to protect rights, safety, or integrity of our systems.
Security
- HTTPS/TLS in transit; encryption and access controls in production systems.
- Role‑based access control (RBAC) and detailed audit logs for actions.
- Least‑privilege credentials and monitoring for suspicious activity.
Data Retention
We retain personal data for as long as needed to provide the service and meet legal or contractual obligations. Tenants may configure or request deletion of certain data categories, subject to backups and legal holds.
Your Rights
Subject to applicable law, you may request access, correction, export, or deletion of your personal data. If your account is managed by a tenant/organization, please contact your administrator first; otherwise, contact InsuRaj using the details below.
International Transfers
Data may be processed in regions where we or our providers operate. We apply appropriate safeguards consistent with applicable regulations.
Children
Our services are not directed to children under 16. If you believe a child provided personal data, contact us to remove it.
Changes
We may update this policy to reflect product, legal, or operational changes. We will indicate the latest effective date and, where required, provide additional notice.
Contact
For privacy questions or requests, contact: hello@insuraj.ai.in