Privacy Policy

1. Introduction

Fintechsetu ("we," "our," or "us") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our PolicyMind AI platform and related services.

This policy is compliant with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 (DPDP Act) of India.

2. Data Controller Information

3. Information We Collect

3.1 Personal Information

We collect the following personal information when you register for or use our Services:

• Identity Information: Full name, job title, company name
• Contact Information: Email address, phone number, business address
• Account Information: Username, password (encrypted), account preferences
• Billing Information: Payment method details, billing address, GST number (if applicable)
• Professional Information: Role, number of policies managed, industry type

3.2 Business Data

When you use our PolicyMind AI platform, you may upload:

• Insurance policy documents
• Client information and records
• Commission and payment data
• Renewal schedules and tracking information

3.3 Technical Information

We automatically collect:

• IP address and device information
• Browser type and version
• Operating system
• Access times and dates
• Pages viewed and features used
• Error logs and performance data

3.4 Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Maintain your session and authentication
• Remember your preferences
• Analyze platform usage and performance
• Improve our Services

4. How We Use Your Information

We use your information for the following purposes:

4.1 Service Delivery

• To create and manage your account
• To provide access to PolicyMind AI features
• To process and analyze your uploaded documents using AI
• To send renewal notifications and alerts
• To generate reports and analytics

4.2 Communication

• To send service-related notifications
• To respond to your inquiries and support requests
• To send product updates and announcements
• To send marketing communications (with your consent)

4.3 Improvement and Development

• To improve our AI algorithms and accuracy
• To develop new features and services
• To analyze usage patterns and optimize performance
• To conduct research and analytics

4.4 Legal and Security

• To comply with legal obligations
• To enforce our Terms and Conditions
• To protect against fraud and unauthorized access
• To maintain platform security

5. Legal Basis for Processing

We process your personal data based on:

• Contract Performance: Processing necessary to provide our Services to you
• Consent: Where you have given explicit consent for specific processing activities
• Legitimate Interests: For improving our services, security, and business operations
• Legal Compliance: To comply with applicable laws and regulations

6. Data Sharing and Disclosure

We do not sell your personal data. We may share your information with:

6.1 Service Providers

Third-party vendors who assist us in providing our Services, including:

• Cloud hosting providers
• Payment processors
• Email service providers
• Analytics providers

All service providers are bound by data processing agreements and are required to maintain confidentiality.

6.2 Legal Requirements

We may disclose your information if required by law, court order, or government request, or to protect our rights, property, or safety.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

7. Data Security

We implement robust security measures to protect your data:

• Encryption: All data is encrypted in transit (TLS/SSL) and at rest (AES-256)
• Access Controls: Role-based access controls and multi-factor authentication
• Infrastructure: Secure cloud infrastructure with regular security audits
• Monitoring: 24/7 security monitoring and intrusion detection
• Backups: Regular encrypted backups with disaster recovery procedures
• Employee Training: Regular security awareness training for all staff

8. Data Retention

We retain your data for the following periods:

• Account Data: For the duration of your subscription plus 90 days after account closure
• Business Data: As long as your account is active, with options for export before deletion
• Billing Records: For 7 years as required by Indian tax laws
• Technical Logs: For 12 months for security and troubleshooting purposes
• Marketing Data: Until you withdraw consent

After the retention period, data is securely deleted or anonymized.

9. Your Rights

Under the Digital Personal Data Protection Act, 2023 and other applicable laws, you have the following rights:

9.1 Right to Access

You can request a copy of the personal data we hold about you.

9.2 Right to Correction

You can request correction of inaccurate or incomplete personal data.

9.3 Right to Erasure

You can request deletion of your personal data, subject to legal retention requirements.

9.4 Right to Data Portability

You can request your data in a structured, machine-readable format.

9.5 Right to Withdraw Consent

You can withdraw consent for processing activities based on consent at any time.

9.6 Right to Grievance Redressal

You have the right to lodge a complaint with the Data Protection Board of India.

To exercise any of these rights, please contact us at demo@fintechsetu.com.

10. Children's Privacy

Our Services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will take steps to delete such information.

11. International Data Transfers

Your data is primarily stored and processed in India. If we transfer data outside India, we ensure appropriate safeguards are in place in compliance with applicable data protection laws.

12. Third-Party Links

Our platform may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through our platform. The "Last Updated" date at the top indicates when the policy was last revised.

14. Grievance Officer

In accordance with the Information Technology Act, 2000 and DPDP Act, 2023, the Grievance Officer for addressing any concerns or complaints is:

15. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: