Privacy Policy

Effective date: 16 October 2026 · Last updated: 16 October 2026

Draft for legal review. Items in [square brackets] must be completed, and the whole policy checked by a qualified lawyer, before launch.

This Privacy Policy explains how InsuDesk ("InsuDesk", "we", "us") collects, uses, stores and protects personal data when you use the InsuDesk Android app and the website at insudesk.naukridhanda.com (together, the "Service"). InsuDesk is a CRM and business app for insurance agents and other finance advisors in India. By creating an account or using the Service you agree to this policy. If you do not agree, please do not use the Service.

1. Who is responsible

The Service is operated by [legal name of the business or proprietor], [registered address], India. For questions, requests or complaints contact us at Insudesksupport@gmail.com or +91 9076094316.

2. Two roles: you and us

Under the Digital Personal Data Protection Act, 2023 ("DPDP Act") and related rules, we work in two roles:

For your own account data (your name, email, mobile number, subscription and usage), we decide how and why the data is used. We are the data fiduciary.
For your clients' data (the clients, policies, notes and files you enter into the app), you decide what is collected and why, and we only store and process it on your behalf to provide the Service. You are the data fiduciary and we are your data processor. You are responsible for having a lawful basis and any required consent from your clients, and for telling them how you use their data.

3. Data we collect

3.1 Account data

Name, email address, mobile number, an encrypted (hashed) form of your password, subscription status and expiry date.

3.2 Business data you enter

Clients and contacts (names, phone numbers, email addresses, dates of birth, addresses, family details), policy details (insurer, policy number, premium, due and maturity dates), CRM leads and opportunities, notes, activities, files and documents you attach, calendar events, commission and earnings details, branding details for posters, and data you import from Excel files.

3.3 Email settings

If you use the email feature, the SMTP server details and credentials you provide so the app can send email from your own address. We store these securely and use them only to send messages you request.

3.4 Technical data

Device type and operating system, app version, IP address, log and crash information, and basic usage data needed to run, secure and improve the Service.

3.5 Device permissions

The app asks for device permissions only for features you use, and you can refuse or withdraw them in your phone settings. Depending on the feature, these may include: contacts (to add or import contacts), phone and calling (to call a client from a card), notifications (for reminders), and storage or media (to attach files and save or share posters and PDFs). WhatsApp, email and calling open the relevant app on your phone; we do not read your messages or call history. [Confirm this list against the final app's permissions.]

3.6 Public web pages

If you use the lead extractor, the app reads publicly available web pages you choose and exports them to Excel. You must use it only on pages you are allowed to use and in line with applicable law and each site's terms.

4. Why we use data

To create and manage your account, authenticate you and provide the features of the app.
To run your free trial and subscription, and show your expiry date.
To send service messages such as sign-up verification, subscription, security and policy updates.
To provide customer support and respond to your requests.
To keep the Service secure, prevent fraud and abuse, and fix bugs.
To improve and develop the Service using aggregated or de-identified information.
To comply with law and respond to lawful requests from authorities.

We do not use your clients' data for advertising, and we do not sell personal data.

5. Legal basis and consent

We process your account data on the basis of your consent when you sign up, and as needed to provide the Service you asked for, to meet legal obligations, and for legitimate uses permitted by the DPDP Act. You may withdraw consent at any time by contacting us or deleting your account; withdrawal does not affect processing already done, and some features may then stop working.

6. Who we share data with

We do not sell or rent personal data. We share data only with:

Service providers that help us run the Service, under confidentiality and security obligations: cloud and server hosting [name and region of hosting provider], email and messaging services, and payment processors [name of payment gateway / Google Play Billing].
People you choose: for example when you share a policy by email or PDF, or send a poster to a client.
Authorities, where required by law, court order or to protect rights, safety and security.
A successor, if the business is merged, sold or reorganised, who must honour this policy.

7. Where data is stored and how long we keep it

Data is stored on servers [location of servers, for example India] operated by us or our hosting provider. If data is processed outside India, we will do so only where permitted by law.

We keep your data while your account is active. If you delete your account or ask us to delete your data, we remove or anonymise it within [30] days, except for records we must keep for law, tax, accounting, fraud-prevention or dispute purposes (for example billing records for [8] years). Backups are overwritten on a regular cycle, not later than [90] days.

8. Security

We use reasonable safeguards, including encrypted connections (HTTPS), hashed passwords, access controls and regular backups. No system is completely secure. Keep your password confidential, use a strong password and a device lock, and tell us at once if you suspect unauthorised access. In case of a personal data breach we will notify affected users and authorities as required by law.

9. Your rights

Under the DPDP Act you have the right to:

obtain a summary of the personal data we hold and how it is processed;
correct, complete or update your data (most of it can be edited in the app);
request erasure of your data and account;
withdraw consent;
nominate another person to exercise your rights in the event of death or incapacity;
have your grievance addressed.

To use any right, email Insudesksupport@gmail.com from your registered email address. We may ask you to verify your identity. If your request concerns a client's data that you entered, you are the one responsible for it, and we will help you act on the request. You can also request deletion of your account by writing to us; see the Account deletion section below.

10. Account deletion

To delete your account and associated data, email Insudesksupport@gmail.com with the subject "Delete my account" from your registered email, or use the delete option in the app if available. We will confirm and complete deletion as described in section 7. Deleting your account may end your access to the paid subscription without refund except as set out in our Refund Policy.

11. Children

The Service is for business use by adults aged 18 and over. We do not knowingly collect data from children. If you enter the data of a child (for example in a family record), you confirm that you have the consent of the parent or lawful guardian where the law requires it. If we learn that a child has created an account, we will delete it.

12. Cookies and analytics on the website

The website does not use advertising cookies. It may store basic technical information (such as server logs) to keep the site working and secure. If we add analytics or cookies in future, we will update this policy.

13. Third-party links and services

The Service links to third parties such as Google Play, WhatsApp and insurer websites. Their handling of data is governed by their own policies, and we are not responsible for it.

14. Changes to this policy

We may update this policy from time to time. We will post the new version here with a new "last updated" date and, for material changes, notify you in the app or by email. Continued use after the change means you accept it.

15. Grievance officer and contact

In line with the Information Technology Act, 2000 and the DPDP Act, our grievance officer is:

[Name of grievance officer]
InsuDesk, [address]
Email: Insudesksupport@gmail.com
Phone: +91 9076094316
We aim to acknowledge complaints within 48 hours and resolve them within [15] days. If you are not satisfied, you may complain to the Data Protection Board of India once it is in operation.

See also our Terms & Conditions, Disclaimer and Refund Policy.