Privacy Policy

Welcome to PurePolicy ("the Platform", "App", "Service"), an InsurTech multi-line renewal tracking software-as-a-service (SaaS) created and operated by Bharat SoftLogix (referred to as "we", "our", "us", or "Company").

This Privacy Policy explains how we collect, use, store, process, and protect information when insurance agents, brokers, and advisors ("Users", "Brokers") use PurePolicy via our web portal (purepolicy.bharatsoftlogix.com) and Android mobile application.

By signing in, accessing, or using PurePolicy, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree, please discontinue using the Service immediately.

To provide renewal calculations, WhatsApp notice generation, and secure cloud storage, PurePolicy processes the following categories of data:

A. Broker Account Information (Provided by You)

• Google Authentication Profile: When you sign in via Google OAuth 2.0, we receive your verified Google account name, primary email address, profile picture URL, and unique Google account identifier.
• Registered WhatsApp Business Phone: The official mobile number you bind to your PurePolicy account for client communication.
• Subscription & Licensing Data: Trial start dates, subscription expiry timestamps, and payment plan records (e.g. Free Trial, Monthly, Annual).

B. Policyholder & Client Data (Uploaded by Brokers)

As an insurance broker, you input insurance policy records for your customers. This data includes:

• Policyholder Identification: Client/Business full name, 10-digit mobile contact number.
• Insurance Policy Records: Policy number, insurance company / underwriter name, insurance line/category (e.g., Motor/Vehicle, Health, Life, Fire, Marine, SME, Other), vehicle registration number (for motor policies), policy inception/start date, and policy expiration date.
• Financial Figures: Annual premium amounts for renewals.
• Policy PDF Documents: PDF copies of insurance schedules or certificates uploaded by the broker to our cloud storage vault.

Under India's Digital Personal Data Protection (DPDP) Act, 2023, we process personal data strictly on the basis of contractual necessity and legitimate business purposes:

• Calculating the 11-Month Renewal Radar: Automatically computing renewal alerts 30 days prior to policy expiration so clients do not suffer lapsed coverage.
• Facilitating WhatsApp Renewal Dispatch: Generating structured renewal reminders pre-filled with client policy details, enabling brokers to send notices directly via WhatsApp.
• Multi-Tenant Isolation & Cloud Backup: Providing an encrypted, isolated database partition where brokers can securely organize, search, and retrieve their clients' policy documents from any device.
• Subscription Administration: Validating active licenses, enforcing 180-day complimentary trial periods, and preventing unauthorized account sharing.
• Security & Anti-Abuse: Protecting our database against unauthorized scraping, identity spoofing, and unauthorized account access.

We work with trusted enterprise cloud infrastructure providers to operate PurePolicy:

• Google Cloud Platform & Firebase (Mumbai, India): In strict compliance with the DPDP Act, 2023 (Section 16) and IRDAI (Information & Cyber Security) Guidelines, all Cloud Firestore databases, customer records, and hosting assets are physically hosted within the Republic of India at Google Cloud's MeitY-empanelled Mumbai datacenter (asia-south1). Google Cloud enforces industry-leading ISO 27001, SOC 1/2/3, and PCI-DSS compliance.
• Meta Platforms / WhatsApp: When you tap "Send WhatsApp" in PurePolicy, our platform triggers a standard deep link (wa.me) on your local device. The message is dispatched directly through your WhatsApp client under your control.

We implement enterprise-grade technical and organizational security measures to protect your sensitive data:

• Encryption in Transit: All communications between your browser/app and our servers are encrypted using modern Transport Layer Security (TLS 1.3 / HTTPS).
• Encryption at Rest: All policy documents, client phone numbers, and database entries are encrypted at rest using AES-256 bit encryption.
• Database-Level Multi-Tenant Isolation: Our Cloud Firestore and Cloud Storage security rules strictly prohibit any broker from accessing, reading, or modifying another broker's policies or uploaded documents.
• Anti-Tamper Phone Locks: Once registered, a broker's business mobile number is cryptographically locked to prevent unauthorized account switching.

We retain your data only for as long as necessary to provide the PurePolicy service to your brokerage:

• Active Accounts: Your policy database and uploaded documents are preserved throughout your active trial and paid subscription period.
• In-App Data Deletion: You may independently delete specific client records, policy documents, and data entries directly within the PurePolicy application at any time. Once deleted, these records are permanently removed from active databases.
• Self-Service Account Purge: Under India's DPDP Act, 2023, you have the right to permanently erase your account and all associated client data. You can initiate this directly within the app by opening Profile Settings → Delete Account & Data. To protect against accidental loss, execution requires typing an explicit confirmation phrase (DELETE).
• Alternative Erasure Request: You may also submit an erasure request by emailing purepolicy.bsl@gmail.com from your registered Google email address with the subject line "Data Erasure Request - [Your Email]". Upon verification, all your policies, client records, and PDF documents will be permanently purged from our cloud servers within 30 days.
• Right to Nominate (Section 14, DPDP Act): You have the right to nominate an individual who, in the event of your death or incapacity, shall exercise your rights in relation to your brokerage data. You may designate a nominee by emailing purepolicy.bsl@gmail.com with proof of identity.

PurePolicy is strictly a professional, business-to-business (B2B) SaaS intended solely for adult licensed insurance intermediaries, brokers, and advisors aged eighteen (18) years or older. We do not knowingly solicit, collect, process, or monitor personal data of children under the age of 18.

In accordance with Section 8(6) of the DPDP Act, 2023 and the 2025 Rules, in the unlikely event of any personal data breach affecting confidentiality, integrity, or availability of your data, Bharat SoftLogix will promptly notify the Data Protection Board of India (DPBI) and affected users without delay, detailing the nature of the breach, affected data categories, and immediate remedial actions.

PurePolicy's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements:

• We only request minimum necessary scopes: basic profile and email address for identification.
• We do not transfer Google user data to external advertising networks or data brokers.
• Humans do not read your private policy data unless explicitly requested by you for technical support.

We may update this Privacy Policy from time to time to reflect enhancements to our features, changes in law, or regulatory mandates. When changes are made, the "Last Updated" date at the top will be revised. Continued use of PurePolicy following any modifications constitutes your acknowledgment and acceptance of the revised policy.

In accordance with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023, if you have any questions, feedback, or grievances regarding our privacy practices, please contact our designated Grievance Officer: