Privacy Policy

We collect information you provide directly to us when you use the COVRD service. This includes:

• Identity information: your name, email address, and mobile number when you submit a question or create an account.
• Policy documents: insurance policy PDFs or other documents you upload to receive answers to your questions. These are processed solely for the purpose of answering your specific query.
• Questions and queries: the questions you submit through the Ask an Expert or Ask our AI forms.
• Communication records: messages you send to our advisors or support team.
• Device and usage data: IP address, browser type, pages visited, and time spent on our platform, collected automatically when you access our website.

We do not collect any financial account information, payment card details, or Aadhaar numbers through our service forms.

We use the information we collect for the following purposes:

• To answer your questions about your health insurance policy accurately and specifically.
• To communicate with you about your query, including follow-up responses from our advisors.
• To improve the quality and accuracy of our AI and advisory service over time.
• To send you service-related communications such as query confirmations and responses.
• To comply with applicable laws and regulations in India.
• To detect and prevent fraud, misuse, or abuse of our platform.

We will not use your information for unsolicited marketing without your explicit consent. If you consent to receiving updates from COVRD, you may withdraw that consent at any time by contacting us.

Your data is stored on secure servers located in India. We implement industry-standard technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using TLS (Transport Layer Security).
• Encryption of data at rest using AES-256 encryption.
• Strict access controls ensuring only authorised personnel can access user data.
• Regular security audits and vulnerability assessments.
• Secure deletion of policy documents after query resolution, unless you have requested storage.

While we take all reasonable precautions, no method of transmission over the internet is completely secure. We encourage you to use a secure network when submitting sensitive documents.

We do not sell, rent, or trade your personal information to any third party. We do not share your data with your insurer, any insurance broker, or any third-party marketing entity.

We may share your information only in the following limited circumstances:

• Service providers: trusted third-party vendors who assist in operating our platform (such as cloud infrastructure providers and AI API providers), bound by strict confidentiality agreements and permitted to use your data only to provide services to COVRD.
• Legal requirements: when required by applicable law, regulation, court order, or government authority in India.
• Business transfers: in the event of a merger, acquisition, or sale of assets, user data may be transferred to the successor entity, subject to the same privacy protections described in this policy.
• With your consent: in any other circumstances, only with your explicit prior consent.

Our website uses cookies and similar tracking technologies to improve your browsing experience and understand how users interact with our platform.

• Essential cookies: required for the website to function correctly. These cannot be disabled.
• Analytics cookies: help us understand page usage and improve our service. These are anonymised and do not identify you personally.
• Preference cookies: remember your settings and preferences across visits.

You can control cookie settings through your browser. Disabling certain cookies may affect the functionality of our website. We do not use advertising or retargeting cookies.

Under the Digital Personal Data Protection Act, 2023 (DPDPA) and applicable Indian law, you have the following rights with respect to your personal data:

• Right to access: you may request a copy of the personal data we hold about you.
• Right to correction: you may request correction of inaccurate or incomplete personal data.
• Right to erasure: you may request deletion of your personal data, subject to legal obligations we may have to retain certain records.
• Right to withdraw consent: where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
• Right to grievance redressal: you have the right to file a complaint with our Data Protection Officer or with the Data Protection Board of India.

To exercise any of these rights, please contact us at privacy@covrd.in. We will respond to all verified requests within 30 days.

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law.

• Policy documents uploaded for a query are deleted within 30 days of query resolution unless you have specifically requested that we retain them for future queries.
• Query records and advisor communications are retained for up to 2 years to support service quality and in the event of a dispute.
• Account information is retained for the duration of your relationship with COVRD and for up to 3 years after account closure.
• Usage and analytics data is retained in anonymised form for up to 5 years.

COVRD is not directed at children under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has submitted personal information to us, please contact us at privacy@covrd.in and we will promptly delete that information.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will notify you by email or by posting a prominent notice on our website at least 14 days before the changes take effect.

Your continued use of COVRD after the effective date of any updated policy constitutes your acceptance of the revised terms. We encourage you to review this policy periodically.

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact our Data Protection Officer:

• Email: privacy@covrd.in
• Post: COVRD Technologies Pvt. Ltd., Delhi, India
• Response time: We aim to respond to all privacy-related enquiries within 30 days.