Privacy Policy & DPDP Notice

Last Updated: February 2025 · Compliant with Digital Personal Data Protection (DPDP) Act, 2023

Your documents

What happens to your documents

Your rejection letter contains health information. Here is exactly where it goes, what it is used for, and how you remove it.

01
You upload your letter
Your photo or PDF travels over an encrypted connection.
02
It is stored encrypted, in India
Your documents are kept encrypted on servers located in India.
03
It is used only for your claim
AI models run by NVIDIA read it (this may happen outside India) to check your claim against IRDAI rules and write your letters. Nothing else.
04
You delete it — all of it
One button removes your letters, bills, extracted details, drafts and phone number.

At a glance

Stored encrypted in India

What	Why we need it	How long we keep it
Photos of your letter and bills	To read your claim and find counter-points	Not kept: read once, then discarded
Your result, name, policy and claim number	To show your result and fill in your grievance letters	Saved to your account until you delete
Name and email from Google	To sign you in and send deadline reminders	Until you delete your account

Photos of your letter and bills
To read your claim and find counter-points
Not kept: read once, then discarded
Your result, name, policy and claim number
To show your result and fill in your grievance letters
Saved to your account until you delete
Name and email from Google
To sign you in and send deadline reminders
Until you delete your account

We never

Sell or rent your data
Share it with insurers, agents or hospitals
Use it for ads or marketing calls
Keep it after you press delete

Delete means delete

Settings → Delete everything removes every document, extracted detail, draft and your phone number. Everything is gone from our systems within 24 hours.

Go to Delete Protected under the DPDP Act 2023

1. Data Fiduciary & Identity

ClaimSaathi Technologies India Private Limited operates this document preparation service. We act as Data Fiduciary under the DPDP Act 2023. Our primary purpose is analyzing insurance dispute notices and generating consumer grievance documentation.

2. Categories of Health & Identity Data Processed

When you upload a rejection notice or hospital bill, we process:

Patient name and relationship to policyholder
Insurance policy number and claim reference ID
Medical diagnosis, treatment dates, and attending hospital
Cited policy exclusion clauses and claimed expense amounts

3. Data Residency: Indian Cloud Sovereignty

All user records, uploaded files, and optical character recognition extracts are stored exclusively in Amazon Web Services (AWS) Mumbai region (ap-south-1). No health records are transmitted outside India.

4. Uploaded Photos Are Not Stored

Photos you upload are sent securely for analysis, processed in memory and not stored on our servers. While you sign in with Google they are kept briefly on your own device only, then removed. The analysis result is saved to your account until you delete it in Settings.

5. Right to Erasure ("Delete My Data")

Under Section 12 of the DPDP Act, you have the unfettered right to erasure. Navigating to Account Settings and confirming deletion permanently wipes your medical letters, OCR text, and phone associations from our database within 24 hours.

6. Zero Sale of Data

We do not sell, license, or barter your health details, medical history, or phone numbers to third-party insurance brokers, agents, or pharmaceutical companies.