Privacy Policy

Claim Saathi Technologies Private Limited(“Claim Saathi”, “we”) helps Indian health-insurance policyholders understand and prepare their claims. This policy explains what we collect, why, who we share it with, and the choices and rights you have — consistent with India’s Digital Personal Data Protection (DPDP) Act, 2023 and other applicable law. We are the “Data Fiduciary” for the personal data we process about you. We are policyholder-side and never sell your data.

Data residency

Your personal data is stored at rest in India (AWS Mumbai, ap-south-1) and encrypted. We do not store your personal data outside India. The one exception is analysis: only PII-masked text is sent to AI providers that process outside India (see below) — never your unmasked personal data.

What we collect

Account & contact data — your email and name; and an optional mobile number if you add one. Case data you enter — insurer, policy, claim and member details. Documents you upload — policies, bills, discharge summaries and insurer letters. Payment data — if we introduce paid features, our payment partner processes them; we do not store your full card/bank details. Technical & usage data — limited device/browser information and privacy-respecting analytics needed to run and improve the service. An optional mobile number is used only to send you claim or grievance deadline reminders (over WhatsApp/SMS); it is never used to sign you in, and you can remove it anytime from your settings.

Cookies & analytics

We use strictly necessary cookies to keep you signed in, your browser’s local storage for small preferences (such as your chosen language), and limited, privacy-respecting analytics to understand and improve the service. We do not use your data for third-party advertising.

Document & AI processing

Documents and text you submit for analysis are processed by automated systems (OCR and AI models) solely to provide the feature you asked for. Before any document text is sent to an AI model, we mask personal identifiers (such as name, Aadhaar, and phone number); we do not send unmasked personal data across borders. Content sent to our AI providers is not used to train their models.

Who we share your data with (processors)

We share data only with service providers that process it on our behalf, under contract and only to run the service: Supabase (database, authentication and encrypted document storage, in India); Amazon Web Services (document text extraction / OCR, in the Mumbai region); Anthropic (Claude) and OpenAI (AI analysis and search embeddings of masked text — not used to train their models); our email provider (ZeptoMail) for account and transactional messages; and Vercelfor application hosting and delivery. If you opt in to WhatsApp reminders, we use Meta’s WhatsApp Business API to send them; if we introduce paid features, a payment partner will process those. We may also disclose data where required by law or a lawful request from a public authority. We do not sell your data or share it with insurers or brokers.

How long we keep your data

We keep your account and case data for as long as your account is active, so you can return to a claim. When you delete a document, a case, or your account, the corresponding personal data is removed from our active systems; limited records may be retained where the law requires. You can ask us to delete your data at any time (see below).

Consent

We capture your consent for account creation, document processing, and cross-border AI processing before those activities occur. Marketing communication is separate and optional. You can withdraw any consent at any time from your account settings or by writing to us — withdrawing the document-processing or AI consent means new claims can’t be analysed, but your existing data stays under your control to view or delete.

Your rights & deletion

Under the DPDP Act you can access a summary of the personal data we hold, correct or update it, withdraw consent, and request erasure. You can delete a document, an entire case, or your whole account & all its data yourself at any time from Settings → Delete account. To exercise any other right, email support@claimsaathi.co.in. You may also nominate another individual to exercise your rights in the event of your death or incapacity. If you are not satisfied with how we handle a data request, you may escalate to the Data Protection Board of India.

Security

We use appropriate technical and organisational measures to protect your data — including access controls, row-level database security so you can only access your own records, private document storage, and encryption in transit and at rest. No system is perfectly secure, but we work hard to safeguard your information and will notify you and the Data Protection Board of any personal data breach as required by law.

Children

Claim Saathi is intended for adults (18 and over). We do not knowingly create accounts for children. If you believe a minor has provided us data, contact us and we will remove it.

Grievances & data-protection contact

For any privacy question, complaint, or data request, contact our Grievance Officer, Mrs. Hemangi Mane,at contact@claimsaathi.co.in, or by post at Claim Saathi Technologies Private Limited, 5/1802, Oxford, Regency Heights, Near Brahmand Phase 1, Azad Nagar Circle, Kolshet Road, Thane, Maharashtra 400607, India. We aim to acknowledge grievances promptly and resolve them within the timelines required under the applicable rules. If you are not satisfied with our response, you may escalate to the Data Protection Board of India.

Changes to this policy

We may update this policy as the product or the law evolves. We will post material changes on this page and update the date above.

What we are not

Claim Saathi is a preparation aid. It is not a lawyer, insurer, or broker, and does not guarantee any claim outcome.