Privacy policy

1. Who we are

AdviceSahi is operated by Argus Fintech Private Limited, Coimbatore, India. We are the data fiduciary for the personal data described here under the Digital Personal Data Protection Act, 2023.

2. What we collect

Account details such as your name, phone number and email. The policy documents you add and the details extracted from them (premium, sum assured, term, the life assured's name and date of birth, and similar fields). For advisors, IRDAI/ARN licence details, bio, languages and the cities you work in. Payment details needed to process a subscription — we never see or store your card or bank details ourselves (see Section 11). Basic device and usage information needed to run and secure the app.

3. Gmail access

If you connect Gmail, we ask only for read-only access and use it only to find emails from insurers that contain your policy information. We do not send, edit or delete email, and we do not read other messages. You can disconnect at any time from the app or your Google account.

AdviceSahi's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

4. How we use your information

To read your policies and build your report, to run your account, to verify advisor licences, to keep the service secure, and to contact you about the service. We do not sell your personal data, and we never use your data to train anyone's general-purpose AI models.

We share limited personal data with a small number of service providers, strictly to provide the service and only on our instructions:

• Google Gemini — to read and extract details from the policy documents you upload or import, and to search for insurer emails if you connect Gmail. This may involve sending document content to Google's servers, which can be located outside India; use is limited to providing this feature.
• Razorpay (India) — to process advisor subscription payments.
• DigiLocker (Government of India) — to fetch policy documents from your DigiLocker account, only when you choose to and approve it each time.
• Twilio — to send the one-time password (OTP) that verifies your phone number. This may involve processing your phone number outside India, strictly to deliver that message.

AdviceSahi's Gmail integration has passed Google's CASA (Cloud Application Security Assessment) tier-2 review, and our access and use of Google user data complies with the Google API Services User Data Policy, including its Limited Use requirements, and with Google's other applicable terms of service.

5. Sharing with advisors

Your report goes to an advisor only if you choose that advisor and give consent to share. Reading your policies and sharing your report are two separate consents. You can withdraw either at any time — withdrawing removes that advisor's access to your report and contact details immediately. An advisor you have never chosen, or have disconnected from, cannot see your report or your contact details.

6. Security

Data is encrypted in transit and at rest. Access inside our team is limited and logged. Shared reports are protected against screenshots where the device allows. No system is perfectly secure, and we work to reduce risk continuously.

If a personal data breach happens that is likely to affect you, we will notify the Data Protection Board of India and you, without undue delay, as required under the DPDP Act.

7. Retention and deletion

We keep your data only while your account is active, or as long as we need it to provide the service. If you are a policy holder, you can delete your account at any time from the app; we remove your personal data immediately, except records we are legally required to keep, such as payment records.

If you are an advisor, write to us to close your account; we remove your personal data the same way once any billing is settled, though an advisor's genuine client and transaction records may be retained in de-identified form where needed for the advisor's own regulatory recordkeeping. If we ever suspend or end an account for breaking these Terms, we keep that account's data for up to 30 days to allow an appeal, then delete it in the same way. Write to our Grievance Officer (Section 9) if you need help with any of this.

8. Your rights

Under the DPDP Act you have the right to: access the personal data we hold about you; correct or update it; have it erased; withdraw your consent at any time (this does not affect anything we did with your data before you withdrew it); nominate another individual to exercise these rights on your behalf if you become unable to, for example due to death or incapacity; and raise a grievance with us.

Write to our Grievance Officer (Section 9) to use any of these rights. If you are not satisfied with how we resolve a complaint, you may escalate it to the Data Protection Board of India.

9. Grievance officer

Grievance Officer: Kanchan Khilnani. Email: support@advicesahi.com. We will acknowledge a complaint within 7 days and aim to resolve it within 30 days. If you remain unsatisfied with our response, you may escalate your complaint to the Data Protection Board of India.

10. Children

AdviceSahi is for people aged 18 and over, and we do not knowingly collect personal data from anyone under 18. If we learn that we have collected a child's data without the consent of a parent or lawful guardian, we will delete it. If you believe a child has used AdviceSahi, write to our Grievance Officer (Section 9).

11. Payments

Advisor plan payments are handled by Razorpay under its own privacy terms. We do not store card numbers.

12. Communications

We send service messages, and other messages only where you have agreed. You can opt out of non-essential messages at any time.

13. Changes to this policy

If we change this policy in a material way, we will let you know in the app or by email.

14. Contact

General privacy questions: support@advicesahi.com. To exercise your rights under the DPDP Act, or to raise a grievance, contact our Grievance Officer (Section 9).