Skip to content

Legal

Privacy Policy

How InsuraVault collects, uses and protects your personal data, and how you can exercise your rights under India's Digital Personal Data Protection Act, 2023.

Effective Version 1.0

The short version

  • We collect what you put into InsuraVault — your details, your family's, your policies and their documents — so we can keep them organised and email you before premiums fall due.
  • We don't sell your data, we don't show ads, and we use no analytics, advertising or crash-reporting trackers.
  • Your data is stored on servers in India. The few service providers who help us run InsuraVault are listed below.
  • You can see, correct, export or delete your data at any time. We answer every request within 30 days, free of charge.
  • Questions or complaints go to our Grievance Officer at support@insuravault.cloud.

1. Who we are

InsuraVault is a digital insurance wallet, available as an Android app and on the web. It is provided by Manne IT Solutions Private Limited (“we”, “us”, “our”), whose registered office is in Hyderabad, Telangana, India. For the purposes of the Digital Personal Data Protection Act, 2023 (the “DPDP Act”) and the Digital Personal Data Protection Rules, 2025, we are the Data Fiduciary for the personal data described in this notice.

This notice covers the InsuraVault Android app, the InsuraVault web portal for customers, and this website. It explains what we collect, why, who helps us process it, how long we keep it, and how you can use your rights.

2. What we collect

We collect only the following personal data.

About you, the account holder

  • Required: your name, email address and phone number.
  • Optional: your gender, date of birth, and address or country.

About your family members

  • Required: name, relationship to you, date of birth and gender.
  • Optional: phone number and email address.
  • Family members may include children — see Family members and children.

About your policies

For each policy: the policy name, insurer, policy number, type, start and end dates, premium amount and frequency, sum assured, coverage term, notes, the policy holder, and your agent's name, phone number and email address.

Premium payment records

Records of premium payments, kept for your own record-keeping. No money moves through InsuraVault, and we never ask for card, bank or UPI details.

Documents and files you upload

Documents and files you attach to a policy — PDFs, images and office files of up to 10 MB each.

Share invitations

When you share a policy: the recipient's email address, the access level you choose (view or edit) and any message you add.

In-app notifications

The notifications we show you inside the app and the web portal, such as a premium coming due or a policy shared with you.

Server logs

When you use the app, the web portal or this website, our servers record your IP address and device or browser details. We use these for security.

We don't collect anything that isn't listed here. InsuraVault contains no advertising, analytics or crash-reporting tools.

3. How we collect it

  • From you, when you create an account, complete your profile, add family members, policies, premium records and documents, or share a policy.
  • From your agent or insurer, if they manage policies for you through InsuraVault. An agent or organisation can create your account, add or manage policies and premium records for you, and invite you by email to see them. When they do, they give us the details they hold about you and your policies.
  • From someone who shares a policy with you, who gives us your email address so we can send you the invitation.
  • Automatically, as server logs, when you use the app, the web portal or this website.

If you add details about someone else — a family member, a policy holder or a person you share with — please make sure you are entitled to do so and let them know.

4. Why we use it

We use your personal data to provide InsuraVault to you, and for nothing else:

  • Purpose
    Create and secure your account, and let you sign in
    Data used
    Your name, email address and phone number; server logs
  • Purpose
    Store and organise your policies, family members, premium records and documents
    Data used
    Policy, family, premium and document data
  • Purpose
    Email you before a premium is due, and send service emails such as invitations
    Data used
    Your name and email address; policy dates and premium details
  • Purpose
    Share a policy with the people you choose, with the access you choose
    Data used
    Share invitations
  • Purpose
    Let your agent or insurer manage the policies they handle for you
    Data used
    Those policies and their premium records
  • Purpose
    Show you in-app notifications
    Data used
    Notifications
  • Purpose
    Keep the service secure, prevent misuse and fix problems
    Data used
    Server logs
  • Purpose
    Answer your requests and meet our legal obligations
    Data used
    Whatever the request or the law requires
  • Purpose
    Read a policy document you choose and fill in its details for you, when you use that option on the web portal
    Data used
    The document you choose

We process your personal data on the basis of your consent, which you give when you create your account and choose what to add, and for the legitimate uses the DPDP Act allows — for example, where you voluntarily give us information for a specific purpose, or where the law requires us to process it.

We do not sell your personal data, use it for advertising, or share it with advertisers or data brokers.

5. Family members and children

InsuraVault is for adults: you must be 18 or over to create an account.

You can add family members, including children, to keep track of the cover that protects them. By adding a family member you confirm that you are their parent or lawful guardian, or that you have their consent — or, for a child, the consent of their parent or lawful guardian — to add their details.

Family members' details are used only to show, in your account, who is covered by which policy. We don't track or monitor children's behaviour, and we never direct advertising at them — we show no advertising at all.

6. Who processes it

A small number of service providers process personal data for us, under contract and only on our instructions:

  • Provider
    Hostinger
    What they do
    Hosting of our servers, databases and your files
    Note
    Servers in India
  • Provider
    Google
    What they do
    Delivery of the emails we send you, such as reminders and invitations
    Note
    Email delivery only
  • Provider
    Our own sign-in service
    What they do
    Authentication, through the hosted page where you sign in
    Note
    Operated by us, not a third party
  • Provider
    Google Play
    What they do
    Distribution and updates of the Android app
    Note
    Governed by Google Play's own terms
  • Provider
    Google (Gemini API)
    What they do
    Reading a policy document you choose so its details can be filled in for you — only when you use that option on the web portal
    Note
    Only the document you pick

Personal data is also visible to:

  • Your agent or insurer, for the policies they manage for you.
  • People you share a policy with, for that policy only, with the access you chose.
  • Authorities, where the law requires us to disclose it — for example, in response to a valid legal order.

We do not sell your personal data and we do not show ads.

7. Where it's stored

Your data is stored on servers in India, hosted by Hostinger. The emails we send you are delivered through Google's email service, which may process those messages outside India. A document you ask the web portal to read is processed by Google's Gemini API, which may also be outside India. Any such transfer is made in line with the DPDP Act.

8. How we protect it

  • Encrypted connections. Everything between your device and our servers travels over HTTPS.
  • Secure sign-in. You sign in on our hosted sign-in page, so your password is never typed into the app.
  • App passcode. You can lock the app with a passcode.
  • Access controls. A policy is visible only to you, the people you share it with, and the agent or insurer who manages it for you.
  • Security logs. Server logs help us detect and investigate misuse.

No system is perfectly secure. If a personal data breach affects you, we will tell you, and the Data Protection Board of India, as the law requires.

9. How long we keep it

  • We keep your data for as long as your account is active.
  • When you delete your account, we delete your data from our live systems immediately.
  • Copies in our backups expire within 90 days.
  • Server logs are kept for up to 90 days.
  • We keep a minimal record that an account was deleted, with no personal details, to show that the request was honoured.

10. Your rights and how to use them

Under the DPDP Act you have the rights below. Using them is free of charge, and we respond within 30 days.

Access
Ask for a summary of the personal data we hold about you, how we process it, and who we have shared it with. You can also download everything yourself at any time — in the app, go to Profile → Data → Export All Policies.
Correction and updating
Correct, complete or update your details. Most of it you can edit directly in the app or on the web; for anything else, email us.
Erasure
Delete your account and your data at any time. See Delete your account.
Withdraw consent
Withdraw your consent at any time, as easily as you gave it, by deleting your account or emailing us. Withdrawal doesn't affect what we did before, but without your consent we can no longer provide the service to you.
Nominate someone
Nominate a person to exercise your rights for you if you die or become unable to act yourself. Email us with their name and contact details.
Grievance redressal
Complain to our Grievance Officer at support@insuravault.cloud. If you are not satisfied with our response, you can complain to the Data Protection Board of India.

How to make a request

Email support@insuravault.cloud from the address registered to your account and tell us which right you want to use. We may ask you to confirm your identity before we act. We reply within 30 days, free of charge.

11. Deleting your account

Delete your account in the app (Profile → Account → Delete account), on the web (Settings → Delete account), or by emailing support@insuravault.cloud from your registered address. Delete your account explains exactly what is deleted, what is kept and for how long.

12. Cookies

  • This website sets no cookies and uses no analytics or tracking. If you switch between the light and dark theme, your browser remembers that choice on your device; it is never sent to us.
  • The customer web portal and our sign-in page use only strictly necessary cookies, to keep you signed in. They are needed for the service to work and are not used for tracking or advertising.

13. Changes to this notice

We will update this notice when our practices change. The effective date and version at the top show which version you are reading. If a change materially affects how we use your personal data, we will tell you in the app or by email before it takes effect.

14. Contact us

Manne IT Solutions Private Limited, Hyderabad, Telangana, India

Back to top