Privacy Policy

Who we are

RenewLink(“we”, “us”) operates this application. Each broker or agent using the app is the owner (“Data Fiduciary” under the DPDP Act 2023) of the customer information they enter, and we process that information on their behalf and to run the service.

What we collect

• Your account: your mobile number, name, role, and login/device activity.
• Customers you add: name, mobile, email, city, nominee, and their vehicle and policy details (registration, policy number, premium, insurer, dates).
• Documents you upload: policy PDFs, ID and payment proofs. These are stored privately and served only through short-lived signed links.
• Technical data: the IP address and device used to sign in, and (if you allow it) a push-notification token for reminders.
• WhatsApp messages: if you message our WhatsApp number, we receive that message and anything you send with it — including policy documents and contacts you choose to share. If you turn on WhatsApp updates, we also use your mobile number to send you a daily summary.

Why we use it

Only to provide the service you signed up for: showing your renewal worklist, sending reminders, estimating commission, letting you message customers, and — where you choose to — sharing specific renewals with an agent on your team. We do not sell your data or use it for advertising.

If you send a policy document or contacts to our WhatsApp number, we read it only to add that policy to your book or to fill in customer mobile numbers you are missing, and we reply to tell you what changed. If you turn on WhatsApp updates in Settings, we send you one message each morning with how many renewals are due and what they are worth. That is off unless you switch it on, and you can switch it off again at any time.

Who we share it with

We use trusted service providers only to run the app. They process data on our instructions, for the purpose listed and nothing else:

• Vercel — hosting and compute.
• Supabase — database and file storage.
• Message Central — sends your login OTP (sees your mobile number).
• Google Firebase — delivers push notifications (device token only).
• Meta (WhatsApp) — carries messages to and from our WhatsApp number. Anything you send us on WhatsApp passes through Meta, including any policy document or contacts you choose to share. We only message you there if you turn WhatsApp updates on.
• Groq — generates website copy when you press “Generate with AI”. Only the business details you entered (name, experience, cities, insurance types) are sent — never customer data.

Groq and Meta process data outside India. For Groq we only send the specific inputs above, and only when you actively use that feature. For Meta, only what you choose to send our WhatsApp number, and the summary you asked us to send you. We also share data when you direct us to — for example, tagging a renewal to one of your agents.

Your website: images you upload for your public advisor site (logo, cover, profile photo) are stored in a public bucket so they can be shown on that site — treat them as public and never upload documents there. Enquiries submitted on your site go only to your own account.

How we protect it

Every account’s data is isolated so one user can never see another’s. Uploads live in a private store and are never public. Login tokens are stored only as a one-way hash, and data is encrypted in transit. No system is perfectly secure, but we apply reasonable safeguards for the sensitive nature of this data.

How long we keep it

We keep your account and book for as long as you use RenewLink. If you delete your account, we erase your data and uploaded documents. Some minimal login/security records may be retained briefly as required for security and legal reasons.

Your rights

You can access and correct your information in the app, download a copy of your data, and delete your account and its data at any time from Settings. To exercise any right or raise a concern, contact our grievance officer below.

Sensitive documents

Please upload only documents you actually need for a policy. We do not accept Aadhaar— there is no Aadhaar document type, and you should not upload one. Where identity proof is genuinely required, use a masked copy. You are responsible for having your customers’ consent for the information you enter about them.

Grievance officer

For any privacy question, request, or complaint:

Apurv Prajapati
apurvprajapati24@gmail.com

We aim to respond within a reasonable time as required under applicable Indian law.

Changes

If we make material changes to this policy we will update the date above and ask you to agree again the next time you open the app.