Privacy Policy

1. Who We Are and Scope of This Policy

DYS Family Raksha Insurance Web Aggregators Private Limited, which operates as CoverTiger, provides the CoverTiger website, insurance comparison and assistance services, and the CoverTiger integration for ChatGPT and other supported conversational platforms (the CoverTiger Plugin). In this Policy, CoverTiger is also referred to as we, us, or our.

This Policy explains what personal data we collect, why we use it, who may receive it, how long we retain it, and the controls available to you. It applies when you visit our website, request an insurance quote or callback, apply for an insurance product through us, contact us, or use the CoverTiger Plugin.

2. Personal Data We Collect

The data we collect depends on the service you choose and may include:

• Identity and contact data: name, email address, mobile number, postal address, city, PIN code, date of birth or age, and gender.
• Household and insurance-profile data:family relationships, ages of people to be insured, nominee or appointee details, desired coverage, benefit priorities, selected plans, insurer preferences, policy tenure, occupation, income range, and smoking status.
• Health and lifestyle data: medical conditions, treatment or lifestyle information needed for a quote, proposal, underwriting, or policy servicing. We collect this data only when needed for the service you request and with the consent or other legal basis required by applicable law.
• Verification and transaction data: PAN or other KYC documents, photographs, signatures, proposal details, premium and payment status, policy information, claims-related information, and records of your consent. Payment credentials are handled through authorised payment providers where applicable.
• Communications: emails, support requests, callback preferences, survey responses, and telephone, WhatsApp, or chat communications, including recordings where notice and consent are required.
• Device and usage data: IP address, device and browser type, operating system, pages or features used, referral source, approximate location derived from IP, cookie identifiers, and security or diagnostic events.

We collect data directly from you, from a conversational platform when you choose to send information to a CoverTiger tool, from insurers and service providers involved in your request, and automatically from your device when you use our website.

3. Data Used by the CoverTiger Plugin

The CoverTiger Plugin uses only the information needed for the tool you ask it to run:

• Plan discovery and comparison may use benefit priorities, plan identifiers, and an optional insurer preference.
• Hospital search may use a city or area, speciality, plan, or insurer.
• Quote requests may use household relationships and ages, city or PIN code, desired sum insured, and benefit priorities.
• Advisor callback requests use your name, phone number, and, if you provide them, email address, city, preferred callback time, and consent to be contacted.

The CoverTiger Plugin does not request or accept payment card details, passwords, one-time passwords, API keys, government identity numbers, diagnoses, or medical records. It does not receive your full ChatGPT conversation history; it receives only the fields sent to a CoverTiger tool for the request you approve. Do not include unnecessary personal or sensitive information in free-text fields.

4. Why We Use Personal Data

We use personal data to:

• provide plan discovery, comparison, hospital search, quotes, callbacks, applications, and policy-support services;
• share a request with the insurer or authorised service provider selected by or relevant to you;
• verify identity, prevent fraud, maintain security, and troubleshoot the service;
• communicate about your request, policy, service messages, complaints, and customer support;
• send marketing communications where you have consented or where otherwise permitted, and record your preferences;
• measure and improve our website and tools using aggregated or de-identified insights where practical; and
• comply with insurance, tax, accounting, anti-fraud, recordkeeping, and other legal or regulatory obligations.

5. Who Receives Personal Data

We do not sell or rent personal data. We disclose only the data reasonably necessary to the following categories of recipients:

• Insurance participants: insurers, reinsurers, third-party administrators, hospitals, diagnostic providers, and authorised insurance personnel involved in providing a quote, underwriting, issuing or servicing a policy, or handling a claim.
• Service providers: hosting, cloud, security, analytics, customer-support, CRM, telephony, email, messaging, KYC, document-processing, and payment providers that process data for the stated purposes.
• Authorities and professional advisers:IRDAI, courts, law-enforcement or other government bodies, auditors, lawyers, and advisers where disclosure is required or reasonably necessary.
• Corporate transaction recipients: an actual or proposed buyer, investor, lender, or successor, subject to appropriate confidentiality and legal safeguards.

If you use the CoverTiger Plugin through ChatGPT or another conversational platform, that platform processes your conversation and tool interactions under its own terms and privacy policy. CoverTiger returns only the information needed to answer the tool request.

6. Retention Periods

We use the following retention periods. When more than one period applies, we keep the data for the longer period required by law or needed for a documented legal claim.

• Transient plugin requests: plan discovery, comparison, and hospital-search request data is processed in memory for the request and is not separately stored by the CoverTiger Plugin. Infrastructure security logs, if generated, are retained for up to 180 days.
• Insurance and regulated records: quote, lead, callback, proposal, policy, consent, transaction, support, and related communication records that form part of our regulated insurance web-aggregator records are kept for at least 10 years from the end of the year to which they relate. Records connected with a dispute, complaint, investigation, or court proceeding are kept until it is finally resolved. Once the applicable period ends, records are deleted or irreversibly anonymised in the next annual disposal cycle.
• General inquiries and marketing leads:records that do not become regulated insurance records are kept for up to 2 years after your last interaction. A marketing suppression record may be kept after you opt out so that we can honour your choice.
• Website analytics and cookies: analytics identifiers and cookie data are retained for up to 13 months, unless you delete them sooner using your browser or available cookie controls.
• Backups: deleted data may remain in encrypted, access-restricted backups for up to 90 days before being overwritten.

7. Your Choices and Rights

Subject to applicable law and mandatory insurance recordkeeping, you may:

• ask what personal data we process about you;
• request access to or correction of inaccurate data;
• request deletion of data that is no longer needed or legally required;
• withdraw consent for future processing where processing is based on consent;
• opt out of marketing by using the unsubscribe control in a message or contacting us;
• decline to provide optional plugin fields or decline a callback; and
• raise a grievance or nominate another individual to exercise rights where applicable.

To exercise a privacy right, email contact@covertiger.com from the address associated with your request or provide the phone number used with CoverTiger. We may ask for limited additional information to verify your identity. You may also use our grievance redressal process. We will act within the period required by applicable law and explain if a legal retention duty prevents deletion.

8. Security and International Processing

We use reasonable technical and organisational safeguards designed to protect personal data, including access controls, transport encryption, monitoring, and restricted service-provider access. No online service can guarantee absolute security. Some service providers may process data outside your state or country; where applicable, we use contractual and legal safeguards and comply with transfer restrictions.

9. Children and Dependent Information

CoverTiger services are intended for adults. An adult may provide limited information about a child or other dependent when it is necessary to obtain or service family insurance coverage and the adult is authorised to do so. The CoverTiger Plugin is not designed to collect information directly from children.

10. Updates to This Policy

We may update this Policy to reflect changes to our services or legal obligations. We will publish the revised Policy on this page, update the date above, and provide additional notice where required.

11. Contact Information

For privacy questions, requests, or complaints, contact us at: