← Back to home

Privacy

Privacy Policy

Last updated: June 2026

FinDecode (“we”, “us”) helps you understand your own insurance documents. Your privacy is core to how the product is built. This policy explains what we collect, why, and how long we keep it. We are based in India and handle personal data in line with the Digital Personal Data Protection Act, 2023.

What we collect

  • The document you upload: the insurance policy PDF you choose to decode.
  • The generated report: the analysis we produce from that document.
  • Payment metadata: if you buy a report, the transaction ID, amount, and status from our payment provider. We never see or store your full card, UPI, or bank details.
  • Basic technical data: anonymised usage and error logs to keep the service running.

To generate a free report we don’t need your identity. If you buy the full report, our payment provider collects the contact and payment details needed to process it (see “Payments” below).

How we handle your document

  • Encrypted in transit using industry-standard TLS.
  • Used only to generate your report, and nothing else.
  • Deleted as soon as your full report is generated. If you only view the free preview, it’s removed automatically within a day.
  • Never sold, rented, or shared with insurers, brokers, or any third party.
  • Never used to train AI models.

Payments

Payments for the full report are processed by our payment provider (Razorpay). Card and bank details are entered on their secure systems. We never see or store your full payment credentials.

Who processes your data

We share only what each provider needs to do its job:

  • Anthropic (Claude): analyses your document to produce the report. It is not used to train their models.
  • Razorpay: processes payments under its own PCI-compliant policy.
  • Vercel & Supabase: hosting and secure storage for the generated report.

Your choices

Because uploaded documents are deleted once your full report is generated (and within a day otherwise), there is usually nothing left to remove. If you want a report or any associated data deleted sooner, email us and we’ll action it promptly.

Cookies & analytics

We use minimal, privacy-respecting analytics to understand aggregate usage. We do not run advertising trackers.

Changes

We may update this policy as the product evolves. Material changes will be reflected by the “last updated” date above.

Contact

Questions about privacy? Get in touch and we’ll respond.