Privacy Policy

Last updated 9 October 2026

The short version

We read your policy only to explain it to you.

We never sell your data or share it with insurers, agents or brokers.

We don’t make sales calls. We only email you about what you asked for.

You can see, correct or delete your data at any time.

1Who we are

In/Ctrl (beinctrl.com) is run from India (“In/Ctrl”, “we”, “us”). Our company is being registered; its legal name and registered office will be published here as soon as they are issued.

We read health insurance policies that you upload and explain them in plain language. We are not an insurer, broker, agent or any other insurance intermediary, and we don’t sell insurance.

Under the Digital Personal Data Protection Act, 2023, we are the Data Fiduciary for the personal data described in this policy. This policy also follows the Information Technology Act, 2000 and the rules made under it.

2What this policy covers

This policy applies to our website, the policy decoder, the reports we prepare, our newsletter, the Sunday letter, and any emails or messages we send you. It doesn’t cover websites or services run by others, even if we link to them.

3The data we collect

We collect only what we need to prepare and send your report.

Policy documents you upload. These can include names, ages, dates of birth, relationships, addresses, policy numbers, sum insured, premium, and health details such as declared conditions.
Your contact details: your email address, or your WhatsApp number if you choose to use it.
Answers you give us, such as who you expect your policy to cover.
Payment details. Payments are handled by our payment partner. We receive confirmation of the payment, not your full card number or UPI PIN.
How you use our website: pages visited, device and browser type, and approximate location based on your IP address, collected through cookies and similar tools.
Anything you send us when you write to us or use our help form, and any rating or comment you leave on a report.

4Health information and your family’s details

Your policy may include health information and details of other people, such as your spouse, children or parents. We treat this information as sensitive and use it only to prepare your report.

Upload a policy only if you are the policyholder or have the permission of the people named in it. If the policy includes children, you confirm that you are their parent or lawful guardian and agree to us processing their details for your report.

5How we use your data

To read your policy and prepare your report.
To send you your report and a copy for your records.
To send reminders you ask for, such as before your renewal date.
To send the Sunday letter, our newsletter, only if you subscribe.
To process payments and send receipts.
To keep our service secure and prevent misuse.
To meet our legal obligations.

We also use de-identified information, such as which clauses appear in which plans, to improve our reports and to publish aggregate findings, for example how many policies have a room rent limit. This information can’t be used to identify you.

6What we will never do

Sell your personal data.
Share your data with insurers, agents, brokers or banks so they can sell to you.
Use your health information for advertising.
Call you to sell you anything.

9Where your data is stored

We store your data in India where we can. Some of our providers may process data outside India. When they do, we make sure this is permitted under Indian law and that your data is protected to the same standard.

10How long we keep it

Uploaded policy documents: deleted as soon as we have read them. If reading fails, the file is deleted automatically within 48 hours.
Reports: until you delete them or ask us to, and no longer than 24 months after you last open one.
Email address and newsletter preferences: until you unsubscribe or ask us to delete them.
Help requests, ratings and comments: up to 24 months, so we can follow up and improve our reports.
Payment records: for as long as tax and accounting laws require, usually eight years.

When we no longer need your data, we delete it or remove anything that identifies you.

11How we protect your data

We encrypt your data when it travels to us and while it is stored. Only people who need it to run the service can access it, and we keep logs of that access. No system is completely secure, but we work to protect your data and review our safeguards regularly.

If a breach affects your personal data, we will tell you and the Data Protection Board of India, as the law requires.

12Your rights

You can ask us to:

Tell you what personal data we hold about you and how we use it.
Correct or update your data.
Delete your data.
Withdraw your consent.
Nominate someone to exercise these rights for you if you die or are unable to.

Write to privacy@beinctrl.com from the email address you used with us. We will reply within 30 days.

13Cookies

We use cookies that the website needs to work, such as remembering your session. With your consent, we also use analytics cookies to understand how the website is used. You can block or delete cookies in your browser settings. Some parts of the website may not work without them.

14Children

In/Ctrl is meant for adults aged 18 and over. We don’t knowingly collect data from children, except where a child is named in a policy uploaded by their parent or guardian, as described above.

15Changes to this policy

If we change this policy, we will update the date at the top. If the changes are significant, we will also email you before they take effect.

16Grievance Officer

If you have a question or complaint about how we handle your data, contact our Grievance Officer:

Grievance Officer, In/Ctrl
Email: grievance@beinctrl.com

We will acknowledge your complaint within 48 hours and aim to resolve it within 30 days. If you are not satisfied with our response, you can complain to the Data Protection Board of India.