Privacy Policy

Last updated: July 28, 2025

This Privacy Policy describes Our policies and procedures on the collection, use and disclosure of Your information when You use the Service and tells You about Your privacy rights and how the law protects You.

We use Your Personal data to provide and improve the Service. By using the Service, You agree to the collection and use of general profile information in accordance with this Privacy Policy.

You means the individual accessing or using the Service, or the company, or other legal entity on behalf of which such individual is accessing or using the Service, as applicable.

Collecting and Using Your Personal Data

Types of Data Collected

Personal Data

While using Our Service, We may ask You to provide Us with certain personally identifiable information that can be used to contact or identify You. Personally identifiable information may include, but is not limited to:

Email address - Needed for login, account recovery, and communication.
First name and last name - Used to personalize the user experience and identify the account
Phone number - (Only required for SMS-based two-factor authentication to improve account security)
Address, State, Province, ZIP/Postal code, City
Usage Data

Usage Data

Usage Data is collected automatically when using the Service.

Usage Data may include information such as Your Device's Internet Protocol address (e.g. IP address), browser type, browser version, the pages of our Service that You visit, the time and date of Your visit, the time spent on those pages, unique device identifiers and other diagnostic data.

When You access the Service by or through a mobile device, We(Service vendors like Google Analytics) may collect certain information automatically, including, but not limited to, the type of mobile device You use, Your mobile device unique ID, the IP address of Your mobile device, Your mobile operating system, the type of mobile Internet browser You use, unique device identifiers and other diagnostic data.

We may also collect information that Your browser sends whenever You visit our Service or when You access the Service by or through a mobile device.

Phone Number Usage and Privacy:

We collect your phone number only to enable SMS-based two-factor authentication (2FA) for securing your account. Your number is never sold or used for marketing and is shared only with trusted providers for sending verification codes. We keep your phone number only as long as needed and protect it with strong security measure.

Tracking Technologies and Cookies

We use Cookies and similar tracking technologies to track the activity on Our Service and store certain information. Tracking technologies used are tags, and scripts to collect and track information and to improve and analyze Our Service. The technologies We use may include:

Cookies or Browser Cookies. A cookie is a small file placed on Your Device. You can instruct Your browser to refuse all Cookies or to indicate when a Cookie is being sent. However, if You do not accept Cookies, You may not be able to use some parts of our Service. Unless you have adjusted Your browser setting so that it will refuse Cookies, our Service may use Cookies.
Flash Cookies. Certain features of our Service may use local stored objects (or Flash Cookies) to collect and store information about Your preferences or Your activity on our Service. Flash Cookies are not managed by the same browser settings as those used for Browser Cookies. For more information on how You can delete Flash Cookies, please read "Where can I change the settings for disabling, or deleting local shared objects?" available at https://helpx.adobe.com/flash-player/kb/disable-local-shared-objects-flash.html#main_Where_can_I_change_the_settings_for_disabling__or_deleting_local_shared_objects_
Web Beacons. Certain sections of our Service and our emails may contain small electronic files known as web beacons (also referred to as clear gifs, pixel tags, and single-pixel gifs) that permit the Company, for example, to count users who have visited those pages or opened an email and for other related website statistics (for example, recording the popularity of a certain section and verifying system and server integrity).

Cookies can be "Persistent" or "Session" Cookies. Persistent Cookies remain on Your personal computer or mobile device when You go offline, while Session Cookies are deleted as soon as You close Your web browser.

We use both Session and Persistent Cookies for the purposes set out below:

Necessary / Essential Cookies

Type: Session Cookies
Administered by: Us
Purpose: These Cookies are essential to provide You with services available through the Website and to enable You to use some of its features. They help to authenticate users and prevent fraudulent use of user accounts. Without these Cookies, the services that You have asked for cannot be provided, and We only use these Cookies to provide You with those services.

Cookies Policy / Notice Acceptance Cookies

Type: Persistent Cookies
Administered by: Us
Purpose: These Cookies identify if users have accepted the use of cookies on the Website.

Functionality Cookies

Type: Persistent Cookies
Administered by: Us
Purpose: These Cookies allow us to remember choices You make when You use the Website, such as remembering your login details or language preference. The purpose of these Cookies is to provide You with a more personal experience and to avoid You having to re-enter your preferences every time You use the Website.

For more information about the cookies we use and your choices regarding cookies, please visit our Cookies Policy or the Cookies section of our Privacy Policy.

Use of Your Personal Data

The Company may use Personal Data for the following purposes:

To provide and maintain our Service, including to monitor the usage of our Service.
To manage Your Account: to manage Your registration as a user of the Service. The Personal Data You provide can give You access to different functionalities of the Service that are available to You as a registered user.
For the performance of a contract: the development, compliance and undertaking of the purchase contract for the products, items or services You have purchased or of any other contract with Us through the Service.
To contact You: To contact You by email, telephone calls, SMS, or other equivalent forms of electronic communication, such as a mobile application's push notifications regarding updates or informative communications related to the functionalities, products or contracted services, including the security updates, when necessary or reasonable for their implementation.
To provide You with news, special offers and general information about other goods, services and events which we offer that are similar to those that you have already purchased or enquired about unless You have opted not to receive such information.
To manage Your requests: To attend and manage Your requests to Us.
For business transfers: We may use Your information to evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which Personal Data held by Us about our Service users is among the assets transferred.
For other purposes: We (through google services) may use Your information for other purposes, such as data analysis, identifying usage trends, determining the effectiveness of our promotional campaigns and to evaluate and improve our Service, products, services, marketing and your experience.

We may share Your personal information in the following situations:

With Service Providers: We may share Your personal information with Service Providers to monitor and analyze the use of our Service, to contact You.
For business transfers: We may share or transfer Your personal information in connection with, or during negotiations of, any merger, sale of Company assets, financing, or acquisition of all or a portion of Our business to another company.
With Affiliates: We may share Your information with Our affiliates, in which case we will require those affiliates to honor this Privacy Policy. Affiliates include Our parent company and any other subsidiaries, joint venture partners or other companies that We control or that are under common control with Us.
With Your consent: We may disclose Your personal information for any other purpose with Your consent.

Contacts Access

Our app may request access to your device’s contacts to improve your experience and enhance app functionality.

We do not store your contact information on our servers unless you explicitly authorize it.

Your contacts are never shared with third parties. This information is used only to enhance your app experience, such as enabling personalized features.

Retention of Your Personal Data

The Company will retain Your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use Your Personal Data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.

The Company will also retain Usage Data for internal analysis purposes. Usage Data is generally retained for a shorter period of time, except when this data is used to strengthen the security or to improve the functionality of Our Service, or We are legally obligated to retain this data for longer time periods.

Transfer of Your Personal Data

Your information, including Personal Data, is processed at the Company's operating offices and in any other places where the parties involved in the processing are located. It means that this information may be transferred to — and maintained on — computers located outside of Your state, province, country or other governmental jurisdiction where the data protection laws may differ than those from Your jurisdiction.

Your consent to this Privacy Policy followed by Your submission of such information represents Your agreement to that transfer.

The Company will take all steps reasonably necessary to ensure that Your data is treated securely and in accordance with this Privacy Policy and no transfer of Your Personal Data will take place to an organization or a country unless there are adequate controls in place including the security of Your data and other personal information.

Disclosure of Your Personal Data

Business Transactions

If the Company is involved in a merger, acquisition or asset sale, Your Personal Data may be transferred. We will provide notice before Your Personal Data is transferred and becomes subject to a different Privacy Policy.

Law enforcement

Under certain circumstances, the Company may be required to disclose Your Personal Data if required to do so by law or in response to valid requests by public authorities (e.g. a court or a government agency).

Other legal requirements

The Company may disclose Your Personal Data in the good faith belief that such action is necessary to:

Comply with a legal obligation
Protect and defend the rights or property of the Company
Prevent or investigate possible wrongdoing in connection with the Service
Protect the personal safety of Users of the Service or the public
Protect against legal liability

Security of Your Personal Data

The security of Your Personal Data is important to Us, and we value the data with very high priority. Your data is 100% secure with us. We strive to use commercially acceptable means to protect Your Personal Data, We guarantee its an absolute security.

Caller ID Feature Privacy (Android Only)

This feature is available only on Android devices. Our app requests permission only when you enable caller identification, to temporarily check if an incoming call is from a saved contact. No contacts or call data are saved, collected, or shared. This check is done locally on your device. You can deny these permissions at any time.

How to Request Deletion of Your Data

You can ask us to delete your account and the personal data we hold about you at any time. This includes your name, email address, mobile number, and the data you or your agency stored in InsureCRM (clients, policies, documents, claims, renewals and notes). It also includes the phone number and one-time passwords (OTP) we use to verify you through Firebase or WhatsApp.

You can request deletion in any of these ways:

In the mobile app: go to Profile → Settings → Delete Account, enter a reason and confirm.
By email: write to hello@fronseye.com with the subject "Data Deletion Request". Send it from the email address on your account or include the mobile number you registered with.

What happens next:

Within 3 business days we confirm your request and may ask you to verify your identity, so that no one else can delete your data.
Your account is deactivated as soon as you confirm, and you can no longer sign in.
Within 30 days of verification we permanently delete your personal data and account data from our live systems. Copies in encrypted backups are overwritten within a further 90 days.
We send you a confirmation by email or WhatsApp once deletion is complete.

Data we may keep: we may keep limited records, such as invoices and payment transactions, where the law requires us to (for example, tax and accounting laws). We keep these only for the required period and do not use them for any other purpose.

If you are the admin of an agency account: deleting your admin account closes the whole company workspace. That deletes the data of all users and clients in it.

WhatsApp messages: we use the WhatsApp Business Platform (Meta) only to send OTPs and the service notifications you or your agency enabled.

For questions about your data, contact hello@fronseye.com.

What Data We Collect and Process

Below we list the personal data we collect, why we use it, and who we share it with. We do not sell personal data and do not use it for advertising.

Account and sign-up data

What: name, salutation, email address, mobile number and country code, password (stored encrypted), profile photo, gender, language and time-zone preferences, and the agency (company) name and address.
Why: to create and secure your account, sign you in, and contact you about your account and subscription.

Phone verification (OTP)

What: your mobile number, the one-time password (OTP) sent to it, and whether verification succeeded.
Why: to verify that the mobile number belongs to you during sign-up and sign-in. We first send the OTP by SMS through Google Firebase Authentication. Only if Firebase SMS verification fails do we send the OTP by WhatsApp through the WhatsApp Business Platform (Meta). OTPs expire after 5 minutes and are used only for verification.

WhatsApp OTP for sign-up and login (fallback only)

When: only when Firebase SMS verification fails during sign-up or login. If Firebase works, WhatsApp is not used at all.
What: we process your mobile (WhatsApp) number, the 6-digit OTP we send to it, whether the message was sent successfully, and whether you verified it.
Why: only to deliver your sign-up or sign-in OTP and confirm your mobile number. We use this WhatsApp login integration for nothing else: no marketing, no notifications and no profiling. We do not read or access your WhatsApp chats, contacts or profile.
How long: each OTP expires after 5 minutes and is replaced when a new one is requested. We keep your mobile number and its verification status while your account is active. If sending fails, we keep a technical error log with the mobile number for up to 14 days for troubleshooting, then delete it.

WhatsApp service notifications (separate)

If your agency turns them on, we send service messages such as policy renewal reminders, follow-up reminders and claim status updates. These go from a separate WhatsApp Business account, not from the WhatsApp login integration described above. They use only the recipient's name, WhatsApp number and the related policy or claim details. Recipients can opt out at any time by replying "STOP" or by asking their agent.

Customer, policy and claim data (entered by agents)

Agents and agencies use InsureCRM to manage their customers. For each customer, they may enter:

Contact and profile details: name, mobile number, email, address, date of birth, marital status, anniversary date, GST number and notes.
Policy details: policy number, insurer, policy type, start, end and renewal dates, premium and sum-insured amounts, and the agent assigned to the policy.
Claims, leads, follow-ups and uploaded documents: for example, policy copies and ID or vehicle documents.

For this data, the agency is the data controller and we process it on the agency's behalf, only to provide the service. Agencies must have a lawful basis, such as customer consent, to store their customers' data in InsureCRM.

Documents, images and voice notes

What: files and photos you upload, and voice recordings you make in the app.
Why: to store documents against customers and policies. When you use the scan or voice features, the image or audio is sent to OpenAI to extract text (for example, policy details from a policy copy, or a transcript of a voice note). OpenAI processes the content only to return the result to us and does not use it to train its models.

Payment and billing data

What: subscription plan, invoices, transaction IDs and payment status.
Why: to bill your subscription. Payments are processed by Razorpay. We never see or store your full card or bank details.

Device and usage data

What: IP address, browser and device type, app version, push-notification token, login times and error logs.
Why: to keep the service secure (for example, to detect suspicious logins), send push notifications, and fix bugs.

We share data only with service providers that help us run InsureCRM, and only as much as each needs for its task:

Meta (WhatsApp Business Platform): delivers sign-up and login OTPs by WhatsApp, only when Firebase SMS verification fails. Service notifications are sent from a separate WhatsApp Business account.
Google Firebase: sends sign-up and login OTPs by SMS (the primary method) and push notifications.
OneSignal and Pusher: deliver push and real-time in-app notifications.
Amazon Web Services (S3): stores uploaded files.
OpenAI: extracts text from scanned documents and transcribes voice notes.
Razorpay process payments.
Google reCAPTCHA: protects forms from spam and bots.

We may also disclose data when the law requires us to.

How Long We Keep Data and How We Protect It

We keep your data while your account is active. When you close your account or ask for deletion, we delete it as described in How to Request Deletion of Your Data. We protect data with encrypted connections (HTTPS), encrypted passwords, access controls, and separation between agencies, so that each agency can see only its own data.

Why We Process Your Data (Purposes)

We use personal data only for the purposes listed below. We do not use it for any other purpose without first telling you and, where required, asking for your consent.

Create and manage your account

Purpose: to register you, sign you in, and let you manage your profile and agency workspace.
Data used: name, email, mobile number, password, profile photo, agency name and address.
Legal basis: performance of our contract with you.

Verify your mobile number at sign-up and login

Purpose: to confirm that the mobile number belongs to you. We send a one-time password (OTP) by SMS through Google Firebase. Only if Firebase SMS verification fails do we send the OTP by WhatsApp. Data processed through the WhatsApp login integration is used only for this purpose.
Data used: mobile/WhatsApp number, OTP, send result, verification result.
Legal basis: performance of contract; legitimate interest in preventing fake accounts and fraud.

Provide the CRM service

Purpose: to let agents store and manage their customers, policies, nominees, vehicles, claims, leads, follow-ups and documents.
Data used: customer, policy, claim data, and uploaded documents.
Legal basis: performance of contract with the agency. The agency is responsible for having its customers' consent or another lawful basis.

Send service notifications

Purpose: to send the reminders and updates that you or your agency turned on, such as policy renewal reminders, follow-up reminders, claim status updates, login details, and birthday or anniversary wishes. They are sent by email, push notification, or WhatsApp from a separate WhatsApp Business account (not the WhatsApp login integration).
Data used: name, mobile or WhatsApp number, email, push token, related policy or claim details.
Legal basis: consent (opt-in to WhatsApp messages, which you can withdraw at any time); performance of contract.

Scan documents and transcribe voice notes

Purpose: to extract policy details from uploaded images and turn voice notes into text, when you use these features.
Data used: uploaded images and documents, voice recordings.
Legal basis: performance of contract (only when you choose to use the feature).

Process payments and billing

Purpose: to charge your subscription, issue invoices and keep accounting records.
Data used: plan, invoices, transaction IDs, card brand and last four digits.
Legal basis: performance of contract; legal obligation (tax and accounting laws).

Keep the service secure

Purpose: to detect suspicious logins, prevent spam and abuse, and protect accounts.
Data used: IP address, device and browser type, login times, reCAPTCHA signals.
Legal basis: legitimate interest in security and fraud prevention.

Support and improve the service

Purpose: to answer your support requests, fix bugs and make sure the app works properly.
Data used: support messages, error logs, app version, device type.
Legal basis: legitimate interest in providing a working service.

Meet legal obligations

Purpose: to respond to lawful requests from authorities and keep records the law requires.
Data used: only the data required for the specific request.
Legal basis: legal obligation.

What we do NOT do: we do not sell personal data. We do not use it for third-party advertising or build advertising profiles. Data received through our WhatsApp login integration (your mobile number and OTP) is used only to verify your mobile number at sign-up and login. It is never used for notifications, marketing or any other purpose.

Children's Privacy

Our Service does not address anyone under the age of 13. We do not knowingly collect personally identifiable information from anyone under the age of 13. If You are a parent or guardian and You are aware that Your child has provided Us with Personal Data, please contact Us. If We become aware that We have collected Personal Data from anyone under the age of 13 without verification of parental consent, We take steps to remove that information from Our servers.

If We need to rely on consent as a legal basis for processing Your information and Your country requires consent from a parent, We may require Your parent's consent before We collect and use that information.

Links to Other Websites

Our Service may contain links to other websites that are not operated by Us. If You click on a third party link, You will be directed to that third party's site. We strongly advise You to review the Privacy Policy of every site You visit.

We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites or services.

Changes to this Privacy Policy

We may update Our Privacy Policy from time to time. We will notify You of any changes by posting the new Privacy Policy on this page.

We will let You know via email and/or a prominent notice on Our Service, prior to the change becoming effective and update the "Last updated" date at the top of this Privacy Policy.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

Contact Us

If you have any questions about this Privacy Policy, You can contact us:

By email: hello@fronseye.com