Privacy Policy

Last updated: 25 September 2026

This policy explains what information Digitaliiisla ("we") collects when you use this website and the DigiSurvey application, and how it is used. The service is operated by Digitaliiisla Technologies Private Limited.

Legal entity. Digitaliiisla Technologies Private Limited is a company incorporated in India on 19 October 2026 under the Companies Act, 2013. Corporate Identity Number (CIN): U62011RJ2026PTC119030. Permanent Account Number (PAN): AANCD1878K. Tax Deduction & Collection Account Number (TAN): JPRD10028E. Registered office: Khemi Sati Road, Jhunjhunu, Rajasthan – 333001, India. GSTIN registration is in progress and will be published here once allotted.

Information we collect

• Account details — your email address, name and the profile details you choose to enter (for example licence number, address, mobile number, bank and tax details used on your reports).
• Survey data — the vehicle, policy, claim and assessment information you enter while preparing surveys and reports.
• Photos, videos and documents — images and documents you capture or upload, including the time and location recorded with a photo when you allow location access.
• Live video inspections — during a live survey, video passes directly between the two devices; still photos the surveyor captures are saved to that survey.
• Scrap Market listings — details, photos, documents and the location of salvage vehicles that surveyors post. Photos and listing details become public once approved; documents never do.
• Scrap buyer profiles — business name, owner name, contact numbers, address and map location, GST and PAN, what you buy, service areas, logo, shop photos and KYC documents. Only the business name, city, state, categories, service areas, years in business, RVSF status, description, logo and shop photos appear in the public directory, and only after verification. Contact details are shared with a surveyor only when that surveyor accepts your offer. KYC documents, GST and PAN are seen only by our admin team.
• Basic usage information — such as when your account was last active.

How we use it

• To provide the service: storing your surveys, generating your reports and PDFs, and keeping your data available across your devices.
• To read details from documents you choose to scan (AI-assisted extraction). Extracted details are suggestions for you to check.
• To keep accounts secure and to manage access (for example blocking misuse).

Our no-data-sharing commitment. We do not sell, rent, trade or disclose your personal data, your surveys, or the data of insured persons and claimants on your surveys to any advertiser, data broker, marketing network or any third party. We don't train AI models on your reports or photos. The only parties who ever see your work are: you (and anyone you explicitly share a link with), the insurer or client that commissioned the survey where you choose to deliver the report to them, and our own staff strictly where they must act on a support ticket you raised or a safety / legal obligation. Our paid service providers process data only on our behalf, under written contracts, and cannot use it for anything else. If we are ever asked by a court or lawful authority to disclose data, we require a valid order, challenge it where appropriate, and (unless the order itself forbids it) tell you.

Three-stage backup — your data is never in just one place

Everything you create in DigiSurvey — surveys, reports, photos, documents, videos, assessments — is kept in three independent stages so no single failure, deletion, outage or attack can take it down:

1. Stage 1 — Live (encrypted, isolated per surveyor). Reports and records live in a managed PostgreSQL database (Supabase, hosted in Mumbai / ap-south-1), with row-level security that walls off each surveyor's rows from every other account. Photos, documents and videos live in Cloudflare R2 object storage, keyed by surveyor and survey id so one surveyor can never read another's files. All data in transit is TLS 1.2+; data at rest on the database and R2 is encrypted by the provider.
2. Stage 2 — Nightly offsite backup (Backblaze B2, GPG-encrypted). Every night the entire database is dumped and the complete media tree is mirrored to Backblaze B2 in a different cloud and in a different region. The database dump is encrypted with a passphrase that only we hold (not Backblaze), so even a full compromise of the backup bucket reveals nothing readable. We keep rolling nightly backups so we can restore to any day in the retention window.
3. Stage 3 — On-demand targeted restore + audit trail. A one-click restore workflow can rebuild the live database and the media tree from the Stage 2 backups within an hour. A permanent DB-side audit trigger logs every deletion with the full row content, the user who did it, timestamp and request headers — so if anything is ever deleted (by a user, a bug, or a bad actor) we have the before-state and can restore just that piece without disturbing anything else.

Any failed cloud upload while you work is kept locally on your device in the DigiSurvey app's offline queue and retried automatically when the connection is back; the app shows a visible warning if any file is still waiting to sync, so nothing goes missing without you knowing.

Where it is stored and processed

We use trusted service providers to run the platform: Supabase (sign-in and primary database, Mumbai region), Cloudflare (R2 object storage for files, Workers for routing and for the AI document-reading pipeline that calls Google's Gemini), Backblaze B2 (encrypted nightly offsite backup), Resend (transactional email delivery) and Razorpay (payment processing via a PCI-DSS-compliant Indian gateway). They process data only to provide these services to us, under written contracts. Some of these providers may store or process data outside India in the course of serving us; we transfer only what is necessary and apply the same no-data-sharing commitment to them.

Who can see your data

Your surveys, photos and documents are private to your account. Customers you invite to a live inspection only see the call, not your other data. Insurers only see the specific reports and attachments you deliver to them. Platform administrators can see account-level details (such as name, email, account status, usage counts) only to manage the service and only when necessary — never your actual survey photos, assessment amounts or claimant details, unless you have raised a support ticket that requires it or a legal process compels it.

Keeping and deleting data (retention)

We keep data only as long as needed for the purpose it was collected and to meet legal and insurer requirements:

• Claim / survey records (reports, photos, videos, documents, assessment) — retained for 7 years from settlement of the claim, in line with the IRDAI (Insurance Surveyors and Loss Assessors) Regulations, 2015 (reg. 13) and the Companies Act, 2013 books-of-account requirement; after this period records are transferred to the insurer or automatically deleted as per our agreement with them. See the full data retention schedule.
• Account & profile data — kept while your account is active; removed on account closure, except records we must keep by law.
• Access / activity logs — retained for 18 months for security and audit.

Deleting a survey in the app deletes its records and stored files. To delete your account and all remaining data yourself, open digitaliiisla.co.in/delete-account (also available in the app under More → Delete my account). You can also contact our Grievance Officer below.

Your choices

• You can review and update your profile details at any time in the app.
• You can refuse camera, microphone or location permission; some features will not work without them.
• You can ask us for a copy of your data or for its deletion.

Your rights under the Digital Personal Data Protection Act, 2023

As a Data Principal under the DPDP Act, 2023, you have the right to:

• Access a summary of the personal data we process about you;
• Ask us to correct or update inaccurate or incomplete data;
• Ask us to erase your personal data where it is no longer needed;
• Withdraw a consent you gave us (this does not affect processing already done);
• Nominate another person to exercise these rights in case of your death or incapacity;
• Raise a grievance with us and, if unresolved, with the Data Protection Board of India.

We process personal data on the basis of your consent and to provide the survey service you — or the insurer — engaged us for. We handle insured persons' and claimants' data strictly for loss assessment, and do not share it with any third party except the concerned insurer, or where required by law.

Grievance / Data Protection Officer

For any data-protection request or grievance under the DPDP Act, 2023, contact our Grievance Officer:

Mr. Alok Sharma, Advocate — Grievance Officer, Digitaliiisla Technologies Private Limited
Bar Council of Rajasthan, Enrolment No. R/1387/2012
Email: grievance@digitaliiisla.co.in
Phone: +91 93145 91361

We aim to acknowledge requests within 72 hours and resolve them within the timelines set by law. If we discover a personal-data breach, we will notify the affected users and the Data Protection Board of India as required.

Contact

For any privacy question or request, call +91 83026 98307 or email support@digitaliiisla.co.in. Postal address:
Digitaliiisla Technologies Private Limited
Khemi Sati Road
Jhunjhunu, Rajasthan – 333001, India