Privacy Policy

Scope and who we are

Pluto Insurance is a brand and digital insurance platform operated by GreenLife Insurance Broking Private Limited (“GIBL”, “we”, “us” or “our”), an insurance broker registered with the Insurance Regulatory and Development Authority of India.

This Privacy Policy applies when you visit https://plutohq.co/, request a quote, create an account, submit an insurance proposal, contact us, or otherwise use our related digital services (together, the “Platform”).

Information we collect

The information we collect depends on the service you request, the insurance product, and regulatory requirements.

Please provide personal information about another person only when you are authorised to do so and, where required, have informed them about this policy.

How we collect information

We collect information directly from you through forms, calls, messages, documents, account activity, and interactions with our Platform. We may also receive information from participating insurers, authorised representatives, distribution partners, identity and KYC providers, payment providers, healthcare or inspection partners, publicly available sources, and fraud-prevention services, where permitted.

Some technical information is collected automatically through cookies, server logs, and similar technologies when you use the Platform.

How we use information

We may use personal information to:

• Provide quotes, comparisons, recommendations, application support, renewals, and policy servicing.
• Share proposals with insurers and support underwriting, medicals, inspections, policy issuance, endorsements, cancellations, refunds, and claims assistance.
• Verify identity, perform KYC and other regulatory checks, and maintain required records.
• Process or reconcile premium payments and investigate failed or duplicate transactions.
• Respond to enquiries, complaints, and service requests.
• Prevent fraud, abuse, security incidents, and unlawful activity.
• Operate, secure, analyse, troubleshoot, and improve the Platform and customer experience.
• Send service communications and, where permitted, relevant offers or updates.
• Comply with legal, regulatory, audit, accounting, and reporting obligations.

We do not sell personal information for money.

Consent and lawful use

We process personal information with your consent where required and for other lawful purposes recognised by applicable law. You may withdraw consent for future processing by contacting us or using an available preference control. Withdrawal does not affect processing already carried out lawfully.

If information is necessary to provide a requested service, meet a legal obligation, prevent fraud, or maintain an insurance record, withdrawing or withholding it may mean we cannot continue that service. We will explain the practical effect where relevant.

Who we share information with

We may share relevant information, on a need-to-know basis, with:

• Participating insurers, reinsurers, and their authorised service providers.
• KYC, identity-verification, fraud-prevention, medical, inspection, assistance, and claims-support providers.
• Payment gateways, banks, and payment-system participants.
• Technology, hosting, analytics, communications, document-management, and customer-support providers.
• Professional advisers, auditors, and insurers of our business.
• IRDAI, law-enforcement bodies, courts, government agencies, or other authorities where required or permitted.
• A successor or participant in a lawful merger, reorganisation, financing, or transfer of business, subject to appropriate safeguards.

Third parties that determine their own purposes for using your information such as an insurer assessing a proposal are responsible for their own privacy practices.

Cookies and analytics

We may use essential cookies to operate and secure the Platform, and analytics or preference technologies to understand use and improve performance. Where required, optional cookies are used only after your choice.

You can manage cookies through available Platform controls or your browser settings. Blocking certain cookies may affect features, saved preferences, or the ability to complete a transaction.

How we protect information

We use reasonable administrative, technical, and organisational safeguards designed to protect personal information against unauthorised access, alteration, disclosure, loss, or misuse. These may include access controls, encryption in transit, monitoring, vendor controls, employee training, and incident-response procedures.

No internet transmission or storage system is completely secure. You should protect account credentials and one-time passwords and notify us promptly if you suspect misuse.

How long we keep information

We retain personal information only for as long as needed for the purposes described in this policy, including policy servicing, dispute resolution, fraud prevention, and compliance with insurance, tax, accounting, anti-money-laundering, and other legal requirements.

Retention periods vary by record type and relationship. When information is no longer required, we take reasonable steps to delete, anonymise, or securely archive it as permitted by law.

Your rights and choices

Subject to applicable law and its commencement provisions, you may ask us to provide information about our processing, correct or update inaccurate personal information, erase information that is no longer required, address a grievance, or record a nominee for exercising rights on your behalf.

You may also withdraw eligible consent and opt out of marketing communications. We may need to verify your identity before acting on a request and may retain information where required by law or for legitimate legal purposes.

To make a request, email support@plutohq.co with enough detail for us to understand and verify it.

Children's information

The Platform is intended for adults capable of entering into insurance transactions. Where a policy or service requires information about a child, it must be provided by or with the involvement of a parent or lawful guardian. We do not knowingly seek a child's information for targeted advertising or unrelated profiling.

Data location and transfers

Our providers may process information in India or other locations where they operate. Where information is transferred across borders, we apply measures required by applicable law and any restrictions notified by the Government of India.

Third-party websites and services

The Platform may link to insurer, payment, medical, or other third-party services. Their privacy notices govern information they collect directly or process for their own purposes. We encourage you to review those notices before providing information.

Changes to this policy

We may update this Privacy Policy to reflect changes in our services, technology, practices, or legal obligations. The date at the top shows when it was last revised. We will provide additional notice of material changes where required.

Contact and grievances

For a privacy question, request, or grievance, contact us using the details below. Please include your name, contact details, and a clear description of your request.