Privacy Policy

Entity: MGM Innovations (Partnership Firm registered under Indian Partnership Act, 1932)
Last Updated: October 2026 • Compliant with DPDP Act 2023 & Google Play User Data Policy

User privacy is of paramount importance to MGM Innovations, a Partnership Firm registered under the Indian Partnership Act, 1932, having its principal place of business in Haldwani, Uttarakhand, India (“Firm”, “We”, “Us”, or “Our”). This Privacy Policy determines how the Firm collects, uses, discloses, and protects information across our main website (mgminnovations.com), our software products, and mobile applications, including our flagship platform BimaGenius (web and mobile applications, collectively referred to as the “Platform”, “Services”).

This document is an electronic record in terms of the Information Technology Act, 2000, the Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and Google Play Developer Program Policies.

1. Information We Collect

Depending on how you interact with our websites and software applications, we may collect the following types of information:

  • Account & Registration Information: Full name, verified mobile number (via OTP authentication), email address, organization/agency name, and state/region.
  • User-Generated Business Data: Information uploaded by licensed advisors, such as client names, contact details, policy dates, policy schedules, premium calculations, and reminder notes.
  • Technical & Device Information: Device model, operating system version, unique device identifiers, IP address, and standard application crash logs required for stability and performance.
  • Communication Inquiries: Any inquiries or messages submitted via our contact forms or support channels.

2. How We Use Your Information

We process collected data strictly for lawful, legitimate business purposes:

  • To provide, maintain, and enhance our B2B SaaS applications, actuarial calculators, and policy management workflows.
  • To authenticate user sessions securely via one-time passwords (OTP).
  • To send operational communications, renewal reminders, security notices, and software updates requested by users.
  • To ensure application security, troubleshoot crashes, and prevent fraudulent usage.
  • To comply with applicable Indian laws, statutory regulations, and legal obligations.

3. Zero Data Selling Commitment

We never sell, rent, lease, or monetize your personal or client data to third-party advertisers, brokers, insurance carriers, or lead generation firms. Your data is strictly yours. Data uploaded to our applications is used exclusively to deliver the functionality of our software to you.

4. Data Storage, Security & Encryption

We employ industry-standard administrative, physical, and technical safeguards to preserve the confidentiality and integrity of your data:

  • All network communications are encrypted in transit using Transport Layer Security (TLS 1.3).
  • Sensitive stored data is encrypted at rest using AES-256 encryption.
  • Our cloud infrastructure is hosted on secure Google Cloud Platform (GCP) Indian data centers, complying with ISO 27001, SOC 2, and Indian data localization mandates.

5. Third-Party Service Providers

We engage reputable cloud infrastructure and verification service providers solely to operate our software:

  • Google Cloud & Firebase: For secure authentication, database hosting, serverless compute, and crash analytics.
  • Telecom SMS Gateways: For sending time-sensitive login OTPs.

These service providers are bound by strict contractual confidentiality agreements and are prohibited from using your data for any independent purposes.

6. User Rights & Data Deletion (DPDP Act Compliance)

Under the Digital Personal Data Protection Act, 2023, you have the right to:

  • Access: Request a summary of the personal data we hold about you.
  • Correction: Update, rectify, or complete inaccurate personal data.
  • Erasure / Deletion: Request the complete deletion of your account and associated data. You can initiate account deletion within the BimaGenius application or by contacting our Grievance Officer.
  • Grievance Redressal: Submit any concerns regarding data handling to our designated officer.

7. Children's Privacy

Our services and applications are B2B software solutions intended strictly for commercial and professional use by individuals aged 18 and older. We do not knowingly collect personal information from minors.

8. Grievance Officer & Contact Details

In accordance with the Information Technology Act, 2000 and the DPDP Act, 2023, the details of the Grievance Officer for MGM Innovations are provided below: