Privacy Policy

Last updated: 14 June 2026 · Applies to BondMaster and InsuranceMaster

1. Who we are

This Privacy Policy explains how BondMaster, Bangalore, India ("BondMaster", "we", "us") collects, uses and protects personal information when you use the BondMaster and InsuranceMaster web applications, including partner-branded login pages and the home-screen (installed) app (together, the "Service").

The Service is used by our clients, our partners (advisors / distributors), their sub-partners and our administrators to view and manage bond portfolios and insurance policy records.

2. Information we collect

  • Account information: name, username, password (stored only in encrypted/hashed form), role, partner or sub-partner association, email address and mobile number.
  • Investment information: bond holdings, transactions, redemptions, coupon and maturity payouts, commission and payout records, and documents you or your partner provide such as CMR copies.
  • Insurance information: policy details (insurer, policy number, cover, premiums, renewal dates), nominee details, covered family members and travellers (names, dates of birth, relationships, pre-existing disease notes), travel bank details, and uploaded documents such as policy copies, RC, PAN, Aadhaar/GST and passport copies.
  • Google Sign-In information: if you choose "Sign in with Google" or link a Google account, we receive your Google account email address, its verification status, your name and profile picture URL. We do not receive your Google password and we do not access Gmail, Drive, Contacts or any other Google data.
  • Technical information: basic logs needed to run and secure the Service (for example IP address, browser type, time of access and error logs).

3. How we use information

  • To create and secure your account, sign you in (including with Google) and keep you signed in.
  • To show your portfolios, payout schedules, maturity calendars, income statements and insurance policies, and to generate PDF/Excel reports you request.
  • To let your partner, sub-partner and our administrators service your account, as described in section 4.
  • To send you login links or messages you or your partner ask us to send, and to respond to your requests.
  • To maintain, troubleshoot and protect the Service and comply with legal and regulatory obligations.
  • We do not sell your personal information and we do not use it for third-party advertising.

4. Who can see your information

  • You: your own data, and if you are a family head, the data of family members linked to you.
  • Your partner and, where applicable, your sub-partner: the data of clients assigned to them. Only partners/clients specially approved by our administrators can add or edit insurance records or view supporting documents (RC, PAN, Aadhaar, passport, old policy).
  • BondMaster administrators: all data, to operate the Service.
  • Service providers who host and store data for us (cloud hosting, database and file storage) and Google (for Google Sign-In), only as needed to provide the Service and under confidentiality obligations.
  • Authorities, where required by law, regulation or a valid legal process.

5. Google user data

BondMaster's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google account data is used only to identify you and sign you in to an existing BondMaster account; it is not shared, sold, used for advertising or used to train AI models.

You can unlink Google at any time from "Google Login" in the app sidebar, or revoke access from your Google Account settings (Security → Third-party connections).

6. Storage, security and retention

Data is stored on secure cloud infrastructure. Connections use HTTPS, passwords are hashed, and access is limited by role. Uploaded documents are stored in private storage and are only served to signed-in users allowed to see them.

We keep your information for as long as your account is active and thereafter as required for legal, regulatory, tax and dispute-resolution purposes, after which it is deleted or anonymised.

7. Your rights

Subject to applicable law, including the Digital Personal Data Protection Act, 2023, you may ask to access, correct or update your information, withdraw consent, or request deletion of your account and data (subject to legal retention requirements), and nominate a person to exercise these rights on your behalf.

To make a request, email partner@bondmaster.com.in from your registered email address or contact your partner.

8. Children

The Service is meant for adults. Information about minors (for example children covered under a family health policy) is entered only by their parent/guardian or the guardian's partner, for the purpose of managing that policy.

9. Changes to this policy

We may update this policy from time to time. The "Last updated" date shows the latest version; significant changes will be notified in the app.

10. Contact / Grievance Officer

BondMaster, Bangalore, India. Email: partner@bondmaster.com.in. We aim to respond to privacy requests and grievances within 30 days.