1. Overview
ClaimDesk by Insurdex ("ClaimDesk", "we", "our", or "us") respects the privacy of its users and is committed to protecting personal and business information processed through the ClaimDesk platform.
This Privacy Policy explains what information ClaimDesk collects, how it is used, how Google user data is handled, how information is protected, and the choices available to users.
By using ClaimDesk, you acknowledge the practices described in this Privacy Policy.
ClaimDesk is a software platform designed primarily for insurance surveyors and loss assessors to assist with claim administration and professional workflows.
Depending upon the features used, ClaimDesk may provide functions including claim management, survey documentation, assessment preparation, report generation, invoice management, reminders, document processing, OCR-assisted data extraction, email integration and other related administrative functions.
ClaimDesk is operated under the brand Insurdex.
2. Information ClaimDesk may process
ClaimDesk may process information entered, uploaded or generated by users while using the platform, including:
- Name and contact information
- Business or professional information
- Claim reference information
- Insured details
- Policy and claim information
- Vehicle or insured-property information
- Survey and loss-assessment information
- Uploaded documents, photographs and supporting records
- Invoice and payment-related information
- Notes and correspondence
- Login, account and security information
- Application activity and audit information
- Information obtained through integrations expressly authorized by the user
The exact information processed depends upon the functions that a user chooses to use.
3. Google account and Gmail data
ClaimDesk may allow a user to connect a Google account through Google OAuth 2.0.
Google authorization is initiated only when the user chooses to connect a Google account or enable a Google-related feature.
ClaimDesk requests only the Google API permissions that are reasonably necessary to provide the user-requested functionality.
Google requires OAuth applications to request the minimum scopes required for their features.
Depending upon the permissions expressly granted by the user, ClaimDesk may receive limited Google account information and/or Gmail information required to provide Gmail synchronization or related email functionality.
This may include, where permitted by the authorized OAuth scopes:
- Google account identifier
- Email address
- Email message metadata
- Sender and recipient information
- Subject information
- Message dates
- Message identifiers
- Message content where required for the expressly requested functionality
- Attachment information where required for the expressly requested functionality
- OAuth access and refresh credentials required to maintain the authorized connection
ClaimDesk will not access Google information beyond the permissions authorized by the user.
4. How Google user data is used
Google user data obtained through Google APIs is used only to provide or improve user-facing features requested by the user.
For example, Gmail information may be used to enable functionality such as identifying, displaying, organizing or synchronizing relevant emails within ClaimDesk.
Google user data will not be used for purposes unrelated to the functionality disclosed to and requested by the user.
Google specifically recommends that applications accessing Google user data include a Limited Use disclosure of this nature in their publicly accessible privacy information.
5. AI-assisted features and Google Workspace data
ClaimDesk may contain AI-assisted or automated features in parts of the application.
However, Google Workspace API data obtained through Google authorization is not used to develop, train, or improve generalized or non-personalized artificial intelligence or machine-learning models.
Google's current privacy-policy guidance expressly requires AI/ML applications accessing Workspace API data to disclose that Google Workspace data is not used to train or improve non-personalized AI/ML models.
Any processing of Google user data will remain limited to providing the relevant user-facing functionality authorized by the user and permitted under Google's policies.
6. No sale, advertising or unrelated use of Google data
ClaimDesk does not sell Google user data.
Google user data is not:
- Sold to advertisers or data brokers;
- Used for targeted advertising;
- Used for personalized advertising or retargeting;
- Used to determine creditworthiness;
- Used for unrelated marketing purposes; or
- Transferred to third parties for purposes unrelated to providing the ClaimDesk functionality requested by the user.
Google's Limited Use requirements prohibit these types of uses and transfers.
7. Human access to Google user data
ClaimDesk personnel do not access a user's private Google data except where such access is:
- Specifically requested or authorized by the user for support or troubleshooting;
- Necessary to investigate a security incident, abuse or technical problem;
- Required by applicable law; or
- Otherwise permitted under Google's applicable API policies.
Access, where necessary, should be limited to the minimum information required for the applicable purpose.
8. OAuth credentials and revocation
When a user connects a Google account, Google may provide ClaimDesk with OAuth access credentials, which can include an access token and refresh token.
These credentials are used only to maintain the Google connection authorized by the user.
OAuth credentials must not be exposed publicly or used for purposes unrelated to the user's authorized Google integration.
Users may revoke ClaimDesk's access to their Google account at any time through their Google Account security settings.
Revoking Google authorization may disable Google-dependent features within ClaimDesk but does not necessarily delete information that was lawfully stored in ClaimDesk before authorization was revoked.
9. How information may be used
Information processed through ClaimDesk may be used to:
- Provide and operate the ClaimDesk service;
- Maintain user accounts;
- Manage insurance claim workflows;
- Prepare survey and assessment records;
- Generate reports and invoices;
- Process documents and uploaded information;
- Provide reminders and workflow notifications;
- Provide requested email-related functionality;
- Maintain application security;
- Detect unauthorized activity;
- Troubleshoot technical problems;
- Maintain audit and operational records;
- Improve the reliability and functionality of ClaimDesk; and
- Comply with applicable legal obligations.
We do not use personal information for purposes materially incompatible with those for which it was collected without appropriate notice or authorization.
ClaimDesk does not sell users' personal information.
11. Security
ClaimDesk uses reasonable administrative, technical and organizational safeguards designed to protect information against unauthorized access, misuse, alteration, loss or disclosure.
Depending upon the applicable system component, safeguards may include authentication controls, authorization controls, encrypted communications, protected credential storage, access separation, audit logging, backups and other security measures.
No method of electronic transmission or storage is completely secure, and therefore absolute security cannot be guaranteed.
12. Data retention and deletion
ClaimDesk retains information only for as long as reasonably necessary to:
- Provide the service;
- Maintain claim and professional records;
- Meet contractual requirements;
- Maintain legitimate business and audit records;
- Resolve disputes;
- Maintain security; and
- Satisfy applicable legal or regulatory obligations.
Retention periods may differ depending on the type of information and the purpose for which it is processed.
Google API information should not be retained longer than necessary for the authorized user-facing functionality, subject to applicable Google API requirements.
Users may request deletion of eligible personal information associated with their ClaimDesk account.
Where legally and technically permissible, ClaimDesk will delete or anonymize information no longer required for the purposes for which it was collected.
Certain information may need to be retained where required for legal, regulatory, security, accounting, contractual or legitimate professional-record purposes.
A user who disconnects a Google account may also separately revoke ClaimDesk's Google authorization through their Google Account.
13. User choices and controls
Users can control information submitted to ClaimDesk by:
- Choosing which information to enter or upload;
- Choosing whether to connect a Google account;
- Reviewing Google permissions during OAuth authorization;
- Disconnecting supported integrations;
- Revoking ClaimDesk's Google account access;
- Requesting correction of eligible account information; and
- Requesting deletion of eligible information.
Google OAuth permission can also be managed independently from the user's Google Account.
15. Third-party services
ClaimDesk may integrate with third-party services such as Google APIs or infrastructure providers.
Use of those services may also be governed by the privacy policies and terms of the respective provider.
ClaimDesk is not responsible for independent processing carried out by third parties outside ClaimDesk's control.
16. Children
ClaimDesk is a professional business application and is not intended as a consumer service directed toward children.
We do not knowingly create ClaimDesk professional accounts for children for independent use of the platform.
17. Legal compliance
ClaimDesk processes information in accordance with applicable laws and regulations.
For users in India, applicable privacy and data-protection requirements may include provisions introduced under India's Digital Personal Data Protection Act, 2023, as and when the relevant statutory provisions become applicable.
The commencement of India's DPDP framework is being phased, so specific obligations take effect according to government notifications rather than all provisions operating simultaneously.
18. Changes to this Privacy Policy
We may update this Privacy Policy where necessary to reflect:
- Changes in ClaimDesk functionality;
- New integrations;
- Changes in data practices;
- Security improvements;
- Legal or regulatory requirements; or
- Google API policy requirements.
The updated version will show a revised "Last Updated" date.
Where appropriate, material changes may also be communicated within ClaimDesk or through other reasonable means.
19. Contact
Questions, concerns or requests regarding this Privacy Policy or the handling of personal information may be directed to: