Privacy Policy

Ribaso Software Solutions Private Limited ("Ribaso", "we", "us" or "our") respects your privacy and is committed to protecting the personal information processed through our website, software platform and related services. This Privacy Policy explains what information Ribaso may collect, how we use it, when we may share it and the choices available to you. This Policy applies to ribaso.com, Ribaso applications and the Ribaso software platform and related services.

1. About Ribaso

Ribaso is a technology platform designed for insurance agents, professionals and insurance distribution teams. The platform helps users manage insurance workflows including client inquiries, RFQs, insurer communication, quote tracking, quote comparison, follow-ups, renewals, policy records and commission reconciliation. Because Ribaso is a business software platform, users may enter information relating to their own business, employees, clients, prospects, policies and insurance transactions.

2. Information We Collect

Depending on how you use Ribaso, we may collect the following information.

A. Account and Contact Information

When you register, contact us or use our services, we may collect:

• Name;
• Email address;
• Phone number;
• Company or organisation name;
• Job title or professional role;
• Business address;
• Login and account information; and
• Other information you voluntarily provide.

B. Business and Insurance Workflow Information

When using Ribaso, users may enter information required to manage their insurance business, including:

• Client and prospect information;
• Insurance requirements;
• Policy information;
• Quote and premium information;
• RFQ details;
• Insurer information;
• Renewal information;
• Commission information;
• Communication and follow-up records; and
• Other business information entered by the user.

Ribaso processes this information to provide the functionality requested by the user.

C. Website and Technical Information

When you visit our website or use our platform, we may receive technical and usage information such as:

• IP address;
• Browser and device information;
• Operating system;
• Pages or features accessed;
• Login and session information;
• Approximate usage activity; and
• Technical logs required for security and platform operation.

D. Payment Information

If you purchase a Ribaso subscription, payment may be processed through a third-party payment service provider.

Ribaso may receive information such as:

• Transaction amount;
• Payment status;
• Transaction reference;
• Subscription details; and
• Other information required for payment reconciliation.

Where payment processing is performed by a third-party payment provider, Ribaso does not intend to store complete card credentials such as the full card number or CVV.

3. How We Use Information

We use information collected through Ribaso to:

• Create and manage user accounts;
• Provide access to the Ribaso platform;
• Provide and maintain Ribaso's software features;
• Manage client inquiries, RFQs and insurance workflows;
• Facilitate insurer-related communication and workflow requested by users;
• Organise and display quotations and related information;
• Provide follow-ups and renewal-related functionality;
• Manage subscriptions and payments;
• Provide customer support;
• Communicate with users about their accounts and services;
• Maintain platform security;
• Detect and prevent fraud, misuse and unauthorised access;
• Diagnose technical issues and improve platform performance; and
• Comply with applicable legal and regulatory obligations.

Ribaso does not use client or insurance information submitted by a user for unrelated purposes without an appropriate legal basis or permission.

4. How Ribaso Handles Client Information

Ribaso is primarily a business-to-business software platform.

When an insurance professional or organisation enters client information into Ribaso, that organisation may determine why and how the information is collected and used for its business.

In such situations, Ribaso may process that information on behalf of the organisation to provide the software services.

The organisation using Ribaso remains responsible for ensuring that it has the necessary authority, notices, permissions or other lawful basis required to provide such information to Ribaso and use it for its business purposes.

Ribaso will process such information only as necessary to provide the applicable services and as otherwise permitted by applicable law or agreement.

5. How We Share Information

Ribaso does not sell personal information to third parties.

We may share information where reasonably necessary with:

Service Providers

We may use trusted third-party providers for services such as:

• Cloud hosting and infrastructure;
• Email and communication;
• Payment processing;
• Security;
• Analytics;
• Customer support; and
• Other services necessary to operate Ribaso.

These providers receive only the information reasonably necessary to perform their services.

Insurers and Other Recipients Selected by the User

Ribaso may facilitate the transmission or organisation of information to insurers or other parties when a user chooses to use the relevant Ribaso functionality. The user is responsible for the information they submit and the recipients they choose to engage through the platform.

Legal and Regulatory Requirements

We may disclose information where required to do so by law, regulation, legal process or a lawful government or regulatory request. We may also disclose information where reasonably necessary to protect the rights, security or property of Ribaso, our users or others.

6. Cookies and Similar Technologies

Ribaso may use cookies and similar technologies to:

• Keep the website and platform functioning;
• Maintain sessions and account functionality;
• Understand website and platform usage;
• Improve performance; and
• Maintain security.

Where required, we will provide appropriate choices or notices regarding non-essential cookies and similar technologies. You can also manage cookies through your browser settings. Disabling certain cookies may affect the functionality of parts of the website or platform.

7. Data Security

Ribaso takes reasonable technical and organisational measures to protect information against unauthorised access, misuse, alteration, disclosure or loss.

These measures may include appropriate access controls, authentication, security monitoring and protection of the systems used to operate the platform.

However, no internet-based system can be guaranteed to be completely secure.

Users are also responsible for maintaining the confidentiality of their account credentials and for notifying Ribaso if they suspect unauthorised access to their account.

8. Data Retention

Ribaso retains personal information only for as long as reasonably necessary for the purposes for which it was collected, to provide the services, maintain business and transaction records, resolve disputes, enforce agreements or comply with applicable legal and regulatory requirements.

When information is no longer required, Ribaso may delete, anonymise or securely dispose of it in accordance with applicable requirements.

Certain information may remain in secure backups for a limited period before being permanently deleted or overwritten.

9. Your Rights

Subject to applicable law, you may have rights relating to your personal information, including the ability to:

• Request access to personal information we hold about you;
• Request correction of inaccurate or incomplete information;
• Request deletion of personal information where applicable;
• Withdraw consent where processing is based on consent;
• Request information about how your personal data is processed; and
• Raise a complaint regarding the processing of your personal information.

Where Ribaso processes information on behalf of a business customer, requests relating to that information may need to be directed to the relevant business or organisation that collected the information.

We may need to verify your identity before processing a privacy request.

10. Children's Information

Ribaso is a business software platform intended for use by businesses and professionals. Ribaso does not knowingly collect personal information from children for the purpose of providing the platform. If you believe that information relating to a child has been provided to Ribaso improperly, please contact us so that we can review and take appropriate action.

11. Third-Party Websites and Services

Ribaso may contain links to or integrations with third-party websites, services or platforms. Those third parties operate under their own privacy policies and terms. Ribaso is not responsible for the privacy practices of third-party websites or services that are not controlled by Ribaso.

12. Changes to This Privacy Policy

Ribaso may update this Privacy Policy when necessary to reflect changes to our platform, business practices, technology or applicable legal requirements. The updated version will be published on this page with a revised "Last Updated" date. Where required by applicable law, we will provide additional notice of material changes.

13. Account Deletion

You may request deletion of your Ribaso account and the personal information associated with it at any time. Full details of the request channels, verification steps and deletion timelines are set out in our Account Deletion Policy.

14. DPDP Act Compliance

Ribaso Software Solutions Private Limited is incorporated in India and processes personal data in accordance with the Digital Personal Data Protection Act, 2023 ("DPDP Act") and the rules made under it, as applicable.

Our role

For the information we collect directly from our users, such as account, billing and support information, Ribaso acts as a Data Fiduciary. Where an insurance professional, brokerage or organisation uses Ribaso to process information about their own clients and prospects, that organisation is the Data Fiduciary and Ribaso acts as a Data Processor on their behalf, processing such data only under their instructions and the applicable agreement.

Lawful basis and notice

Ribaso processes personal data on the basis of consent or for legitimate uses permitted under the DPDP Act, such as providing a service voluntarily requested by the user, and for compliance with legal obligations. Where consent is the basis, we provide a clear notice describing the personal data collected, the purpose of processing, how you can withdraw consent and how you can make a complaint to the Data Protection Board of India.

Your rights as a Data Principal

• Right to access a summary of the personal data being processed and the processing activities undertaken;
• Right to correction, completion, updating and erasure of your personal data;
• Right to withdraw consent at any time, with the same ease with which it was given;
• Right to grievance redressal through the channels described below; and
• Right to nominate another individual to exercise your rights in the event of death or incapacity.

You can exercise these rights from within the Ribaso app or by writing to support@ribaso.com. We respond to verified requests within the timelines prescribed under the DPDP Act.

Your duties as a Data Principal

Under the DPDP Act, you must provide authentic and accurate information, must not impersonate another person while providing personal data, and must not raise false or frivolous grievances.

Security, breach reporting and retention

Ribaso implements reasonable security safeguards to prevent personal data breaches. In the event of a personal data breach, Ribaso will notify the Data Protection Board of India and affected Data Principals in the form and manner prescribed. Personal data is erased once the specified purpose is no longer served and retention is no longer required by law, and we require our data processors to do the same.

Grievance officer

Questions, consent withdrawals and grievances under the DPDP Act may be addressed to the Grievance Officer, Ribaso Software Solutions Private Limited, at support@ribaso.com. If your grievance is not resolved to your satisfaction, you may escalate the matter to the Data Protection Board of India.

15. Contact Us

GST: 09AAPCR9575F1ZK
CIN: U62013UW2026PTC254161

See also our Terms & Conditions and Refund & Cancellation Policy.