Privacy Policy

Privacy Policy

Your privacy and data security are our top priorities. Learn how we protect and handle your information.

1. Introduction

Welcome to LossAssist, a CRM-like platform designed specifically for vehicle loss assessors (surveyors) to generate and manage reports after vehicle accidents. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our web application available at https://tejasya.com.np/.

LossAssist is developed and operated by [Developer Name], an individual developer who will later register as a company. We are committed to protecting your privacy and ensuring transparency about our data practices.

2. Information We Collect

2.1 Account Information

When you create an account with LossAssist, we collect:

  • Your name and contact information
  • Email address (through Google OAuth2.0)
  • Additional personal information required for identity verification and report generation
  • Professional credentials and license information (where applicable)

2.2 Gmail Data Access

Through Google OAuth2.0 authentication, we access:

  • Your Gmail messages and email metadata
  • Email communication related to insurance claims and client correspondence
  • Message content necessary for report generation and case management

2.3 Authentication Data

We securely store:

  • Google OAuth2.0 access tokens (encrypted)
  • Refresh tokens (encrypted)
  • Authentication credentials using secure hashing methods

2.4 Usage Data

We may collect:

  • Log data including IP addresses, browser type, and access times
  • Application usage patterns for service improvement
  • Error logs and performance metrics

3. How We Use Your Information

3.1 Primary Purposes

Your information is used exclusively for:

  • Report Generation: Creating comprehensive vehicle loss assessment reports
  • Communication Management: Organizing and displaying correspondence with insurers and clients
  • Case Management: Tracking and managing insurance claims and assessments
  • Identity Verification: Ensuring the authenticity of professional assessors
  • Service Provision: Enabling core platform functionality

3.2 Gmail Data Usage

Gmail data is used strictly for:

  • Displaying relevant email communications within the platform
  • Extracting information necessary for report generation
  • Facilitating communication with insurers and clients
  • Maintaining organized case files

3.3 What We DON'T Do

We do NOT use your data for:

  • Marketing or promotional purposes
  • User profiling or behavioral analysis
  • Advertising or commercial solicitation
  • Any purposes unrelated to vehicle loss assessment services

4. Data Storage and Security

4.1 Security Measures

We implement industry-standard security practices:

  • Encryption: All sensitive data, including OAuth tokens, are encrypted before database storage
  • HTTPS: All communications are secured using HTTPS encryption
  • Secure Hashing: Passwords and sensitive information use secure hashing algorithms
  • Access Controls: Strict access limitations to user data

4.2 Data Storage

  • Database Storage: User profiles, encrypted tokens, and account information
  • Temporary File Storage: Gmail messages stored temporarily on secure servers for report generation
  • Regular Deletion: Automated deletion of temporary files and old data

4.3 Data Retention

  • Gmail messages are stored temporarily and deleted regularly as part of our data hygiene practices
  • User account data is retained while your account remains active
  • Background services automatically delete old Gmail messages and optimize storage
  • Historical data may be retained for legal compliance purposes

5. Data Sharing and Third Parties

5.1 No Third-Party Sharing

We do NOT share, sell, or distribute your personal information or Gmail data to any third parties, including:

  • Marketing companies
  • Data brokers
  • Advertising networks
  • Other commercial entities

5.2 Legal Requirements

We may disclose information only when:

  • Required by law or legal process
  • Necessary to protect our rights or property
  • Required for user safety or public safety

6. Your Rights and Controls

6.1 Data Access and Control

You have the right to:

  • Access your personal information stored in our system
  • Request correction of inaccurate data
  • Request deletion of your Gmail data and personal information
  • Revoke Google OAuth2.0 permissions at any time
  • Export your data in a portable format

6.2 Account Management

You can:

  • Update your profile information through the platform
  • Manage your email synchronization settings
  • Delete your account and associated data
  • Contact us for data-related requests

6.3 Google Account Permissions

You can revoke LossAssist's access to your Gmail account:

  • Through your Google Account settings
  • By contacting our support team
  • Through the platform's settings menu

7. Data Protection Compliance

7.1 GDPR Compliance (European Users)

For users in the European Union, we comply with the General Data Protection Regulation (GDPR):

  • Lawful Basis: We process data based on legitimate interests and user consent
  • Data Subject Rights: Full rights to access, rectification, erasure, and portability
  • Data Protection Officer: Contact information available upon request
  • Cross-Border Transfers: Appropriate safeguards implemented for data transfers

7.2 CCPA Compliance (California Users)

For California residents, we comply with the California Consumer Privacy Act (CCPA):

  • Right to Know: Information about data collection and use
  • Right to Delete: Request deletion of personal information
  • Right to Opt-Out: No sale of personal information (we don't sell data)
  • Non-Discrimination: Equal service regardless of privacy choices

8. Google OAuth2.0 Specific Information

8.1 Gmail API Usage

  • We use Google's Gmail API solely for the purposes described in this policy
  • Gmail data access is limited to what's necessary for our service functionality
  • We comply with Google API Services User Data Policy
  • No data is used for improving Google products or services

8.2 Scope of Access

Our application requests access to:

  • Gmail messages and metadata
  • User's basic profile information
  • Email composition and sending capabilities (for report distribution)

9. Children's Privacy

LossAssist is not intended for use by individuals under 18 years of age. We do not knowingly collect personal information from children under 18. If we become aware that we have collected such information, we will take steps to delete it promptly.

10. International Data Transfers

If you access LossAssist from outside [Country/Region], your information may be transferred to, stored, and processed in [Country/Region]. We ensure appropriate safeguards are in place for such transfers in compliance with applicable data protection laws.

11. Changes to This Privacy Policy

Update Reasons

We may update this Privacy Policy periodically to reflect:

  • Changes in our practices
  • Updates to applicable laws
  • New features or services

Notification Methods

We will notify users of material changes through:

  • Email notifications
  • Platform notifications
  • Updated effective date on this policy

12. Contact Information

Get in Touch

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

Special Requests

  • For GDPR-related inquiries, please use the subject line "GDPR Request."
  • For CCPA-related inquiries, please use the subject line "CCPA Request."

13. Data Breach Notification

In the unlikely event of a data breach that may affect your personal information, we will:

  • Notify affected users within 72 hours of discovery
  • Report to relevant authorities as required by law
  • Take immediate steps to secure the breach and prevent further unauthorized access
  • Provide guidance on protective measures you can take

Acknowledgment: By using LossAssist, you acknowledge that you have read, understood, and agree to this Privacy Policy. Your continued use of the service constitutes acceptance of any updates to this policy.

Questions About Our Privacy Policy?

We're committed to transparency and protecting your privacy. Contact us if you need clarification on any aspect of our policy.