Privacy Policy

SajiloBima is an insurance comparison and information platform operated by Drisya AI Pvt. Ltd., a private limited company incorporated in Nepal under the Company Act, 2063 (company registration no. 357761), with its registered office at Aloknagar, Kathmandu, Nepal.

In this policy, “SajiloBima”, “we”, “us” and “our” mean Drisya AI Pvt. Ltd. as operator of the platform. “You” means any person who visits or uses the platform.

We are not an insurance company, insurance agent or insurance broker. We are not licensed by the Nepal Insurance Authority (Nepal Bima Pradhikaran), we do not underwrite or sell insurance policies, and we are not affiliated with any insurer whose plans appear on the platform.

Contact for privacy matters: info@sajilobima.com

This policy explains what personal information we collect through the platform, why we collect it, who we share it with, how long we keep it, and what rights you have. It applies to the website, the AI advisor, the premium calculator, customer accounts, and our email communications.

It does not apply to insurers’ own websites or to any third-party site you reach through a link on our platform. Those operators have their own privacy policies and we are not responsible for them.

3.1 Information you give us

Please do not enter more sensitive detail than the question asks for. The AI advisor is a free-text field; information about your health, medical history or finances that you type into it will be processed as described in this policy. If you would rather not share such detail, use the category browse and comparison pages instead, which require no personal information.

3.2 Information collected automatically

When you browse the platform we collect, through cookies and similar technologies:

• device and browser type, operating system, screen size and language preference;
• IP address (from which we derive an approximate city or province — we do not derive precise location);
• pages viewed, plans compared, filters and categories used, search terms entered, time on page and referring page;
• an anonymous session or visitor identifier.

3.3 Information from other sources

Plan data — premiums, coverage, terms, benefit tables and claim statistics — is compiled from insurers’ published materials, brochures, rate tables, regulatory filings and public disclosures. This is company information, not personal information about you.

We do not buy personal information about you from data brokers.

We process personal information for the following purposes:

• To deliver what you asked for — running a comparison, calculating an indicative premium, producing an AI recommendation, answering your enquiry, operating your account. Basis: your consent and performance of the service you requested.
• To communicate with you — replying to your enquiry, service notices, and (only if you opt in) newsletters and product updates. Basis: consent, withdrawable at any time.
• To improve the platform — understanding which plans and categories people compare, where users get stuck, and which content is useful. Basis: our legitimate interest in operating and improving the service, using aggregated data wherever aggregated data is sufficient.
• To produce aggregated market insights for insurance companies who participate in our partnership program (see section 6). Basis: our legitimate interest, applied only to de-identified aggregate data.
• To keep the platform secure — detecting fraud, abuse, scraping and unauthorized access; keeping audit logs. Basis: legitimate interest and legal obligation.
• To meet legal obligations — responding to lawful requests from Nepali authorities and courts, and complying with the Individual Privacy Act, 2075, the Electronic Transactions Act, 2063, the Consumer Protection Act, 2075, and applicable tax and company law. Basis: legal obligation.

We do not use your personal information to make automated decisions that have a legal effect on you. The AI advisor produces a suggestion, not a decision about your eligibility, premium or cover — those are determined only by an insurer, on its own terms.

The AI advisor uses a third-party large language model provider — GPT Model — to interpret your request and generate a recommendation. What this means in practice:

• the text you enter, together with structured plan data from our catalogue, is transmitted to that provider for processing;
• we instruct the provider to process the data only to return a response to us, and not to use it to train its models;
• the provider may process the data on servers outside Nepal;
• AI output can be incomplete or wrong. It is a starting point for your own research, not professional advice, and not a substitute for reading the insurer's policy document.

If you do not want your input processed by a third-party AI provider, do not use the AI advisor.

6.1 We do not sell your personal information

We do not sell, rent or trade your name, phone number, email address or any other personal information. We do not operate a lead-selling business and we do not hand contact lists to insurers’ sales teams.

6.2 What insurance companies receive

Insurance companies that participate in our advertising, articles, analytics, reporting and insights program receive aggregated, de-identified information only — for example, how many visitors compared health plans in a given month, which coverage levels or price bands attract the most interest, or how demand differs by province.

To protect you, aggregate figures are suppressed unless the underlying group is large enough to prevent anyone being singled out. Insurers do not receive your identity, your contact details, your AI advisor conversations or your calculator inputs, and they cannot ask us to identify an individual visitor.

6.3 Service providers

We use a small number of processors to run the platform. Each is bound by contract to process data only on our instructions and to protect it, for the following functions.

• Hosting and application infrastructure
• Database and authentication
• AI language model
• Transactional and marketing email
• Web analytics
• Error monitoring

6.4 Legal and corporate disclosures

We may disclose information where we are required to by Nepali law, court order or a lawful request from a competent authority; where necessary to establish or defend a legal claim; or, in the event of a merger, acquisition or transfer of the business, to the acquiring entity, in which case we will notify you and this policy will continue to apply until replaced.

We use:

• Essential cookies — session management, login, security and language preference. The platform cannot function without these.
• Analytics cookies — measuring traffic and how features are used, so we can improve them.
• Preference cookies — remembering your language and comparison selections.

We do not run third-party advertising networks or cross-site behavioral advertising cookies. Advertising on the platform is sold directly to insurance companies and placed contextually, by category — not by tracking you across other websites.

You can block or delete cookies in your browser settings. If you block essential cookies, login and comparison features will not work.

Some of our processors store or process data outside Nepal. Where that happens, we require the provider by contract to apply security and confidentiality standards no lower than those in this policy and in the Individual Privacy Act, 2075.

We protect information using encryption in transit (HTTPS/TLS), hashed passwords, role-based access limited to staff who need it, network and database access controls, logging of administrative access, and regular patching and backups.

No system is perfectly secure. If a breach occurs that is likely to affect your rights, we will notify affected users and the relevant authority without undue delay, describe what happened and what we are doing about it.

You may, at any time:

• ask what we hold about you and get a copy;
• correct information that is wrong or out of date;
• delete your information, subject to records we must keep by law;
• withdraw consent, including unsubscribing from marketing — this does not affect processing already carried out;
• object to processing based on legitimate interest;
• ask for a copy of the information you gave us in a portable format;
• complain to us, or to the competent authority under the Individual Privacy Act, 2075.

Write to info@sajilobima.com. We will respond within 15 days. We may ask you to verify your identity before acting, to make sure we are not disclosing your information to someone else.

The platform is intended for people aged 18 and over, who can enter into a contract under the Contract Act, 2056. We do not knowingly collect information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

We may update this policy as the platform changes or the law changes. The effective date at the top will tell you when it last changed. If a change materially affects how we use your personal information, we will give notice on the platform and, where we have your address, by email — before the change takes effect.

Drisya AI Pvt. Ltd., Aloknagar, Kathmandu, Nepal. Email: info@sajilobima.com