RERACertified is committed to protecting your personal data. This Privacy Policy explains what data we collect, how we use it, how we protect it, and your rights regarding your data. Please read it carefully.
1. Who We Are
RERACertified Academy ("we", "us", "our") operates the professional certification platform at reracertified.in. We are responsible for the personal data you provide when using our platform, enrolling in courses, or contacting us.
Data Controller: RERACertified Academy, reracertified.in
Contact: info@reracertified.in
2. What Data We Collect
2.1 Data You Provide Directly
- Registration data: Full name, email address, phone number, state of practice
- Payment data: Transaction amounts and payment status (card/banking details are processed by Razorpay — we do not store them)
- Contact form data: Name, email, phone, message content
- Profile data: Professional background, experience, certifications if voluntarily shared
2.2 Data Generated by Your Use of the Platform
- Learning data: Lessons completed, time spent, audio playback usage
- Examination data: Exam scores, answers submitted, attempts, pass/fail status
- Certificate data: Credential ID, issue date, grade, state track
- Platform usage data: Pages visited, features used, device type, browser, operating system
2.3 Automatically Collected Technical Data
- IP address and approximate location
- Session cookies necessary for platform functionality
- Analytics data via Google Analytics 4 (anonymised)
- Microsoft Clarity heatmaps and session recordings (anonymised — no personally identifiable information)
3. How We Use Your Data
| Purpose |
Data Used |
Legal Basis |
| Process enrollment and confirm payment | Name, email, payment status | Contract performance |
| Provide access to course content and exams | Account data, learning progress | Contract performance |
| Issue certificates and maintain credential registry | Name, exam score, credential ID | Contract performance |
| Send enrollment confirmation, password, and course emails | Email address, name | Contract performance |
| Respond to support queries | Contact data, enrollment data | Legitimate interest |
| Improve platform content and user experience | Anonymised analytics | Legitimate interest |
| Send course updates and platform announcements | Email, name | Legitimate interest (opt-out available) |
| Comply with legal or tax obligations | Payment records, invoice data | Legal obligation |
We do not use your data for automated profiling or AI-based decision-making that materially affects you.
4. Certificate Verification — Public Information
When a CREP™ certificate is issued, the following information is made publicly accessible through our verification portal at reracertified.in/verify:
- Your full name (as registered)
- Credential ID (e.g., CREP-HR-2026-000001)
- State track completed
- Grade achieved (Certified / Merit / Distinction)
- Certificate issue date
- Certificate status (Active / Revoked)
By enrolling and earning a certificate, you consent to this information being publicly accessible for certificate verification purposes. This is essential to the verification function of the CREP™ credential.
Your contact details (email, phone) are never made publicly available through the verification portal.
5. Data Sharing
We do not sell, rent, or trade your personal data. We share data only with:
- Razorpay: Payment processing. Your payment data is governed by Razorpay's privacy policy.
- Google: Analytics (anonymised data only), email infrastructure (if using Google Workspace).
- Microsoft Clarity: Anonymised session heatmaps for UX improvement — no PII transmitted.
- Email service providers: For transactional emails (enrollment confirmation, password, certificate notifications).
- Legal authorities: If required by law, court order, or regulatory requirement in India.
All third-party service providers are required to process your data only for the specified purpose and in compliance with applicable data protection requirements.
6. Data Retention
- Account and learning data: Retained for the lifetime of your account and for 7 years after account closure (for legal and audit purposes)
- Certificate records: Retained permanently — certificate verification must remain available indefinitely
- Payment records: Retained for 8 years from the date of transaction (as required by Indian tax law)
- Contact form submissions: Retained for 2 years
- Analytics data: Retained as per Google Analytics and Microsoft Clarity default retention settings (typically 14 months for GA4)
7. Your Rights
You have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you
- Correction: Request correction of inaccurate or incomplete data
- Deletion: Request deletion of your account and personal data (subject to legal retention requirements — certificate records and payment records cannot be deleted)
- Opt-out: Unsubscribe from marketing and non-essential communications at any time
- Data portability: Request your learning data in a portable format
To exercise any of these rights, email support@reracertified.in with your registered email address and the specific request. We will respond within 30 days.
8. Cookies
We use the following types of cookies:
- Essential cookies: Required for platform functionality — login sessions, exam state, page navigation. Cannot be disabled.
- Analytics cookies: Google Analytics 4 (anonymised) — helps us understand how the platform is used. Can be opted out via browser settings or Google's opt-out tool.
- Behaviour analytics: Microsoft Clarity (anonymised heatmaps). Can be opted out via browser settings.
We do not use advertising, retargeting, or third-party tracking cookies.
9. Data Security
We take reasonable technical and organisational measures to protect your personal data, including:
- HTTPS encryption on all pages and API endpoints
- Passwords stored using bcrypt hashing — never in plain text
- Payment processing entirely handled by PCI-DSS compliant Razorpay
- Access controls — personal data accessible only to authorised personnel
- Regular security reviews of platform code
No system is completely secure. In the event of a data breach affecting your personal information, we will notify you by email within a reasonable timeframe.
10. Children's Privacy
RERACertified is intended for adults (18+) engaged in or entering real estate as a profession. We do not knowingly collect personal data from persons under 18. If we become aware that a person under 18 has provided personal data, we will delete it promptly.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify registered users by email of significant changes at least 14 days before they take effect. The updated policy will be posted on this page with a revised effective date.
12. Contact Us
For any privacy-related queries, requests, or concerns: