Privacy Policy

The Platform collects information to perform statutory real estate compliance services. This includes:

Your information is processed for specific, legal, and compliance-related purposes:

• To verify and validate promoter credentials during onboarding.
• To compile, format, and generate RERA-compliant PDF certificates (Form 1, 2, 3, etc.).
• To manage specific tenancy context via Tenant IDs for Promoter Groups.
• To monitor project progress and alert promoters of upcoming quarterly update deadlines.
• To audit structural, architectural, and financial signatures against master lists of registered professionals.

Data submitted to the Platform is never sold, traded, or shared for third-party marketing purposes. We share your information exclusively in the following scenarios:

• Regulatory Authorities: Completed compliance forms and certificates are transmitted directly to the RERA statutory database (TG RERA).
• Administrative Staff: Designated reviewers and platform staff have access to view and cross-reference files to ensure onboarding accuracy.
• Legal Compliance: We may disclose information if required by law, subpoena, or government audit under the RERA Act.

We implement advanced technical and organizational measures to safeguard data:

Our APIs enforce strict JSON Web Token (JWT) verification, tenant-level isolation filters, and secure communication channels (HTTPS/TLS) for all transactions.

Because the Platform serves a statutory reporting role, data retention is governed by real estate regulatory laws. Compliance documents, form audits, and submitted signatures are retained for the active lifecycle of the real estate project, and typically archived for a minimum statutory period of five (5) years following project completion or closure.

As a registered user of the Platform, you have the right to:

• Access all project filings, professional certifications, and profile data linked to your account.
• Request corrections of clerical errors in pending submissions prior to statutory authority review.
• Object to non-statutory data processing activities.
• Manage secondary user permissions and roles inside your promoter group.

The Platform uses cookies and browser local storage strictly for security, authentication, and state management:

• sessionStorage: Stores your active authorization JWT token and selected tenant identifiers. This is automatically destroyed when the tab or browser is closed.
• localStorage: Temporarily holds the cryptographic PKCE verifier parameters during the sign-in redirect sequence to prevent intercept attacks.

If you have questions about this Privacy Policy, or want to raise concerns regarding how your compliance data is processed, please reach out to the compliance support desk: