1. Who we are

RERALens ("we", "us") is a Karnataka-focused real-estate data intelligence platform. This Privacy Policy explains what personal information we collect when you use reralens.com, how we use it, and your rights over it.

2. Information we collect

• Account information: email, full name, password (stored as a salted hash), GST number when supplied.
• Channel partner information: KA RERA agent registration ID and agency name (only if you opt in to the channel-partner program).
• Payment information: handled by Razorpay; we receive the transaction reference, amount, status, and the last 4 digits of the instrument. We do not store full card or UPI handles.
• Usage information: pages visited, projects viewed, searches performed, IP address, browser user-agent, approximate location derived from IP.
• Communications: messages you send us (email, WhatsApp); WhatsApp opt-in status for alerts.

3. How we use your information

• Provide and operate the service (authentication, search history, saved projects, unlocked reports).
• Process payments and issue GST-compliant invoices.
• Deliver WhatsApp/email alerts when you opt in to project watchlist updates.
• Detect abuse and protect the service (rate limiting, fraud prevention).
• Improve the product (aggregated usage analytics; never personally identifying).
• Comply with legal obligations (income tax, GST, RBI, data preservation orders).

4. Data sources

The Karnataka RERA project data we display is sourced from the publicly available Karnataka RERA portal. We do not modify the underlying regulatory data; we normalize and present it. We do not collect personal information about developers, allottees, or third parties beyond what KA RERA itself publishes.

5. Sharing your information

We do not sell your personal data. We share it only with:

• Razorpay, for payment processing.
• Cloud infrastructure providers hosting RERALens (servers, databases, file storage).
• WhatsApp Business API provider, for sending opted-in alerts.
• Indian law-enforcement and regulatory authorities, when legally compelled.

6. Data retention

We keep account data while your account is active. Payment records are retained for 7 years (income-tax and GST requirements). Usage logs are retained for 90 days unless flagged for fraud review. You can request account deletion at any time (see section 8).

7. Security

Passwords are stored using bcrypt with a per-user salt. All traffic is encrypted in transit (HTTPS). Payment data does not touch our servers (handled by Razorpay's PCI-DSS environment). No security system is unbreakable; you are responsible for keeping your password and devices secure.

8. Your rights

• Access the personal information we hold about you.
• Correct inaccurate information.
• Delete your account and personal data (payment records retained for the legal minimum).
• Object to processing for marketing purposes (we don't market without opt-in, but you can confirm).
• Download a copy of your data in a portable format.

To exercise these rights, email privacy@reralens.com. We respond within 30 days.

9. Cookies and tracking

We use essential cookies for authentication (JWT tokens stored in your browser's localStorage) and anonymous usage analytics. We do not use third-party advertising trackers. We do not sell or share data with ad networks.

10. Children

RERALens is not directed to children under 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us information, contact us to have it removed.

11. Changes to this policy

We will notify registered users of material changes via email at least 30 days before they take effect. Continued use of the service after that constitutes acceptance.

12. Contact

Email: privacy@reralens.com
Grievance officer (under the IT Rules, 2021): to be appointed before production launch.