Privacy Policy
rera.watch ("we", "our", "the site") is committed to protecting your privacy. This policy explains what personal data we collect, why we collect it, and your rights over that data. It applies to all visitors to rera.watch.
What data we collect
We use Google Analytics 4 to understand how visitors use the site — which pages are visited, how long sessions last, and which search terms are used. This includes a small number of product-usage events (for example, that a shortlist button was clicked, or that a sign-in was requested) — these events record which action happened and which project ID was involved, never your email address or account identity. Google Analytics also collects anonymised data including your approximate location (country/city level), device type, and browser. We do not store this data ourselves; it is processed by Google under their own privacy policy. You can opt out using the Google Analytics opt-out browser add-on.
Creating a free account is entirely voluntary and is what powers the shortlist and watchlist features below. You can sign in with Google, or with a one-click email link (no password either way). If you use Google, we receive only your email address and basic profile info (name, if shared) — never your Google password, contacts, or anything beyond that. Account identity and sign-in are handled by Supabase, a third-party authentication and database provider we use as our data processor; your account data (email, shortlist, watchlist subscriptions) is stored in Supabase's India-region (Mumbai) infrastructure, not on our own servers, and access is restricted so only you can read or modify your own data.
If you're signed in, projects you shortlist are saved against your account so you can find them again and compare them. This is only visible to you.
If you're signed in, you can watch specific projects. We use your account email only to send you notifications when a project you're watching files new quarterly data with K-RERA. We do not use it for marketing, and we do not share it with any third party. Every alert email includes a one-click unsubscribe link that does not require signing in.
How we use your data
- Analytics data is used to understand site usage and improve the product. It is not used to identify individuals.
- Your account email is used to let you sign back in, and to deliver watchlist alerts for projects you've chosen to follow.
- Your shortlist and watchlist selections are used only to power those features for you — we don't use them for anything else.
- We do not sell, rent, or share personal data with advertisers or data brokers.
Data retention
Account data (email, shortlist, watchlist subscriptions) is retained for as long as your account exists. You can request full account deletion at any time by emailing rera.watch.official@gmail.com — this removes your identity and all associated data from Supabase. Individual watchlist subscriptions can be turned off any time via the unsubscribe link in any alert email, without deleting your whole account.
Google Analytics data is retained according to Google's standard retention settings (26 months by default). We do not control Google's data retention.
Your rights
Under India's Digital Personal Data Protection Act, 2023 (DPDP Act), you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request erasure of your personal data
- Withdraw consent (unsubscribe from watchlist alerts individually, or delete your whole account)
To exercise any of these rights, email rera.watch.official@gmail.com. We will respond within 30 days.
Cookies
If you sign in, we set a small number of first-party cookies, all readable only by our own server (never by other websites or scripts):
- Session cookies — keep you signed in for up to 30 days so you don't have to sign in on every visit.
- A remembered-email cookie — pre-fills the sign-in form with the email you last used on that browser. It carries no sign-in power on its own.
- A short-lived sign-in cookie — used only for a few minutes during the Google sign-in process itself, then discarded.
If you use "Continue with Google," Google's own domain (accounts.google.com) sets its own cookies during that process, governed by Google's privacy policy, not ours. Separately, Google Analytics sets its own cookies (_ga, _ga_*) to distinguish users and sessions — also third-party, also governed by Google's privacy policy.