← Back to home

Privacy Policy

Last updated: 7 June 2026

1. Who we are

BuildReal is operated by Greenovaite Technologies ("we", "us", "our"), a company registered in India. We provide an AI-assisted internship platform for engineering students.

Data Fiduciary: Greenovaite Technologies
Contact: contact@buildreal.in
Grievance Officer: contact@buildreal.in

2. What data we collect

We collect only the data needed to provide the BuildReal service:

  • Account data: full name, email address, college name, city
  • Payment data: UPI transaction ID you enter (we do not store card numbers or bank details)
  • Project data: GitHub repository URL, live project URL, video demo URL, written reflection
  • Usage data: pages visited, timestamps, browser type, IP address (collected automatically)

We do not collect your phone number, Aadhaar, PAN, or any sensitive personal data as defined under the Digital Personal Data Protection Act, 2023 ("DPDP Act").

3. Why we collect it (purpose limitation)

DataPurpose
Name, emailAccount creation, transactional emails, certificate issuance
College, cityProgramme eligibility verification and aggregate analytics
UPI transaction IDManual payment verification by admin
Project URLs + reflectionProject review and certificate eligibility assessment
IP address, browser dataSecurity, fraud prevention, service operation

4. Legal basis for processing

We process your personal data on the following grounds under the DPDP Act, 2023 and IT Act, 2000:

  • Consent — you explicitly tick the consent checkbox at registration
  • Contractual necessity — to deliver the BuildReal programme you have enrolled in
  • Legitimate interests — fraud prevention, service security, and aggregate analytics
  • Legal obligation — to comply with applicable Indian laws including the IT Act, 2000 and the Consumer Protection Act, 2019

5. Data sharing and third-party processors

We share your data only with the following processors who help us operate the service:

  • Supabase (database and authentication) — servers in AWS
  • Resend (transactional email) — servers in the United States
  • Sertifier (certificate generation) — servers outside India
  • Vercel (web hosting) — servers in the United States

Your consent at registration covers transfer of your data to these processors outside India, in accordance with Section 16 of the DPDP Act, 2023. We do not sell your data to any third party. We do not share your data with advertisers.

6. Data retention

We retain your personal data for 3 years from your last interaction with the platform, after which it is deleted or anonymised. Certificate records may be retained longer to allow verification by third parties (employers, institutions). You may request earlier deletion — see Section 8.

7. Cookies and tracking

We use essential cookies only: session authentication cookies set by Supabase. We do not use advertising cookies or third-party tracking pixels. You will be shown a cookie consent banner on your first visit. You can reject non-essential cookies without affecting core functionality (there are none to reject).

8. Your rights (DPDP Act, 2023)

As a Data Principal under the DPDP Act, you have the right to:

  • Access — obtain a summary of the personal data we hold about you
  • Correction — request correction of inaccurate or incomplete data
  • Erasure — request deletion of your data (subject to legal retention requirements)
  • Grievance redressal — raise a complaint with our Grievance Officer
  • Nominate a nominee — nominate a person to exercise your rights in case of death or incapacity

To exercise any right, email contact@buildreal.in with the subject line "Data Rights Request — [your name]". We will respond within 30 days.

9. Data security

We implement appropriate technical and organisational measures to protect your data, including: encrypted data transmission (TLS), access controls limited to authorised personnel, and passwordless authentication (magic links). No method of transmission over the internet is 100% secure. If we become aware of a data breach that affects you, we will notify you in accordance with applicable law.

10. Children's data

The BuildReal platform is intended for users aged 18 and above. We require age confirmation at registration. If we become aware that we have collected data from a person under 18 without appropriate consent, we will delete that data promptly.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by displaying a notice on the platform. Continued use of the platform after changes are posted constitutes acceptance of the updated policy.

12. Grievance Officer

In accordance with the IT Act, 2000 and the DPDP Act, 2023, you may contact our Grievance Officer:

Grievance Officer, Greenovaite Technologies
Email: contact@buildreal.in
Response time: within 30 days of receipt of complaint

13. Governing law

This Privacy Policy is governed by the laws of India, including the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000, and the Consumer Protection Act, 2019. Any disputes arising in connection with this policy shall be subject to the jurisdiction of the courts of India.