Certaze Technologies ("Certaze", "we", "us") operates the certification exam preparation platform at certaze.in. We are the Data Fiduciary responsible for your personal data under the Digital Personal Data Protection Act, 2023 (India).
Contact our Data Fiduciary at: admin@certaze.in
We collect the following categories of personal data, with your knowledge and consent at account creation:
| Category | Data collected | Why |
|---|---|---|
| Account data | Email address, display name, password (hashed via Firebase) | Authentication and account management |
| Usage data | Questions answered, scores, session history, domain performance, study streak | AI readiness prediction, personalised coaching |
| Device data | Browser type, device type, IP address | Security, rate limiting, abuse prevention |
| Payment data | Transaction ID, plan purchased, payment status | Subscription management. Card details processed by Razorpay — never stored by us. |
Study data is stored primarily in your browser's localStorage. If you enable cloud sync, a copy is stored in our Firestore database.
We use your data only to:
We do not use your data to train AI models. Your questions and answers are processed in real time by the Anthropic API and not retained by Anthropic for training under our agreement.
We use the following third-party processors to operate Certaze:
| Service | Purpose | Data shared | Policy |
|---|---|---|---|
| Google Firebase (USA) | Authentication, database, hosting | Email, usage stats, device info | firebase.google.com |
| Anthropic (USA) | AI question generation (Claude API) | Session prompts — not linked to your identity | anthropic.com |
| Razorpay (India) | Payment processing | Name, email, amount. Cards handled by Razorpay only. | razorpay.com |
| Vercel (USA) | Frontend hosting | IP address, request logs | vercel.com |
| Render (USA) | Backend API hosting | API request logs, IP address | render.com |
| Cloudflare (USA) | DNS and network security | IP address, request metadata — not content | cloudflare.com |
| Upstash (USA) | Rate limiting and abuse prevention | Request frequency data; no personal data stored beyond active session | upstash.com |
Certaze is an India-based service. However, several of our third-party processors — including Google Firebase, Anthropic, Vercel, Render, Cloudflare, and Upstash — are incorporated in and operate infrastructure within the United States of America.
By creating an account and using Certaze, you acknowledge and consent to your personal data being transferred to and processed in the United States, which may have data protection laws different from India's.
Security measures include HTTPS everywhere, Firebase Authentication, Firestore security rules, server-side rate limiting via Upstash, and Cloudflare network-layer protection. No system is perfectly secure — we will notify you promptly of any breach affecting your data.
Under the Digital Personal Data Protection Act, 2023 (India):
To exercise any right, email admin@certaze.in with subject "Data Request". We respond within 30 days after verifying your identity.
Certaze uses browser localStorage — not traditional cookies — to store your study data on your device. This data never leaves your device unless cloud sync is enabled.
Firebase Authentication uses a secure session token to maintain your signed-in state. This is strictly necessary and cannot be disabled while using the Service. We do not use advertising cookies, tracking pixels, or third-party analytics cookies.
The Service is not directed to persons under 18 years of age. We do not knowingly collect personal data from minors. If you believe a person under 18 has provided us with personal data without appropriate consent, please contact admin@certaze.in with the subject "Minor Data Concern". We will take prompt steps to delete that information.
We may update this Privacy Policy from time to time. Material changes will be notified via your registered email at least 14 days in advance and posted at certaze.in/privacy with a new effective date. Continued use constitutes acceptance.
In accordance with the Information Technology Act, 2000, IT (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, and the Digital Personal Data Protection Act, 2023:
Complaints acknowledged within 24 hours, resolved within 30 days.
Contact our Grievance Officer and Data Fiduciary.
Subject: "Data Request" or "Privacy Concern" · Response within 30 days