Privacy policy

Last updated: 2 November 2026

This policy explains how Boom In Technologies ("we", "us") handles personal data in Boom In Certify at https://boomintechnologies.in. It is written to meet the Information Technology Act, 2000 and its rules, and the Digital Personal Data Protection Act, 2023.

1. Whose data, and our role

• Institute users (owners and staff who log in): we decide how this data is used, to run their account.
• Students named on certificates: the institute decides what is entered and why. We process these details on the institute's behalf, only to make and deliver the certificates.

2. What we collect

• Institute account details: business name, contact person, email, phone, address, login email, and a scrambled (hashed) password — we never see the actual password.
• 2-step sign-in: the secret key for the authenticator app, stored encrypted.
• Certificate details entered by the institute: for example the student's name, course and date, and any other field on that institute's certificate.
• Billing records: invoices, amounts and payment references. Card, UPI and bank details are handled by Razorpay; we do not receive or store them.
• Security records: sign-in times, IP addresses and an activity log of changes, to protect accounts and investigate misuse.
• Certificate downloads: a count of how many times each QR link was used. We do not record who scanned it.

3. Why we use it

• to provide the Service: create certificates, generate PDFs and QR downloads;
• to manage accounts, logins and security;
• to bill for the Service and record payments;
• to send service emails (invitations, password links, invoices);
• to meet legal duties (for example tax and accounting records).

We do not sell personal data, use it for advertising, or share it for others' marketing.

4. Who we share it with

• Razorpay — to take payments.
• Our hosting and email provider (Hostinger) — to store the portal's data and send service emails.
• Anyone holding a certificate's QR code or link — can download that one certificate. Each link is random and cannot be guessed.
• Authorities — only when required by law.

5. Cookies

We use one essential cookie to keep you signed in, plus security checks on forms. We do not use advertising or tracking cookies. The portal is not listed on search engines.

6. How long we keep it

• Certificate details are kept so that the QR codes keep working, including after an institute's subscription ends, until the institute asks us to delete them.
• Account details are kept while the account exists, and billing records for as long as tax laws require.
• Security logs are kept for about 13 months.

7. Security

All connections use HTTPS. Every login needs 2-step sign-in. Passwords are hashed, secret keys are encrypted, each institute can only see its own data, and repeated failed sign-ins are locked out.

8. Your rights

You can ask to see, correct or delete your personal data, withdraw consent, or name someone to act for you. Students should contact the institute that issued their certificate first; we will help the institute act on the request. If a certificate is deleted, its QR code stops working. Write to our grievance officer (below). We will reply within one month.

9. Children

The portal is for businesses and their adult staff. Where a student is under 18, the institute is responsible for having the consent required by law before entering their details.

10. Changes

We may update this policy and will show the new date at the top of this page.

11. Grievance officer and contact

Madhav Bansal, Grievance Officer — madhav@boomintechnologies.in

Boom In Technologies (operating Boom In Certify)
Jalandhar Road Near Police station nakodar
Email: madhav@boomintechnologies.in
Phone: 8727070157
Website: https://boomintechnologies.in