Privacy Policy

1. Information We Collect

1.1 Information You Provide to Us

• Account Information: your email address, and your name if you provide it.
• Onboarding Information: how you heard about us, your intended use case, and any website or profile link you choose to share.
• Billing Information: your billing name, email, address, city, state, PIN code and phone number, and the details of your plan, orders and invoices.
• Allotment Check Information: if you use our allotment status check, the PAN you submit.
• Communication Information: your name, email address and the content of messages you send us.

Card, UPI and other payment details are entered on the checkout of our payment provider, Dodo Payments, and are not collected or stored by us.

1.2 Information We Collect Automatically

• Usage Data: your IP address, browser type, pages visited, referring pages, and time and duration of visits.
• API Request Logs: for each request to our APIs, the endpoint, the parameters and request body you send, request headers, your IP address, the response status and timing.
• Device Data: your operating system, browser, and a device identifier generated from your browser's characteristics when you sign up.
• Passkey Data: if you sign in with a passkey, its public key and the type of authenticator used. Your biometric data and private key never leave your device.

1.3 Cookies and Analytics

We use only essential cookies, to keep you signed in. Session cookies store a unique session ID; they persist after you close your browser until they expire, and are refreshed when you next sign in. They cannot be disabled without preventing you from signing in. You can block or delete cookies in your browser settings, but some features will not work.

We measure website usage with a self-hosted analytics tool that does not use cookies. We do not use advertising cookies or third-party tracking for advertising.

2. How We Use Your Information

We use the information we collect to:

• Create and authenticate your account, including sending sign-in links by email.
• Provide the Services, including API access, alerts and allotment status checks.
• Process subscriptions and payments, and meet tax and accounting obligations.
• Enforce plan quotas and rate limits.
• Prevent fraud and abuse, such as multiple free accounts created by the same person, using IP addresses and device identifiers.
• Respond to enquiries and provide customer support.
• Send service and account emails, such as sign-in links, billing notices and important changes to the Services.
• Monitor usage, diagnose issues, and improve the Services.
• Comply with legal obligations and enforce our Terms of Service.

We use your PAN only to fetch your allotment status from the IPO registrar. We do not use it for any other purpose.

3. How We Share Your Information

We do not sell your personal data. We share it only as follows:

• Payment Provider: Dodo Payments, our Merchant of Record, receives the information needed to process your payments, issue invoices, calculate taxes and handle refunds. Dodo Payments processes this data under its own privacy policy. Payments made before our move to Dodo Payments were processed by our previous payment processor.
• IPO Registrars: when you use the allotment status check, your PAN is sent to the registrar for that IPO to retrieve your allotment status.
• Service Providers: vendors that host our infrastructure, send our emails, check signups for fake email addresses and automated bots, and run the tools we use for internal alerts and support. They receive only the data needed for these tasks, such as your email address, name and IP address, and process it only on our instructions.
• Legal Obligations: when required by law, legal process or a government request, or to protect the rights and safety of ipoalerts and our users.
• Business Transfers: in connection with a merger, acquisition or sale of assets, subject to this Privacy Policy.
• With Your Consent: in any other case where you ask us to.

4. Your Rights and Choices

You have the right to:

• Access: get a summary of the personal data we hold about you and how we use it.
• Correction: ask us to correct, complete or update your personal data.
• Erasure: ask us to delete your personal data, subject to data we must keep by law (for example, billing records).
• Withdraw Consent: withdraw consent where we rely on it. This does not affect processing already carried out.
• Nominate: nominate another person to exercise your rights in the event of your death or incapacity.
• Grievance Redressal: raise a complaint with us, and if you are not satisfied with our response, with the Data Protection Board of India.

To exercise these rights, email us at [email protected]. We may need to verify your identity before acting on your request.

5. Data Retention

We keep your personal data for as long as your account is active and as needed to provide the Services. After you delete your account, we delete or anonymise your personal data, except where we need to keep it to meet legal, tax or accounting obligations, resolve disputes, or prevent fraud and abuse. Billing records are kept for the period required by Indian tax law.

6. Security of Your Information

We use reasonable security safeguards to protect your data, including encryption in transit and access controls. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security. If a personal data breach affects you, we will notify you and the relevant authorities as required by law.

7. Third-Party Links

Our Website may contain links to third-party websites. We are not responsible for their privacy practices, and we encourage you to read their privacy policies.

8. International Data Transfers

Some of our service providers, including Dodo Payments, may process your personal data outside India. We transfer personal data only as permitted by Indian law.

9. Children's Privacy

The Services are not intended for anyone under the age of 18. We do not knowingly collect personal data from children. If we learn that we have, we will delete it.

If you are a parent or guardian and believe your child has provided us with personal data, please contact us so that we can delete it.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The updated policy will be posted on the Website with a new "Effective Date" at the top. For material changes, we will also notify registered users by email or through the dashboard.

11. Contact and Grievance Officer

If you have questions, concerns or complaints about this Privacy Policy or how we handle your personal data, please contact our Grievance Officer at [email protected]. We will acknowledge your complaint and aim to resolve it within 30 days.