Privacy Policy
How IPONOVA collects, uses, and protects your information.
This privacy policy describes how IPONOVA ("we", "us", "our") handles personal information when you visit iponova.in or use our services. We comply with India's Digital Personal Data Protection Act, 2023 (DPDP Act).
1. Information We Collect
We collect only the minimum information needed to operate the platform:
| Type | What it includes | When we collect it |
|---|---|---|
| Account data | Mobile number, name (optional) | When you sign in via OTP |
| Contact form | Name, email, mobile, subject, message | When you submit the contact form |
| Usage data | Pages viewed, IP address, browser type, device type | Automatically while you browse |
| Cookies | Session ID, authentication token, analytics cookies | Automatically while you browse |
| Alert preferences | IPOs/buybacks you've subscribed to | When you opt in to alerts |
2. How We Use Your Information
- Authentication — verifying your identity via mobile OTP
- Service delivery — showing IPO/buyback data, sending alerts you opted in to
- Customer support — responding to your contact form messages
- Analytics — understanding which pages are useful, improving the site
- Security — preventing fraud, abuse, and rate-limit violations
- Legal compliance — meeting our obligations under Indian law
3. We Do Not:
- Sell your personal data to anyone
- Share your data with advertisers, brokers, or third-party marketers
- Ask for your bank details, demat credentials, PAN, Aadhaar, or passwords
- Store your payment card information
- Send promotional SMS/email without your consent
4. Cookies & Analytics
We use:
- Essential cookies — required for login sessions and security. Cannot be disabled.
- Google Analytics 4 — anonymous usage statistics. IP addresses are anonymised. You can opt out by enabling "Do Not Track" in your browser or using browser-level analytics blockers.
5. Third-Party Services We Use
- SMS provider (OnlySMS) — to send OTPs to your mobile number
- Telegram — only if you choose to subscribe to our public Telegram channel @iponovaalerts
- Google Analytics — anonymised usage tracking
- Hosting (Hostinger, India region) — to serve the website
These providers have their own privacy policies and we share only the data needed for them to perform their function.
6. Data Storage & Security
Your data is stored on secure servers located in India. We use:
- HTTPS (TLS) encryption for all traffic between your browser and our servers
- Password-hashed admin authentication
- Rate limiting and IP-based abuse prevention
- Prepared SQL statements to prevent injection attacks
While we take reasonable security measures, no online system is 100% secure. We cannot guarantee absolute security.
7. Data Retention
We keep your data only as long as needed:
- Account data — until you request deletion or after 24 months of inactivity
- OTPs — deleted within 10 minutes
- Contact form messages — up to 12 months for support history
- Server logs — typically 30 days
- Analytics data — anonymised, retained per Google Analytics defaults
8. Your Rights (under DPDP Act 2023)
You have the right to:
- Access — request a copy of the personal data we hold about you
- Correction — ask us to correct inaccurate or incomplete data
- Erasure — request deletion of your account and associated data
- Withdraw consent — opt out of alerts or analytics at any time
- Grievance redressal — raise a complaint about how your data is handled
To exercise any of these rights, email hello@iponova.in with your request. We respond within 30 days.
9. Children's Privacy
IPONOVA is not intended for users under 18 years of age. We do not knowingly collect data from minors. If you believe a minor has provided personal data to us, contact us and we will delete it.
10. Cross-Border Transfers
All data is processed and stored within India. We do not transfer your personal data outside India except where required by law or by trusted third-party services (e.g. Google Analytics) which have their own data-handling commitments.
11. Updates to This Policy
We may update this privacy policy from time to time. Material changes will be flagged on the homepage. The "Last updated" date at the top of this page indicates the latest revision.
12. Grievance Officer
For privacy-related complaints, email hello@iponova.in with the subject line "Privacy — Grievance". We acknowledge complaints within 5 business days and resolve within 30 days as required by the DPDP Act.
Contact
For any questions about this privacy policy, see our contact page.