Privacy Policy

We use the information we collect to:

• Create and manage your account and authenticate you.
• Deliver the IPO data, GMP tracking, and market intelligence services you request.
• Send transactional emails such as password resets and account alerts.
• Send optional newsletters or IPO alerts — only if you opt in.
• Analyse usage patterns to improve features, performance, and reliability.
• Detect, investigate, and prevent fraudulent or abusive activity.
• Comply with applicable legal and regulatory obligations.

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

Where applicable law requires a legal basis for processing, we rely on:

• Contract performance: To fulfil our service commitments to you.
• Legitimate interests: To operate, secure, and improve our platform.
• Consent: For optional communications such as newsletters; you may withdraw consent at any time.
• Legal obligation: Where we are required to process data to comply with law.

We share personal data only in limited circumstances:

• Service providers: Trusted vendors who help us operate the platform (cloud hosting, authentication, email delivery, analytics). They process data only on our instructions.
• Legal requirements: When disclosure is required by law, court order, or to protect the rights and safety of our users or the public.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred. We will notify you before your data becomes subject to a different privacy policy.

We use the following categories of cookies:

• Strictly necessary: Required for authentication and core site functionality. Cannot be disabled.
• Performance / Analytics: Help us understand how visitors use the site (e.g., page views, session duration). Anonymous data only.
• Preference: Remember your settings such as theme or language.

You can control non-essential cookies through your browser settings. Disabling cookies may affect some features of the site.

We retain your personal data for as long as your account is active or as needed to provide our services. If you delete your account, we will delete or anonymise your data within 30 days, except where we are required to retain it for legal or regulatory reasons.

We implement industry-standard technical and organisational measures to protect your data — including encryption in transit (TLS), encryption at rest, access controls, and regular security reviews. However, no system is completely secure, and we cannot guarantee absolute security.

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Delete your data ("right to erasure").
• Restrict or object to certain processing activities.
• Data portability — receive your data in a structured, machine-readable format.
• Withdraw consent at any time for consent-based processing.

To exercise any of these rights, email us at [email protected]. We will respond within 30 days.

IPOup is not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

Our platform may contain links to external websites (e.g., SEBI, NSE, BSE, registrar portals). We are not responsible for the privacy practices of those sites. We encourage you to review their privacy policies before providing any information.

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top and, where appropriate, notify you by email or a prominent notice on the site. Continued use of IPOup after changes take effect constitutes your acceptance of the updated policy.

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us: