← Back

Privacy Policy

Last updated: September 2026

1. What we collect

  • Account info — your email address and password (handled by Supabase Auth; we never see or store your raw password).
  • Data you enter — the demat accounts, IPO applications, allotments, holdings, sales, and capital records you add for your own tracking. This is financial record-keeping data you control, not something we collect independently.
  • Payment/subscription metadata — if you upgrade to Pro, we store your subscription status and billing cycle dates. Your card/UPI details are handled entirely by Razorpay, our payment processor — we never receive or store them.
  • Basic usage analytics — page views via Vercel Analytics, which doesn't use tracking cookies or collect personally identifying information.
  • Crash reports — if the app errors, technical details about the failure may be logged server-side to help us fix it. We don't intentionally include your personal data in these reports.

We do not currently collect PAN, Aadhaar, or any other government ID — no such feature exists in the app today.

2. How we use it

To run the service: authenticate you, save and display the data you enter, calculate your P&L/ROI, process Pro subscription payments, and keep the app running reliably. We do not sell your data, and we do not use it to place trades, submit IPO applications, or otherwise act on your behalf with any broker, exchange, or registrar.

3. Who else sees it

We use a small number of service providers to run IPO Tracker, each only for its specific purpose:
  • Supabase — authentication and database hosting
  • Razorpay — payment processing for Pro subscriptions
  • Vercel — frontend hosting and basic analytics
  • Render — backend hosting

We don't share your data with advertisers, data brokers, or any other third party for marketing purposes.

4. Your data, your control

Your account data is private to you and accessible only through your authenticated session. You can export a full backup of your data at any time from Settings, and you can permanently delete your account and all associated data from Settings as well — deletion removes your records from our systems, not just hides them.

5. Cookies

We use cookies required to keep you signed in (via Supabase Auth) and, if you use the guest "try it now" mode, to track your temporary session. We don't use third-party advertising or tracking cookies.

6. Emails we send

We send transactional emails needed to run your account (confirming your email, password resets) regardless of preference — these aren't marketing and can't be opted out of while you have an account. Product update emails (new features, pricing changes, offers) are sent only if you opt in via the checkbox at signup, and every one includes an unsubscribe option. You can withdraw this consent at any time.

7. Security

Data is encrypted in transit (HTTPS) and access to your account data is restricted to your own authenticated session. No system is perfectly secure, but we take reasonable, industry-standard measures to protect your information.

8. Children's privacy

IPO Tracker is not directed at, and we do not knowingly collect data from, anyone under 18.

9. Changes

This policy may be updated from time to time as the app evolves. Continued use of the app after changes means you accept the updated policy.

10. Contact

Questions about this policy or your data can be sent to the email address associated with this app's support.