IPO Buzz

Privacy Policy

Last updated: 2 September 2026

This Privacy Policy applies to the IPO Buzz mobile app (Android and iOS) and related websites. It explains what personal data we collect, why, how long we keep it, how you can delete it, and your rights under India’s Digital Personal Data Protection Act, 2023 (DPDP Act). We do not sell personal data.

1. Who we are (Data Fiduciary)

IPO Buzz is the Data Fiduciary for personal data processed through the IPO Buzz app and websites. Service providers that process data on our behalf (for example cloud hosting, Google or Apple sign-in / Firebase, and push-notification vendors) act as Data Processors.

2. Lawful purpose and consent

We process personal data to provide IPO information, account features, IPO applications, allotment checks, alerts, and support. Where the DPDP Act requires consent, we ask for it before processing (for example when you sign in with Google, save demat/PAN details, apply for an IPO, or enable notifications). You may withdraw consent where processing is based on consent; some features may then stop working.

3. What we collect and why

Depending on how you use IPO Buzz, we may collect:

  • Account details — name, email, and Google or Apple sign-in identifiers so we can create and secure your account.
  • Contact details — mobile number where you provide it (including advertising callback requests).
  • Demat / apply details — applicant name, PAN, demat/DP or beneficiary ID, UPI ID, and related fields needed to apply for IPOs, show order book/history, and sync apply accounts (including family members you add).
  • Allotment details — PAN and related allotment-account data you save so we can check allotment status.
  • Application and usage records — IPO applications, status history, and in-app activity needed for order book, history, and support.
  • Device and notification data — device/push tokens (for example FCM) and basic technical data needed to deliver alerts and keep the service reliable.
  • Diagnostics — crash logs and basic analytics (for example via Firebase) to find bugs and improve the app. These are not used to sell ads.

4. Purpose limitation

We use personal data only for the purposes described above (and closely related operational, security, and legal-compliance needs). We do not use your demat, PAN, or apply data for unrelated marketing, and we do not sell personal data.

5. Sharing

We may share data with Data Processors that help us operate the service (hosting, authentication, messaging, analytics/crash reporting), and with exchanges, registrars, banks, or apply partners only as needed to complete IPO applications or allotment checks you request. We may also disclose data when required by law.

6. Third-party services

Sign-in uses Google, and on iPhone/iPad also Sign in with Apple. Authentication, push notifications, analytics, and crash reporting may use Google Firebase. Those providers process data under their own terms and privacy notices. When you apply for an IPO, the details you submit may be sent to apply partners, exchanges, registrars, or banks to complete the bid.

7. Data retention

We keep account, demat, allotment, and application records while your account is active and as needed to provide the service. If you delete your account, we delete or anonymize personal data we store for that account, typically immediately and at most within 30 days, except where a longer period is required by law (for example fraud, dispute, or tax/compliance). Server logs may be kept for a short time for security and then overwritten.

8. Account and data deletion

You can delete your IPO Buzz account and the personal data we store for it at any time:

  • In the app: Profile → Delete account (also explained on Profile → Data deletion).
  • On the website, without the app: Account Deletion. Sign in with the same Google account and confirm.

Deletion is typically completed immediately (and at most within 30 days). What is deleted, what third parties may keep, and what happens after deletion is described on the Account Deletion page. This cannot be undone.

9. Your rights under the DPDP Act

You may request:

  • Access to information about your personal data we hold.
  • Correction of inaccurate or incomplete personal data.
  • Erasure of personal data, subject to legal retention needs.
  • Withdrawal of consent where processing is consent-based.
  • Grievance redressal for privacy concerns.

Use Profile in the app, or the Account Deletion page, for data requests and grievances. We aim to respond within a reasonable time as required under applicable rules.

10. Security safeguards

We use reasonable security safeguards appropriate to the nature of the data (including access controls and secure transmission where applicable) to help prevent unauthorized access, disclosure, or loss. No method of storage or transmission is completely risk-free.

11. Personal data breaches

If a personal data breach occurs that must be reported under the DPDP Act and applicable rules, we will notify the relevant authority and affected individuals as required.

12. Children’s data

IPO Buzz is for users who can lawfully use investment-related tools. You must be 18 or older. We do not knowingly offer the service to children or process children’s personal data for tracking or targeted advertising. If you believe a child has provided personal data, contact us via the app so we can delete it.

13. Website cookies

The website may store a theme preference on your device (for example light/dark mode). We do not use advertising cookies to track you across other sites.

14. Changes

We may update this Privacy Policy from time to time. Continued use of IPO Buzz after an update means you acknowledge the revised notice. The “Last updated” date at the top will change when we do.

15. Contact

For privacy questions, data rights, or grievance redressal, use Profile in the IPO Buzz app, or the Support or Account Deletion page. See also our Terms of Use.