Privacy Policy

This Privacy Policy describes how iPoring (“we,” “us,” or “our”) handles information when you use our website and IPO allotment tracking service (the “Service”). It applies to visitors and account holders. This draft describes the intended product and must be checked against the systems and providers actually used before launch.

1. Information we may handle

Depending on the features you use and how the Service is configured, we may handle:

• Account information, such as your name, email address, and authentication details.
• Tracking information, such as the IPOs you choose to track, tracking status, and allotment results returned for your requests.
• PAN, if you provide one to check allotment status. PAN is sensitive personal information and should be used only for the tracking purpose described to you.
• Device and usage information, such as browser/device details, basic diagnostic events, and service access logs, to the extent enabled in the deployed service.
• Notification preferences, such as whether you enabled browser notifications and the relevant delivery subscription, if that feature is offered.

2. How information is used

Information may be used to create and secure your account; provide the tracking features you request; match your PAN against allotment information for an IPO you selected; show results and send requested notifications; maintain, troubleshoot, and protect the Service; respond to support requests; and meet legal obligations. We do not provide investment recommendations or use PAN for marketing.

3. PAN handling

We intend to send PAN securely to the backend for the allotment checks you request. The frontend should not put PAN in a URL, analytics event, browser storage, or application log, and should display only a masked PAN after submission. The backend is responsible for access controls, encryption, retention, and deletion. The exact storage and processing practices must match the deployed backend and be confirmed before launch.

4. When information may be shared

We may share information only as reasonably needed to operate the Service: with infrastructure and service providers acting on our instructions; with an allotment data provider or relevant intermediary where necessary to fulfill a tracking request; when you direct or consent to sharing; to protect users, the Service, or legal rights; or when disclosure is required by law. We do not intend to sell personal information. The providers and data flows actually used should be listed here before the Service launches.

5. Cookies and analytics

We use Google Analytics 4 to understand website traffic and how visitors use the Service. Google Analytics may use cookies and collect information such as page views, interactions, browser and device details, and approximate location. Do not include PAN, passwords, or other sensitive information in analytics events or page URLs. You can control cookies through your browser settings. Where required, we will obtain consent before enabling optional analytics technologies and honor your choices.

6. Retention and deletion

We intend to keep information only for as long as needed to provide the Service, meet legal obligations, resolve disputes, and enforce our agreements. Retention periods depend on the data and applicable requirements. You may request account deletion using available account controls or by contacting us. We will explain any information that must be retained under law and delete or de-identify other information as required by applicable law.

7. Security

We use reasonable technical and organizational safeguards appropriate to the information we handle. No internet transmission or storage method can be guaranteed completely secure. Security controls, including encryption in transit and at rest and access restrictions, must be implemented and maintained in the live service.

8. Your choices and rights

You may review and update account details through available settings, change notification preferences, and request deletion or access to your information by contacting us. Depending on where you live, you may have additional rights under applicable privacy law. We will handle requests in accordance with the law that applies.

9. Children

The Service is not intended for children who are not legally able to enter into a binding agreement. We do not knowingly seek to collect personal information from such children.

10. International processing

Depending on the hosting and service providers selected, information may be processed in locations outside your state or country. Where required, we will use appropriate safeguards for such processing and disclose relevant details.

11. Changes to this policy

We may update this Privacy Policy as the Service or applicable law changes. We will revise the date above when a new version is published. Where required, we will provide additional notice or request consent.

12. Contact and privacy requests

For questions or privacy requests, contact ceo@iporing.com or write to [add legal business name and postal address before launch].