Privacy Policy — IPO Scope

Last updated: 20 July 2026

IPO Scope ("the app", "we", "us") helps you track Indian IPOs — the calendar, live subscription figures, grey market premium (GMP) and allotment status. This policy explains what we collect, why, how we protect it, and how you can delete it. It is written to align with India's Digital Personal Data Protection Act, 2023 (DPDP Act).

The short version. You can browse all IPO information without an account. We only ask for your phone number if you choose to sign in, and for a PAN only if you choose to save one to check allotment. PANs are encrypted before storage. We never sell your data, and you can delete everything from inside the app at any time.

1. What we collect

Data	When	Why
Mobile number	Only if you sign in	To create and identify your account. Verified by one-time password (OTP).
PAN (Permanent Account Number) and the label you give it	Only if you add a PAN	To check IPO allotment status for that PAN on the registrar's website.
Allotment results	When an allotment check runs	Cached so repeat checks are instant. Stored against a one-way hash of the PAN, not the PAN itself.
Notification token	If you enable notifications	To alert you when allotment for an IPO you follow goes live.

We do not collect your name, email, address, bank details, demat account, location, contacts, photos or files. We do not use advertising identifiers, and the app contains no third-party ad networks.

2. Browsing without an account

The IPO calendar, issue details, subscription figures and GMP are public information and require no sign-in. If you never sign in, we hold no personal data about you at all.

3. How your PAN is protected

Your PAN is encrypted before it is written to our database. The encryption key is held separately from the data.
The app only ever displays a masked form (for example ABXXXXXX4F).
Plaintext PANs are never written to logs.
Cached allotment results are keyed by an irreversible SHA-256 hash of the PAN, not by the PAN.
All traffic between the app and our servers uses HTTPS.

4. Who else processes your data

We use a small number of service providers, and only for the purposes below:

Google Firebase (Authentication, and Cloud Messaging for notifications) — processes your phone number to send and verify the OTP, and delivers push notifications.
Supabase (managed PostgreSQL, Mumbai region) — stores the app database.
Amazon Web Services (Mumbai region) — runs our server.
Registrar websites (KFintech, MUFG Intime, Bigshare, Cameo, Maashitla, Skyline, Purva, Integrated) — when you check allotment, the PAN is submitted to the relevant registrar's own public allotment page in order to retrieve your result.

We do not sell, rent or trade your personal data, and we do not share it for advertising or profiling.

5. Where your data is stored

Your data is stored on servers located in India (Mumbai). Firebase Authentication is operated by Google and may process the phone number outside India in line with Google's own terms.

6. How long we keep it

Account and PANs — until you delete them. There is no fixed expiry.
Allotment results — kept once published, because an allotment outcome does not change. Removed when you delete your account.
If you delete your account, the data is removed from our live database immediately; routine encrypted backups roll off within 30 days.

7. Your rights, and how to delete your data

Under the DPDP Act you may access, correct, or erase your personal data, and withdraw consent at any time. In the app:

Delete a single PAN — My PANs → swipe/tap the delete icon on that PAN.
Delete your entire account and all data — Settings → “Delete my account and data”. This permanently removes your account, every saved PAN, and cached allotment results. It cannot be undone.
Withdraw consent — deleting your account withdraws consent and stops all processing.

You may also write to us at the address in section 10 and we will action the request within 30 days.

8. Children

IPO Scope is not directed at children. You must be 18 or older to create an account, since applying for an IPO requires a PAN and a demat account.

9. Important disclaimers

Not investment advice. IPO Scope is an information tool. Nothing in it is a recommendation to buy or sell any security. We are not registered with SEBI as an investment adviser or research analyst.

GMP is unofficial. Grey market premium is informal, unregulated market chatter sourced from public reports. It is not an official price, is not guaranteed to be accurate, and should not be relied upon for decisions.

Allotment data comes from the registrars. We display what the registrar's own public website returns. The registrar's record is authoritative; if there is any discrepancy, rely on the registrar or your broker.

10. Contact and grievances

For any privacy question, data request, or grievance, contact:
Email: contact@battutheboss.com

We will acknowledge your request and respond within 30 days, as required under the DPDP Act.

11. Changes to this policy

If we change how we handle your data, we will update this page and revise the "Last updated" date above. Material changes will also be notified in the app.