Privacy Policy

This Privacy Policy explains how Delight Enterprise (“IPO Plus”, “we”, “us”) handles information when you use the IPO Plus web application, Android app and iOS app, and this website.

IPO Plus is a technology platform for IPO application workflows. It is not a stock broker, bank, depository, exchange, registrar, portfolio manager or investment adviser.

If you do not agree with this policy, please do not use the platform.

Information you provide

• Mobile number — used to create and access your account.
• OTP verification data — the fact and outcome of verification attempts on your mobile number.
• Investor profile details — name, PAN, demat account details (CDSL BO ID, or NSDL DP ID and Client ID) and the UPI ID intended for IPO payment, for you and for any investor you are authorized to manage.
• Optional details — nickname, tags, bank account number, bank name and IFSC, where you choose to add them.
• Imported files — the contents of Excel or CSV files you upload to add multiple records.
• Support communications — what you send us when you get in touch.

Information collected automatically

• Device information — such as device type, operating system and app version.
• Log and IP information — technical records generated when your device communicates with our systems.
• Usage data — how the platform is used, so that we can find and fix problems and improve the product.
• Cookies and similar technologies — see the Cookie Policy.

We do not ask for, and you should never enter, the passwords, PINs, UPI PINs or authentication credentials of any broker, bank, depository or payment account.

We use information for the following purposes:

• Creating your account and verifying your mobile number.
• Storing investor profiles so that you do not have to re-enter the same details for every IPO.
• Preparing, checking and processing IPO application requests you initiate.
• Showing the status information that is supported for the relevant systems.
• Providing support and responding to your queries.
• Detecting, investigating and preventing misuse, fraud and security incidents.
• Maintaining, securing and improving the platform, including diagnosing technical problems.
• Meeting legal, regulatory and record-keeping obligations that apply to us.

We do not sell your personal information, and we do not use investor details to build advertising profiles.

• Traffic between your device and our systems is served over HTTPS/TLS.
• Sensitive fields are encrypted where that control is implemented, rather than stored in the clear.
• Access to production systems is restricted, and the platform is designed so that one account's data is not accessible to another.
• Platform activity is monitored and logged.
• Confidential Mode is available in the app to reduce accidental on-screen exposure of sensitive values. It is visual masking, not encryption.

No system can be guaranteed to be completely secure. We do not claim that IPO Plus is unbreachable, and we hold no security certification unless it is expressly stated and verifiable.

Operating the platform involves service providers and external systems — for example infrastructure and hosting providers, communication providers used to deliver OTPs, and the systems through which IPO application requests and payment mandates are processed.

Where information is shared with such a provider, it is shared for the purpose of delivering the service and subject to the arrangements in place with that provider. External systems including exchanges, registrars, depositories, banks, UPI infrastructure and intermediaries operate under their own terms and policies, which we do not control.

We retain information for as long as your account is active and for as long as it is needed for the purposes described in this policy, including to resolve disputes, maintain records of processed requests, and meet legal, regulatory or accounting obligations that apply to us.

When information is no longer needed for those purposes, it is deleted or anonymized.

You can delete individual investor profiles from within the app. You may also request deletion of your account and the information associated with it by writing to [email protected].

We may need to verify that the request comes from you before acting on it. Some information may need to be retained where there is a legal, regulatory or record-keeping requirement to do so; where that applies, we retain only what is necessary and for no longer than required.

Subject to applicable law, you may:

• Ask what personal information we hold about you.
• Ask us to correct information that is inaccurate or incomplete.
• Ask us to delete information, as described above.
• Withdraw consent where processing is based on consent.
• Raise a grievance about how your information has been handled.

To exercise any of these, write to [email protected]. If you are not satisfied with the response, see the Grievance and Legal Information page.

IPO Plus lets you store details for investors other than yourself. When you add, import or use another person's information, you confirm that you are authorized to provide and process it, and that the person is aware of and has consented to that use where consent is required.

You are responsible for the accuracy and lawful use of information you add about other people, and for keeping that authorization current. If a person whose details you hold asks you to remove them, please do so.

We may disclose information where we are required to do so by applicable law, regulation, legal process or an enforceable governmental or regulatory request, or where disclosure is necessary to establish, exercise or defend legal claims, to enforce our terms, or to protect the rights, safety and security of our users, our systems or the public.

If we become aware of a security incident affecting personal information we hold, we will investigate it, take steps to contain and remediate it, and notify affected users and any authority to the extent required by applicable law. If you believe you have found a security issue, please tell us at [email protected].

The platform is intended for adults who are eligible to hold the relevant accounts and to make IPO applications. Where information relating to a minor is involved, it must only be provided by a person legally entitled to do so and in a manner permitted by applicable law and by the rules of the relevant accounts.

We may update this policy as the product and applicable requirements change. The date at the top of this page reflects the latest revision. Where a change is significant, we will take reasonable steps to bring it to your attention.

• Privacy queries: [email protected]
• General support: [email protected]
• Entity: Delight Enterprise
• Registered address: Shop No. 10, Kailash Complex, Rajkot, Gujarat

See the contact page for all routes, and the grievance page for escalation.