Privacy policy

Last updated 25 September 2026

This covers what Marketframe collects when you read marketframe.in and when you sign up for IPO alerts, what we do with it and how to get it changed or deleted. Questions go to support@marketframe.in.

Who runs the site

Marketframe runs marketframe.in and decides how the data below is used. The contact for privacy requests and complaints, including grievances under the Digital Personal Data Protection Act, 2023, is support@marketframe.in.

Reading the site

You do not need an account to read the board, the IPO pages or research.

Site analytics are page-view counts in aggregate: the page path, the referring site, the device type and the UTM source of a campaign link. We set no cookie for this and do not store your IP address. If your browser sends Do Not Track or Global Privacy Control, your visit is not counted.
Google Cloud, which hosts the site, keeps server request logs: IP address, time, the page asked for and the browser's user agent. We use them to fix errors and block abuse. Google Cloud Logging deletes them after 30 days.
The site sets no cookies today. If we ever add Google Analytics, it will load only after you accept a consent banner, and this page will be updated first.

IPO alerts

When you sign up for alerts we store:

your name and email address, to send the alerts;
your Indian mobile number, only if you add one, for WhatsApp alerts. WhatsApp alerts are not being sent at present;
a consent record: which channels you agreed to, the version of the consent wording (for example ipo-alerts-v2) and the time you gave it;
the page you signed up from;
your own referral code and a count of people who joined with it, and, if you came in through someone's invite link, their code;
an unsubscribe token, a random string in your unsubscribe link so it works without a login;
a delivery log: for each alert, the IPO, the channel, whether it was sent or failed, the provider's message ID and the time.

We use this only to send the alerts you asked for, avoid sending the same alert twice, credit referrals and honour opt-outs.

To stop the sign-up form being flooded, we count attempts per hour, up to 10. The counter is keyed on a hash of your IP address and the hour, made with a secret key, so the address cannot be read back from it. It holds only the number of attempts.

Who else handles it

Google Cloud runs the site on Cloud Run and stores alert data in Firestore, both in the asia-south1 region (Mumbai). Firebase Hosting serves the pages from Google's global network.
GoDaddy sends alert emails through its Professional Email SMTP service, from alerts@marketframe.in. It sees your email address and the alert.
Google Sheets holds a copy of the subscriber list for our own records: a timestamp, name, email, mobile, consent, source, status and referral code. It is updated from Firestore, so an unsubscribe shows there too.
Meta, through the WhatsApp Cloud API, would receive your mobile number and the alert text, but only if we switch on WhatsApp alerts. We do not send them today and will update this page before we do.

We do not sell your data or share it with anyone else unless the law requires it.

How long we keep it

While you are subscribed, we keep your record and its delivery log.
When you unsubscribe, alerts stop at once and the record is marked unsubscribed. We keep it, with your consent history, so the opt-out holds and we do not mail you again by mistake. To have it deleted altogether, write to us as below.
Sign-up rate-limit counters: kept as counts only, with no link to your email or any other detail.
Server request logs: 30 days.

Your rights

Under India's Digital Personal Data Protection Act, 2023 you can:

ask what personal data we hold about you and how we use it;
have it corrected or updated;
have it erased. We delete your subscriber record, its delivery log and your row in the sheet. Server logs age out within 30 days, and we keep your email asking for deletion as a record that we acted on it;
withdraw consent at any time, with the unsubscribe link in every alert or by writing to us;
nominate someone to use these rights for you if you die or cannot act yourself;
raise a grievance with us, and if we do not resolve it, complain to the Data Protection Board of India.

To use any of these, email support@marketframe.in from the address you signed up with, so we know the request is yours. We reply within 30 days.

Children

Alerts are for adults. If you are under 18, please do not sign up.

Changes

When this policy changes, the date at the top changes with it. If a change affects how we use alert subscribers' data, we will tell subscribers by email before it applies.