Privacy policy
What we collect, why, and what you can ask us to do with it.
This notice explains how we handle your personal data under India's Digital Personal Data Protection Act, 2023. Last updated 6 November 2026.
What we collect
When you sign up: your name, mobile number and email address, the fact and time of your consent, your password (stored only as a one-way scrambled hash by Supabase, which we cannot read), and the stocks you add to your watchlist. When you use the contact form: your name, email and message. We do not collect payment details.
To stop abuse, our servers keep a one-way hash of your IP address, with a count of recent requests, when you log in, request a code or send a message. We cannot turn the hash back into your address.
Why
To run your account and watchlist, to reply to messages, and to contact you about your account. We do not sell your personal data or use it for advertising.
Who processes it
Your data is stored with Supabase (database and logins, servers in Mumbai), sign-up, login and password-reset emails are sent through Brevo, and the site runs on Vercel. They act on our instructions and receive only what they need to run the service.
Market data comes to our servers from NSE (including companies' results filings), NSE International Exchange (GIFT Nifty), SEBI (public issue filings), the Reserve Bank of India, AMFI, mfapi.in, Yahoo Finance and the European Central Bank (through Frankfurter), and headlines from the RSS feeds of The Economic Times, Mint, Business Standard, BusinessLine, CNBC-TV18, Investing.com and other publishers listed on the news page, plus NSE's and the RBI's notice feeds. We keep a copy of brokerage calls that those headlines report (brokerage, rating, target, company and the article's link) to list them on the research page. This week's economic releases come from Forex Factory's public calendar. IPO grey market premiums come from Investorgain. We keep a copy of NSE's IPO subscription figures for each day an issue is open, to show them day by day. We also keep each listed issue's lead managers and registrar as shown by NSE. These are market figures and contain nothing about you. To build the broker links on stock pages, our server looks up the stock in Zerodha's public instruments list and on Groww and Angel One. Your browser does not contact any of them and we send them nothing about you; publisher thumbnails are fetched by our server for the same reason. If you follow a broker link, you leave niftyinvestor and that broker's own privacy policy applies. The same applies to IPO registrar and exchange links for checking allotment: you enter your PAN or application number on their site, never on ours.
Share links open WhatsApp or Telegram with the page’s address filled in; nothing is sent until you choose to send it, and we learn nothing about what you share. We do not use Anthropic, Telegram or any other service with your personal data; if we start using one, it will be listed here first.
Languages: the site is written in English. If you choose Hindi, Gujarati, Marathi or Tamil from the language menu, your browser loads Google Translate, which sends the text of each page you view to Google to translate it, and Google sets its own cookie (googtrans) to remember the language. Google's privacy policy applies to that. Nothing is sent to Google while you read in English, and choosing English again stops it.
TradingView: the news page has a box of top stories supplied by TradingView. When you scroll to it, your browser loads it from TradingView's servers, which receive your IP address and may set their own cookies; TradingView's privacy policy applies. Nothing is loaded from TradingView on any other page or before you reach that box.
How long we keep it
We keep account data while your account is open and delete it when you close the account or ask us to. We keep contact messages only as long as we need them to deal with your message.
Cookies
We use only the cookies needed to keep you logged in, and, if you pick a language other than English, Google Translate's language cookie. TradingView's news box on the news page may set TradingView's own cookies. We use no advertising or tracking cookies and no analytics. If you switch between light and dark mode, your browser remembers the choice on your own device; it is never sent to us.
Children
niftyinvestor is meant for adults. You must be 18 or older to create an account, and we do not knowingly collect data about children. If you believe a child has signed up, write to us and we will delete the account.
Your rights
You can ask to see a summary of your data, correct it, delete it, or withdraw your consent at any time through the contact page. You can also delete your account yourself from your account page. Withdrawing consent closes your account; deleting it removes your login, profile and watchlist straight away. You can also nominate someone to exercise these rights for you.
Complaints
For any question or complaint about your data, write to niftyinvestor25@gmail.com or use the contact page. We aim to reply within 30 days, and always within 90 days. If you are not satisfied, you can complain to the Data Protection Board of India.
Who we are
niftyinvestor is run by an individual, not a company. You can write to us at niftyinvestor25@gmail.com.