Privacy Policy

Version 2026-11-05 · Effective 5 November 2026

This policy explains what personal data Qasid (qasid.thevellora.co.in) collects, why, where it is kept, who it is shared with, and the rights you have. It is published under the Digital Personal Data Protection Act, 2023 (the DPDP Act) and its Rules, and the Information Technology Act, 2000 with the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

In short: without signing in, your PANs stay only in your own browser. If you sign in with Google, your saved PANs are kept in your account so they appear on every device, and you can delete them, or your whole account, at any time. When you check an allotment, the PAN goes only to that IPO's registrar. We never ask for passwords, bank, demat or Aadhaar details, we never sell your data. Ads appear only on our public IPO information pages, never where you type a PAN.

1. Who is responsible for your data

Qasid is run by Shahnavaz Pathan, Rajkot, Gujarat, India, who is the Data Fiduciary for the personal data described here. Contact: sk7611065@gmail.com.

2. What we collect and why

Your watchlist, past check results, planner settings and theme are kept only in your browser.

We do not collect your bank account, card, UPI, demat or broker login, Aadhaar, passwords or OTPs. We never apply for IPOs, trade or move money for you. PANs are not written to our server logs. We use no analytics trackers. Our public information pages show Google ads (section 6); the app screens where you check allotments or save PANs show none.

3. How allotment checks work

When you press Check, the PAN is sent over an encrypted connection to our server, which asks the registrar of that IPO (for example KFin Technologies, MUFG Intime, Bigshare Services) for the result, exactly as you could on the registrar's own website, and returns the answer to you.

Registrars often remove results a few weeks after listing. So that you can still see your result later, the server keeps an encrypted copy of the result for up to 12 months. The copy is locked with a key made from the PAN itself, and is filed under a one-way code, so it cannot be found or read by anyone, including us, without that PAN. It is deleted automatically after 12 months.

Only check PANs that are yours, or that the PAN holder has allowed you to check (for example a family member who asked you to). See the Terms of Service.

4. Legal basis

• Consent (DPDP Act, section 6): saving PANs to your account, and your Google profile. You give it by ticking the box and pressing Agree and continue after signing in. Nothing is saved to your account before that.
• Voluntarily provided for a specified purpose (DPDP Act, section 7(a)): the PAN you type in to check an allotment, used only for that check.
• Legal obligations and proof of compliance: the record of your agreement and account deletion.

5. Who we share data with

We do not sell, rent or trade your personal data. It is shared only with these service providers, each only for the purpose stated:

• Registrars of the IPO you check: the PAN, to fetch your result.
• Google: to let you sign in (Google's own privacy policy applies to your Google account), and, on the public information pages only, to show ads (section 6).
• Render (application hosting), MongoDB Atlas (database) and Cloudflare (network delivery and security): they store or carry data for us under their own data protection terms.
• Push services run by your browser maker (Google, Apple, Mozilla, Microsoft): to deliver alerts. They see the alert text, never your PANs.

Some of these providers process data on servers outside India. This is allowed under section 16 of the DPDP Act, and we do not transfer data to any country the Government of India has restricted. We may disclose data if required by law, a court order, or a government authority with lawful power to ask for it.

6. Advertising and cookies

The public information pages (the IPO list at /ipo, the pages for each IPO, and the allotment-status pages for each registrar) show ads served by Google AdSense. This keeps Qasid free. The app screens where you check an allotment, save PANs or sign in show no ads.

• Google and its partners use cookies and similar technologies to show ads and measure them, based on your visits to this and other websites. Google is responsible for that data under its own policy: how Google uses data in advertising.
• You can turn off personalised ads at Google Ads Settings, or for many ad companies at once at aboutads.info. You will still see ads, but they won't be based on your interests.
• We never share your PANs, your account details or your allotment results with Google for advertising, or with any other advertiser. Ad scripts are not loaded on any page where a PAN is entered.

7. How long we keep data

• Account and saved PANs: until you remove them or delete your account. Deleting the account erases them at once.
• Encrypted allotment results: up to 12 months, then deleted automatically.
• Push alert address: until you turn alerts off, or the browser reports it as no longer valid.
• Agreement records: kept after account deletion, without your email address, for up to 7 years, only to show what was agreed and when, if a dispute or legal question arises.
• Data in your browser: stays until you remove it in Qasid or clear your browser data. Signing out clears your saved PANs, ticks and history from that browser.

8. Your rights

Under the DPDP Act you have the right to:

• Access a summary of your personal data and how it is used (section 11).
• Correct, update or erase it (section 12). You can edit or remove saved PANs in My PANs, and delete your account any time from the account menu (Delete account).
• Withdraw consent at any time, as easily as you gave it, by deleting your account. Withdrawal doesn't affect what was done before it.
• Grievance redressal (section 13), described below, and to complain to the Data Protection Board of India if your grievance is not resolved.
• Nominate a person to exercise these rights if you die or become incapable (section 14).

To use any right, write to sk7611065@gmail.com from the email address of your Google account. We reply within 30 days.

9. Security

We follow reasonable security practices: all traffic uses HTTPS; the session cookie is signed and cannot be read by page scripts; the API only answers Qasid's own website and is rate limited; archived results are encrypted; and access to the database is restricted. No system is perfectly secure. If a personal data breach affects you, we will inform you and the Data Protection Board of India as the DPDP Rules require.

10. Children

Qasid is meant for adults (18 years or older). We do not knowingly process the personal data of children. If you believe a child has created an account, write to us and we will delete it.

11. Changes to this policy

If we change this policy in a way that matters, we will update the version date above and ask signed-in users to read and agree to it again before anything more is saved to their account.

12. Grievance Officer

As required by the Information Technology Act, 2000 and the rules under it, and the DPDP Act:

Shahnavaz Pathan, Grievance Officer, Qasid
Rajkot, Gujarat, India
Email: sk7611065@gmail.com

We acknowledge complaints within 7 days and aim to resolve them within 30 days.