Privacy Policy

Last updated: 2 November 2026 — added password and Google sign-in (sections 1 and 4).

NepseIQ is operated from Nepal and provides NEPSE market data, analysis tools and an IPO allotment checker. This policy explains exactly what we collect, why, and how to get rid of it. You can use almost all of NepseIQ without an account.

1. What we collect

If you do not sign in

Your watchlist, portfolio, saved BOIDs and recently viewed stocks are stored only in your own browser. They are not sent to us and we cannot see them.

If you create an account

• Email address — used to sign you in, with a password you choose, a 6-digit code we email you, or your Google account. We do not send marketing email.
• Password — optional. Stored only as a one-way scrambled form (scrypt) that we cannot read back; nobody at NepseIQ can see it.
• Google sign-in — optional. Google tells us your email address, that it is verified, and your name. We receive nothing else from your Google account.
• Display name — optional, chosen by you. It is used only to label you inside the app; community posting is currently disabled, so it is not shown publicly anywhere today.
• Your saved data — watchlist, portfolio holdings, saved BOIDs and recently viewed stocks, so they follow you between devices.
• Alerts and digest settings — the alerts you set, a list of the alerts that fired (kept 60 days), and whether you want the after-close digest by notification or email. The digest is built from your saved holdings and watchlist and sent to your account’s email address only if you turn email on; every digest email has a one-tap unsubscribe link.

About BOIDs: if you save a BOID for the IPO checker while signed in, that 16-digit number is stored against your account. We use it only to query the CDSC allotment service on your behalf. If you turn on automatic IPO checks, we query CDSC with your saved BOIDs when a new result is published and send the outcome to your devices; turn it off any time from the IPO page or Alerts › Settings. We never see or ask for your Meroshare password, and we cannot access your demat account or trade for you.

Everyone

• IP address — used briefly to rate-limit requests so the service cannot be flooded, and written to our web server’s access log with the last part removed (for example 113.199.12.x). Not used to profile you.
• IPO checks — to check a result, the BOID you enter is sent to our server, which asks CDSC on your behalf. A published allotment never changes, so we keep the answer to make a repeat check instant. It is stored under a keyed one-way code made from the BOID, not the BOID itself.
• Push subscription — if you turn on notifications for alerts, your browser gives us a notification endpoint for this device, and we keep it with your alerts until you delete them or your browser cancels the permission. It contains no personal information. If you are signed in, it is linked to your account so your alerts reach every device you use; signing out on a device unlinks it.
• IQ assistant — questions you ask are sent to an AI provider to generate an answer. They are not stored against your account.
• Usage statistics — we use Google Analytics to see how NepseIQ is used: which pages are opened and for how long, the type of device and browser, and the country or city (worked out from your IP address). It sets cookies to tell repeat visits apart. It never receives your email, BOIDs, portfolio or watchlist. Choosing Decline in the cookie banner turns it off on that device.

2. Advertising

NepseIQ shows ads through Google AdSense to stay free. Google and its partners may use cookies and device identifiers to serve and measure ads, including personalised ads where permitted. That data is collected by Google, not by us — see Google’s policy. You can opt out of personalised advertising at Google Ad Settings. Choosing Decline in our cookie banner turns off Google Analytics (section 1); it does not change Google’s ad cookies, which you control through Google Ad Settings above.

3. What we never do

• We do not sell your personal information.
• We do not share your email, BOIDs, portfolio or watchlist with anyone.
• We do not ask for, store or transmit your Meroshare/CDSC password.
• We do not handle money and cannot place trades.

4. Who else processes data

• Hostinger — server hosting.
• Resend — delivers sign-in code emails, and the digest email if you turn it on.
• Your browser’s push service (Google’s for Chrome and the app) — carries alert, digest and IPO-result notifications to your device. It sees the notification, not your account.
• Google — confirms who you are, only if you choose “Continue with Google”.
• Google AdSense — advertising (see above).
• Google Analytics — usage statistics (see section 1).
• NEPSE and CDSC — public market data and IPO allotment results.

5. How long we keep things

• Account data — until you delete your account.
• Sign-in codes — 10 minutes, then discarded.
• Sign-in sessions — 90 days after your last visit, or until you sign out.
• Community messages — 24 hours.
• Rate-limiting records — about 1 hour.
• The list of alerts that fired — 60 days.
• Web server access logs (shortened IP addresses) — up to 7 days.
• IPO check answers — kept, under the one-way code described above.

6. Deleting your account and data

You can delete your account and everything stored with it at any time:

• In the app: tap your profile icon → Delete account.
• By email: write to nepseiq@gmail.com from your registered address.

Deletion is immediate and permanent. It removes your email, display name, watchlist, portfolio, saved BOIDs, price alerts, prediction history and all active sessions. See Delete your account for full instructions.

7. Children

NepseIQ is not directed at children under 13 and we do not knowingly collect their data. If you believe a child has created an account, contact us and we will remove it.

8. Security

All connections use HTTPS. Sign-in codes and session tokens are stored only as hashes, so even a copy of our database would not let anyone sign in as you. We never store passwords, because NepseIQ does not use them.

9. Your rights

You can ask what data we hold about you, correct it, or have it deleted. Email nepseiq@gmail.com and we will respond within 30 days.

10. Changes

If this policy changes materially we will update the date at the top and note the change on this page.

11. Contact

nepseiq@gmail.com — or use our contact form.