Privacy Notice
Digital Personal Data Protection Act, 2023 · Last updated 2 July 2026
Who we are
This platform (eipo.aftertrade.co.in) is operated by AfterTrade, a SEBI-registered stock broker (NSE member 90113, BSE member 6669). For your personal data on this platform, AfterTrade is the Data Fiduciary under the Digital Personal Data Protection Act, 2023.
What we collect and why
We collect only what an IPO application requires: your mobile number (login and communication), name, PAN, depository account details (DP ID / Client ID), UPI ID, and your IPO application details (issue, bid quantity and price). Purpose: processing your IPO applications through the stock exchange as required by SEBI and exchange regulations — nothing else. We do not sell or share your data for marketing.
Consent
Your data is processed on the basis of the consent you give at the time of placing an application (recorded with a timestamp). You may withdraw consent at any time by writing to us; withdrawal does not affect processing already completed and is subject to record-keeping obligations under SEBI regulations.
How your data is protected
Sensitive fields (PAN, demat identifiers, UPI ID) are encrypted at rest with AES-256 and masked wherever displayed or logged. All traffic is encrypted in transit (TLS). Access is restricted, authenticated, and every access-relevant action is recorded in a tamper-evident audit log. Your data is stored on servers located in India.
Who we share it with
Only the parties required to execute your application: the stock exchange (NSE), the issue's registrar, depositories, and the sponsor bank / NPCI for the UPI block — each as mandated by the IPO process. We also send your login OTP via our messaging provider. No other sharing takes place.
How long we keep it
As a SEBI-registered broker we must retain transaction and audit records for the periods prescribed by SEBI and CERT-In (five years or more for broker records). Data no longer required is not kept beyond these obligations.
Your rights
Under the DPDP Act you may request access to your personal data, correction of inaccurate data, erasure (subject to regulatory retention), and you may nominate a person to exercise these rights. To exercise any right, or for any grievance, contact our Grievance Officer at compliance@aftertrade.in. If unresolved, you may escalate to the Data Protection Board of India, and for securities-market grievances, SEBI's SCORES portal.