Privacy policy

Last updated: 12 October 2026

ipowork collects only what it needs to verify professional accounts and run the portals. We do not sell personal data, and we never use one customer's pipeline, portfolio, client list or uploaded documents for anyone else.

1. Who we are

ipowork (www.ipowork.com) is operated by Capnexus Technologies Private Limited, India ("ipowork", "we"). We are the data fiduciary for personal data processed through ipowork under the Digital Personal Data Protection Act, 2023.

2. What we collect

Data	Where it comes from
Name, work email, mobile number, firm or company, role, registration number (SEBI, ICAI, ICSI or CIN)	You, when you create an account
Name, email address and profile picture from your Google or Microsoft account	Google or Microsoft, only if you choose "Continue with Google / Microsoft"
What you save in a portal: deals, clients, watchlists, checklists, notes, uploaded documents	You and the people you invite to a shared workspace
Company information, including MCA filings and financial statements	Licensed data providers and public records
Technical data: browser type, pages used, error reports, sign-in times	Your browser, automatically

We do not ask for passwords to other services, bank or card details, or Aadhaar numbers.

3. Why we use it

To create your account and verify that you are a registered professional, institution or company.
To run the portals you use, keep your work saved across devices, and show it only to you and the people you choose.
To prepare AIRA scores, reports and AI answers you request.
To contact you about your account, verification, introductions you ask for, and important changes.
To keep ipowork secure, fix errors and prevent misuse.
To meet legal and regulatory obligations.

When you sign in with Google or Microsoft, we use only your name and email address to identify your account. We do not read your email, contacts, calendar or files.

4. Who processes it for us

We use service providers that process data on our instructions and under contract:

Supabase: account sign-in and database storage.
Cloudflare and GitHub: hosting and delivery of the website.
Google and Microsoft: optional sign-in.
An email delivery service: account and notification emails.
AI model providers: to generate the answers and reports you request. The content you submit is sent only to produce your answer.
Licensed company-data providers: MCA and financial data on companies.

Some of these providers store data outside India. We use providers with recognised security standards, and we transfer data only as permitted under Indian law.

5. Who else can see your data

People you invite to a shared workspace see what is shared in that workspace, such as a banker and the issuer on one IPO checklist.
When you ask for an introduction, we share only what is needed for it, and only with your agreement.
We disclose data when the law requires it, for example to a regulator or court.

We do not sell or rent personal data, and we do not use it for third-party advertising.

6. How long we keep it

We keep account data while your account is open. When you ask us to delete your account, we delete or anonymise your personal data within 30 days, except what we must keep by law (for example tax or contract records). Error reports are kept for up to 90 days.

7. Security

Data is encrypted in transit. Access to stored data is restricted by account, so one customer cannot read another's records. Only a small number of authorised ipowork staff can access account data, and only to run and support the service.

8. Your rights

Under the Digital Personal Data Protection Act, 2023 you can ask us to:

tell you what personal data we hold about you and how we use it;
correct or update it;
delete it, and close your account;
withdraw consent you have given (this may mean we can no longer provide some services);
nominate another person to exercise your rights if you are unable to.

Write to partners@ipowork.com from the email on your account. We reply within 30 days.

9. Browser storage

ipowork uses your browser's storage to keep you signed in and remember settings such as the last screen you opened. We do not use advertising cookies or trackers.

10. Children

ipowork is a professional service for adults. We do not knowingly collect data from anyone under 18.

11. Grievances

For any concern about your personal data, contact our Grievance Officer at partners@ipowork.com or WhatsApp +91 88510 59588. If you are not satisfied with our response, you may approach the Data Protection Board of India.

12. Changes

We will update this page when our practices change and show the date at the top. For significant changes, we will also tell signed-in users.