Privacy policy

What the service currently offers

IPOSphere provides IPO listings, company information, links to sources, and community discussions. You can browse without creating an account. When Disco participation is enabled, Google sign-in and a public handle let you post, comment, vote, follow communities, report content and exchange private messages. Moderation requires an authorized role. The website does not accept enquiries, bids, investments or payments.

Information we collect

When you browse. Our hosting, database, font, and discussion services receive technical information needed to respond to requests, such as your IP address, browser or device information, requested pages or resources, and request times. These services may keep operational, authentication, error, and security logs. When you use discussion search, the discussion service receives your search terms.

When you sign in with Google. We use Google sign-in through Supabase. The requested permissions are limited to OpenID, email, and basic profile information. Google may provide your account identifier, email address and verification status, name, and profile picture. Supabase may store these as authentication records. Our application account stores a separate IPOSphere account ID, your email address, a public handle chosen at signup, identity mappings, and creation/update timestamps. Authentication services also handle session tokens and sign-in records.

We do not receive your Google password or request access to your Gmail messages, contacts, calendars, or Google Drive files.

When you participate in discussions. Disco stores your portable account ID, public handle, optional profile information, posts, replies, votes, follows, saved/read/hidden state, blocks, reports, preferences and uploaded media. Your handle, profile and public contributions are visible to readers. Private messages are available to their participants; the administrator can review reported messages. Authorized operators can access stored records for maintenance, security and handling requests. Uploaded images have public URLs.

Disco receives your verified notification email from the account service. Email notifications are optional and off by default. If configured and enabled, the mail delivery provider processes your address and notification message.

When you contact us. We receive the contact details, message, and other information you choose to send. Please do not send passwords, authentication tokens, financial-account details, or other unnecessary sensitive information.

How we use information

We use information to deliver the website and its content; authenticate you; maintain your account and username; keep your account consistent across sign-ins; respond to requests; diagnose failures; and protect against abuse and unauthorized access. We may also process information to meet applicable legal obligations.

We do not sell or rent personal information. We do not use Google account data for advertising, marketing profiles, or unrelated purposes. Choosing a public handle for discussion participation creates a public profile. Your account email is not displayed publicly by IPOSphere.

Browser storage

Account features use browser storage to maintain your signed-in session and complete sign-in securely. Some sign-in information lasts only for the browser tab; session information may persist until you sign out, clear storage, or the session expires. Clearing or blocking this storage may prevent account features from working. Browsing the public catalogue does not require sign-in.

Service providers and disclosure

We use Cloudflare to host and deliver the website, Supabase for the catalogue, authentication and account database, and Google for sign-in and Google Fonts. The website reads and writes discussion content through our self-hosted Disco service at community.iposphere.com. Your browser connects directly to these services for the relevant features, so they receive request information needed to provide them. Authorized operators may access information when necessary for maintenance, support, security, or handling a privacy request.

Google and other providers may also handle information for their own purposes under their applicable privacy notices. Relevant notices include Google's Privacy Policy, Supabase's Privacy Policy, and Cloudflare's Privacy Policy.

We may disclose information when required by applicable law or when necessary to investigate abuse, protect the service, or establish or defend legal rights. Our providers may process information outside your country of residence.

Retention and deletion

We retain account information while it is needed to maintain your account and provide the service. Operational and security records may be retained for troubleshooting, abuse prevention, and applicable legal obligations. Retention depends on the type of record, its purpose, and the relevant provider's settings.

To request account deletion, contact oddot.official@gmail.com. We may need to verify that you control the account before acting. We may retain limited information where necessary for legal obligations, security, or resolving disputes. Deletion from active systems may not immediately remove copies in backups, which are subject to the relevant backup retention controls.

Deleting a Disco discussion account hides its public posts/replies and disables that discussion profile. It does not delete your Google/Supabase account, erase moderation/audit history or immediately remove previously shared attachments. Contact us for a broader deletion request.

Signing out or removing IPOSphere's access in your Google Account does not itself delete information already stored in your IPOSphere account.

Your choices

You can browse without signing in, sign out, and clear browser storage. You choose a permanent public handle when completing signup; account settings do not allow changing or clearing it. You can manage or revoke Google's authorization through your Google Account settings.

Depending on applicable law, you may have rights to access, correct, delete, or obtain a copy of your personal information, withdraw consent, or raise a privacy concern. Send requests to oddot.official@gmail.com. Withdrawing access needed for authentication may prevent further account use; public browsing remains available.

Security

We use access restrictions and authentication controls to protect account information. No internet service or method of storage can guarantee absolute security.

External links and children

Links to company sources, community websites, or other external pages are subject to those services' own privacy practices. This policy covers IPOSphere's handling of information.

IPOSphere is not directed at children. If you believe a child has provided personal information through the service, contact us so we can investigate and take appropriate action.

Changes to this policy

We may update this policy as the service changes. We will publish the updated version at the same policy URL and revise its last-updated date. For material changes, we will provide an appropriate notice and obtain consent where required before applying new uses of personal information. Future payment, marketing, or analytics features will need privacy review before launch.