1. Who operates Nabz
Nabz is a social platform for Indian stock market discussions, owned and operated by Deepak Miglani. This policy covers personal information handled through the Nabz app and website. For privacy questions and requests, email support@joinnabz.com.
2. Information we collect
- Account information: name, email address and profile photo, including information authorised through Google Sign-In.
- Optional details: phone number. This is not required and may be used for the communications described below.
- Community content: posts, comments and other information you publish.
- Usage and diagnostics: Google Analytics for Firebase and Firebase Crashlytics process usage events, identifiers and technical or diagnostic information according to the services and settings enabled.
- Support: information you provide when contacting us.
Nabz does not currently use a payment service or display in-app advertising.
3. How information is used
We use account information to authenticate users, manage profiles, operate discussions and respond to support requests. Google Analytics for Firebase helps us understand usage, and Firebase Crashlytics helps diagnose crashes. We may process relevant information to detect abuse, investigate reports, enforce platform rules and comply with legal obligations.
We may use your email address and, if voluntarily supplied, phone number to communicate through email, SMS or WhatsApp about your account, security, support, service changes, community updates and Nabz products or promotions. The communication choices and consent requirements described below apply.
4. What is public
Your public profile, profile name, profile photo, posts and comments can be viewed by others. Your email address and phone number are not displayed to other users.
Public content can be copied or shared outside Nabz. Avoid including private contact details, account credentials or other sensitive information in posts and comments.
5. Service providers and sharing
Nabz uses Firebase, Google Sign-In, Google Analytics for Firebase and Firebase Crashlytics. These services process information needed for authentication, app infrastructure, usage analysis and crash diagnostics, as applicable to the services enabled.
Read the Google Privacy Policy and Firebase privacy documentation for provider information. Information may also be disclosed when required by applicable law or valid legal process.
Nabz’s primary hosting is in India. This does not mean all provider processing occurs only in India. Google and Firebase services may process data in other countries, depending on the service and configuration.
6. Communications and advertising
Service communications: We may send account, security, support and essential service notices through appropriate contact channels, subject to applicable law and provider requirements.
Optional marketing: Newsletters, promotional messages and optional community or product updates may be sent by email, SMS or WhatsApp in accordance with your preferences and with consent where required. Providing an email address or phone number, signing in or accepting this policy does not by itself constitute consent to every marketing channel.
You may stop marketing by using the unsubscribe or opt-out instructions supplied with messages or by emailing support@joinnabz.com. We will honour withdrawal requests in accordance with applicable requirements. Essential account, security and legal communications may continue where lawful. A minimal suppression record may be retained solely to honour your opt-out.
Providers used to deliver communications may process the contact details and message-delivery information necessary for that purpose. WhatsApp communications also involve processing by WhatsApp/Meta under their applicable terms and privacy policy.
Nabz currently does not display in-platform advertising or use Google AdMob. Any introduction of advertising or materially different data use will be accompanied by updated disclosures and any required consent or choices. Removing Google access or uninstalling the app does not itself delete your Nabz account.
7. Account and data deletion
Request deletion of your Nabz account and associated personal data by emailing support@joinnabz.com from your registered email address. Include your profile identifier if available. Never send a password or OTP. We may request only information reasonably necessary to verify ownership.
We will process requests without undue delay and complete ordinary account and associated-data deletion within 90 days of receiving the request, or sooner where applicable law requires. This is Nabz’s service commitment, not a statement that Indian law permits a 90-day delay in every case. If verification is incomplete, we will explain what is needed promptly rather than silently postpone the request.
Deletion covers your profile, posts, comments and associated personal information under our control, except the limited records described in the retention section. We will request corresponding deletion from service providers where applicable. Backup copies under our control are included in this deletion process unless legally required to be retained. Copies independently saved or reposted by other people outside our control may remain.
Users cannot currently delete individual posts through a self-service post-deletion feature. You may nevertheless contact support about personal-information removal or account deletion. Disabling a profile alone does not fulfil our deletion commitment.
8. Retention, investigations and security
We retain personal information while necessary to provide the service and for the limited purposes below. Retention does not mean continued public display or permission to use deleted-account information for marketing.
- Registration records: Where Rule 3(1)(h) of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 applies, registration information is retained for 180 days after cancellation or withdrawal of registration. This is a specific retention obligation, not a general delay for removing all content.
- Removed unlawful or reported content: Information and associated records covered by Rule 3(1)(g) are preserved for 180 days for investigation, or longer when lawfully required by a court or authorised government agency.
- Suspected misconduct: Where reasonably necessary and legally permitted, we may preserve relevant account identifiers, email addresses, reported posts or comments, and investigation records connected with suspected spam, fraud, market manipulation, security incidents or other unlawful activity. We limit retention to evidence needed for the particular matter, review its necessity and erase it when that purpose and any legal preservation obligation end.
- Other legal requirements: Applicable preservation orders, legal obligations and necessary legal-claim records may require a different period. We retain only the information required for that purpose.
Records retained after deletion are restricted to authorised personnel and providers with a need to access them for the stated purpose, and to authorities where legally required. They are not retained as an active public profile. We will explain retention exceptions in response to a request where legally permitted.
We will apply reasonable technical and organisational safeguards appropriate to the information and risks involved. No electronic system is completely secure. This policy does not represent that Nabz holds a particular security certification.
9. Your requests and choices
Contact support@joinnabz.com to request access, correction or deletion, withdraw consent where applicable, opt out of marketing or raise a privacy concern. Requests may require reasonable identity verification. We respond within applicable statutory time limits; a shorter legal deadline takes precedence over any period stated in this policy.
Privacy and grievance contact: Deepak Miglani, support@joinnabz.com. For grievances under the applicable intermediary rules, we will acknowledge complaints within 24 hours and resolve them within 15 days, with shorter timelines for categories requiring faster action. Complaint-response periods are distinct from deletion and mandatory record-retention periods.
10. Younger users
Nabz does not impose a blanket 18+ restriction. Users below 18 should use the service with the involvement of a parent or lawful guardian. Where applicable law requires verifiable parental consent for processing a child’s information, we will obtain that consent before the relevant processing or restrict the affected account or feature until the requirement is met. Ordinary parental supervision does not replace legally required consent verification.
We will apply restrictions on processing children’s information, behavioural monitoring and targeted advertising as required by applicable law. This policy does not claim that Google Sign-In itself verifies parental consent. Parents or guardians may contact support to raise concerns or request removal of a child’s information.
11. Policy updates and contact
We will update this policy when our practices change and communicate material changes as required. New purposes requiring consent will not be authorised merely by changing this policy.
Operator: Deepak Miglani
Privacy contact: support@joinnabz.com