Privacy Policy

Effective July 21, 2026 · Last updated July 21, 2026

What we collect, why, and who we share it with. Short version: the minimum to sign you in and run your subscription — and we never sell your data or store your card.

1. Summary

We collect the minimum needed to sign you in, run your subscription, and remember your layout — nothing more. We do not sell your data. We never store your full card number. Scores are computed once on our servers from public news, not from anything about you.

2. What we collect

• Account: your email address, and account/session timestamps. Sign-in tokens and sessions are stored only as one-way hashes, so a leaked database cannot mint or replay a login.
• Billing: your subscription status and a Stripe customer reference. Card details go directly to Stripe — we never see or store them.
• Preferences: your saved dashboard layout/settings, so your cockpit follows you across devices.
• Sign-in method data: if you use Google sign-in, we receive your verified email from Google; if you use a passkey, we store a public key credential (never a password).
• Technical: minimal server logs (e.g. IP, timestamp, coarse request info) for security, rate-limiting, and reliability.

We do not collect your trading activity, brokerage accounts, or positions.

3. How we use it

To authenticate you, provide and secure the Service, process your subscription, sync your preferences, send essential service email (sign-in links, receipts, and important notices), prevent abuse, and comply with law. We do not use your data for third-party advertising.

4. Who we share it with (processors)

We share limited data with vetted service providers who process it only on our behalf:

• Stripe — payments & subscription billing.
• Resend — sending transactional email (sign-in links, receipts).
• Anthropic and/or OpenAI — the large-language models that score public news. We send news content for scoring, not your personal information.
• Google — only if you choose Google sign-in.
• DigitalOcean — hosting/infrastructure.

We may also disclose data if required by law or to protect the Service and its users. We do not sell personal information.

5. Cookies

We use a single essential, httpOnly session cookie to keep you signed in. We do not use third-party advertising or tracking cookies.

6. Retention

We keep account and billing records while your account is active and as needed for legal, tax, and accounting purposes; sign-in links expire in minutes and sessions in 30 days. You can request deletion (see below).

7. Your rights

You can access, correct, export, or delete your personal data by emailing support@newsberri.com. Depending on where you live (e.g. the EU/UK under GDPR, or California under the CCPA/CPRA), you may have additional rights; we honor valid requests. Acquirer's Prior Choir Acquirements Limited Company is the controller of your personal data.

8. Security

We hash sign-in and session tokens, never store card numbers, serve everything over HTTPS, and rate-limit sensitive endpoints. No system is perfectly secure, but we take reasonable measures to protect your data.

9. International, children & changes

The Service is operated from the United States and your data may be processed there and by the providers above. The Service is not directed to anyone under 18, and we do not knowingly collect their data. We may update this policy; changes are posted here with a new date.

10. Contact

Privacy questions or requests: support@newsberri.com.