Skip to content

Privacy Policy

Effective Date: 28 June 2026

Last Updated: 28 June 2026

This Privacy Policy explains how [LEGAL_ENTITY_NAME] (“Company,” “we,” “us,” or “our”) collects, uses, discloses, and protects personal data in connection with the Newsfork platform and related services.

This policy applies to:

  • visitors to www.newsfork.com and docs.newsfork.com;
  • users of the Newsfork API and dashboard;
  • business contacts, prospects, and partners; and
  • any other individuals whose personal data we process.

For personal data we process on behalf of customers (as a processor/data intermediary), the customer’s privacy policy governs, and our processing is subject to our Data Processing Agreement.

As Data Controller: When we collect personal data directly from you (account registration, website visits, marketing communications), we act as the data controller.

As Processor / Data Intermediary: When customers upload personal data to the platform, we process such data on behalf of and under the instructions of our customers.

  • Full name
  • Email address
  • Company name and job title
  • Country/region
  • Login credentials (passwords stored in hashed form)
  • IP address and device identifiers
  • Browser type and version
  • API usage logs (endpoints, timestamps, response codes)
  • Pages visited and features used
  • Referral URLs and session data

Customers may upload business data that includes personal data (e.g., contact records in integrated applications). We process this data solely as instructed by the customer.

  • Support and sales correspondence
  • Feedback and survey responses
  • Marketing preferences
  • Billing address
  • Payment card details (processed by PCI-compliant payment processors; we do not store full card numbers)
PurposeLegal Basis
Providing and operating the Newsfork platformContractual necessity
Creating and managing user accountsContractual necessity
Processing payments and billingContractual necessity
Providing customer supportContractual necessity / Legitimate interests
Service updates and security noticesContractual necessity
Improving service performanceLegitimate interests
Platform security and fraud preventionLegitimate interests / Legal obligation
Complying with legal obligationsLegal obligation
Marketing communications (with consent)Consent

By providing personal data in the course of using our services, you are deemed to consent to collection and use for the purposes described here, where permitted by law.

For marketing communications, we obtain express consent where required.

You may withdraw consent by contacting privacy@newsfork.com. Withdrawal is prospective and may affect your ability to use certain features.

We may disclose personal data to:

  • Service providers (Cloudflare, Stripe, email delivery, analytics) under data protection agreements
  • Professional advisors where necessary
  • Regulatory authorities when required by law
  • Acquirers in connection with a merger or asset sale (with notice)

We do not sell personal data. A sub-processor list is available upon request.

Personal data may be stored or processed outside your jurisdiction, including the United States, European Union, and Asia-Pacific.

We implement appropriate safeguards, including contractual clauses and selection of providers with recognized security certifications.

For GDPR-subject data, we rely on Standard Contractual Clauses or other approved transfer mechanisms where required.

Data CategoryRetention Period
Account informationDuration of account + 3 years after closure
Customer-uploaded dataDuration of subscription + 30 days (then deleted per DPA)
API usage logs90 days (rolling)
Payment records7 years (legal/tax requirements)
Support correspondence3 years after last contact

After the applicable period, personal data is securely deleted or anonymized.

We implement technical and organizational measures including:

  • Encryption in transit (TLS 1.2+) and at rest
  • Role-based access and MFA for employees
  • Cloud infrastructure with SOC 2 / ISO 27001 certifications
  • Monitoring, logging, and incident response procedures

No system is completely secure; we cannot guarantee absolute security.

In the event of a breach affecting personal data, we will investigate, contain, and notify affected individuals and regulators where required by law.

For Customer Data, we notify the customer in accordance with our DPA so the customer can fulfill its own notification obligations.

Depending on your location, you may have rights to access, correct, erase, restrict, or object to processing, and to data portability.

To exercise rights, contact privacy@newsfork.com. We aim to respond within 30 days.

GDPR-subject individuals may lodge a complaint with a supervisory authority.

The Service is not directed to individuals under 18. We do not knowingly collect children’s data.

We use cookies and similar technologies on our websites. See our Cookie Policy for details and preference management.

Our websites may contain links to third-party sites. We are not responsible for their privacy practices.

Assisted Features (AI search, classification, MCP tools):

  • Customer Data is handled per this policy and our DPA
  • We do not use Customer Data to train third-party foundation models without explicit consent
  • See Supplemental product practices

We do not currently respond to Do Not Track signals. Manage tracking via our Cookie Policy and browser settings.

For privacy inquiries, access/correction requests, or complaints:

  • Email: privacy@newsfork.com
  • Mail: Data Protection Officer, [LEGAL_ENTITY_NAME], [INSERT REGISTERED ADDRESS]

We may update this Privacy Policy from time to time. Material changes will be communicated via email or prominent website notice.