Privacy Policy
What personal data NewsIQ collects, why, who processes it, and the choices you have.
Who we are
For the personal data described here, NewsIQ (https://newsiq.online) is the Data Fiduciary under India's Digital Personal Data Protection Act, 2023, and the controller under the GDPR for users in the EU and UK. Contact: hello.newsiq@gmail.com.
Data we collect
(a) Account data: your email address and name, and a password hash (argon2id, never the password itself) if you sign up with email. If you use Google sign-in, we receive your name, email address, profile picture and Google account ID. (b) Preferences: topics, theme, digest and notification settings. (c) Activity while signed in: bookmarks, searches, and the stories you open, used to personalise your feed. (d) Consent records: your cookie choices, with a random ID and timestamp. (e) Technical data: IP address and browser details in server logs, rate limiting and error reports. (f) Analytics, only if you allow it (see Cookies). (g) Anything you send us, such as a support or privacy request. We do not collect payment data: NewsIQ takes no payments.
How we use it
To run your account and the service; to personalise your feed and digests; to send the emails you need or ask for (email verification, password resets, digests you subscribe to); to keep NewsIQ secure and prevent abuse; to understand how the site is used, if you allow analytics; and to meet legal obligations. We do not sell personal data and we do not show advertising.
Legal bases
Under the DPDP Act we process personal data with your consent, or for legitimate uses the Act permits. Under the GDPR the bases are: performance of our contract with you (your account and its features), consent (analytics cookies, optional emails), and legitimate interests (security, abuse prevention, fixing errors).
AI processing
Our AI models process news articles (publicly published text), not your account data. To generate summaries we use Google Gemini, and models reached through OpenRouter (DeepSeek, Inception Mercury and Qwen embeddings); AWS Bedrock is configured as a fallback, and Langfuse monitors AI quality. We do not send your name, email or reading history to these providers. Personalisation runs in our own systems.
Service providers
We use these providers to run NewsIQ, each only for its stated purpose: Google Cloud (hosting, in Singapore); Google (Google sign-in, sending email through Gmail, Google Analytics if you allow it, and Gemini AI); PostHog (product analytics, if you allow it); Sentry (error monitoring); OpenRouter and the model hosts it routes to, AWS Bedrock, and Langfuse (AI processing and monitoring of news articles).
Where data is stored
Our servers and database are on Google Cloud in Singapore. Some providers above process data in other countries, including the United States, the EU and Japan. Where the law requires safeguards for such transfers, we rely on the providers' standard contractual terms.
How long we keep it
Account data, preferences, bookmarks, search history and activity: until you delete your account. Consent records: kept, but disconnected from you when you delete your account. AI monitoring data held in our systems: deleted after 30 days. Server logs: rotated automatically and kept only briefly. Error reports: kept by Sentry under its retention settings. Messages you send us: as long as needed to handle your request.
Deleting your account and exporting your data
In Settings you can download a copy of your data (profile, preferences, bookmarks, notifications and reading history) and delete your account. Deletion takes effect immediately: we delete your preferences, bookmarks, search history, activity, digest subscriptions and consent settings, remove your Google sign-in link, and replace your name and email with anonymous values. You can also ask us at hello.newsiq@gmail.com.
Your rights
Depending on where you live, you can ask to access, correct or erase your personal data, to receive a copy of it, to object to or restrict processing, to withdraw consent at any time (for cookies, from the cookie settings), and, under the DPDP Act, to nominate someone to exercise your rights. Use Settings, the Privacy Rights form in the Legal Center, or email hello.newsiq@gmail.com. We reply within 30 days. You can also complain to the Data Protection Board of India or your local data protection authority.
Grievance Officer
Grievance Officer: Zakaur Rahman, hello.newsiq@gmail.com. We acknowledge grievances within 24 hours and aim to resolve them within 15 days.
Children
NewsIQ accounts are for people aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has created an account, contact hello.newsiq@gmail.com and we will delete it.
Security
We use HTTPS for all traffic, hash passwords with argon2id, keep login tokens in HttpOnly cookies, keep the database off the public internet, and use Google Cloud's encryption at rest. No system is perfectly secure. If a breach affects your personal data, we will notify you and the authorities as Indian law requires. See the Security page for details.
Changes to this policy
We will post changes here and update the date at the top. If a change materially affects how we use your data, we will tell registered users by email or on the site.