Privacy policy

1. Information and purposes

We may collect names, email addresses, account and authentication records, profile details, preferences, follows, saves, comments, consent history and support communications. Creators may supply publication, team, business and verification information. Enabled transactions may require order, delivery, return, invoice and tax information.

Technical data can include IP addresses, browser/device information, approximate network location, request/security logs, page interactions and email delivery, open or click events where used. We receive information from you, your use of the service, authorised publication/team administrators and providers returning authentication, delivery, payment or security events.

We use relevant information to operate the requested service, manage access, remember choices, fulfil orders, handle complaints, prevent misuse, keep lawful records and improve the product. Optional marketing permissions are used only for their stated purposes. Do not submit unnecessary identity documents or sensitive information in public comments or ordinary emails.

2. Follows, newsletters and marketing

Following does not join an email list. Publication newsletters, platform newsletters and partner offers are separate choices. Consent and withdrawal records support those choices. Commercial messages identify the sender and provide a simple unsubscribe facility. Applicable unsubscribe requests are actioned promptly and within five working days.

Marketing unsubscribe does not require a login, fee or extra personal information beyond identifying the relevant address. The facility must remain functional for at least 30 days after a commercial message. Necessary non-promotional security, account or order messages may continue.

Publication audiences are kept separate within the product. Authorised creators can access information needed for their permitted publication functions and must comply with their own obligations. Advertisers do not receive raw subscriber email lists through promotion tools.

3. Disclosures and public information

Relevant information is disclosed to authorised personnel and providers for hosting, storage, email, authentication, payments, delivery, security and support. Sellers receive the order and delivery information necessary to fulfil an order, not unrestricted access to a buyer’s account.

Public profiles and comments may be read, indexed or copied. We may disclose information to comply with law, address serious threats, establish or defend legal rights, or facilitate a business transfer with appropriate safeguards. A complaint does not itself authorise publication of private records or confidential source identities.

4. Providers and overseas processing

Infrastructure includes Vercel application hosting, Supabase databases and Railway collection/rehearsal services. Configured email and payment services include Resend and Stripe. Google advertising services may run on production pages. Providers publish their own processing information.

Current infrastructure includes the United States and India; information can also be processed in Australia and other provider/subprocessor locations. Global delivery and support may involve overseas access. We do not promise that all information stays in Australia. Contact us for information relevant to a particular processing concern.

5. Cookies, analytics and advertisements

Cookies and browser storage support authentication, security, theme and preferences. Application analytics and email events help us assess use and delivery. Advertising providers may process browser/device information and use their own cookies or identifiers, subject to applicable consent requirements.

Newsycle preference controls apply to the activities they describe; they do not delete every third-party cookie or control settings on an external publisher’s site. Browser and provider privacy settings may also be relevant. Blocking essential storage can prevent requested functions such as sign-in.

6. Security, retention and your requests

We use access controls, server-side authorisation, transport protection and other operational safeguards. No system is perfectly secure. Payment-card entry belongs in the payment provider’s protected flow; do not email full card numbers or security codes.

We retain information as needed for its purpose and applicable accounting, legal, dispute and security obligations, then delete or de-identify it where appropriate. Account closure does not instantly erase lawful transaction records or all backup copies.

Use supported account controls for access, correction, preferences, export or closure, or contact us for assistance. We may verify that a request relates to you using proportionate information. We explain lawful limitations where permitted, including effects on others, confidential sources or security. Journalism-related exceptions do not automatically cover every account, marketing or commerce activity.

7. Privacy complaints and changes

Send a privacy concern to the published contact with the issue and outcome sought. We aim to acknowledge within five business days and give a substantive response or progress update within 30 days. The Office of the Australian Information Commissioner or another competent regulator may be able to assist.

We publish dated updates when practices change and seek consent for new uses where required. Publication of this policy is not permission for otherwise unlawful processing. Paid reader AI is not part of this release.

Audience protection

Newsycle does not sell, rent or provide raw account or newsletter email addresses to advertisers. News-reading preferences such as politics or health are not automatically converted into advertising targeting categories. Sensitive or political targeting is not offered through Newsycle promotion tools.