This Privacy Policy explains how your personal data is processed when you use this service. We process personal data in compliance with the Swiss Federal Act on Data Protection (nFADP) and, where applicable, the EU General Data Protection Regulation (GDPR), the UK General Data Protection Regulation (UK GDPR), and US state privacy laws including the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA).
1. Data Controller
The party responsible for the processing of your personal data (the "Data Controller") is:
Lorin Steiner
Quellenweg 6
9404, Switzerland
Email: lorin.steiner@bluewin.ch
2. Data We Collect
We collect and process the following categories of personal data:
- Technical data: IP addresses, browser type, device information, and log data automatically recorded when you access the service.
- Account data: the email address and credentials you provide when creating an account, and profile settings.
- Usage data: content you create or interact with within the application (e.g. saved streams and preferences).
3. Purpose of Processing
We process this data to provide and secure the service, to authenticate users, to communicate with you, and to comply with our legal obligations.
4. Third-Party Processors
We rely on carefully selected third-party service providers who process data on our behalf. Our current processors include:
- Supabase — authentication and database hosting
- Vercel — application hosting and delivery
- OpenAI — AI summarization and embeddings
- Resend — transactional and briefing emails
- Firecrawl — article content crawling
- NewsData.io — news article ingestion
5. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes described above or as required by applicable law. When you delete your account, your associated data is permanently erased or anonymized.
6. International Data Transfers
Your personal data is primarily processed in Switzerland, a country recognized by the European Commission as providing an adequate level of data protection. Where data is transferred to sub-processors located in other jurisdictions (including the United States), we ensure appropriate safeguards are in place, such as:
- EU Standard Contractual Clauses (SCCs) approved by the European Commission.
- The UK International Data Transfer Agreement or Addendum, as applicable.
- Any other mechanism permitted under the Swiss nFADP, the EU GDPR, or the UK GDPR.
7. Your Rights
Under the Swiss nFADP, you have the following rights regarding your personal data, regardless of where you reside:
- Right of Access: obtain confirmation of whether your data is processed and receive a copy of that data.
- Right to Rectification: request correction of inaccurate or incomplete data.
- Right to Erasure: request deletion of your personal data. You can delete your account directly from your account settings at any time.
To exercise any of these rights, contact us at lorin.steiner@bluewin.ch.
8. Notice to UK & EU Residents
If you are located in the United Kingdom or the European Economic Area (EEA), the following additional rights and disclosures apply under the EU General Data Protection Regulation (GDPR) and the UK General Data Protection Regulation (UK GDPR):
Legal Basis for Processing
We process your personal data on one or more of the following legal bases:
- Contract: processing is necessary for the performance of our contract with you (providing the service).
- Legitimate Interest: processing is necessary for our legitimate interests (e.g. service security and improvement), provided those interests are not overridden by your rights.
- Legal Obligation: processing is required to comply with applicable law.
- Consent: where you have given explicit consent (e.g. for non-essential cookies). You may withdraw consent at any time.
Additional Rights
In addition to the rights listed in Section 7, you also have the:
- Right to Data Portability: receive your personal data in a structured, commonly used, machine-readable format.
- Right to Restriction: request that we limit the processing of your personal data under certain circumstances.
- Right to Object: object to the processing of your personal data based on legitimate interests or for direct marketing purposes.
Supervisory Authority
You have the right to lodge a complaint with your local data protection supervisory authority. In Switzerland, this is the Federal Data Protection and Information Commissioner (FDPIC).
9. Notice to US Residents
If you are a resident of California or another US state with a comprehensive consumer privacy law, the following additional disclosures apply:
Categories of Personal Information
In the preceding 12 months we have collected the categories described in Section 2 above (identifiers such as email address and IP address; internet or network activity such as browsing history and usage data; and account profile information).
Sale / Sharing of Personal Information
We do not sell your personal information and have not done so in the preceding 12 months. We do not share your personal information for cross-context behavioral advertising.
Your Rights Under the CCPA/CPRA
- Right to Know: request disclosure of the categories and specific pieces of personal information we have collected about you, the sources, the business purposes, and the categories of third parties with whom we share it.
- Right to Delete: request deletion of the personal information we have collected from you, subject to certain exceptions.
- Right to Correct: request correction of inaccurate personal information.
- Right to Opt-Out:if we ever begin selling or sharing personal information, you may opt out at any time via the "Do Not Sell My Personal Info" link in our website footer.
- Right to Non-Discrimination: we will not discriminate against you for exercising any of these rights.
To submit a verifiable consumer request, contact us at lorin.steiner@bluewin.ch. We will respond within 45 days, as required by law.
10. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or by posting a notice on the service before the change takes effect. Your continued use of the service after the effective date constitutes acceptance of the revised policy.