Newzflash ("we", "our", or "us") operates newzflash.io. This Privacy Policy explains how we collect, use, disclose, and protect personal data in compliance with the GDPR, CCPA/CPRA, and other applicable privacy laws.

1. Information We Collect

A. Information You Provide

• Email address (used for authentication and receipts)
• Payment-related metadata (transaction IDs, payment status)
• Support communications

Important: Full payment details are processed and stored only by Stripe. Newzflash never stores full card numbers.

B. Information Collected Automatically

• IP address (used for fraud prevention and abuse detection)
• Device and browser type
• Usage events (article unlocks, payment confirmations)

2. Legal Bases for Processing (GDPR)

We process personal data under the following lawful bases:

• Contractual necessity: to authenticate users and unlock content after payment
• Legitimate interests: fraud prevention, service reliability, and analytics
• Legal obligations: financial and tax compliance
• Consent: cookies or optional communications where required

3. How We Use Personal Data

We use personal data to:

• Authenticate users via Supabase Auth
• Process payments and confirmations via Stripe
• Verify article unlock eligibility on partner sites
• Prevent fraud, abuse, and repeated unpaid access
• Improve product performance and user experience

We do not sell personal information.

4. Supabase Authentication

Newzflash uses Supabase for authentication and session management.

Supabase may process:

• Email address
• Authentication tokens
• Session metadata

Supabase acts as a data processor under GDPR.

5. Payments (Stripe)

Payments are handled by Stripe, an independent data controller for payment data.

Stripe may collect:

• Payment method details
• Transaction identifiers
• Fraud-prevention signals

Stripe's Privacy Policy governs payment data processing.

6. Partner Websites

When unlocking content on partner publisher websites:

• Newzflash shares only anonymous or tokenized unlock confirmations
• No full personal profiles are shared with publishers

Publishers operate independently and maintain their own privacy policies.

7. Cookies & Local Storage

We use cookies or local storage to:

• Remember unlock status
• Maintain authenticated sessions
• Prevent duplicate paywalls

You may disable cookies in your browser, though some features may not function properly.

8. Data Retention

We retain personal data only as long as necessary to:

• Provide access to unlocked content
• Maintain transaction records
• Comply with legal obligations

Inactive accounts may be deleted or anonymized.

9. Your Privacy Rights

GDPR (EU / UK Users)

You have the right to:

• Access your data
• Correct inaccurate data
• Request deletion
• Restrict or object to processing
• Data portability

CCPA / CPRA (California Users)

You have the right to:

• Know what personal data we collect
• Request deletion of personal data
• Opt out of data selling (we do not sell data)
• Non-discrimination for exercising rights

Requests can be made by contacting support@newzflash.io.

10. Security

We use industry-standard security practices. While we strive to protect your data, no system is completely secure.

11. Children's Privacy

Newzflash is not intended for users under 13. We do not knowingly collect data from children.

12. Updates to This Policy

We may update this Privacy Policy periodically. Updates will be posted with a revised date.

13. Contact

Email:support@newzflash.io