Privacy Policy

Updat3 ("we," "us," or "our") operates the Updat3 news platform available at updat3.ai and any associated applications (collectively, the "Service"). This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information.

By using the Service, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the Service.

2.1 Information you provide directly

• Email address — when you create an account or sign in with email and password.
• Name — if you provide it during sign-up or via a connected OAuth provider.
• Payment information — if you subscribe to a paid plan, your payment details are collected and processed by Stripe, Inc. We do not store your full card number on our servers. See Section 5 for details.

2.2 Information from third-party sign-in

If you sign in with Google, we receive your name, email address, and profile picture from Google as part of the OAuth flow. We use this information solely to create and manage your account.

2.3 Information we collect automatically

• Saved stories — stories you bookmark are stored and associated with your account.
• Topic and region preferences — settings you configure on your account page.
• Usage data — basic server logs including IP address, browser type, pages visited, and timestamps. These are used for security monitoring and debugging and are not sold.

• To create and maintain your account.
• To personalise your news feed based on your topic and region preferences.
• To send email digests you have opted into (you can unsubscribe at any time).
• To process payments and manage subscriptions via Stripe.
• To detect and prevent fraud, abuse, and security incidents.
• To improve the Service — understanding which features are used helps us prioritise development.
• To comply with legal obligations.

We do not sell your personal information to third parties. We do not use your data to serve you third-party advertising.

Your account data is stored in Supabase, a cloud database provider. Data is stored in the United States. Supabase uses industry-standard encryption at rest and in transit (TLS).

We implement reasonable technical and organisational measures to protect your personal information. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

You are responsible for keeping your password confidential. If you believe your account has been compromised, contact us immediately at updat3news@gmail.com.

Payments are processed by Stripe, Inc. When you enter payment information, it is transmitted directly to Stripe over an encrypted connection. We receive only a payment token and summary (e.g., last four digits, card type, expiry). We never see or store your full card number.

Stripe's privacy policy is available at stripe.com/privacy.

The Service uses the following third-party providers who may process your data as part of delivering the Service:

• Supabase — database and authentication infrastructure.
• Vercel — hosting and edge delivery.
• Google OAuth — optional sign-in method.
• Stripe — payment processing.
• Resend — transactional and digest email delivery.
• OpenAI — AI-powered news summarisation (article text is sent to OpenAI's API; we do not send personally identifiable information to OpenAI).

Each of these providers has its own privacy policy and data processing terms. We encourage you to review them.

We use browser cookies and local storage solely for session management (keeping you logged in) and user preference storage. We do not use tracking cookies or third-party advertising cookies.

You can clear cookies through your browser settings at any time, which will log you out of the Service.

Depending on your location, you may have the following rights regarding your personal information:

• Access — request a copy of the personal data we hold about you.
• Correction — request that inaccurate data be corrected.
• Deletion — request that we delete your account and associated data.
• Portability — request your data in a machine-readable format.
• Opt-out of email — unsubscribe from digest emails at any time via the link in any email or through your account settings.

To exercise any of these rights, email us at updat3news@gmail.com. We will respond within 30 days.

The Service is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us and we will delete it promptly.

We retain your account data for as long as your account is active. If you delete your account, we will delete your personal information within 30 days, except where we are required to retain it for legal or compliance purposes.

Server logs are retained for up to 90 days for security purposes.

We may update this Privacy Policy from time to time. When we do, we will update the effective date at the top of this page. For material changes, we will notify you by email or via a notice on the Service. Your continued use of the Service after changes take effect constitutes your acceptance of the updated policy.

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

Updat3
Email: updat3news@gmail.com