Privacy Policy
This Privacy Policy describes how Private Newsletter ("we", "us", "our") collects, uses, and protects your information when you use our Chrome extension and related services.
1. What we collect
We collect only the information necessary to provide the service:
- Email address. Provided by you during sign-up. Used to send your weekly digest and manage your account.
- URLs of pages you save. Collected when you click the extension's save button. We use these to identify articles for your digest.
- Page content. When you save a page, the extension extracts the visible text content from that page and sends it to our servers for AI summarization. We do not passively collect content from pages you visit without saving.
- Payment information. Handled entirely by Lemon Squeezy. We receive only your email address and subscription status from their webhook. We never see or store card details.
2. What we do not collect
- We do not track your general browsing history.
- We do not collect information from pages you visit without explicitly saving them.
- We do not sell your data to third parties.
- We do not use your data for advertising.
3. How we use your information
- To generate AI-powered summaries of your saved articles.
- To compile and send your weekly digest email.
- To manage your account, session, and subscription status.
- To handle unsubscribe requests and email bounce events.
4. Third-party services
We use the following third-party services to operate Private Newsletter:
- Supabase. Stores your saved pages, email address, and account data. Data is stored in the EU. Supabase Privacy Policy.
- Cloudflare Workers. Runs our backend API, including OTP authentication and digest scheduling. Cloudflare Privacy Policy.
- Groq. Provides the AI inference API used to summarize your saved pages. Page content is transmitted to Groq solely for summarization and is not used to train their models under our agreement. Groq Privacy Policy.
- Resend. Delivers your digest and verification emails. Your email address is shared with Resend for this purpose. Resend Privacy Policy.
- Lemon Squeezy. Processes payments for Pro subscriptions. We receive only your email and subscription status. Lemon Squeezy Privacy Policy.
5. Data retention
Saved pages are retained until they have been included in a digest, after which they are removed within 30 days by a scheduled cleanup job. Your email address and account record are retained for as long as your account is active. If you request deletion, we will remove your account data promptly.
6. Your rights
You may at any time:
- Request deletion of your account and associated data by emailing [email protected].
- Unsubscribe from digest emails via the unsubscribe link in any digest email.
- Request a copy of the data we hold about you.
If you are in the European Economic Area, you have additional rights under the GDPR, including the right to access, rectify, or erase your personal data, and the right to lodge a complaint with a supervisory authority.
7. Security
All data in transit is encrypted using HTTPS/TLS. We use HMAC-signed session tokens for authentication rather than passwords. Access to production systems is restricted to authorised personnel only.
8. Children
Private Newsletter is not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.
9. Changes to this policy
We may update this Privacy Policy from time to time. We will post the revised policy here with an updated date. Continued use of the service after changes are posted constitutes your acceptance of the updated policy.
10. Contact
Questions or requests regarding your data? Reach us at [email protected].