Ubevera

1. Introduction

News Aggregator ("we", "us", "our") is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, and share information when you use our platform — a real-time AI-powered news aggregation and content creation service.

2. Information We Collect

We collect the following categories of information:

Account information: Email address and hashed password when you register with email/password. If you sign in via Google, Facebook, or X (Twitter), we receive your email address and OAuth provider ID from that service.
Profile information: Full name, timezone, and avatar URL, which you may optionally provide in your profile settings.
Preferences: Your preferred news categories (e.g. Tech, Business, Politics) and preferred news sources, which you set to personalise your feed.
Reading activity: Articles you save or mark as read within the platform, used to personalise your experience.
Usage data: Standard server logs including IP address, browser type, and pages visited, collected automatically when you use the service.
Content you submit: URLs (article links, YouTube URLs) you provide in the Compose tool for AI-assisted content generation.

3. How We Use Your Information

To create and manage your account and authenticate you securely.
To personalise your news feed based on your preferred categories and sources.
To deliver email digests at your chosen schedule if you enable digest notifications.
To generate AI-powered summaries, viral posts, analyses, jokes, and comments using content you or the platform supplies.
To maintain and improve the reliability and quality of the service.
To detect abuse, enforce rate limits, and ensure platform security.

4. AI and Third-Party Services

News Aggregator uses OpenAI's API to generate summaries, analyses, viral posts, comments, and jokes. When you trigger AI generation, relevant article content or your submitted URL text is sent to OpenAI's servers for processing. Please review OpenAI's Privacy Policy for details on how they handle data.

We aggregate news from publicly available RSS feeds and news sources. We do not share your personal data with these sources.

If you authenticate via Google, Facebook, or X, those providers share limited profile data with us (email and provider ID) per their own OAuth consent screens. We do not receive or store your social media passwords.

5. Data Storage and Security

Your data is stored in a PostgreSQL database. Passwords are hashed using bcrypt and are never stored in plain text. Authentication tokens (JWTs) are stored in your browser's localStorage and expire after a set period.

We implement rate limiting on authentication endpoints and CSRF protections on state-changing operations. While we take reasonable security precautions, no system is completely secure, and we cannot guarantee the absolute security of your information.

6. Data Retention

We retain your account data for as long as your account is active. AI-generated output is cached for up to 12 hours to reduce duplicate API calls. News articles and cluster data are retained for platform operation and are periodically pruned. You may request deletion of your account and associated data by contacting us.

7. Your Rights

Depending on your location, you may have the right to access, correct, or delete your personal data. To exercise any of these rights, please contact us using the information below.

8. Children's Privacy

News Aggregator is not directed to children under 13. We do not knowingly collect personal information from children under 13.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

10. Contact

If you have questions about this Privacy Policy, please contact us at privacy@newsaggregator.app.