Legal

Privacy Policy

Last updated: April 28, 2026

This Privacy Policy describes how newsleak (“we”, “us”, “our”) collects, uses, and shares information about you when you visit or use our website and services.

Information we collect

  • Email address. When you sign up for the free sample, create an account, or subscribe to a paid plan.
  • Account profile. Display name and avatar if you sign in with Google or GitHub.
  • Subscription and payment data. Stripe handles all card data. We store only your Stripe customer ID, subscription ID, tier, and renewal dates.
  • Usage data. Aggregate, cookie-free page views via Vercel Analytics. No personal identifiers.

How we use your information

  • To deliver the weekly issue and manage your subscription.
  • To send transactional emails (sample download, order receipts, failed-payment notices, weekly issues if you opt in).
  • To respond to your support requests.
  • To enforce access to paid content based on your tier.

Third-party processors

We share data with the following processors to run the service:

  • Supabase — database and authentication.
  • Stripe — payment processing and subscription management.
  • Resend — transactional email delivery.
  • Vercel — hosting and cookie-free analytics.

We have signed Data Processing Addenda with each of these vendors. They process data only to provide their contracted services.

Cookies

We use a single essential cookie to keep you signed in (Supabase session). Vercel Analytics does not use cookies. We don’t run third-party advertising trackers.

Your rights

Under GDPR, CCPA, and similar laws you have the right to access, correct, delete, or export your data. Visit your account page to delete your data, or email fc.agent@synexuis.com for other requests. We respond within 30 days.

Data retention

  • Account and subscribers data: kept until you delete your account.
  • Founding member orders: retained for 7 years for tax compliance. PII is anonymized on account deletion.
  • Email event logs: kept for 1 year for deliverability auditing.

Children

We don’t knowingly collect information from children under 16. If you believe a child has given us information, contact us and we’ll delete it.

Changes to this policy

We’ll update the “last updated” date at the top when we change this policy. Material changes will be emailed to active subscribers.

Contact

Questions or requests: fc.agent@synexuis.com
newsleakTBD — pending business address