Privacy Policy

1. Data We Collect

• Email address — collected when you subscribe to our daily digest newsletter. Used solely for sending the newsletter.
• Analytics data — we may collect anonymized, aggregate usage data (page views, referrer URLs, device type) through privacy-respecting analytics. No personally identifiable information is stored in analytics.

We do not collect passwords, payment information, IP addresses for tracking, or personal data beyond what is listed above.

2. Use of Artificial Intelligence

Articles on this platform are compiled from publicly available sources (CISA, NVD, RSS feeds from security publications) and rewritten using AI language models (Anthropic Claude). The AI processes only publicly available cybersecurity information — it does not process any user personal data.

All AI-generated content is clearly labelled with an "AI-assisted" badge on the article page.

3. Legal Basis for Processing (GDPR)

• Newsletter — consent (Article 6(1)(a)). You actively subscribe by entering your email.
• Analytics — legitimate interest (Article 6(1)(f)). Anonymized, aggregate data to improve the service.

4. Data Retention

Your email address is retained for as long as your newsletter subscription is active. You may unsubscribe at any time via the link in every digest email, after which your email is deleted within 30 days.

Analytics data is retained in anonymized form for up to 12 months.

5. Your Rights

Under the GDPR and DPDP Act, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Withdraw consent at any time (for newsletter subscriptions)
• Lodge a complaint with your local Data Protection Authority

6. Data Sharing

We do not sell, trade, or share your personal data with third parties. Newsletter delivery is handled via Resend, which processes email addresses solely for the purpose of sending our digest. No data is transferred outside the scope of newsletter delivery.

7. Cookies

This website does not use tracking cookies. Essential cookies may be set by the hosting infrastructure for security and performance purposes only.

8. Contact for Data Requests

To exercise any of your rights or request deletion of your data, email us at privacy@theinfosecnews.com. We will respond within 30 days.

9. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via the newsletter and reflected in the "Last updated" date above.