Privacy Policy.

Last updated: 21 May 2026
Effective date: 21 May 2026

1. Who we are

This Privacy Policy describes how AnyNews ("AnyNews", "we", "us", "our") collects, uses, shares, and protects information when you use our website at anynews.ai, the AnyNews application, and related services (collectively, the "Service").

We are based in Israel. Our contact email for all privacy matters, including data subject rights requests, is info@anynews.ai.

This Privacy Policy is incorporated into our Terms of Service and uses the same defined terms.

2. What we collect

We collect four categories of information.

2.1 Account information

When you sign up, we collect:

• Your email address
• A password (stored only in hashed form; we never see your actual password)
• Your name

2.2 User Content

Content you create, upload, or generate using the Service, including:

• Channels you set up
• News sources you connect
• Signals (news stories) the Service surfaces to you
• Posts you create (text, images, captions, hashtags)
• AI Output generated for you
• Settings and preferences

2.3 Connection and usage data

When you use the Service:

• OAuth tokens for social media accounts you connect (held by us or by the relevant social platform, as described in §4.3)
• Records of which features you use and when
• Records of which AI features you invoke and on what content
• Standard technical data: IP address, browser type, device type, operating system, referring URL, timestamps

2.4 Payment information

When you subscribe to a paid tier:

• A record that you paid, including amount, currency, plan, and date
• A reference number from the payment processor
• We do not collect, store, or have access to your card details or PayPal credentials. Card data is handled directly by Stripe through its embedded forms; PayPal credentials are handled directly by PayPal.

2.5 What we do not collect

• We do not collect sensitive special-category data (such as health, race, religion, sexual orientation, political opinions) about you.
• We do not collect data about minors. The Service is for users 18 and older.
• We do not currently load tracking pixels or analytics on our marketing site. If we add them in the future, we will show a consent banner before any tracking loads (see §6).
• We do not use AI to scan your content for advertising signals.

3. How we use it

We use the data we collect only for these specific purposes, each tied to a lawful basis under GDPR Article 6 (where applicable):

3.1 To provide the Service

Lawful basis: performance of a contract - GDPR Art 6(1)(b).

• Authenticate you when you log in
• Store and display your User Content
• Generate AI Output in response to your inputs
• Publish content to your connected social media accounts at your direction
• Send transactional emails (password resets, account confirmations, billing receipts)

3.2 To bill you

Lawful basis: performance of a contract.

• Process subscriptions
• Send billing notifications
• Handle failed payments and renewals

3.3 To keep the Service running and secure

Lawful basis: legitimate interest - GDPR Art 6(1)(f).

• Detect and prevent abuse, fraud, and security threats
• Diagnose technical problems
• Monitor service health and performance
• Enforce our Terms of Service and Acceptable Use Policy

3.4 To communicate with you

Lawful basis: performance of a contract for transactional emails; consent for marketing.

• Respond to support requests
• Notify you of service changes, outages, or material updates to our policies
• Send marketing emails only with your explicit opt-in consent (you can unsubscribe at any time)

3.5 To comply with legal obligations

Lawful basis: legal obligation - GDPR Art 6(1)(c).

• Respond to lawful requests from authorities
• Maintain records required by tax and corporate law
• Honor data subject rights requests under GDPR, CCPA, the Israeli Privacy Protection Law, and other applicable laws

3.6 We do not use your data for AI training

We do not use User Content, AI Output, or any other personal data to train, fine-tune, or improve any AI model - whether ours or any third party's. This is a binding commitment, as also stated in our Terms of Service §5.3.

3.7 We do not use your data for advertising

We do not sell your data, rent it, share it with data brokers, or use it to target advertising at you. The optional analytics described in §6 (if and when we enable them) are for our own product analytics, not for ad targeting.

4. Who we share it with (sub-processors)

To run the Service, we share necessary data with a small set of trusted third-party providers ("sub-processors"). Each sub-processor receives only the data it needs to perform its function, and each is bound by its own privacy and security obligations.

4.1 Current sub-processors

As of the effective date of this Policy:

Supabase, Inc. - Database, authentication, edge function hosting, and transactional emails.
Data shared: your account information, all User Content, technical usage data, and the contents of transactional emails.
Privacy policy: supabase.com/privacy

Anthropic PBC - AI content generation (via the Claude API).
Data shared: post titles, source article URLs, signal metadata, and the inputs needed to generate AI Output. No persistent personal data is sent. Anthropic's commercial terms commit that inputs are not used to train its public AI models.
Privacy policy: anthropic.com/legal/privacy

Meta Platforms, Inc. (Instagram and Facebook) - Social publishing via the Meta Graph API.
Data shared: post content (text and images) you direct us to publish, and OAuth tokens for the social accounts you connect.
Privacy policy: facebook.com/policy.php

Vercel, Inc. - Frontend hosting.
Data shared: standard web server data (IP address, user agent, request paths) when you visit the Service.
Privacy policy: vercel.com/legal/privacy-policy

Stripe, Inc. - Card payment processing.
Data shared: card data, billing address, and transaction metadata. Card data is collected directly by Stripe through embedded forms; AnyNews does not see it.
Privacy policy: stripe.com/privacy

PayPal Holdings, Inc. - Alternative payment processing.
Data shared: transaction data for PayPal-based payments. PayPal account credentials are handled directly by PayPal.
Privacy policy: paypal.com/privacy

4.2 Future sub-processors

We may add additional providers in the future. Notably:

• Other social platforms (such as X, LinkedIn, TikTok) when we add support for publishing to them.
• Web analytics or marketing-attribution tools (such as Google Analytics or the Meta Pixel) on our marketing pages - these will be loaded only after explicit user consent via a cookie banner.
• Other infrastructure providers as the Service grows (CDN, monitoring, error tracking).

When we add a new sub-processor that processes personal data, we will update this Policy and, for material additions, notify existing users by email or by an in-product notice.

4.3 Social media OAuth tokens

When you connect a social account, we receive an OAuth access token from the social platform. We store this token only to enable the publishing actions you direct. You can revoke this token at any time:

• From inside AnyNews (account settings → disconnect)
• From the social platform's own connected-apps settings (recommended for full revocation)

Revoking a token stops new publishing on your behalf. It does not remove content that has already been published.

4.4 We do not share with third parties beyond sub-processors, except:

• With your explicit consent
• When required by law (court order, subpoena, regulatory request, or to protect rights, safety, or property)
• As part of a merger, acquisition, or sale of all or part of AnyNews's business (in which case the acquirer will be bound by terms at least as protective as this Policy)

5. International transfers

AnyNews is based in Israel. The data you provide may be processed in:

• Israel, where AnyNews is established. Israel has a European Commission adequacy decision, meaning EU personal data can flow to Israel under the GDPR.
• The European Union or European Economic Area, where Supabase and certain other providers operate data centers.
• The United States, where Anthropic, Meta, Stripe, PayPal, Vercel, and certain other providers operate. For transfers to the United States, we rely on Standard Contractual Clauses approved by the European Commission, or on each provider's adherence to the EU-US Data Privacy Framework where applicable.
• Other regions, where our sub-processors maintain global infrastructure, subject to appropriate transfer mechanisms.

If you are located in the European Union, the United Kingdom, or another region with cross-border transfer restrictions, by using the Service you acknowledge that your data may be transferred to and processed in these locations.

6. Cookies and similar technologies

6.1 What we use today

Our marketing site (anynews.ai) currently uses only the minimum cookies necessary to make the site work - there are no analytics cookies, advertising cookies, or third-party tracking pixels active on the marketing pages at the date of this Policy.

The Service itself (when you are logged in) uses essential cookies and local storage to:

• Keep you logged in (session token)
• Remember your settings and preferences
• Protect against fraud and security threats

These are strictly necessary and do not require consent under EU law.

6.2 What we may add in the future

We are planning to introduce:

• Google Analytics - for understanding how visitors use our marketing pages.
• Meta Pixel - for measuring the effectiveness of advertising we may run, and for retargeting.

These are not active today. Before we activate them, you will see a cookie consent banner that gives you a real choice - you will be able to accept, reject, or customize which categories load. We will not load them in any region with consent requirements (such as the EU, UK, EEA) without your explicit opt-in.

6.3 More detail

Our Cookie Policy describes each cookie in more detail when there is more to describe. Until tracking is added, the Cookie Policy summarizes the minimum-essential-only state described above.

7. Your rights

You have legal rights over your personal data. The specific rights depend on where you live, but we apply them uniformly to all users to keep things simple:

7.1 Access

You can request a copy of the personal data we hold about you. We will provide it in a portable format within 30 days.

7.2 Correction

You can correct or update inaccurate or incomplete data. Most of this you can do yourself from your account settings; for anything else, email us.

7.3 Deletion ("right to be forgotten")

You can request deletion of your account and your personal data. We will delete it from our active systems within 30 days, and from backups within 90 days (subject to legal retention requirements - see §8).

7.4 Portability

You can request a machine-readable export of the data you have provided to us.

7.5 Restriction of processing

You can ask us to limit how we process your data in specific circumstances.

7.6 Objection

You can object to processing based on legitimate interest. We will stop unless we have compelling grounds that override your interests.

7.7 Withdrawal of consent

Where we rely on your consent (such as for marketing emails or tracking cookies), you can withdraw consent at any time. Withdrawal does not affect the lawfulness of processing before the withdrawal.

7.8 Right to lodge a complaint

EU and UK users can lodge a complaint with their national data protection authority. Israeli users can contact the Privacy Protection Authority of Israel. We hope you will contact us first so we can address your concern directly - but you do not have to.

How to exercise these rights: email info@anynews.ai with the specifics of your request. We will respond within 30 days. We may ask you to verify your identity before fulfilling certain requests (typically by replying from the email address on your account).

California residents: you have specific rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including the right to know, delete, correct, and limit the use of sensitive personal information, and the right to opt out of any "sale" or "sharing" of personal information. We do not sell or share personal information as those terms are defined under the CCPA. To exercise CCPA rights, email info@anynews.ai with the subject "CCPA Request."

8. How long we keep it

We keep your data only as long as needed for the purposes described in this Policy.

Data category	Retention period
Account information	While your account is active. Deleted within 30 days of account closure (90 days for backups).
User Content	While your account is active. Deleted within 30 days of account closure (90 days for backups).
Payment records	7 years from the date of the transaction (Israeli tax law requirement).
Authentication logs	12 months.
Technical usage logs	90 days.
Marketing email subscriptions	Until you unsubscribe.

After the retention period ends, data is permanently deleted or fully anonymized.

If we are required by law to retain certain data longer (for example, due to an ongoing investigation, dispute, or regulatory requirement), we will retain only what is necessary for that specific purpose.

9. How we protect it

We use industry-standard security measures to protect your data, including:

• Encryption in transit (TLS) for all connections to the Service
• Encryption at rest for stored data, where supported by our infrastructure providers
• Hashed password storage (we never see your actual password)
• Access controls limiting which employees and contractors can access user data
• Regular security review of our codebase, dependencies, and infrastructure
• Use of sub-processors that maintain industry-standard security certifications (such as SOC 2, ISO 27001)

No security system is impenetrable. While we work hard to protect your data, we cannot guarantee absolute security. If a security breach affects your personal data, we will notify you and any required regulators within the timeframes required by applicable law (typically within 72 hours of becoming aware of the breach for GDPR purposes).

10. Children

The Service is not intended for anyone under 18. We do not knowingly collect personal data from minors. If we learn that we have collected data from a minor, we will delete it.

If you are a parent or guardian and believe your child has provided us with personal data, contact us at info@anynews.ai and we will take action to delete it.

11. Changes to this Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email (to the address on your account) or by a notice in the Service at least 30 days before the changes take effect. Your continued use of the Service after the effective date constitutes acceptance of the updated Policy. If you do not agree, you must stop using the Service before the changes take effect.

A version history of material changes is available on request.

12. Contact

Questions about this Privacy Policy or your data? Email us at info@anynews.ai.

For data subject rights requests (access, deletion, portability, etc.), use the same address - please include the word "Privacy Request" in the subject line to help us route it quickly.