Privacy policy

1. Introduction

Prompt News is committed to protecting your privacy and processing personal data in line with LGPD and applicable regulations.

This policy explains how we collect, use, store, share, and protect personal data when you use our newsletter and related experiences.

2. Data we collect

• Name, when you choose to provide it.
• Email address for delivery, account access, and operational communication.
• Topic preferences and academic newsletter opt-in.
• Technical data such as IP address, user agent, device, and session data used for security and reliability.
• Subscription timestamps, consent records, and data request logs.

3. Why we process data

• Deliver the newsletter and manage your subscription.
• Personalize editorial experience and topic mix.
• Authenticate requests related to access, export, deletion, and billing.
• Prevent fraud, abuse, and unauthorized access.
• Comply with legal, tax, audit, and regulatory obligations.

4. Legal bases

• Consent when you subscribe and opt in to communications.
• Performance of a service when we need data to deliver the product you requested.
• Legitimate interest for platform security, monitoring, and quality improvement.
• Legal obligation when retention or disclosure is required by law.

5. Sharing

We share data only with service providers strictly necessary to operate the platform, such as Supabase, Resend, Vercel, and RevenueCat.

We do not sell personal data.

6. Retention

• Active subscription data is kept while your account or subscription remains active.
• Deletion requests are processed within the legal and operational windows disclosed to the user.
• Audit, consent, fraud-prevention, and legal records may be retained for the minimum period required by law.

7. Your rights

• Access and confirmation of processing.
• Correction and update of inaccurate data.
• Portability, deletion, or anonymization when applicable.
• Information about sharing and revocation of consent.

8. Security

• HTTPS/TLS in transit and secure storage providers.
• Access controls, authentication flows, signed sessions, and operational monitoring.
• Abuse prevention and least-privilege controls for sensitive operations.

9. International transfers

Some providers may process data outside Brazil. When that happens, we rely on appropriate contractual and technical safeguards compatible with LGPD.

10. Contact

For privacy or data protection matters, contact dpo@promptnews.com.br.

For general support, contact contato@promptnews.com.br.