Privacy Policy

1. Who we are

SreevAI News (the “Service”) is operated under the SreevAI brand by SreevAI, a UK based business (“we”, “us”, “our”). For the personal data described in this policy, SreevAI is the data controller.

Our full legal identity and address for service are available on request from the contact address below.

This policy explains what personal data we collect when you use news.sreevai.com or subscribe to our emails, how we use it, who we share it with, and the rights you have. Read it together with our Terms and Conditions.

2. Data we collect

You can read everything on news.sreevai.com without creating an account, without signing in and without giving us any personal information. The Service does not process payments and does not ask for your name, address or phone number.

When you subscribe to our emails, we store the following in our subscriber database:

• your email address;
• the regions and categories you optionally selected;
• your delivery frequency preference;
• your subscription status (whether you have confirmed by clicking the double opt in link);
• a confirmation token and an unsubscribe token, which we generate so the confirm and unsubscribe links in your emails work;
• timestamps recording when you subscribed, when you ticked the agreement to our Terms and Privacy Policy, when you confirmed, and when we last sent you a digest.

When we send you email, our email provider (Resend) processes standard delivery metadata such as delivery, bounce and complaint events so that mail can actually be delivered.

3. Purposes and lawful bases

We use your personal data for the following purposes:

• Sending you the emails you asked for (the confirmation email, the welcome email and the daily digest). Lawful basis: your consent, which you give by ticking the agreement box on the subscribe form and clicking the confirmation link in the double opt in email. You can withdraw consent at any time using the unsubscribe link in any email.
• Operating, securing and improving the Service, including making sure emails get delivered, preventing abuse of the subscribe and unsubscribe flows, and keeping basic operational logs. Lawful basis: our legitimate interests in running a reliable, safe news service, balanced against your interests and rights.
• Complying with legal obligations, such as responding to lawful requests from regulators or law enforcement. Lawful basis: legal obligation.

We do not sell your personal data. We do not use it for advertising profiling and we do not use it for automated decision making that produces legal or similarly significant effects.

4. Email communications and opt out

Every email we send includes an unsubscribe link. Clicking it opens the unsubscribe page on news.sreevai.com, which marks your record as unsubscribed and stops further emails to that address. You can also stop emails by contacting us at akshay@sreevai.com.

Our postal address for marketing email purposes is [insert postal contact address].

5. Cookies, analytics and similar technologies

The site itself does not set advertising cookies, does not set cross site tracking cookies and does not run third party analytics that profile individuals. Your browser may use standard storage that the site needs to function (for example, to remember UI state while you browse), and your browser will, as with any website, send normal request information (such as IP address, user agent and referrer) to our hosting provider so that pages can be served.

6. Who we share data with

We share personal data only with the service providers (processors) we need to run the Service:

• Supabase, which hosts the database that stores subscriber records and article data.
• Lovable Email Infrastructure, which delivers the confirmation, welcome and digest emails from our verified sender domain.
• Lovable, which hosts the website.
• A third party AI provider, used only to generate article content from public source material. Subscriber data is not sent to this provider.

We may also disclose personal data where we are legally required to do so, or to protect our rights, safety or property, or those of our users or the public.

7. International data transfers

Some of our processors are based outside the United Kingdom and the European Economic Area, or may process data in other regions. Where personal data is transferred outside the UK or EEA, we rely on appropriate safeguards recognised under UK GDPR and EU GDPR, such as the UK International Data Transfer Addendum or the European Commission’s Standard Contractual Clauses, together with any additional measures required by law.

8. Retention

We keep subscriber data for as long as your subscription is active. If you unsubscribe, your record is marked unsubscribed so we do not email you again. You can ask us to delete your record entirely at any time using the contact details below, subject to our need to honour your opt out.

Operational logs (such as email delivery events held by our email provider, and basic database fetch logs) are retained for a limited period appropriate to their purpose and then deleted or aggregated.

9. Security

We use industry standard technical and organisational measures to protect personal data, including encryption in transit, access controls, and using reputable infrastructure providers. No system is perfectly secure; if we become aware of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority and, where required, affected individuals.

10. Your rights

Under UK GDPR and, where applicable, EU GDPR, you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data deleted, in the circumstances where this right applies;
• restrict or object to certain processing, including processing based on legitimate interests;
• withdraw consent at any time, without affecting the lawfulness of processing before withdrawal (for our emails, simply use the unsubscribe link);
• request a portable copy of data you provided to us, where this right applies;
• lodge a complaint with a data protection supervisory authority.

Our lead supervisory authority is the United Kingdom Information Commissioner’s Office (ICO), at ico.org.uk. If you are in the European Economic Area, you may also contact your local data protection authority.

To exercise any of these rights, contact us at akshay@sreevai.com. We may need to verify your identity before responding.

11. Children

The Service is not directed at children. We do not knowingly collect personal data from anyone under 16. If you believe a child has subscribed, please contact us at akshay@sreevai.com and we will delete the record.

12. Local consumer rights

Nothing in this policy reduces any mandatory consumer rights you have under the law of your country of residence. Those rights continue to apply alongside this policy.

13. Contact

For any privacy question, or to exercise your rights, contact us at akshay@sreevai.com, or by post at [insert postal contact address]. The data controller is SreevAI.

14. Changes to this policy

We may update this policy from time to time. When we do, we will update the “Last updated” date at the top of this page. Material changes will be highlighted on the Service or notified by email where appropriate.