Privacy Policy

1. Information We Collect

We collect information you provide directly (name, email, password, language preference) and information generated through your use of the platform (reading history, bookmarks, reactions, support messages). We also collect technical data such as IP addresses, browser type, and device information for security and analytics.

2. How We Use Your Information

We use your information to: provide and personalize the platform experience; process subscriptions and payments; send newsletters and notifications you've opted into; improve our AI analysis and content curation; ensure platform security; and comply with legal obligations.

3. Cookies and Sessions

We use session cookies to maintain your login state and language preferences. We use localStorage for theme preferences and cookie consent. We do not use third-party tracking cookies. Essential cookies cannot be disabled as they are required for the platform to function.

4. Data Sharing

We do not sell your personal data. We may share data with: payment processors (Stripe) for subscription billing; email service providers for newsletters and notifications; and law enforcement when required by law. AI providers process article content but not your personal data.

5. Data Security

We implement industry-standard security measures including password hashing (PBKDF2-SHA256), CSRF protection, rate limiting, and encrypted sessions. However, no system is completely secure, and we cannot guarantee absolute security.

6. Data Retention

We retain your account data as long as your account is active. Reading history and analytics are kept for up to 2 years. You may request deletion of your account and associated data at any time through your account settings.

7. Your Rights

You have the right to: access your personal data; correct inaccurate data; delete your account and data; export your data; withdraw consent for newsletters; and object to data processing. Exercise these rights through your account settings or by contacting support.

8. Children's Privacy

Our platform is not intended for children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us immediately.

9. Changes to This Policy

We may update this privacy policy periodically. We will notify registered users of material changes via email. Continued use after changes constitutes acceptance.

10. Contact Us

For privacy-related questions or to exercise your rights, contact us through our support page or email privacy@echoharbor.news.