Privacy & Data Policy

Aevum News ("we," "our," or "us") is committed to protecting your privacy and handling your personal data with transparency, integrity, and care. This Privacy & Data Policy ("Policy") explains how we collect, use, store, share, and protect your personal information when you access our digital news platform, mobile applications, newsletters, and related services (collectively, the "Services").

This Policy applies to all users worldwide who access Aevum News through any device or platform. By using our Services, you acknowledge that you have read, understood, and agree to the practices described in this Policy.

This Policy is governed by applicable data protection laws including, where relevant, the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), the California Privacy Rights Act (CPRA), and other regional privacy frameworks.

We collect information in several ways to provide, maintain, and improve our Services. The types of data we collect fall into the following categories:

2.1 Information You Provide Directly

When you interact with our Services, you may voluntarily provide us with personal information, including but not limited to:

• Account Information: Name, email address, password, and profile details when you create an Aevum News account or subscribe to our services.
• Payment Information: Billing address, payment card details, and transaction history when you purchase subscriptions or digital content. Payment processing is handled by secure, PCI-compliant third-party processors.
• Communication Data: Messages, feedback, survey responses, and support requests you send to us.
• Newsletter Preferences: Your email address and content preferences when you subscribe to our newsletters or alerts.

2.2 Information Collected Automatically

When you access our Services, certain information is collected automatically through standard web technologies:

2.3 Information from Third Parties

We may receive information about you from trusted third-party sources, including:

• Social Media Platforms: If you connect your social media accounts or log in via social authentication, we may receive your public profile information.
• Analytics Partners: Aggregated, anonymized data from our analytics service providers.
• Public Records: Information available from publicly accessible sources for identity verification purposes.

We process your personal data for specific, legitimate purposes. Each processing activity has a defined legal basis under applicable privacy laws.

3.1 Service Delivery & Management

• Providing access to our news content, digital subscriptions, and premium features
• Managing user accounts, authentication, and subscription billing
• Delivering personalized news feeds and content recommendations
• Processing payments and handling refund requests

3.2 Communication

• Sending newsletters, alerts, and updates you have explicitly subscribed to
• Responding to your inquiries, feedback, and support requests
• Notifying you about important service changes, security updates, or policy modifications
• Sending transactional communications such as receipts and confirmations

3.3 Service Improvement & Analytics

• Analyzing usage patterns to improve content quality and user experience
• Conducting A/B testing for design and feature optimization
• Monitoring system performance, detecting errors, and preventing abuse
• Generating aggregated, anonymized statistics for editorial planning

3.4 Security & Compliance

• Preventing fraud, unauthorized access, and malicious activity
• Complying with legal obligations and regulatory requirements
• Enforcing our Terms of Service and Community Guidelines
• Protecting the rights, property, and safety of Aevum News and its users

3.5 Legal Basis for Processing (GDPR)

Aevum News does not sell, rent, or trade your personal information. We share your data only in the following circumstances:

4.1 Service Providers & Business Partners

We engage trusted third-party vendors who assist us in operating our Services. These providers are contractually bound to use your data solely for the purposes we specify and are required to implement appropriate security measures.

• Cloud Infrastructure: Amazon Web Services (AWS) and Google Cloud Platform for hosting and data storage
• Payment Processors: Stripe and PayPal for secure transaction processing
• Analytics: Google Analytics (with IP anonymization enabled) for usage analysis
• Email Delivery: SendGrid and Mailchimp for newsletter distribution
• Customer Support: Intercom for managing support communications

4.2 Legal Requirements

We may disclose your personal information when required by law, court order, government request, or when we believe in good faith that such disclosure is necessary to:

• Comply with applicable法律法规 and legal processes
• Protect and defend the rights or property of Aevum News
• Prevent or investigate potential wrongdoing or fraud
• Protect the personal safety of users or the public

4.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of assets, your personal information may be transferred as part of that transaction. We will notify you of any such change and ensure that your data continues to be protected in accordance with this Policy.

4.4 International Transfers

Aevum News operates globally, and your data may be processed in countries other than your country of residence. Where data is transferred outside the European Economic Area (EEA) or other jurisdictions with strict data protection laws, we ensure adequate safeguards are in place, including:

• EU Standard Contractual Clauses (SCCs)
• Privacy Shield framework certifications (where applicable)
• Data Processing Agreements (DPAs) with all international processors

We implement industry-leading security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.

5.1 Security Measures

• Encryption: All data in transit is encrypted using TLS 1.3. Data at rest is encrypted using AES-256 encryption.
• Access Controls: Role-based access control (RBAC) ensures that only authorized personnel can access personal data. Multi-factor authentication (MFA) is required for all administrative access.
• Network Security: Web application firewalls (WAF), intrusion detection systems (IDS), and regular penetration testing protect our infrastructure.
• Secure Development: Our engineering team follows OWASP guidelines and conducts regular code reviews and security assessments.
• Incident Response: We maintain a comprehensive incident response plan and conduct regular security drills.

5.2 Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Policy, unless a longer retention period is required by law.

5.3 Data Breach Notification

In the unlikely event of a data breach that could compromise your personal information, we will:

1. Investigate and contain the breach immediately
2. Notify affected users within 72 hours of becoming aware of the breach
3. Report the breach to relevant supervisory authorities as required by law
4. Provide guidance on steps users can take to protect themselves
5. Implement additional security measures to prevent recurrence

Depending on your location, you may have certain rights regarding your personal data. We are committed to helping you exercise these rights.

6.1 California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights including:

• The right to know what personal information is collected, used, shared, or sold
• The right to delete personal information held by businesses
• The right to opt out of the sale or sharing of personal information
• The right to limit the use and disclosure of sensitive personal information
• The right to non-discrimination for exercising your privacy rights

Aevum News does not sell or share personal information as defined under the CCPA/CPRA. California residents may submit requests via email or by calling our support line.

6.2 Do Not Track

We respect Do Not Track (DNT) signals from browsers that support this feature. When DNT is enabled, we will not set tracking cookies or use analytics services that track your activity across other websites.

We use cookies and similar technologies to enhance your experience, analyze usage, and deliver relevant content. You can manage your preferences through our Cookie Settings panel or your browser settings.

7.1 Types of Cookies We Use

7.2 Managing Cookies

You can control cookies through:

• Our Cookie Settings: Accessible via the cookie icon in the bottom-right corner of any page
• Your Browser: Most browsers allow you to block, delete, or manage cookies in settings
• Opt-Out Links: Google Analytics Opt-Out: tools.google.com/dlpage/gaoptout
• Ad Preference Managers: Network Advertising Initiative (NAI) and Digital Advertising Alliance (DAA) opt-out tools

7.3 Third-Party Cookies

Some third-party services we use (such as embedded social media buttons or video players from YouTube) may set their own cookies. We do not control these cookies and recommend reviewing the privacy policies of those third parties.

Aevum News is not directed to children under the age of 16 (or the age of digital consent in your jurisdiction, where higher). We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected data from a child, we will take immediate steps to delete it.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at privacy@aevumnews.com. We will work with you to address your concerns and comply with applicable children's privacy laws, including COPPA and GDPR provisions for minors.

We may update this Privacy & Data Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Post the updated Policy on this page with a revised "Last Updated" date
• Notify active users via email or prominent on-site notice at least 30 days before the change takes effect
• Require renewed consent if the changes affect the legal basis for processing

We encourage you to review this Policy periodically. Your continued use of our Services after the effective date of any changes constitutes your acceptance of the updated Policy.

If you have any questions, concerns, or requests regarding this Privacy & Data Policy or our data practices, please reach out to us through any of the following channels:

10.1 Regulatory Complaints

If you are not satisfied with how we handle your privacy concerns, you have the right to lodge a complaint with your local data protection authority:

• EU/EEA: Your national Data Protection Authority (DPA)
• United Kingdom: Information Commissioner's Office (ICO) — ico.org.uk
• California, USA: California Privacy Protection Agency (CPPA) — oag.ca.gov/privacy