1. Overview
At Aevum News, responsible data stewardship is foundational to our journalism. We collect only what is necessary to deliver personalized news experiences, maintain secure accounts, and improve our platform. This document outlines exactly what data we retain, how long we keep it, where it is stored, and the security measures protecting it.
Our Commitment
We adhere to GDPR, CCPA, and international data protection standards. We never sell personal data to third parties, and all retention periods are strictly minimized to fulfill legal, operational, and service obligations.
2. What Data We Store
We categorize stored data based on purpose and sensitivity. Below is a breakdown of data types and their storage rationale:
| Data Category | Examples | Storage Purpose |
|---|---|---|
| Account Information | Name, email, password hash, payment details | Authentication, billing, support |
| Preferences | Topic interests, dark/light mode, notification settings | Personalization & UX optimization |
| Usage Analytics | Article views, session duration, click paths | Content strategy & platform improvement |
| Communications | Support tickets, newsletter subscriptions, feedback | Customer service & legal records |
| Security Logs | IP addresses, login attempts, device fingerprints | Fraud prevention & breach detection |
3. Data Retention Periods
We retain data only as long as necessary to fulfill the purpose for which it was collected. Retention timelines are automatically enforced through our data lifecycle management system.
| Data Type | Active Status | Retention Period | Disposition |
|---|---|---|---|
| Account & Profile Data | Active | Indefinite (with consent) | Secure storage / Deletion on request |
| Account & Profile Data | Inactive | 24 months | Archived → Anonymized |
| Usage & Analytics | — | 13 months | Aggregated & anonymized |
| Security & Access Logs | — | 6–12 months | Automatically purged |
| Financial Records | — | 7 years | Legal compliance (tax/AUDIT) |
Note: Anonymized data may be retained indefinitely for research, trend analysis, and public interest journalism. Anonymized datasets cannot be traced back to individual users and are excluded from deletion requests.
4. Storage Infrastructure & Security
All Aevum News data is hosted on enterprise-grade infrastructure designed for confidentiality, integrity, and availability.
- Geographic Location: Primary data centers located in the European Union (Frankfurt, Ireland) with backup replication in the United States (Virginia). Cross-border transfers use EU Standard Contractual Clauses.
- Encryption: AES-256 encryption at rest; TLS 1.3 for all data in transit. Database fields containing PII are column-level encrypted.
- Access Controls: Role-based access control (RBAC), multi-factor authentication (MFA), and zero-trust network architecture. Internal access is logged and audited quarterly.
- Compliance: ISO 27001 certified, SOC 2 Type II compliant, and regularly penetration-tested by third-party cybersecurity firms.
- Backup & Disaster Recovery: Daily incremental backups and weekly full backups. RPO: 1 hour | RTO: 4 hours. Immutable backups protect against ransomware.
5. Your Rights & Controls
You maintain full sovereignty over your data. Under applicable privacy laws, you are entitled to:
- Access & Portability: Request a complete export of your personal data in machine-readable format (JSON/CSV).
- Rectification: Update or correct inaccurate information directly through your account dashboard.
- Deletion: Request permanent erasure of your account and associated data (subject to legal retention obligations).
- Opt-Out: Disable personalized ads, analytics tracking, and marketing communications at any time.
- Restriction: Temporarily suspend data processing while a dispute is resolved.
How to Exercise Your Rights
Manage preferences directly in Account Settings → Privacy & Data, or submit a formal request to privacy@aevumnews.com. We respond to all valid requests within 30 days.
6. Data Protection Contact
For questions regarding this policy, data storage practices, or to file a complaint with our Data Protection Officer (DPO):
Aevum News DPO Office
Email: dpo@aevumnews.com
Postal: 124 Journalist Plaza, Suite 800, Brussels, Belgium 1000
Response Time: Within 5 business days
This policy forms part of the Aevum News Privacy Framework. We reserve the right to update retention standards as technology, legal requirements, or operational needs evolve. Material changes will be communicated via email or prominent site notice.