Privacy Policy

1. Who We Are

NewsbookLM is an AI-powered news intelligence platform for digital marketers, operated by Eze Media LLC, a California limited liability company ("we", "us"). We help you aggregate news from multiple sources, generate AI-powered summaries, and deliver client briefings on a scheduled cadence.

For privacy-related questions, contact us at support@newsbooklm.com. To report a security vulnerability, write to security@newsbooklm.com.

2. Information We Collect

We collect the following categories of information:

• Account data: Your name and email address, from Google or GitHub when you sign in with them, or from you when you sign up with email. With email sign-up, our authentication provider stores only a salted hash of your password, never the password itself.
• Billing data: Your plan and subscription status. Card details go straight to Stripe; we never see or store them.
• Technical data: IP address, browser and device type in short-lived server logs, and error reports when something breaks. See Section 9 for how long each is kept.
• Usage data: Features you use, pages you visit, and timestamps of activity, collected to improve the service and detect abuse. This includes our own record of the steps your account reaches after signing up (onboarding, your first persona and report, the trial prompt, checkout and starting a trial), and where the visit you signed up from came from: the campaign tags in the link (utm_source, utm_medium, utm_campaign, ref), the name of the website that sent you, the page you landed on, and any offer code. We keep these in our own database with your account: no cookies, no third party, never sold or shared, and nothing is kept for visitors who do not sign up. The optional analytics and advertising tools in Section 8 run only if you turn them on.
• Feedback: What you write in the in-app feedback form, with the page you were on and your browser.
• Gmail content: Email subjects, sender names, dates, and body text, but only when you explicitly connect the Gmail integration, and only to extract news article content you have requested. See Section 4 for full details.
• Your configurations: RSS feed URLs, personas, keywords, briefing templates, and analysis profiles you create within the app.
• Generated reports: AI-generated summaries and briefings you produce and choose to save within the app.
• Consent preferences: Your cookie and tracking preferences, stored locally on your device.

3. How We Use Your Information

We use your information for the following purposes, each with a lawful basis under applicable law:

• Providing the Service: processing your news sources, generating briefings, managing your account. Lawful basis: contract performance.
• Service improvement and security: detecting errors, preventing abuse, improving features, and seeing where new accounts get stuck while getting started (our own signup funnel, described under Usage data). Lawful basis: legitimate interests.
• Communications: sending briefings and transactional emails you have requested, including a billing notice before your trial converts to a paid subscription. Lawful basis: contract performance.
• Product emails: during and shortly after your trial we may send a small number of onboarding tips and account-related product emails. Lawful basis: legitimate interests. Every such email includes a one-click unsubscribe link, and you can turn them off at any time from your profile page; briefings you configured are not affected.
• Optional analytics: understanding how the platform is used (see Section 8). Lawful basis: consent (you may opt out at any time via your privacy preferences).
• Optional advertising: measuring which of our ads bring people to NewsbookLM and showing our ads to people who visited (see Section 8). Lawful basis: consent (off unless you turn it on, and you may turn it off at any time).
• Account notices: emails about your account itself, such as a warning before an inactive account is deleted (Section 9). Lawful basis: legitimate interests. These are not marketing and are sent even if you turned product emails off.
• Usage pattern review: we may review aggregate and individual usage patterns to improve the Service and to identify active users for early access to new features (such as beta invitations). Lawful basis: legitimate interests.

4. Google API & Gmail Data

NewsbookLM offers an optional Gmail integration that allows you to source news articles from your inbox. This section explains exactly how we handle Google user data, in compliance with the Google API Services User Data Policy.

• What we access: When you connect Gmail, we request read-only access to your inbox. We read email headers (subject, sender, date) and body content solely to identify and extract news article links and content you have requested. When a newsletter links to a news story, we may open that link to read the article, as your browser would when you click it. We never open unsubscribe, sign-in, account or sponsor links, and we keep only the address of the article itself, never the email's own link, which can identify you.
• How it is used: Gmail data is used exclusively to surface news articles for your configured briefings. It is never used for advertising, profiling, or any purpose unrelated to the news aggregation feature you activated.
• Storage: Raw Gmail content is not persistently stored. Article content extracted for a briefing is retained only as part of your saved reports. Email body content used during processing is not retained after extraction is complete.
• No sharing or training: Gmail data is never sold, shared with third parties for advertising, or used to train AI models. It is transmitted to our AI provider(s) solely for the purpose of generating your requested article summaries.
• Revoking access: You can disconnect Gmail at any time from the Integrations page within NewsbookLM, or by visiting myaccount.google.com/permissions and removing NewsbookLM's access.

5. AI Processing

NewsbookLM uses AI models from 3 providers to generate article summaries, analysis reports, and client briefings: Google (Gemini), Anthropic (Claude) and OpenAI (GPT). Any of them may process your content. Which model handles a task depends on the feature and your settings, and we change it as better models come out.

We are always testing new models and tools, first on our own accounts and sometimes with beta testers who agree to try them. That may include open-weight models in the future. Before your content goes to an AI provider not listed in Section 6, we will update this policy and let the users affected know.

When you trigger an analysis:

• Article content (headlines, body text) is sent to the relevant AI service for processing. Content is transmitted securely via encrypted connections.
• No personally identifiable information beyond what you explicitly configure in your personas and briefing templates is included in AI prompts.
• AI-generated outputs (summaries, briefings, reports) are stored in your account for your use and can be deleted at any time.
• We use each provider's paid business API, under its data processing terms. None of them uses your content to train or improve its models.
• Each provider keeps prompts and responses only to detect abuse: Google for up to 55 days, Anthropic and OpenAI for up to 30 days. A provider keeps content longer only if it is flagged for breaking that provider's usage rules, or if the law requires it.
• AI output is provided for informational purposes and may contain errors; see our Terms of Service for the full disclaimer.

6. Service Providers (Subprocessors)

These companies process data for us to run NewsbookLM. Each gets only what its job needs. The ones marked optional load only if you turn on their category (Analytics or Advertising) in the cookie banner. Google, Meta and Microsoft decide for themselves how to use what their advertising tags collect, under their own privacy policies, which is why those tags wait for your consent.

RSS feeds you add are fetched by our servers, so a feed's publisher sees only a request from NewsbookLM, not who you are. We will update this list before adding a provider that receives personal data.

7. International Data Transfers

NewsbookLM is operated from the United States. If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, your personal data will be transferred to and processed in the United States. These transfers are carried out under appropriate safeguards, including Standard Contractual Clauses (SCCs) where required under applicable data protection law.

Our providers are mostly based in the United States; Section 6 lists where each one processes data. By using NewsbookLM, you acknowledge that your data may be processed in jurisdictions outside your home country.

8. Cookies, Tracking & Your Privacy Choices

We use three categories of cookies and browser storage:

• Essential (always on): your sign-in session, kept in your browser's storage, and your cookie choice. NewsbookLM cannot work without them.
• Analytics (optional, off until you turn it on): Google Analytics, PostHog and Microsoft Clarity. They set cookies and record how pages are used (pages viewed, clicks and scrolling) under a random ID and your account ID, never your name or email. Text inside the signed-in app, such as your personas and reports, is masked from their recordings. Clarity is a Microsoft service and can set Microsoft cookies (such as MUID, CLID and MR). Unless you also turn on Advertising, we tell Clarity not to share data with Microsoft Ads, and Google Analytics runs with ad storage and ad personalization denied.
• Advertising (optional, off until you turn it on): tags from Google Ads, Meta and Microsoft Advertising, used when we run ads with them. They set cookies and tell the platform which of our public pages you viewed and whether you signed up, opened checkout or started a trial (with the plan you chose), so we can see which ads work and show our ads to people who visited. Apart from those 3 events, they receive nothing from inside the signed-in app, and never your name or email. Turning on Advertising also lets Google Analytics and Clarity use their advertising features.

Separately, we count page views with Vercel Web Analytics, which sets no cookies and does not identify you. It records only the page visited (without any query string), the referring site, country, and device type, in aggregate.

Selling and sharing: we never sell your personal information for money. If you turn on Advertising, the ad platforms' tags receive the visit details above, and California law may treat that as "selling" or "sharing" personal information for cross-context behavioral advertising. Advertising is off unless you turn it on, and you can turn it off at any time. Nothing reaches an ad platform any other way.

Global Privacy Control: if your browser sends a GPC signal, we treat it as "Essential only": the optional analytics and advertising tools never load, whatever you chose before.

Change your choice at any time with Your Privacy Choices (also in the footer of every public page). Choosing "Essential only" does not affect any feature of NewsbookLM.

9. Data Retention & Deletion

We keep each kind of data only as long as the table below says.

Deleting your account: go to Settings and choose Delete Account. It takes effect at once: it cancels any subscription, deletes your customer record and saved cards at Stripe, and removes your account and everything in it from our live database. If you cannot sign in, email support@newsbooklm.com from the address on your account and we will delete it within 30 days.

10. Your Privacy Rights

Depending on where you are located, you may have the following rights regarding your personal data. Two of them are self-serve in Settings:

• Export My Data downloads everything stored with your account as a JSON file: your profile, personas, sources, reports and analyses, schedules, contacts, usage records, feedback, Terms acceptances and subscription status. It leaves out copies of public news articles fetched from your feeds, and never includes sign-in tokens.
• Delete Account permanently deletes your account and its data (Section 9).

For anything else, or if you cannot sign in, email support@newsbooklm.com. We may ask you to confirm the request from the email address on your account.

EEA / UK residents (GDPR / UK GDPR)

• Right to access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate or incomplete data.
• Right to erasure ("right to be forgotten"): Request deletion of your personal data where there is no lawful reason for continued processing.
• Right to restriction: Request that we limit how we process your data in certain circumstances.
• Right to data portability: Receive your data in a structured, machine-readable format and transmit it to another controller.
• Right to object: Object to processing based on legitimate interests or for direct marketing purposes.
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
• Right to lodge a complaint: You have the right to lodge a complaint with your local data protection authority (e.g., the ICO in the UK, or your national supervisory authority in the EEA).

California residents (CCPA / CPRA)

• Right to know: Request a copy of the personal data we have collected about you.
• Right to delete: Request that we delete your personal data.
• Right to opt out of sale / sharing: Your data reaches ad platforms only through the Advertising setting (Section 8), which is off unless you turn it on. Turn it off at any time with Your Privacy Choices; we also honor Global Privacy Control.
• Right to correct: Request correction of inaccurate personal data.
• Right to limit use of sensitive personal information: We do not collect sensitive personal information as defined by CPRA.
• Right to non-discrimination: We will not discriminate against you for exercising your privacy rights.

We answer every request within 30 days of receiving it, sooner than the 45 days California law allows and within the 1 month GDPR allows.

11. Security

We implement industry-standard security measures to protect your data, including:

• Row-level security (RLS) in our database: your data is isolated from other users.
• Encrypted connections for all data in transit; browsers are told to use only secure connections (HSTS), and the site is on the browser preload list.
• A strict Content Security Policy, so the browser runs only our own code on newsbooklm.com, plus the optional analytics and advertising tags described in Section 8 once you allow them.
• Access controls ensuring only authenticated users can access their own data.

No system is completely secure. If you believe your account has been compromised, or if you become aware of a potential security incident, contact us immediately at security@newsbooklm.com. Security researchers can find our disclosure details at /.well-known/security.txt.

12. Changes to This Policy

We may update this Privacy Policy from time to time. For material changes, we will notify you via email or an in-app notice before the changes take effect. Continued use of NewsbookLM after changes are posted constitutes your acceptance of the updated policy.

13. Contact & Data Controller

For any questions, requests, or concerns about this Privacy Policy or how we handle your data:

Data Controller: Eze Media LLC (operator of NewsbookLM)
Email: support@newsbooklm.com
Business location: California, USA

EEA/UK users: If you are not satisfied with our response to a privacy request, you have the right to lodge a complaint with your local supervisory authority.