Privacy that fits a modern newsroom.

This Privacy Policy explains how Zacro Infotech Private Limited, operating NewsBolts, handles personal data when you visit our website, create an account, join a newsroom workspace, use product features, connect publishing services, or contact us.

NewsBolts is designed around privacy-by-design principles: collect what is reasonably necessary, restrict access by role and tenant, separate optional consent from service access, and make privacy choices understandable. This policy is a product draft and should be reviewed against the company's final processing activities and applicable law before production launch.

• Account and workspace information: name, email address, company or workspace name, role, workspace membership, publication settings, and authentication records.
• Billing information: plan, billing country, invoices, transaction references, tax information, and payment-status data. Payment-card or bank credentials are handled by payment providers rather than stored as general NewsBolts profile data.
• Usage and device information: product interactions, feature usage, browser and device information, IP address, timestamps, security logs, and diagnostic events.
• Publishing and integration data: publication settings, connected-service identifiers, source configuration, CMS metadata, and data required to perform an authorized integration.
• Customer content: prompts, briefs, drafts, Fact Packs, article text, media assets, generated outputs, editorial comments, and approval records that users intentionally place into their workspace.
• Communications: support requests, feedback, sales inquiries, and other correspondence.

• Provide, secure, maintain, and improve NewsBolts.
• Authenticate users, enforce workspace and publication permissions, and maintain audit records.
• Process user-requested newsroom, AI, publishing, search-visibility, media-generation, and collaboration workflows.
• Measure quotas, administer subscriptions, process invoices, prevent abuse, and provide support.
• Communicate important service, security, billing, or policy updates.
• Comply with legal, regulatory, accounting, security, and fraud-prevention obligations.

Where the GDPR or similar laws require a legal basis, processing may rely on performance of a contract, compliance with legal obligations, legitimate interests that do not override individual rights, or consent where consent is the appropriate basis. Optional marketing or non-essential tracking consent should remain separate from acceptance of the Terms of Service and should be capable of withdrawal.

NewsBolts includes AI-assisted newsroom features. Customer content may be processed by configured AI infrastructure or model providers when a user requests generation, summarization, optimization, verification assistance, visual creation, or related functionality.

AI-assisted output can be incomplete or incorrect. NewsBolts is a human-governed newsroom system: authorized users remain responsible for editorial review and publication decisions. Provider-specific data-retention and training controls must be configured and disclosed according to the production providers actually used.

NewsBolts may use infrastructure, authentication, email, observability, customer-support, AI, storage, analytics, and payment providers to operate the service. A production subprocessor list should identify the providers actually used and the purpose for which each provider processes data. NewsBolts does not need to characterize ordinary service processing as a sale of customer newsroom content.

NewsBolts may serve customers in multiple countries and may use service providers located outside a user's country. Where cross-border transfer rules apply, NewsBolts should use an appropriate transfer mechanism and contractual safeguards based on the jurisdictions and providers involved.

Data should be retained only for as long as reasonably required for the purpose for which it was collected, to provide the service, maintain security and auditability, resolve disputes, and meet applicable legal or accounting obligations. Final production retention periods should be documented by data category rather than promising immediate deletion of every record.

NewsBolts uses technical and operational controls designed to protect data, including authentication, role-based permissions, tenant scoping, audit logging, secure transport, access controls, and operational monitoring. No internet service can guarantee absolute security, and security practices should continue to evolve with the platform.

Necessary cookies may be used to provide security, authentication, session continuity, and preference storage. Optional analytics or marketing technologies should be disabled until the required user choice has been made where consent is required.

Marketing consent is separate from contractual acceptance. Users should be able to unsubscribe from marketing communications and revisit cookie preferences. See the Cookie Policy for additional detail.

Depending on applicable law, individuals may have rights to request access, correction, deletion, restriction, portability, objection, or withdrawal of consent. A request may be subject to identity verification, legal exceptions, security requirements, or retention obligations. NewsBolts should provide an operational privacy-request process before production launch.

NewsBolts is a business newsroom platform and is not designed for children. Production terms should set the minimum account age and any workspace-level age requirements appropriate to the jurisdictions in which the service is offered.

NewsBolts may update this policy as the product, providers, or legal requirements change. Material changes should be communicated appropriately and reflected in the policy version above.

Privacy contact: complaint@newsbolts.com. Where applicable, individuals may also have the right to complain to their local data-protection authority or competent regulator.