Privacy Policy

Automatically: browser type, IP address, referral source, and device details, collected when you visit newslabs.io.

Voluntarily: name, work email address, and any details you provide when booking a demo, submitting a contact form, or communicating with us directly.

• Responding to demo requests and sales inquiries
• Delivering and improving the NewsLabs platform
• Sending service communications you have requested
• Fraud prevention and regulatory compliance

We do not sell your data. It may be shared with service providers who help us operate the platform, or as required by law.

We process personal data on the basis of: performance of a contract, our legitimate interests in operating the service, your explicit consent where required, and statutory obligations.

Under GDPR you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request deletion of your data
• Receive your data in a portable format
• Object to or restrict processing
• Withdraw consent at any time without affecting prior processing

To exercise any right, email info@newslabs.io. If your request is not resolved to your satisfaction, you may lodge a complaint with the Croatian supervisory authority: AZOP (azop.hr).

Essential cookies: newslabs.io sets no cookies of its own for browsing the site.

Analytics: we use Umami, a privacy-focused, cookieless analytics tool served through our own domain. It stores no identifiers on your device and processes your IP address and coarse location (country, region, city) solely to produce aggregate usage statistics. There is no advertising or cross-site tracking, which is why we do not show a cookie consent banner.

Third-party embeds: our demo-booking page embeds the HubSpot Meetings scheduler (hosted in HubSpot's EU data centre), which sets its own cookies on that page. Information you submit when booking is processed by HubSpot under its own privacy terms. You can manage or disable cookies through your browser settings; some booking functionality may be limited as a result.

We use a small number of service providers to operate newslabs.io and the NewsLabs platform:

• Vercel Inc.: website hosting and CDN (USA, with EU-region edge infrastructure; EU–US Data Privacy Framework / Standard Contractual Clauses)
• Sanity AS: website content management (stores no visitor personal data)
• HubSpot: demo scheduling and customer relationship management (EU data centre; US parent covered by the EU–US Data Privacy Framework / Standard Contractual Clauses)
• Umami: cookieless website analytics

Within the NewsLabs platform, AI drafting can be routed to OpenAI, Anthropic, Google (Gemini), or xAI (Grok), all based in the USA, depending on each newsroom's configuration. These providers process customer content under our customer agreements, not data collected from visitors to this website. Newsrooms may instead choose local, self-hosted models involving no external AI provider. See our Security page for details.

• Demo-request and contact data: up to 24 months after our last meaningful contact with you
• NewsLabs account data: for the duration of the customer contract, then as required by statutory limitation and record-keeping periods
• Server and security logs: up to 12 months
• Analytics data: aggregate and non-identifying, retained for trend analysis

When a retention period ends, data is deleted or irreversibly anonymised.

Your data is primarily processed within the European Economic Area. Where a sub-processor (such as Vercel or a US-based AI model provider) processes data outside the EEA, the transfer is protected by a European Commission adequacy decision, including the EU–US Data Privacy Framework, and/or Standard Contractual Clauses.

We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects (GDPR Art. 22) on newslabs.io.

NewsLabs is a business service for newsrooms. It is not directed at anyone under 16, and we do not knowingly collect personal data from children.

We collect personal data directly from you: when you visit the site, book a demo, or correspond with us. We do not purchase or enrich contact data from third-party data brokers. If that ever changes, we will update this policy and provide the notice required by GDPR Art. 14.

Content processed inside the NewsLabs platform (drafts, wire copy, feeds, and source material) is governed by a separate customer agreement under which your newsroom is the data controller and NewsLabs acts as a data processor. We do not train AI models on customer content. Our Security page describes how that content is protected and which AI providers may process it.

If we become aware of a personal data breach affecting you, we will notify you and, where required, the competent supervisory authority without undue delay, in accordance with GDPR Arts. 33 and 34.

We have not appointed a Data Protection Officer; our privacy contact is info@newslabs.io. When this policy changes, we update this page and its “Last reviewed” date; material changes will be communicated directly to affected users where we have a way to reach them.