Privacy Policy

Plain-English summary. Not legal advice — confirm with a qualified lawyer in your jurisdiction.

Last updated: 2026-08-24

1. Who we are

QInfoNews ("we", "us", "our") operates this signal intelligence service for the QEcoSystem. The data controller is QInfoNews. For privacy questions, contact privacy@qinfonews.com.

2. What we collect

• Account data. Email address and authentication credentials via Lovable Cloud (Supabase Auth). Optionally Google account profile (name, email, avatar) if you sign in with Google.
• Profile data. Display name, preferences, watchlists (topics, countries, markets), Signal Vault items, and your daily signal streak.
• Newsletter signups (email, optional name, interest area, consent).
• Operational data. Timestamps, IP address, browser/device metadata used for security, abuse detection, and service reliability.
• Aggregate analytics. Page views via Plausible Analytics — cookieless, no cross-site tracking, no personal profiles. See the Cookie Policy.

3. Processors

We use the following sub-processors: Lovable Cloud (Supabase) for authentication, database, and storage; Cloudflare for hosting and edge delivery; Plausible Analytics for aggregate, privacy-respecting usage statistics; transactional email is delivered via Lovable Emails. We do not sell or rent your personal data.

4. Legal basis (UK/EU)

We rely on: contract (delivering the account and intelligence features you signed up for), consent (newsletter subscriptions, optional integrations), and legitimate interest (service security, fraud prevention, and product improvement).

5. Your rights

Under UK GDPR and EU GDPR you have the right to access, correct, export, restrict, object to processing of, and erase your personal data (Articles 15–22). You can also lodge a complaint with your data-protection authority (e.g. the UK ICO).

You can request account deletion directly from Settings → Account, or by emailing privacy@qinfonews.com. We will action verified erasure requests within 30 days.

6. International transfers

Our infrastructure providers may process data outside your country of residence. Where transfers leave the UK/EEA, we rely on Standard Contractual Clauses or equivalent safeguards provided by the relevant processor.

7. Retention

Account and content data are retained while your account is active. After deletion, we remove personal data within 30 days, except where retention is required for legal, accounting, or fraud-prevention reasons (typically up to 6 years).

8. Security

We use industry-standard transport encryption (HTTPS), row-level security on user data, and least-privilege server-side access. No system is perfectly secure; please use a strong, unique password.

9. Children

QInfoNews is not directed at children under 16. If you believe a child has created an account, contact us and we will remove it.

10. Changes

We may update this policy. Material changes will be announced on QInfoNews and in The Q Signal newsletter, with the "Last updated" date refreshed.