Privacy Policy

Last updated: September 29, 2026 · Browser pixel removed

This policy explains what personal data we collect when you visit insidernewsai.com or subscribe to AI Insider News, why, who else handles it, how long we keep it, and what you can do about it. We wrote it to be read, not skimmed: it is short because we collect very little.

1. Who is responsible

The data controller is Eugenio Fierro, sole proprietor, Via degli Astronauti 48, 80040 San Sebastiano al Vesuvio (NA), Italy, VAT ID IT11013761215 · hello@insidernewsai.com. We are established in Italy, so EU data protection law (GDPR) applies to how we handle your data wherever you live. We are too small to be required to appoint a data protection officer.

2. What we collect, why, and on what legal basis

We do not collect data about your race, health, politics, religion or anything else sensitive, and we never ask for it.

3. Who else handles your data (our service providers)

Cloudflare, Resend and Microsoft process data on our behalf, under contracts that bind them to protect it and forbid using it for their own purposes. Stripe processes payment data on our behalf and, for fraud prevention, its own legal obligations and its Link accounts, as an independent controller under its own privacy policy. WhatsApp / Meta is different: it runs the group as an independent controller under its own policy, as explained below.

Nobody else. We never sell or rent your personal data, and we have never done so. Apart from the providers listed above and the consent-based sharing with Meta described in section 2, we do not disclose your data to advertisers or data brokers. Two things are worth saying plainly: inside the group, as in any WhatsApp group, other members can see your phone number and profile name (section 2); and we disclose data if the law requires it (for example, a valid court order).

4. Emails we send

You receive emails about your membership: welcome and group link, payment receipts, renewal reminders (15–45 days before each renewal), price-change notices, cancellation and refund confirmations, and replies to your questions. We do not send marketing email without asking first.

5. How long we keep your data

6. Where your data goes

We are in Italy. Stripe, Cloudflare, Resend, Microsoft and Meta process data in the United States and elsewhere. For transfers of personal data out of the European Economic Area, we rely on the EU–US Data Privacy Framework where the provider is certified, and on the European Commission's Standard Contractual Clauses included in each provider's data processing agreement. You can ask us for a copy of these safeguards at hello@insidernewsai.com. If you are in the US, your data will in most cases stay in the US or move between the US and the EU.

7. Your rights

Whoever you are and wherever you live, you can ask us to: see the personal data we hold about you and receive a copy; correct it; delete it (unless we must keep it for tax law); restrict or object to how we use it; receive it in a portable format; and withdraw consent where consent is the basis. Write to hello@insidernewsai.com; we answer within 30 days and never charge for it. We may ask you to confirm your identity first.

You may also complain to a data protection authority. Ours is the Italian Garante per la protezione dei dati personali (garanteprivacy.it); EU residents may instead go to the authority of their own country, and US residents to their state attorney general or the FTC.

California residents: you have the right to know what personal information we collect and how we use it (this page), to delete it, to correct it, and not to be discriminated against for exercising these rights. We do not sell your personal information. If you allow Meta advertising measurement, the information it collects (section 2) is "shared" for cross-context behavioral advertising as the CCPA defines it; you can opt out at any time through the "Do Not Sell or Share My Personal Information" link in the footer of every page, and we treat a Global Privacy Control signal from your browser as an opt-out. With your consent, the purchase value, the browser advertising identifiers, and the IP address and browser type described in section 2 are shared with Meta for advertising measurement and targeting. Nothing else from our membership records is shared for advertising, and we never sell personal information. Our business is below the CCPA's thresholds, but we honor these rights for every California resident anyway, on request, by email. You can use an authorized agent; we will ask for proof of authorization.

Residents of other US states with privacy laws (for example Texas, Virginia, Colorado, Connecticut): we honor the same rights on request, without checking whether the law technically applies to a business of our size.

Withdrawing consent to advertising measurement. Use Cookie settings in the footer of any page. We stop new advertising activity in this browser and record a refusal for its recent orders. If the connection is unavailable, the refusal remains queued in this browser and is retried when you return or reconnect; we cannot recall a report that has already been sent. We also respect Global Privacy Control. Withdrawal does not affect the lawfulness of processing before it. For access, deletion or other requests about data already sent, write to us; where required, we will also notify recipients. You can additionally use your Meta ad settings.

8. Cookies and similar storage

We use browser storage to remember privacy choices, keep your order reference while the confirmation page is open and avoid duplicate reports. Meta cookies are used only with the permissions described in section 2:

With separate permission for session recordings, Microsoft Clarity may set _clck (a browser identifier) and _clsk (a session identifier). We remove these cookies when you withdraw that permission.

Stripe's checkout and customer portal, which run on Stripe's own domain, use cookies necessary to process your payment; see Stripe's policy.

9. Security

The site is served only over HTTPS. Payment data is handled entirely by Stripe, which is certified to the highest card-industry standard (PCI DSS Level 1). Our own systems store as little as possible, and access is limited to the owner and authorized collaborators. No system is perfectly secure; if a breach ever affects your data, we will tell you as the law requires.

10. Children

The Service is for adults. You must be 18 or older to subscribe, and we do not knowingly collect data from anyone under 18. If you believe a minor has subscribed, email us and we will delete the data.

11. Changes to this policy

If we change this policy in a way that matters to you, we email members before the change takes effect. The current version is always at insidernewsai.com/privacy.

Optional site analytics and session recordings

These features are introduced with the private analytics panel. Site analytics and session recordings have separate choices in Cookie settings. A previous permission for Meta does not enable either feature. We do not start these tools before the corresponding permission, and Global Privacy Control disables them.

With site analytics enabled, our first-party service hosted by Cloudflare records page views, estimated browser visits, campaign labels from permitted UTM parameters, device category, approximate country, active time, scrolling and clicks toward Stripe. It does not store your full URL, raw IP address, advertising cookies, name, email or card details. A random browser identifier expires after 30 days; a visit ends after 30 minutes of inactivity. Preferences are remembered for 180 days. Browser storage may be removed earlier through Cookie settings.

Confirmed initial purchases come from Stripe independently of optional browsing analytics. A random checkout reference can associate a consented visit with an order; it is not proof of identity or advertising consent. Unmatched purchases remain unattributed. The payment records retain their existing retention rules.

If you separately allow recordings and Microsoft Clarity has been configured, Microsoft receives interaction data from the home page for session replay and heatmaps. We mask page content and do not activate recordings on the payment confirmation page, the private panel or Stripe checkout. For this integration, we and Microsoft are independent controllers. Under Clarity’s terms, Microsoft may use the data it receives for Microsoft Advertising and to improve its products. See Microsoft’s privacy statement. We do not provide Microsoft with customer names, emails or payment-card details through this integration.

Before loading Clarity, our site tells it to deny advertising storage and grant analytics storage. That controls this integration on our site; it does not change Microsoft’s independent processing or every use permitted by its terms.

Withdrawing permission stops our collection, removes our browser identifiers and reloads the page if needed to unload Clarity. It does not automatically erase earlier server records; you can contact us about your data. We retain site analytics history for comparisons across years; no automatic 90-day deletion is enabled. Browser identifiers and browsing details remain associated with that history until removed under our retention policy or in response to an applicable request. We periodically review whether these details are still needed.

12. Contact

Eugenio Fierro · Via degli Astronauti 48, 80040 San Sebastiano al Vesuvio (NA), Italy · hello@insidernewsai.com