Privacy Policy

1. Who we are

Bwak.news is operated by Bwak AI, LLC ("we", "us", or "our"). We are the data controller for all personal data processed through this service.

Contact: privacy@bwak.ai

2. What we collect

3. Legal basis for processing (GDPR)

• Performance of contract (Art. 6(1)(b)) — processing your email address, seed, aliases, and newsletter content is necessary to provide the service you signed up for.
• Legitimate interests (Art. 6(1)(f)) — server logs are retained for security, uptime monitoring, and abuse prevention. These interests do not override your rights.

4. Third-party processors

We share data only with the processors required to operate the service. We do not sell your data or share it with advertisers.

5. How long we keep your data

• Newsletter content — auto-archived after the retention period you set in Account settings (default 30 days). Archived content is retained until you delete it or delete your account.
• Account data (email, seed, aliases, preferences) — retained until you delete your account.
• Feedback messages — retained until you delete your account.
• Magic-link tokens — deleted immediately on first use or on expiry (typically minutes).
• Server logs — retained by Fly.io per their data retention policy.

Deleting your account removes all of the above from our systems immediately and permanently. See Section 11 for both self-service and email-request deletion paths.

6. Your rights

Under the GDPR you have the following rights. To exercise any of them, email privacy@bwak.ai. We will respond within 30 days.

• Access (Art. 15) — request a copy of the personal data we hold about you.
• Rectification (Art. 16) — ask us to correct inaccurate data (e.g. your email address via Account settings).
• Erasure (Art. 17) — request deletion of your personal data. See Section 11 for self-service and email-request deletion paths.
• Restriction (Art. 18) — ask us to suspend processing of your data in certain circumstances.
• Portability (Art. 20) — request your data in a structured, machine-readable format.
• Object (Art. 21) — object to processing based on legitimate interests.
• Supervisory authority — you have the right to lodge a complaint with the data protection authority in your EU member state.

7. Cookies & local storage

• Session cookie — a single HTTP-only cookie is set when you log in to keep you authenticated. It is deleted when you sign out.
• Theme preference — your light/dark mode choice is stored in browser localStorage on your device only; it is never sent to our servers.

We do not use advertising cookies, analytics cookies, or any third-party tracking scripts.

8. International data transfers

Our processors (Fly.io, Cloudflare, Resend) are based in the United States. Transfers of personal data outside the EEA are covered by the EU Standard Contractual Clauses included in each processor's data processing agreement. You can request copies of these agreements by emailing privacy@bwak.ai.

9. Changes to this policy

If we make material changes we will notify you by email before the change takes effect. The "Last updated" date at the top of this page always reflects the current version.

10. Contact

For any privacy-related queries or to exercise your rights, email privacy@bwak.ai. We aim to respond within 30 days.

11. Deleting your account

You can permanently delete your account and all your data at any time. We do not lock you in or make you hunt for the exit. There are two ways to do it:

What gets deleted: your email address, seed address, all aliases, all newsletter content, all usage data, and all feedback. Deletion is permanent and cannot be undone.