Legal

Privacy Policy

Last updated: February 25, 2026

Ultimate News ("we", "us", or "our") is committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information in accordance with the General Data Protection Regulation (GDPR) and Estonian data protection laws.

1. Data Controller Information

The data controller responsible for your personal data is:

Ultimate News

Tallinn, Estonia

Data Protection Officer: dpo@ultimate.news

2. Data We Collect

We collect the following categories of personal data:

2.1 Information You Provide

  • Account information (name, email address, password)
  • Profile preferences and settings
  • Payment and billing information
  • Communications with our support team
  • Feedback and survey responses

2.2 Information Collected Automatically

  • Device information (browser type, operating system)
  • IP address and approximate location
  • Usage data (pages visited, features used, time spent)
  • Cookies and similar tracking technologies
  • Log data and analytics information

2.3 Information from Third Parties

  • Authentication providers (Google, GitHub) when you choose to sign in with them
  • Payment processors for transaction verification

3. Legal Basis for Processing

We process your personal data based on the following legal grounds under GDPR Article 6:

Contract Performance (Art. 6(1)(b))

Processing necessary to provide our intelligence services and fulfill our contractual obligations to you.

Legitimate Interests (Art. 6(1)(f))

Processing for our legitimate business interests, such as improving our services, fraud prevention, and security.

Consent (Art. 6(1)(a))

Processing based on your explicit consent, such as marketing communications and optional analytics.

Legal Obligation (Art. 6(1)(c))

Processing required to comply with applicable laws and regulations.

4. How We Use Your Data

We use your personal data for the following purposes:

  • Providing and maintaining our intelligence services
  • Processing your subscription and payments
  • Personalizing your news feed and alerts
  • Communicating with you about service updates
  • Analyzing usage patterns to improve our platform
  • Ensuring the security and integrity of our services
  • Complying with legal obligations
  • Sending marketing communications (with your consent)

5. Data Sharing and Transfers

We may share your personal data with:

  • Service Providers: Third-party companies that help us operate our platform (hosting, analytics, payment processing)
  • Legal Requirements: When required by law, court order, or governmental authority
  • Business Transfers: In connection with a merger, acquisition, or sale of assets

Google Sign-In Data

If you choose to sign in with Google (OAuth), we receive basic profile information from Google to create and manage your account (typically name, email address, and profile picture). We do not request access to your Google Drive, Gmail, or other Google services.

International Transfers

When we transfer personal data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, including:

  • Standard Contractual Clauses approved by the European Commission
  • Transfers to countries with an adequacy decision
  • Other legally approved transfer mechanisms

6. Data Retention

We retain your personal data for as long as necessary to:

  • Provide our services to you
  • Comply with legal obligations (e.g., tax and accounting requirements)
  • Resolve disputes and enforce our agreements

Retention Periods

  • Account data: Duration of account + 30 days
  • Transaction records: 7 years (Estonian accounting law)
  • Usage logs: 90 days
  • Marketing preferences: Until consent is withdrawn

7. Your Rights Under GDPR

As a data subject, you have the following rights under GDPR:

Right of Access

Request a copy of your personal data

Right to Rectification

Correct inaccurate or incomplete data

Right to Erasure

Request deletion of your data ("right to be forgotten")

Right to Restriction

Limit how we process your data

Right to Portability

Receive your data in a structured format

Right to Object

Object to processing based on legitimate interests

Right to Withdraw Consent

Withdraw previously given consent at any time

Right to Lodge Complaint

File a complaint with a supervisory authority

To exercise any of these rights, please contact us at dpo@ultimate.news. We will respond within 30 days as required by GDPR.

You may also lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon):

Andmekaitse Inspektsioon

Tatari 39, 10134 Tallinn, Estonia

Website: www.aki.ee

8. Cookies and Tracking

We use cookies and similar technologies (such as localStorage) to operate the Service and understand how it is used:

Essential Cookies

Required for authentication, session management, and core platform functionality. These cannot be disabled without breaking the Service.

Analytics Cookies

We use PostHog, a privacy-focused analytics tool, to understand how you interact with the Service. PostHog sets a cookie to assign an anonymous identifier and uses localStorage to maintain session data. Analytics data is sent through our own proxy server and is not shared with third-party advertising networks. No personally identifiable information is stored in these cookies.

You can manage cookies through your browser settings. Disabling essential cookies may prevent the Service from functioning correctly. You may also use browser-level tracking protection features to limit analytics collection.

9. Security Measures

We implement appropriate technical and organizational measures to protect your data, including:

  • Encryption of data in transit (TLS 1.3) and at rest (AES-256)
  • Regular security audits and penetration testing
  • Access controls and authentication mechanisms
  • Employee training on data protection
  • Incident response procedures
  • Regular backups with encrypted storage

10. Children's Privacy

Our services are not intended for individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately at dpo@ultimate.news.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. For significant changes, we will also send you an email notification.

We encourage you to review this Privacy Policy periodically for any changes.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

Data Protection Officer: dpo@ultimate.news

Postal Address:

Ultimate News

Attn: Privacy Team

Tallinn, Estonia