Privacy policy
Last updated 18 October 2026
This policy explains what we collect when you use Sudwire Newsroom and visit our website. The controller is the company named on our Legal page. Questions go to support@sudwire.com.
What we collect
- Account: your email address, and the name, publisher and country you choose to add.
- Your sites: their names and addresses, the sources you follow, what they cover, the drafts we write, editors’ review decisions (including the reviewer’s display name the plugin sends), and how many times each article was read.
- Sources chat: your conversation with Scout, our sources assistant.
- Sign-up checks: the IP address you signed up from, and a trust score worked out from your email address, that IP address and your website, to stop free-trial abuse. We may look up which network the IP address belongs to (IPinfo) and whether it is a Tor exit node.
- Billing: your plan and subscription status. Card details go straight to Paddle and never reach us.
- Public posts from social networks: when a site follows the public Facebook Page, Instagram business account or X account of an official body, we read that account’s public posts through the network’s official API to find stories. We never read personal profiles or private messages, and nobody signs in to Sudwire with Facebook or X.
- Visits to our website: counts of page views. No cookies; we don’t store IP addresses. To count unique visitors, we use a one-way hash of the IP address and browser with a key that changes every day, so a visitor can’t be followed from one day to the next.
Why
- To provide the service you signed up for: finding sources, writing drafts, delivering them and showing your analytics (contract).
- To prevent fraud and free-trial abuse, and to keep the service secure (legitimate interest).
- To keep invoices and tax records (legal obligation).
- To email you sign-in links, the daily drafts email (which you can turn off) and messages about your plan.
Who processes it for us
- Anthropic, the AI provider that scores stories, writes drafts and runs Scout. It receives source material, your site’s settings and your chat messages, not your email address.
- Paddle, our merchant of record, for checkout, payments, invoices and tax.
- Resend, which delivers our emails (sign-in links and notifications) from its EU region in Ireland.
- ImprovMX, which forwards emails sent to support@sudwire.com to our inbox.
- Hetzner, our hosting provider in Germany, where the service and its database run.
- IPinfo, for the network lookup of the sign-up IP address, when it is enabled.
Some of these providers are outside the EU; transfers rely on the European Commission’s standard contractual clauses or an adequacy decision.
How long we keep it
- Account and site data: until you delete your account.
- Posts and pages read from sources: 21 days, unless they became a draft or a lead for your site, which then stay with your site’s data.
- Sign-up IP address: 180 days.
- Records of which websites and cards have had a free trial (as one-way hashes for cards): kept after deletion, so the trial can’t be claimed twice.
- Billing records: as long as tax law requires (in Romania, up to 10 years).
- Website visit counts: 13 months.
Cookies
One cookie, set when you sign in, keeps you signed in. It’s strictly necessary, so there’s no cookie banner. Our fonts are served from our own server.
Your rights
You can download your data and delete your account yourself from the Account page (see how to delete your data). You can also ask us to access, correct, restrict or object to the use of your data by writing to support@sudwire.com. If you’re unhappy with our answer, you can complain to your data protection authority; ours is the Romanian ANSPDCP.
Changes
If we change this policy in a way that matters, we’ll email account holders before it applies.