1. What We Collect
| Data | When | Status |
|---|---|---|
| Google account email and profile name | Reader sign-in and subscription | Verified by Firebase Authentication |
| Reader profile name and optional phone, address, city, region, postal code, country, and job title | Account setup and profile edits | Stored in the reader profile in Firestore; name, city, and job title are also sent to Stripe at checkout |
| Reader waitlist email, consent, and signup time | Optional reader waitlist | Stored in a reader waitlist record in Firestore |
| Subscription plan, status, and Stripe customer/subscription identifiers | Checkout and subscription management | Stored by Stripe and a reader-access record in Firestore |
| Payment card details | Secure payment in Stripe Checkout | Entered and processed by Stripe; not stored by BB News |
| Account email & password hash | Account creation | Stored (bcrypt-hashed), durable in Postgres |
| Page views & referrer | Site browsing | Stored for analytics/trending |
| Watchlist entries | Institutional users tracking entities | Stored, tied to your account |
| Data subject requests | You submit a GDPR/data-rights request | Stored for processing |
2. How We Use It
We use reader account and subscription data to authenticate readers, process subscription payments, maintain billing status, and provide or revoke access to full articles. We use other service data to operate the website and respond to privacy requests.
3. Storage & Security
Firebase Authentication verifies reader accounts. Firestore stores subscription-access status and Stripe customer/subscription references. Stripe processes payment details and stores billing records. BB News does not receive or store full payment card numbers. Stripe credentials and webhook signing secrets are configured server-side.
4. Sharing
We do not sell personal data. When you subscribe, the details you submit and your verified account email are shared with Stripe to create and manage your subscription and process payments. Firebase provides account authentication and Firestore storage for reader access. Their own privacy terms also apply to their processing.
5. Your Rights
Depending on your jurisdiction, you may have the right to access, correct, delete, or export your personal data. A data-subject request mechanism exists in the product today; submit requests to the contact below. [Placeholder — specific rights language (GDPR Articles 15–22, CCPA, etc.) should be finalized by counsel based on target launch jurisdictions.]
7. Children's Privacy
The Service is not directed at children under 13 (or the relevant minimum age in your jurisdiction), and we do not knowingly collect personal data from children.
8. Changes
We may update this Privacy Policy from time to time. Material changes will be reflected by an updated "Last edited" date above.
9. Contact
Privacy questions or data rights requests: internationaleditor@bbnewsin.com.