Privacy Policy
Last Updated: November 28, 2025
1. Introduction
Welcome to GNews API ("we," "us," "our," or "Company"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, store, and protect your personal data when you access or use our website at https://gnews.io/ and our application programming interface (API) services (collectively, the "Service").
This Privacy Policy applies to all users of our Service, including visitors to our website, registered account holders, and API users. By accessing or using our Service, you acknowledge that you have read, understood, and agree to the collection, use, and disclosure of your information as described in this Privacy Policy.
If you do not agree with the terms of this Privacy Policy, please do not access or use our Service.
2. Information We Collect
We collect several types of information from and about users of our Service, including:
2.1 Information You Provide Directly
Account Registration Information: When you create an account with GNews API, we collect:
- Full name
- Email address
- Company name (if applicable)
- Billing address
- Phone number (optional)
- Password (stored in encrypted form)
Payment Information: When you subscribe to a paid plan, we collect:
- Credit card information or other payment method details (processed securely through third-party payment processors)
- Billing address
- Transaction history
We do not store complete credit card numbers on our servers. Payment information is processed and stored by our PCI-DSS compliant payment service providers.
Communications: When you contact us for support, feedback, or inquiries, we may collect:
- Your name and email address
- The content of your messages, attachments, and communications
- Any other information you choose to provide
API Usage Data: When you use our API, we collect:
- API keys and authentication tokens
- API request parameters and queries
- Search terms and filters used
- Response data and results
2.2 Information Collected Automatically
Technical Information: When you access our Service, we automatically collect:
- IP address
- Browser type and version
- Operating system
- Device identifiers
- Time zone settings
- Referring/exit pages
- Date and time stamps of access
- Clickstream data
Usage Data: We collect information about how you interact with our Service:
- Pages visited on our website
- Features used
- API endpoints accessed
- Request frequency and patterns
- Response times and error rates
- Bandwidth usage
Log Files: Our servers automatically record standard log file information, including:
- Internet Protocol (IP) addresses
- Browser type and language
- Internet Service Provider (ISP)
- Date and time stamps
- Referring and exit pages
- Number of clicks and pages viewed
2.3 Cookies and Tracking Technologies
We use cookies, web beacons, pixel tags, and similar tracking technologies to collect information about your browsing behavior.
Types of Cookies We Use:
- Essential Cookies: Necessary for the operation of our Service, including authentication and security
- Performance Cookies: Collect information about how you use our Service to help us improve functionality
- Functional Cookies: Remember your preferences and settings
- Analytics Cookies: Help us understand user behavior and measure the effectiveness of our Service
- Advertising Cookies: Used to deliver relevant advertisements (if applicable)
You can control cookie preferences through your browser settings. However, disabling certain cookies may limit your ability to use some features of our Service.
For more information about managing cookies, visit your browser's help documentation or visit www.aboutcookies.org.
2.4 Information from Third Parties
We may receive information about you from third parties, including:
- Authentication services (if you sign up using social login)
- Payment processors regarding transaction status
- Analytics providers
- Business partners (with your consent)
3. How We Use Your Information
We use the information we collect for the following purposes:
3.1 Service Provision and Operation
- Create and manage your account
- Process your transactions and billing
- Provide access to the API and website features
- Authenticate users and maintain security
- Deliver customer support and respond to inquiries
- Monitor and analyze Service performance
3.2 Service Improvement and Development
- Understand how users interact with our Service
- Identify trends and usage patterns
- Develop new features, products, and services
- Improve user experience and interface design
- Conduct research and testing
- Optimize API performance and reliability
3.3 Communication
- Send transactional emails (account confirmations, password resets, billing notifications)
- Provide customer support and respond to requests
- Send service announcements and updates
- Deliver marketing communications about our products and services (with your consent)
- Request feedback and conduct surveys
- Send security alerts and technical notices
3.4 Legal and Security Purposes
- Detect, prevent, and investigate fraud, security breaches, and prohibited activities
- Enforce our Terms of Service and other policies
- Comply with legal obligations, court orders, and regulatory requirements
- Protect our rights, property, and safety, as well as those of our users and the public
- Resolve disputes and enforce agreements
3.5 Analytics and Business Intelligence
- Generate aggregate statistics about Service usage
- Measure the effectiveness of our marketing campaigns
- Conduct market research
- Create anonymized datasets for internal analysis
4. Legal Basis for Processing (GDPR Compliance)
For users in the European Economic Area (EEA), United Kingdom, and Switzerland, we process your personal data based on the following legal grounds:
- Contractual Necessity: Processing is necessary to perform our contract with you (Terms of Service)
- Legitimate Interests: Processing is necessary for our legitimate business interests, such as fraud prevention, network security, and service improvement, provided these interests do not override your rights
- Consent: Where you have given explicit consent for specific processing activities (e.g., marketing communications)
- Legal Obligations: Processing is necessary to comply with applicable laws and regulations
You have the right to withdraw consent at any time where we rely on consent as the legal basis for processing.
5. How We Share Your Information
We do not sell, rent, or trade your personal information to third parties for their marketing purposes. We may share your information in the following circumstances:
5.1 Service Providers and Business Partners
We share information with trusted third-party service providers who assist us in operating our Service:
- Payment processors (Stripe, PayPal, or similar)
- Cloud hosting providers (for data storage and infrastructure)
- Email service providers (for transactional and marketing emails)
- Analytics providers (Google Analytics, or similar)
- Customer support platforms
- Security and fraud prevention services
These service providers are contractually obligated to protect your information and use it only for the purposes we specify.
5.2 Business Transfers
If we are involved in a merger, acquisition, asset sale, bankruptcy, or similar transaction, your information may be transferred as part of that transaction. We will provide notice before your information is transferred and becomes subject to a different privacy policy.
5.3 Legal Requirements and Protection
We may disclose your information when required by law or when we believe disclosure is necessary to:
- Comply with legal obligations, court orders, or government requests
- Enforce our Terms of Service and other agreements
- Protect the rights, property, or safety of GNews API, our users, or others
- Detect, prevent, or investigate fraud, security breaches, or illegal activities
- Respond to claims that content violates third-party rights
5.4 With Your Consent
We may share your information with third parties when you have given us explicit consent to do so.
5.5 Aggregated and Anonymized Data
We may share aggregated, anonymized, or de-identified data that cannot reasonably be used to identify you with third parties for research, marketing, analytics, or other purposes.
6. Data Retention
We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.
Specific Retention Periods:
- Account Information: Retained for the duration of your account plus 30 days after account closure, unless longer retention is required for legal or regulatory purposes
- Transaction Records: Retained for 7 years to comply with tax and accounting regulations
- Communication Records: Retained for 3 years for customer support and dispute resolution purposes
- API Usage Logs: Retained indefinitely for service improvement, analytics, and operational purposes
- Technical Logs: Retained for 12 months for security and troubleshooting purposes
- Marketing Communications: Retained until you unsubscribe or withdraw consent
After the retention period expires, we will securely delete or anonymize your personal information. You may request earlier deletion by contacting us, subject to our legal and operational requirements.
7. Data Security
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.
Security Measures Include:
- Encryption: Data transmission is encrypted using TLS/SSL protocols; sensitive data at rest is encrypted
- Access Controls: Strict access controls and authentication mechanisms limit access to personal data
- Regular Security Audits: Periodic security assessments and vulnerability testing
- Employee Training: Staff members are trained on data protection and security best practices
- Incident Response: Comprehensive incident response procedures to address security breaches
- Secure Infrastructure: Use of reputable cloud service providers with robust security certifications
- API Security: Secure API authentication using encrypted API keys
- Regular Backups: Routine data backups stored in secure, geographically distributed locations
Despite our security measures, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials.
8. International Data Transfers
GNews API operates from Switzerland. If you access our Service from outside Switzerland, your information may be transferred to, stored, and processed in Switzerland or other countries where our service providers operate.
These countries may have data protection laws that differ from those in your jurisdiction. However, we take steps to ensure that your personal information receives an adequate level of protection wherever it is processed.
Transfer Mechanisms:
For transfers from the European Economic Area (EEA) to countries without an adequacy decision:
- We rely on Standard Contractual Clauses approved by the European Commission
- We ensure our service providers implement appropriate safeguards
- We conduct transfer impact assessments where required
By using our Service, you consent to the transfer of your information to Switzerland and other countries as described in this Privacy Policy.
9. Your Privacy Rights
Depending on your location, you may have certain rights regarding your personal information:
9.1 Rights Under GDPR (EEA, UK, Switzerland)
- Right to Access: Request copies of your personal data
- Right to Rectification: Request correction of inaccurate or incomplete information
- Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data under certain circumstances
- Right to Restrict Processing: Request limitation of processing under certain conditions
- Right to Object: Object to processing based on legitimate interests or for direct marketing purposes
- Right to Data Portability: Request transfer of your data to another service provider in a structured, machine-readable format
- Right to Withdraw Consent: Withdraw consent for processing based on consent at any time
- Right to Lodge a Complaint: File a complaint with your local data protection authority
9.2 Rights Under CCPA (California Residents)
- Right to Know: Request disclosure of personal information collected, used, and shared
- Right to Delete: Request deletion of personal information
- Right to Opt-Out: Opt-out of the "sale" of personal information (we do not sell personal information)
- Right to Non-Discrimination: Not receive discriminatory treatment for exercising your privacy rights
9.3 Rights Under Other Privacy Laws
Users in other jurisdictions may have additional rights under applicable local privacy laws. Please contact us to learn more about your rights.
9.4 Exercising Your Rights
To exercise any of these rights:
- Send an email to contact@gnews.io with your request
- Include your full name, email address, and account information
- Specify which right(s) you wish to exercise
- Provide sufficient information for us to verify your identity
We will respond to your request within the timeframe required by applicable law (typically 30 days). We may request additional information to verify your identity before processing your request.
You will not be charged a fee for exercising your rights unless your request is manifestly unfounded, excessive, or repetitive. In such cases, we may charge a reasonable fee or refuse to act on the request.
10. Marketing Communications and Opt-Out
We may send you marketing communications about our products, services, and promotions if:
- You have consented to receive marketing communications, or
- We have a legitimate interest and you have not opted out
How to Opt-Out:
- Click the "unsubscribe" link in any marketing email
- Update your communication preferences in your account settings
- Contact us at contact@gnews.io with your opt-out request
Even if you opt out of marketing communications, we will still send you transactional and service-related messages necessary for account management and Service operation.
11. Third-Party Links and Services
Our Service may contain links to third-party websites, applications, or services not operated by us. We are not responsible for the privacy practices of these third parties.
We encourage you to review the privacy policies of any third-party sites or services before providing your personal information. This Privacy Policy applies only to information collected by GNews API.
Third-Party Services We May Use:
- Payment processors (Stripe, PayPal)
- Analytics providers (Google Analytics)
- Cloud infrastructure providers
- Customer support platforms
- Email service providers
Each of these third parties has its own privacy policy governing how they collect, use, and protect your information.
12. Children's Privacy
Our Service is not intended for children under the age of 18. We do not knowingly collect personal information from children under 18.
If you are a parent or guardian and believe your child under 18 has provided us with personal information, please contact us immediately at contact@gnews.io. We will take steps to delete such information from our systems as quickly as possible.
If we become aware that we have collected personal information from a child under 18 without parental consent, we will take immediate steps to delete that information.
13. California Privacy Disclosures
13.1 California Consumer Privacy Act (CCPA)
Categories of Personal Information Collected: We collect the following categories of personal information:
- Identifiers (name, email, IP address)
- Commercial information (transaction history, subscription details)
- Internet activity (browsing history, API usage)
- Professional information (company name, job title)
- Inferences (preferences, characteristics, behavior)
Sources of Personal Information:
- Directly from you (account registration, communications)
- Automatically through cookies and tracking technologies
- From third-party service providers
Business Purposes for Collection:
- Providing and maintaining the Service
- Processing transactions
- Customer support
- Marketing and analytics
- Security and fraud prevention
- Legal compliance
Categories of Third Parties with Whom We Share Information:
- Service providers and vendors
- Payment processors
- Analytics providers
- Cloud hosting providers
We do not "sell" personal information as defined by CCPA. We do not share personal information with third parties for their direct marketing purposes without your consent.
13.2 California "Shine the Light" Law
California residents may request information about our disclosure of personal information to third parties for their direct marketing purposes. To make such a request, contact us at contact@gnews.io.
13.3 Do Not Track Signals
Some web browsers have a "Do Not Track" (DNT) feature. Currently, there is no industry standard for responding to DNT signals. We do not currently respond to DNT signals or similar mechanisms.
14. European Privacy Rights (GDPR)
If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have specific rights under the General Data Protection Regulation (GDPR) and related laws.
14.1 Data Controller
GNews API is the data controller responsible for your personal information. You can contact us using the details in Section 19.
14.2 Legal Basis for Processing
We process your personal data based on the legal bases described in Section 4.
14.3 International Transfers
We transfer personal data from the EEA to Switzerland and other countries as described in Section 8, using appropriate safeguards.
14.4 Your Rights
You have the rights outlined in Section 9.1, including the right to lodge a complaint with your supervisory authority.
EU Data Protection Authorities: You can find your local supervisory authority at: https://edpb.europa.eu/about-edpb/board/members_en
14.5 Automated Decision-Making
We do not use automated decision-making or profiling that produces legal effects or significantly affects you.
15. Changes to This Privacy Policy
We reserve the right to modify this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or other factors.
How We Notify You of Changes:
- Update the "Last Updated" date at the top of this Privacy Policy
- Post the revised Privacy Policy on our website
- For material changes, we may also:
- Send an email notification to registered users
- Display a prominent notice on our website
- Request your consent where required by law
Your Acceptance of Changes: Your continued use of the Service after the revised Privacy Policy becomes effective constitutes your acceptance of the changes. If you do not agree with the revised Privacy Policy, you must stop using the Service and may request deletion of your account.
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.
16. Data Breach Notification
In the event of a data breach that affects your personal information, we will:
- Investigate the breach promptly and assess the risk to your rights and freedoms
- Notify affected users within 72 hours of becoming aware of the breach (or as required by applicable law)
- Notify relevant supervisory authorities as required by law
- Provide information about the nature of the breach, affected data, potential consequences, and mitigation measures
- Take appropriate steps to prevent future breaches
If you suspect any unauthorized access to your account, please contact us immediately at contact@gnews.io.
17. Your California Privacy Rights - Additional Disclosures
Right to Know: You have the right to request that we disclose:
- Categories of personal information collected
- Specific pieces of personal information collected
- Categories of sources from which information is collected
- Business purposes for collecting information
- Categories of third parties with whom we share information
Right to Delete: You have the right to request deletion of your personal information, subject to certain exceptions (e.g., legal obligations, fraud prevention).
Right to Opt-Out of Sale: We do not sell personal information. If our practices change, we will update this Privacy Policy and provide an opt-out mechanism.
Authorized Agent: You may designate an authorized agent to make requests on your behalf. We may require proof of authorization and verification of your identity.
Response Time: We will respond to verifiable consumer requests within 45 days. If we need more time, we will notify you of the extension in writing.
18. Compliance and Certifications
GNews API is committed to maintaining high standards of data protection and privacy:
- GDPR Compliance: We comply with the General Data Protection Regulation for EEA users
- CCPA Compliance: We comply with the California Consumer Privacy Act for California residents
- Swiss Data Protection: We operate in accordance with Swiss Federal Act on Data Protection (FADP)
- Industry Best Practices: We follow internationally recognized security frameworks and best practices
We regularly review and update our privacy practices to ensure ongoing compliance with applicable laws and regulations.
19. Contact Information
If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:
Email: contact@gnews.io
Website: https://gnews.io/
Response Time: We aim to respond to all privacy-related inquiries within 5 business days.
Supervisory Authority:
If you are located in the EEA, UK, or Switzerland and have concerns about our privacy practices, you have the right to lodge a complaint with your local data protection authority.
Effective Date: This Privacy Policy is effective as of the "Last Updated" date shown at the top of this document.
By using the GNews API Service, you acknowledge that you have read, understood, and agree to the collection, use, and disclosure of your personal information as described in this Privacy Policy.