Privacy Policy
Effective 2026-11-01
What we collect
- Email address (required) — to verify your account and send digests.
- First and last name (optional) — to personalize emails.
- Preferences — frequency, sectors, send time.
- Consent records — when you accepted the Terms and consented to email, the policy version, your IP address and browser user-agent. We keep these to demonstrate lawful consent.
- Delivery metadata — when digests were last sent, bounces and complaints from our email provider.
We do not use third-party analytics or advertising trackers on this site.
How we protect it
Names and email addresses are encrypted at rest with AES-256-GCM using keys stored in a separate secrets manager. Email lookups use a keyed hash rather than the plaintext address. Data is stored in AWS (US) with encryption at rest and TLS in transit. Verification codes are stored hashed and expire in 10 minutes.
How we use it
Only to deliver the service you signed up for. We do not sell or share personal data with third parties, except our infrastructure providers (Amazon Web Services for hosting and email delivery, Cloudflare for DNS and CDN) acting as processors.
Your rights
You can view and change your data on the Preferences page, unsubscribe from any email, and delete your account entirely (which removes all records, including consent logs, within 24 hours). For requests under GDPR, CCPA/CPRA, or similar laws, email privacy@noevika.com.
Retention
We keep your data while your account exists. Watchlists (organisations and keywords you choose to follow) are stored with your account and deleted with it. Accounts that never complete email verification are deleted automatically after 7 days.
Contact
privacy@noevika.com