This draft explains the data NewsForensics uses, why it is needed and the controls available to account holders and public visitors.
Account identity, workspace membership, billing records, support communications, security events, user-submitted sources, evidence records and controlled service telemetry may be processed. Public analytics remain off until consent and exclude search text and claim content.
Data is used to provide contracted services, secure accounts, preserve requested evidence, meet legal obligations and improve the service where consent or another valid basis applies. Promotional messaging requires a recorded lawful basis.
Data is disclosed only to authorised workspace members, reviewed subprocessors needed to operate the service, or lawful authorities where required. A subprocessor register describes provider purpose and review status.
Verified individuals may request access, correction, export, objection or deletion where applicable. Requests are tracked, identity-verified and may be limited by legal holds, security needs or record-keeping duties.
Tenant isolation, role checks, session controls, hashed operational identifiers, encryption in transit and audited administrative actions reduce risk. Cross-border processing is documented through provider and contractual review.