Privacy policy

Last updated July 24, 2026

This privacy notice for MixItOne Limited ('we', 'us', or 'our'), describes how and why we might collect, store, use, and/or share ('process') your information when you use Newsagents and related services ('Services'), such as when you:

• Visit our website at https://newsagents.app, or any website of ours that links to this privacy notice
• Create an account, compose dashboards, or otherwise engage with the Services

Questions or concerns? Reading this privacy notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at privacy@mixitone.com.

Summary of key points

What personal information do we process? When you use the Services, we may process personal information depending on how you interact with us — typically your email address, session data, and the dashboard content you submit. Learn more about personal information you disclose to us.

Do we process any sensitive personal information? We do not intentionally process sensitive personal information.

Do we receive any information from third parties? We do not receive personal information from third parties for marketing or profiling. Infrastructure and AI providers may return technical results needed to run the product (for example model output or search results).

How do we process your information? We process your information to provide, improve, and administer the Services, authenticate you, generate and refresh dashboards, communicate with you, for security and fraud prevention, and to comply with law.

Do we sell personal information? No. We do not sell personal information or share it with third parties for their own marketing.

Do AI features send data to third parties? Yes, when dashboards are designed or filled we send prompts and related context (subject, instructions, and story material gathered for that dashboard) to AI providers so they can produce layout and content. Learn more under artificial intelligence (AI) features.

Table of contents

1. What information do we collect?
2. How do we process your information?
3. What legal bases do we rely on to process your personal information?
4. When and with whom do we share your personal information?
5. How do we handle account login?
6. Is your information transferred internationally?
7. How long do we keep your information?
8. Do we collect information from minors?
9. What are your privacy rights?
10. Controls for Do-Not-Track features
11. Do United States residents have specific privacy rights?
12. Do other regions have specific privacy rights?
13. Do we make updates to this notice?
14. How can you contact us about this notice?
15. How can you review, update, or delete the data we collect from you?

1. What information do we collect?

In Short: We collect personal information that you provide to us, plus limited technical data needed to run the Services.

We collect personal information that you voluntarily provide when you register, create or edit dashboards, contact us, or otherwise use the Services.

Personal information provided by you may include:

• Email address
• Dashboard content you submit (for example title, subject, instructions, feed URLs, site URLs, and visibility settings)

Sensitive information. We do not intentionally process sensitive information. Do not put sensitive personal data in dashboard fields or prompts unless you accept that it may be processed as described here.

Payment data. Paid subscriptions are billed by MixItOne Limited. We do not collect or store payment card numbers on our servers. Card details are handled by our payment processor (Stripe) under that processor’s policies; we receive only limited non-card information such as subscription status.

Automatically collected information. When you visit the Services we may collect limited technical data such as IP address, browser type, and request logs needed for security, rate limiting, and reliable operation. We use a session cookie to keep you signed in.

Artificial intelligence (AI) features

Newsagents uses AI to design dashboard layouts and to fill panels from gathered news stories. When a dashboard is created or refreshed, we transmit information needed for that job — including your subject and instructions, and story titles/summaries/URLs gathered from feeds, sites, or search — to AI providers.

Depending on configuration, that may include:

• Cloudflare Workers AI (see Cloudflare’s privacy policy)
• OpenRouter ((privacy policy), which may forward traffic to underlying model providers

Those organisations process the content to produce model output for the feature; they act as subprocessors for that purpose. Free-text you enter (subject, instructions, and similar) may include personal data if you put it there.

All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes.

2. How do we process your information?

In Short: We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law.

We may process your personal information to:

• Facilitate account creation and authentication (email-code sign-in) and manage user accounts and sessions
• Create, store, refresh, and display dashboards according to your settings and plan limits
• Gather related news stories from sources you configure and, when enabled, from operator-configured search
• Run AI layout and fill features as described under AI features
• Send transactional email (sign-in codes)
• Protect the Services, including fraud monitoring and prevention
• Comply with legal obligations

3. What legal bases do we rely on to process your personal information?

In Short: We only process your personal information when we believe it is necessary and we have a valid legal reason to do so under applicable law.

If you are located in the EU or UK, this section applies to you.

We may rely on the following legal bases:

• Consent. Where you have given permission for a specific purpose. You can withdraw consent at any time by contacting us.
• Contract. Processing necessary to provide the Services you request (account, dashboards, refreshes).
• Legitimate interests. For example diagnosing problems, preventing fraud, and improving the product, where those interests do not outweigh your rights.
• Legal obligations. Where processing is necessary to comply with law or defend legal rights.
• Vital interests. Where necessary to protect someone’s vital interests.

If you are located in Canada, this section applies to you. We may process your information with your express or implied consent, or as otherwise permitted by Canadian law. You may withdraw consent by contacting us, subject to legal or contractual restrictions.

4. When and with whom do we share your personal information?

In Short: We do not sell your personal information. We share it with service providers only as needed to operate Newsagents, and when required by law.

We may share information with:

• Cloudflare — hosting, Workers, D1, KV, Queues, Workers AI, and related infrastructure
• Resend — delivery of email sign-in codes (when email sending is configured)
• AI inference providers — as described under AI features
• Kagi Search and/or Brave Search — when discovery search is enabled, we send search queries derived from the dashboard subject (and instructions) to retrieve related news results

Public dashboards. If a dashboard is public (the default on free plans), anyone with the link may view its title and generated content. Private visibility is available on paid plans.

We may disclose personal information where required by law, court order, or competent authority, or to protect our rights, users, or the public. In connection with a merger, acquisition, financing, reorganisation, or sale of assets, personal information may be transferred as part of that transaction.

5. How do we handle account login?

In Short: Account access is email code only. We do not offer password or social login.

You sign in with an email address. We email a one-time code; entering it creates a session cookie (newsagents_session). We do not store account passwords. We do not offer “Sign in with Google”, Facebook, Apple, or similar federated login for Newsagents accounts.

6. Is your information transferred internationally?

In Short: The Services run on Cloudflare and other providers that may process data in multiple countries.

Primary application hosting is on Cloudflare infrastructure. Subprocessors (for example email delivery via Resend, AI inference via Workers AI / OpenRouter and underlying model hosts, or Brave Search) may process limited data in other countries according to their own terms and infrastructure.

If you access the Services from the EEA, UK, Switzerland, or another region with international-transfer rules, your information may be transferred to and processed in countries that may have different data protection laws. We protect personal information as described in this notice and in line with applicable law, including appropriate safeguards where required.

7. How long do we keep your information?

In Short: We keep your information for as long as necessary to fulfil the purposes in this notice unless a longer period is required by law.

Account and dashboard data are retained while your account is active and as needed to provide the Services. Free-plan dashboards expire after a limited period (currently 72 hours); when they expire, snapshot content is wiped though a tombstone may remain. Magic-link tokens are short-lived. Sessions expire after their configured lifetime. When we no longer have a need to process personal information, we delete or anonymise it, or securely isolate it until deletion is possible (for example from backups).

8. Do we collect information from minors?

In Short: We do not knowingly collect data from or market to children under 18 years of age.

By using the Services, you represent that you are at least 18, or that you are the parent or guardian of such a minor and consent to that minor’s use of the Services. If we learn that we have collected personal information from a user under 18, we will deactivate the account and take reasonable steps to delete the data. Contact privacy@mixitone.com if you believe we may have collected data from a child.

9. What are your privacy rights?

In Short: In some regions you have rights to access, correct, delete, or restrict processing of your personal information.

Depending on where you live (for example the EEA, UK, Switzerland, or Canada), you may have the right to request access, rectification, erasure, restriction, portability, and/or to object to certain processing. You can make a request using the contact details in How can you contact us about this notice?

If you are in the EEA or UK and believe we are unlawfully processing your personal information, you may complain to your Member State authority or the UK ICO. In Switzerland, contact the FDPIC.

Account information. You may delete dashboards you own from the product. To review or delete your account data, contact us. Upon a termination request we will deactivate or delete your account from active databases, though we may retain limited information as needed to prevent fraud, troubleshoot, investigate, enforce our terms, or comply with law.

10. Controls for Do-Not-Track features

Most browsers include a Do-Not-Track ('DNT') setting. There is no uniform standard for recognising DNT signals. We do not currently respond to DNT browser signals. If a standard we must follow is adopted, we will update this notice.

11. Do United States residents have specific privacy rights?

In Short: Certain US state laws may grant you specific rights regarding access to your personal information.

In the past twelve (12) months we have collected identifiers such as email address and online identifiers related to your account and sessions. We do not sell or share personal information for cross-context behavioural advertising. We use and retain collected personal information as needed to provide the Services while you have an account with us. Learn more about processing in How do we process your information? and sharing in When and with whom do we share your personal information?

12. Do other regions have specific privacy rights?

In Short: You may have additional rights based on the country you reside in.

New Zealand

We collect and process personal information under New Zealand’s Privacy Act 2020. This notice describes what we collect, for which purposes, and whether other parties may receive it. We do not sell personal information. You may request access to or correction of your personal information by contacting us. Complaints may be made to the Office of the Privacy Commissioner.

13. Do we make updates to this notice?

In Short: Yes, we will update this notice as necessary to stay compliant with relevant laws.

The updated version will be indicated by an updated 'Last updated' date and will be effective when posted. If we make material changes, we may post a prominent notice or notify you directly. Please review this notice periodically.

14. How can you contact us about this notice?

Email privacy@mixitone.com or write to:

MixItOne Limited
Wellington 5713
New Zealand

15. How can you review, update, or delete the data we collect from you?

Based on the laws of your country, you may have the right to request access to, correction of, or deletion of personal information we hold. To make a request, email privacy@mixitone.com.