Privacy Policy

Nyulász Kristóf EV, a sole trader registered in Hungary and trading as "Overnewz" ("we," "us," "our"), provides Overnewz (the desktop application and the website at overnewz.com). This policy explains what personal data we process and why. We are the data controller under the EU/UK GDPR. Overnewz is used worldwide; where the privacy law of your own country gives you rights beyond those described here, this policy does not limit them.

Summary

We collect the minimum needed to run the Service: a device identifier to manage your free trial and license, your subscription status, basic device and country information so we can see which platforms and regions the Service is used in, and — only if you subscribe — your name, email, billing address and payment details (handled by Stripe, and used for your invoices). If you apply to our affiliate program we also hold an account for you: your email, a hashed password, and what you told us about your channels and payouts. We do not sell your data and we do not use behavioral advertising or cross-site tracking.

1. Data We Collect

• Device identifier. On first run, the App derives a device identifier — a one-way, irreversible hash unique to your installation/device — stored on your device and sent to our server to operate your free trial, manage your license/subscription, and prevent trial abuse. It cannot be reversed to identify your hardware and does not identify you by name. Because it is stable for the device, reinstalling the App does not restart a free trial that has already been used.
• Device & installation data. Alongside that identifier we store your device's operating-system family (for example "mac" or "win") and the country your connection resolves to — a two-letter country code; we do not store the IP address it was derived from. We use these to see which platforms and countries the Service is used in, so we can decide what to build, test and support. They are coarse counts, not a profile: they are not linked to your name, not used to target advertising, and not combined with the news you are shown.
• Subscription & billing data. If you subscribe, our third-party payment processor collects your name, email, billing address and payment details at checkout, and shares with us your name, email, billing address, subscription status, and a customer/subscription identifier. We use your name and billing address to issue the invoice Hungarian law requires for each payment. We never receive or store your full card number — the payment processor handles all card data.
• Connection & log data. When the App or website connects to our servers, we process standard technical data (such as IP address, timestamps, and request metadata) in server logs used for security, abuse prevention, reliability, and to measure aggregate, privacy-preserving usage of the Service (such as download and install counts). This is not used to build a profile about you.
• Website data. Our website is hosted by a third-party cloud hosting provider, which processes standard request logs. We do not use advertising or cross-site tracking cookies on the website.
• Affiliate accounts. This applies only if you apply to our affiliate program; it is not collected from ordinary users of the App. When you create an affiliate account we store your email address and your password, which is kept only as a salted one-way hash — we cannot read it, and we will never send it to you. Your application also records the channels you would promote on (for example a social handle, a community name, or an approximate audience size), your preferred payout method, and the code you requested. Signing in sets one essential cookie holding a signed session token; it is not used for tracking and expires after eight hours.
• Affiliate terms acceptance. When you accept the affiliate terms we record the version accepted, the time, and — unlike the device data above — your IP address and browser user-agent, stored against your email address. We keep this as evidence of who agreed to what and when, because the affiliate terms are a contract about payments. It is not used for analytics, profiling or advertising.

Apart from the name and billing address you give at checkout if you subscribe, we do not collect your name, contacts, precise location, or build a behavioral profile. The country code described above is a coarse, country-level value derived from your connection — it is not precise location.

2. News Content

News is processed on our servers and delivered to the App for brief display (each item is shown for the card duration you choose in Settings — 10 to 30 seconds — then discarded from memory on your device). We do not associate news content with your identity and do not build a per-user reading history.

3. AI Processing

To produce neutral summaries, our systems send the text of incoming news items (never any information about you) to a third-party AI provider for processing. No personal data is included.

4. Advertising

During the free trial, the Service may display sponsor messages ("ads"). These are not powered by behavioral ad networks and do not track you across sites or build an advertising profile. Paid subscriptions are ad-free. If we ever introduce ad technology that processes personal data, we will update this policy and obtain consent where required.

5. Legal Bases (GDPR)

• Performance of a contract — to provide the Service, manage your trial/subscription, and process payments. If you join the affiliate program, this also covers running your account, assessing your application, and calculating and paying your commission.
• Legal obligation — to issue invoices for payments and keep them, with the accounting records behind them, as Hungarian tax and accounting law requires.
• Legitimate interests — to secure the Service, prevent fraud and trial abuse, operate reliably, understand aggregate, privacy-preserving usage of the Service (such as how many installations run on each operating system or in each country), and keep a record of who accepted the affiliate terms and when, so both sides can rely on the agreement. You may object to processing based on legitimate interests — see Your Rights below.
• Consent — where required (for example, if we ever introduce non-essential cookies or ad technology); you may withdraw consent at any time. The only cookie we set today is the affiliate sign-in cookie described above, which is strictly necessary to keep you signed in and therefore does not require consent.

6. Sharing and Processors

We share personal data only with service providers ("processors") that help us operate, under appropriate data-protection terms. These fall into the following categories:

• a payment processor (to handle subscriptions and billing);
• cloud hosting providers (to host our website and servers);
• an AI provider (to summarize news text; no personal data is shared);
• an email provider (to send account email such as password-reset links and affiliate decisions).

We do not sell your personal data. We may disclose data where required by law or to protect our rights and users. The specific providers we use may change from time to time; the categories above remain accurate, and we can provide details of our current processors on request.

7. International Transfers

Some processors are located in the United States or other countries. Where personal data is transferred outside the EEA, we rely on appropriate safeguards (such as the processors' Standard Contractual Clauses).

8. Retention

We retain device, trial, and subscription data while your account/subscription is active and as needed for legal, accounting, and fraud-prevention purposes, then delete or anonymize it. Invoices and payment records, including the name and billing address on them, are kept for eight years, as Hungarian accounting law requires. Server logs, including IP addresses, are kept for 12 months for security, abuse prevention and reliability, then deleted.

Affiliate data. We keep your affiliate account and application for as long as your account exists. If your application is declined, we keep the record so we can recognize a repeat application and explain our decision, and delete it after 12 months unless you ask us to remove it sooner. Once an affiliate account is closed we delete the account and application, but keep the acceptance record and the payment history for eight years, the period Hungarian accounting law requires for records supporting a payment. Password-reset links expire one hour after they are issued.

9. Your Rights

Subject to applicable law, you have the right to access, correct, delete, restrict, or object to processing of your personal data, to data portability, and to withdraw consent. EU users may lodge a complaint with their supervisory authority (in Hungary, the Nemzeti Adatvédelmi és Információszabadság Hatóság — NAIH). To exercise these rights, contact support@overnewz.com.

10. Children

The Service is intended only for adults. It is not directed to anyone under 18 (or the age of majority in your jurisdiction), consistent with the eligibility requirement in our Terms of Service, and we do not knowingly collect personal data from anyone under that age. If we learn that we have collected such data, we will delete it.

11. Changes to This Policy

If we change how we handle personal data, we will update this policy with a new effective date and provide notice (in-app or by email) before material changes take effect.

12. Contact

The data controller is Nyulász Kristóf EV, a sole trader registered in Hungary, trading as "Overnewz". Questions or requests, including any request to exercise the rights in section 9: support@overnewz.com.