Privacy Policy | News Apparatus

Last Updated: October 31, 2026

This Privacy Policy explains how News Apparatus ("we," "us," or "our") handles personal information when you visit this website, create an account, subscribe to communications, purchase content, or use our services (collectively, the "Services").

1. Information We Collect

1.1 Information You Provide

Account information: name, email address, professional role, organization, and any profile details you choose to add.
Registration answers: any additional fields we ask for at sign-up, which vary by publication.
Communications: messages you send through contact, support, or inquiry forms.
Purchases: billing name, email, country, and the items purchased. Card details go directly to our payment processor; we receive only a token and the last four digits.
Submitted content: comments, feedback, uploads, and any material you send us for publication.

1.2 Information Collected Automatically

Device and connection data: IP address, browser, operating system, and device identifiers.
Usage data: pages viewed, time on page, links clicked, search queries, and email opens and clicks.
Cookies and similar technologies: see Section 5.
Server logs: access times, referring URLs, and error reports.
Learning and assessment records: where we offer courses or continuing education, your progress, responses, completions, and certificates.
Push notifications: if you opt in, a browser-issued subscription token used only to deliver the alerts you requested. You can revoke it in your browser or account settings at any time.

2. How We Use Information

Provide, operate, secure, and improve the Services.
Authenticate you and protect accounts against abuse and fraud.
Personalize content, recommendations, and alerts.
Process payments, subscriptions, enrollments, and refunds.
Send transactional messages, and marketing messages where permitted or consented to.
Issue and verify certificates, transcripts, and completion records.
Produce aggregate analytics and reporting.
Meet legal obligations and enforce our terms.

3. Legal Bases for Processing

Where data-protection law requires a legal basis, we rely on: performance of a contract (operating your account and fulfilling purchases), legitimate interests (securing and improving the Services, and non-intrusive analytics), consent (marketing email, push notifications, and non-essential cookies), and compliance with legal obligations. Where we rely on consent, you may withdraw it at any time without affecting prior processing.

4. How We Share Information

We do not sell personal information, and we do not share it for cross-context behavioral advertising.

Service providers: vendors who process data on our behalf under contract and confidentiality obligations (see Section 6).
Legal requirements: when compelled by law, subpoena, court order, or a valid governmental request. See our Legal Inquiries page for how such requests must be submitted.
Protection of rights: to protect the rights, property, or safety of our readers, our staff, or the public.
Business transfers: in connection with a merger, acquisition, financing, or sale of assets, subject to this policy.
With your direction: when you ask us to share, or publish material you submit.

5. Cookies, Analytics, and Opt-Out Signals

We use strictly necessary cookies for sign-in, security, and preferences; these cannot be disabled without breaking the site. We also use analytics cookies to understand which content is useful. You can clear or block cookies in your browser, and we honor Global Privacy Control (GPC) and comparable opt-out preference signals as an opt-out of non-essential analytics and any sharing where applicable law requires.

6. Subprocessors

We use the following categories of processors. A current named list is available on request through our Legal Inquiries page, and workspace customers may request a Data Processing Addendum (DPA) the same way.

Hosting, database, and file storage — infrastructure that runs this site and stores account data and uploaded media.
Email delivery — transactional email (sign-in, invitations, notifications) and newsletters.
Payment processing — card payments, subscriptions, and payouts. We never store full card numbers.
Analytics and search reporting — aggregate traffic and search-performance measurement.
AI providers — models used to draft, summarize, or tag content submitted by our editors.
Content delivery and domain routing — caching and TLS termination for our domains.

7. AI-Assisted Content and AI Training Restriction

We use AI tools to help our editors draft, summarize, translate, and tag content. Editors can require that AI-assisted output be approved by a person before publication, and we do not use AI to make automated decisions with legal or similarly significant effects about you. Content submitted to us through forms may be processed by AI providers acting as our processors; it is not used by them to train their models.

Our published content may not be used to train, fine-tune, or evaluate any artificial-intelligence, machine-learning, or large-language-model system without our express written permission. This restriction binds all visitors, crawlers, scrapers, and automated agents.

8. Data Retention

Account records: retained while your account is active, then deleted or anonymized within 90 days after closure.
Purchase and tax records: retained as long as accounting and tax law requires.
Education and certification records: retained as long as any applicable accreditation or professional-record obligation requires.
Analytics and server logs: retained in aggregate or pseudonymous form on a rolling basis.
Marketing suppression lists: retained indefinitely so we can honor your opt-out.

9. Security and Incident Notification

Encryption in transit (TLS) and at rest where supported by our infrastructure.
Row-level access controls so accounts and workspaces cannot read each other's data.
Least-privilege administrative access, audit logging, and routine security review.

No system is perfectly secure, so we cannot guarantee absolute security. If a breach affects your personal information, we will notify you and any required regulator without undue delay and consistent with applicable law.

10. Your Rights and Choices

Depending on where you live, you may have the right to access, correct, delete, port, or restrict processing of your personal information, to object to processing, and to withdraw consent. You can update most details in your account, and unsubscribe from any marketing email using the link in that email. To make a formal request, use our Legal Inquiries page; we respond within the period required by applicable law and will not discriminate against you for exercising these rights. You may appeal a refusal, and you may complain to your local data-protection authority.

11. Children's Privacy

The Services are intended for adults and are not directed to children under 16. We do not knowingly collect their personal information; if we learn we have, we delete it.

12. International Transfers

We operate in the United States, and your information may be processed there or in other countries where our processors operate. Where required, transfers rely on appropriate safeguards such as standard contractual clauses.

13. Changes to This Policy

We may update this policy. The "Last Updated" date reflects the current version, and we will give notice of material changes through the Services or by email where appropriate.

14. Contact

Privacy questions and requests: use our Legal Inquiries page or contact form, or write to i3 Health d/b/a "Oncology Data Advisor", 3775 Sixth Ave, Unit 215, San Diego, CA 92103. All privacy, copyright, AI-licensing, and formal legal requests are routed through the contact form — we do not maintain separate legal mailboxes.