Privacy Policy
How the NewsUSA Media Catalogue collects, uses and protects your information.
Last updated 13 September 2026
1. Who we are
NewsUSA Inc. ("NewsUSA", "we", "us") operates the NewsUSA Media Catalogue (the "Service"), where businesses browse media placements and order them. We are located at 1104 West Broad St. #1024, Falls Church, VA 22046, United States. Questions about this policy go to rsmith@newsusa.com or +1 (703) 508-8700.
2. Information we collect
Information you give us
- Account details: your name, work email address, phone number with country code, company name (optional) and a password, which we store only as a salted bcrypt hash.
- Orders: the publications and quantities you order, the notes you write for your specialist, any discount code you apply, and the contact details on the order.
- Correspondence: anything you send us by email or through the Service.
Information collected automatically
- Security and usage data: your IP address, browser type, the pages and API calls you make, sign-in attempts and their outcome, and the time of each. We use this to keep accounts safe and to operate rate limits.
- Cookies and browser storage: a signed session cookie (HttpOnly, so no script on the page can read it) keeps you signed in; your cart and a discount code you have typed are kept in browser storage; a "remembered" browse position lets "Back to results" work. We do not run third-party advertising cookies.
- Cloudflare Turnstile: sign-in, sign-up and password-reset forms include Cloudflare's Turnstile check, which sends limited technical data to Cloudflare to tell people from bots. See Cloudflare's privacy policy for what it collects.
- Publication icons: the catalogue shows each outlet's icon fetched by your browser from DuckDuckGo's icon service (icons.duckduckgo.com), so that service sees the domains of the outlets you view, without a referrer and without anything that identifies you to us.
- "Use my location": only if you press that button on an address form, and only with your browser's permission, your approximate coordinates (rounded to about ten metres) are sent by your browser to OpenStreetMap's Nominatim service to suggest an address. Nothing about your location reaches our servers unless you save the address.
3. How we use it
- To create and secure your account, verify your email address and sign you in.
- To price, record and fulfil your orders, and to have a NewsUSA specialist confirm availability, timings and the final price with you before anything is booked.
- To send you service emails: verification codes, password-reset links, order confirmations and status updates. We do not send marketing email from the Service without your consent.
- To prevent fraud and abuse, including rate limiting and temporary lockouts after repeated failed attempts.
- To improve the catalogue, for example which filters and placements are used.
- To meet legal obligations and enforce our Terms.
4. Who we share it with
We do not sell or rent your personal information. We share it only as follows:
- Media partners and publishers. To fulfil an order, we pass the placement details and the editorial brief to the publication or the media network that supplies it. We do not pass your password or your account's security data. Where a publisher needs a contact for approval, we share the contact details on the order.
- Service providers that host and run the Service under contract with us: cloud and database hosting, Cloudflare (security and Turnstile), an email delivery provider for service messages, and Stripe for card payments. When you pay, your card details go directly to Stripe and are governed by Stripe's privacy policy; we receive only a payment reference, the amount, the card brand and last four digits.
- Legal. When required by law, a court order, or to protect NewsUSA, our customers or the public.
- Business transfers. If NewsUSA is acquired or merges, your information may transfer with it; this policy continues to apply.
5. How long we keep it
| Data | Kept for |
|---|---|
| Account and profile | While the account exists, then 30 days after deletion |
| Orders, their priced snapshot and payment references | 7 years, for accounting and dispute records |
| Verification codes and reset links | 30 minutes, then discarded |
| Sign-in and security events | 12 months |
| Rate-limit records | Until the lockout history expires, at most 7 days of quiet |
| Server and application logs | 90 days |
6. How we protect it
Traffic between your browser and the Service is encrypted with TLS. Card payments are handled entirely on Stripe's hosted checkout, so card numbers never reach our systems. Passwords are stored as bcrypt hashes and are never visible to staff. Sessions use signed, expiring tokens. Sign-in, sign-up and password reset are protected by Cloudflare Turnstile and by per-address, per-account and per-email attempt limits that lock out repeated failures for escalating periods. Staff access to the internal console requires separate staff accounts. No system is perfectly secure; if you believe your account has been compromised, contact us at once.
7. Your choices and rights
- You can view and update your name, company, phone number and password from My account at any time.
- You can ask us to access, correct, export or delete the personal information we hold about you, to restrict or object to its processing, or to withdraw consent, by emailing rsmith@newsusa.com. We respond within 30 days and may ask you to verify your identity first. Order records may be retained where the law requires.
- California residents (CCPA/CPRA): you have the right to know the categories of personal information we collect, to delete it, to opt out of sale or sharing (we do neither), and not to be discriminated against for exercising these rights.
- EEA and UK residents (GDPR): we process your data to perform our contract with you, for our legitimate interests in running and securing the Service, and to comply with law. You may lodge a complaint with your supervisory authority.
8. Children
The Service is for businesses and is not directed to anyone under 18. We do not knowingly collect personal information from children.
9. International transfers
We are based in the United States and process data there. If you use the Service from elsewhere, your information is transferred to the United States and protected as described in this policy.
10. Changes
We will post any changes here and update the date above. If a change is material, we will email account holders. Continued use of the Service after a change means you accept the updated policy.
11. Contact
NewsUSA Inc., 1104 West Broad St. #1024, Falls Church, VA 22046, United States. rsmith@newsusa.com, +1 (703) 508-8700.