Privacy Policy

This policy explains what personal data Daily AI Brief collects, why it is collected, how long it is kept and what you can do about it. It covers this website only.

Who is responsible for your data

Daily AI Brief operates this website and decides how and why your personal data is processed. In data-protection terms we are the data controller.

Contact for privacy matters: connect@aidailybrief.in. Questions, requests and complaints about your data all go to this address.

What we collect, and why

Reading the site

You do not need an account to read anything here, and we do not ask you to identify yourself. Technical data may be processed as described below, even when you do not submit a form.

The essential cookie is a session cookie named dab_session. It exists so that security features work — chiefly the token that protects forms against cross-site request forgery. It holds no identifying information, carries the HttpOnly and SameSite flags, and expires when you close your browser. Because it is strictly necessary for the site to function, it is not used for tracking. The Cookie Policy lists it in full.

The contact form

When you send a message through the contact form we store:

• the name you enter;
• your email address, so we can reply;
• the subject and message you write;
• an anonymised IP address, to limit abuse of the form;
• the date and time of the submission.

We use this only to read and respond to your message. We do not add contact form addresses to the newsletter, and we do not use them for marketing.

The newsletter

If you subscribe, we store:

• your email address;
• an anonymised IP address and the time you subscribed, which together evidence your consent;
• the page or source the sign-up came from;
• a random unsubscribe token, so you can opt out without signing in to anything.

We use this solely to send you the newsletter you asked for. We do not sell, rent or share subscriber lists.

IP addresses and security

Contact and newsletter records store a truncated IP address: the last IPv4 octet is replaced with zero, and IPv6 addresses are shortened. This reduces precision but does not guarantee anonymity. Security rate-limit records and failed administrator sign-in records can contain full IP addresses; failed sign-in records also contain the submitted email address.

Security records

To defend the administration area and the public forms we keep two short-lived technical records: failed sign-in attempts for staff accounts, and a counter of how often an address has submitted a form. Both are eligible for automatic cleanup after 24 hours; cleanup runs periodically during requests, so records may remain longer on a quiet site. Neither is used for any purpose other than blocking brute-force and spam attempts.

Server logs

Our hosting provider records ordinary web-server logs — the address of the requesting computer, the page requested, the time and the browser's user-agent string. These are generated by the hosting infrastructure rather than by this application, are used for diagnosing faults and detecting attacks, and are retained according to the provider's own schedule.

Analytics

With your permission, this site loads Google Analytics to understand which articles are read and how people arrive. It sets first-party analytics cookies and sends data to Google, which may process it outside your country. You can accept, reject, or withdraw permission using Privacy choices. No Analytics script loads before acceptance. We use the result only in aggregate — we do not attempt to identify individual readers. See the Cookie Policy for the specific cookies and how to refuse them.

Advertising

Advertising is not currently served by this application. We may apply to Google AdSense; verification metadata does not itself show ads or set advertising cookies.

If Google advertising is enabled in future, Google and other advertising vendors may use cookies and similar identifiers to select ads based on prior visits to this and other websites. Google and its partners may use these signals for personalized advertising, subject to applicable consent choices. You can manage Google's personalized ads at My Ad Center and learn how Google uses partner-site data at Google's partner-site privacy explanation. We will update this policy with the active advertising providers and privacy controls before enabling ads.

Our lawful basis for using your data

What	Why	Basis
Contact form	To read and answer your message	Your consent, and our legitimate interest in answering correspondence
Newsletter	To send the newsletter you requested	Your consent, withdrawable at any time
Session cookie	To make forms and security tokens work	Strictly necessary for a service you asked for
Optional analytics	Understand readership	Your consent, withdrawable through Privacy choices
Abuse and security records	To block spam and brute-force attacks	Our legitimate interest in keeping the site available and secure

How long we keep it

• Contact messages — kept while the matter is open and for our records afterwards. Ask us and we will delete yours.
• Newsletter subscriptions — kept until you unsubscribe. After that we retain the record of the unsubscribe so we do not email you again by mistake.
• Security and rate-limit records — eligible for automatic cleanup after 24 hours; actual deletion depends on requests triggering cleanup.
• Session cookie — discarded when you close your browser.

Who else sees your data

We do not sell your personal data, and we do not share it for anyone else's marketing. It is disclosed only to:

• our email delivery provider, when sending requested messages;
• our hosting provider, which stores the site and its database on our behalf;
• Google Analytics, as described above;
• a public authority, where we are legally required to disclose it.

Your rights

Whatever your location, we will honour a request to:

• see the personal data we hold about you;
• correct anything inaccurate;
• delete it;
• withdraw consent — every newsletter carries an unsubscribe link, and you can also use the unsubscribe page;
• object to or restrict our use of it;
• receive a copy in a portable format.

Email connect@aidailybrief.in and we will respond within 30 days. We may ask you to confirm your identity first, so that we do not disclose your data to someone else.

If you are unhappy with our response, you may complain to your national data protection authority. The applicable authority and remedies depend on your location and the laws in force.

International transfers

Our servers and service providers may be located outside your country. Where personal data is transferred across borders, we rely on the safeguards offered by those providers, including standard contractual clauses where they apply.

Children

This site is written for a professional audience and is not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a child has submitted data to us, contact us and we will delete it.

Security

Traffic is served over HTTPS. Passwords for staff accounts are stored only as salted hashes, never as text. Forms are protected with anti-forgery tokens, sign-in attempts are rate-limited, uploads are validated by their actual file contents, and article HTML is passed through a strict allow-list sanitiser. No system is perfectly secure, but we take the protection of your data seriously.

Changes to this policy

If we change how we handle personal data, we will update this page and move the "last updated" date at the top. Material changes to why we process your data will be announced on the site.

Related policies

See also the Cookie Policy, the Terms of Use and our Editorial Policy.