1About This Policy and the Controller
This Privacy Policy explains how Cerber Labs LLC, trading as NewsMonitorTracking (“NewsMonitorTracking”, “we”, “our”, “us”), collects, uses, shares, retains and protects personal data in connection with our website, accounts, support, billing, communications and Google Discover monitoring Services. Our registered address is 251 Little Falls Drive, Wilmington, DE 19808, United States and our privacy contact is privacy@newsmonitortracking.com.
The operator responsible for personal data is the controller when we determine the purposes and means of processing. For certain customer-directed integrations, uploaded information or embedded analytics activities, we may instead act as a processor on behalf of a customer under a separate Data Processing Agreement (“DPA”). Where we act as a processor, the relevant customer generally determines the lawful basis and responds to applicable requests concerning its own processing.
2People and Data Covered
This Policy covers visitors to our website; trial and paid users; representatives of current or prospective customers; people who contact our sales and support teams; and, where personal data arise in the monitoring of third-party sources, relevant authors, publishers, advertisers or other individuals appearing in content or metadata.
Our core monitoring product is intended for business and market intelligence, not for identifying the personal browsing behaviour of individual members of the general public. We do not assume that all public internet information is anonymous; a name, author byline, photograph, user ID or linked profile can be personal data.
3Information You Provide
Depending on your interaction with us, we may collect your name, business email address, employer, job title, account and authentication information, contact details, billing address, tax details, plan selections, communications, support tickets, survey responses, request forms and product preferences.
Customers may submit watchlists, brand or domain names, keyword and entity selections, URLs, notes, alert rules, exported datasets and other research inputs. These inputs may include personal data if they identify individuals; avoid submitting sensitive or unnecessary personal data.
4Information Collected Automatically
When you use our website or platform, we may collect log and connection information such as IP address, browser and device type, operating system, language, approximate region derived from IP, time and date of access, event and error logs, referral source, visited pages, feature interactions, session identifiers, cookie choices, API request metadata and security events.
We may use strictly necessary cookies and similar technologies for login, user preferences, session continuity, fraud prevention and security. Analytics, advertising and other non-essential tools, if deployed, will be described in a Cookie Policy or consent panel and only activated where permitted by applicable law and the choices you make.
5Observational Research Data and Profiles
The Services may collect or receive information about observed third-party content and advertising, including publication URLs, domains, titles, snippets, screenshots or creative previews, timestamps, profile configuration, geographies, device categories, ad labels, first/last recorded observations and content classifications.
Personalisation is part of the observation context. Profile configuration may include broad interests, language, market, device or other parameters. We do not describe profile data as anonymous if an actual Google account, persistent identifier, device-linked record or identifiable person is involved.
Third-party content may contain identifiable authors, public figures, photographs or other personal information. Where necessary for the Services, we may process a limited amount of such information to attribute articles, identify public entities, study content visibility and respond to rights-holder notices. We seek to minimise unnecessary personal information and limit onward disclosure.
6Sources of Information
We receive information directly from users, from customer organisations, from technical systems during their use of the Services, from payment and identity providers, and from publicly accessible websites, permitted feeds, licensed partners, APIs or other sources depending on the monitoring function.
Where we obtain personal data indirectly (for example, from a public article byline), we assess applicable notice duties and available lawful exceptions in light of the processing, scale, context and reasonable expectations of the individuals concerned. Where required, we provide further information through a suitable notice or a public contact mechanism.
7Why We Process Data and Our Legal Bases
Where the EU/UK GDPR applies, we identify a lawful basis for each purpose. Depending on the processing and circumstances, the bases may include performance of a contract, legitimate interests, compliance with legal obligations and consent. Consent is used only where it is actually obtained and is freely given, specific, informed and capable of withdrawal.
We use account and billing data to provide subscriptions and administer contracts; connection logs to secure accounts, prevent misuse and diagnose errors; support communications to respond to requests; service usage analytics to maintain and improve the Services; and configured monitoring inputs and observation records to provide research, comparison and reporting tools.
When relying on legitimate interests, we consider our interests in security, platform reliability, responsible business analytics, research and service development alongside the rights and freedoms of affected individuals. We conduct and document any necessary legitimate-interest balancing assessment and do not assume that every form of profiling or data collection can rely on legitimate interests.
We use contact data to send necessary transactional communications, such as account, security and billing notices. We send promotional communications only where permitted by law and provide simple ways to unsubscribe or withdraw consent, as applicable.
8Estimated Metrics, Classification and Automated Processing
Our systems may classify articles, extract entities and topics, cluster content, estimate visibility and create model-based scores or forecasts. These operations may use automated processing or AI tools. The primary purpose is content and business intelligence rather than evaluating identifiable individuals or making decisions about them with legal or similarly significant effects.
Where our research or model outputs refer to an identifiable individual, such outputs may still constitute personal data. We may provide correction, review or removal mechanisms where required. If any feature is materially repurposed for automated decisions about individuals, a separate legal analysis and additional notices or safeguards will be necessary.
9Who Receives Personal Data
We may disclose personal data to contracted service providers handling cloud hosting, database storage, authentication, error monitoring, customer support, email delivery, billing, analytics or security; to authorised users within a customer organisation; to professional advisers under confidentiality obligations; or to public authorities where required by law.
Where the product invokes a third-party API or model provider, specific submitted inputs or queries may be sent to that provider as needed to perform the requested feature, subject to its applicable terms, data protection role and agreed controls. A current list of relevant vendors and, where required, subprocessors is available on request from privacy@newsmonitortracking.com.
We do not state that personal data is never sold, shared for cross-context behavioural advertising or used for model training unless that statement has been verified against all analytics, pixels, advertising vendors, subprocessors and product operations.
10International Transfers
Personal data may be stored or accessed from the United States and other countries where our service providers operate depending on our infrastructure, personnel and service providers. If a transfer from the EEA, UK or another regulated jurisdiction requires safeguards, we use an applicable adequacy mechanism, Standard Contractual Clauses or another lawful mechanism, together with supplementary measures where needed.
Information about the relevant safeguards and how to request a copy is available by contacting privacy@newsmonitortracking.com.
11Cookies and Tracking Choices
Our site may use essential cookies for sign-in, CSRF protection, session state, fraud detection and cookie preferences. Other categories, if present, can include measurement/analytics, personalisation and marketing. For non-essential cookies or comparable device access technologies, we request consent where required and enable users to reject or adjust choices without being forced to agree to unrelated processing.
You can access or change cookie choices at the cookie banner on this website. The Cookie Policy at this page sets out actual cookie/provider names, purposes, lifetimes and third parties. Browser controls may also restrict technologies, but browser settings alone are not a substitute for a compliant consent mechanism where one is required.
12How Long We Keep Information
We keep data no longer than needed for the purpose or a relevant legal requirement. Actual retention depends on the data category, subscription features, claims, source removal requests and contractual commitments. Our retention schedule:
- Account and organisation details
- For the life of the account, then up to 90 days
- Billing and tax records
- As required by applicable law
- System and security logs
- Up to 12 months
- Sales and marketing contacts
- Up to 24 months after the last interaction
- Support tickets
- Up to 12 months
- Watchlists and customer configuration
- Up to 90 days after account closure
- Observational and screenshot archives
- Up to 24 months, or until removal is requested by the rights holder
- Backups
- Up to 35 days
We delete, de-identify or restrict access to personal data when applicable. Data that have been irreversibly anonymised under applicable law may be retained as aggregate statistical information. Pseudonymised data remain personal data where re-identification remains reasonably possible.
13Security
We apply technical and organisational security measures proportionate to risk, which may include access controls, encryption in transit, restricted administrative privileges, logging, backups, vendor assessments, secure development practices and incident-response procedures. No system can be guaranteed perfectly secure.
Customers are responsible for protecting account credentials and configuring their own users and connected applications. If a personal-data incident occurs, we follow applicable assessment, notification and cooperation requirements and relevant customer agreements.
14Your Privacy Rights
Under applicable law, you may have the right to request access, correction, deletion, restriction, portability or objection to particular processing, and the right to withdraw consent without affecting processing performed lawfully before withdrawal. You may also have the right to lodge a complaint with the relevant data protection supervisory authority.
To exercise rights, contact privacy@newsmonitortracking.com and specify the relevant account, URL or material when possible. We may ask for proportionate information to verify identity and protect others. Where we act solely as a processor for Customer data, we may direct the request to the relevant Customer and assist as required by our DPA.
If your name or image appears in an article, entity result or ad snapshot, please identify the specific record and the nature of your request. We will assess whether the data are personal data, our role, the applicable legal basis, source rights and any lawful exceptions.
15Children and Sensitive Information
The Services are not directed to children and we do not knowingly invite persons under 18 to register. We seek to avoid collecting sensitive categories of personal data through the product except where a separate lawful basis and specific controls support the processing. Users must not use the platform to build unlawful sensitive profiles of individuals, including from inferred political views, health, religion or other protected characteristics.
Where public content incidentally contains such information, we assess whether it should be excluded, minimised, redacted or otherwise protected. Public availability alone does not automatically remove privacy obligations.
16U.S. State and Other Local Privacy Disclosures
If a U.S. state privacy law or another local regime applies to our activities, eligible individuals may have additional rights or receive supplementary disclosures. These may concern categories and sources of personal information, collection purposes, retention, rights to know/correct/delete, opt-outs for sale/sharing/targeted advertising, sensitive data and appeal mechanisms.
17Changes, Business Transfers and Contact
We may change this Policy to reflect changes in law, vendors, functionality and data handling. The date above indicates the latest version. Where a change is material or requires fresh consent, we will provide appropriate advance notice or seek that consent. We may disclose information in a genuine reorganisation, merger or asset transaction subject to applicable law and appropriate safeguards.
For questions, complaints or requests contact: Cerber Labs LLC, 251 Little Falls Drive, Wilmington, DE 19808, United States, privacy@newsmonitortracking.com.