YourWeeksBrief Privacy Policy Last updated: 2026-10-19 1. WHO IS RESPONSIBLE FOR YOUR DATA YourWeeksBrief is a weekly email newsletter that sends you news articles selected for your business. It is run by Samuel Billing, Anders Reimers Väg 9, Stockholm, Sweden ("we", "us"). We are the data controller for the personal data described in this policy. Questions or requests about your data: contact@yourweeksbrief.com 2. WHAT PERSONAL DATA WE COLLECT We collect only what we need to send you a relevant weekly brief. Email address Where it comes from: You, when you sign up. What we use it for: Sending the confirmation email and your weekly brief. Business description Where it comes from: You, when you sign up. What we use it for: Working out which news topics matter to your business. Search keywords Where it comes from: Generated by an AI model from your business description. What we use it for: Choosing which articles and ads go in your brief. Consent record (time of sign-up, time you confirmed your address) Where it comes from: Generated when you sign up and confirm. What we use it for: Proving that you agreed to receive the brief. Send history (date, number of articles, delivery status) Where it comes from: Generated when we send your brief. What we use it for: Avoiding duplicate emails and fixing delivery problems. IP address Where it comes from: Your browser, when you use the signup form. What we use it for: Limiting abuse of the form; may appear in server logs. We do not ask for your name, phone number or payment details. Please do not put personal data about individuals (names, phone numbers, email addresses) in your business description. 3. WHY WE USE YOUR DATA AND OUR LEGAL BASIS Our main legal basis is your consent (GDPR Article 6(1)(a)). You give it by ticking the consent box on the signup form and confirming your address through the link in our confirmation email. This also meets the consent requirement for marketing emails in the Swedish Marketing Act (marknadsföringslagen). Purpose: Sending your weekly brief, including the advertising in it Legal basis: Consent Purpose: Generating keywords from your business description Legal basis: Consent (needed to provide the service you asked for) Purpose: Confirming your email address Legal basis: Consent, and our legitimate interest in preventing others from being signed up without their knowledge Purpose: Keeping a record that you consented Legal basis: Our legitimate interest in being able to show that consent was given Purpose: Limiting abuse of the signup form and keeping the service secure Legal basis: Our legitimate interest (Article 6(1)(f)) You can withdraw your consent at any time by clicking the unsubscribe link in any brief. Withdrawing does not affect anything we did before. Providing your email address is necessary to receive the brief; without it we cannot send it. 4. ADVERTISING IN YOUR BRIEF Your brief contains advertising. Here is exactly how it works: - Labelled and separate. Every ad is marked "Sponsored" and kept visually apart from the news articles. - We choose the ads, not the advertisers. We match the keywords generated from your business description to an advertiser's industry or topic. This is automated, and it is a simple form of profiling based only on what you told us about your business, not on how you behave. - Advertisers receive nothing about you. We do not share your email address, business description or keywords with advertisers or ad networks. Advertisers do not know who receives their ad. - No tracking. We do not use tracking pixels, open tracking or click-tracking redirects. Links in ads go directly to the advertiser. Once you open an advertiser's website, that website's own privacy policy applies. - You can object. If you do not want your keywords used to choose ads, write to us and we will stop using them for that purpose, or you can unsubscribe. 5. WHO WE SHARE DATA WITH We use a small number of service providers ("processors") who handle data only on our instructions. We do not sell your data. Mailgun What it does: Delivers our emails. We use its EU region. Data it receives: Your email address and the content of the emails we send you. OpenRouter What it does: AI gateway that passes your business description to an AI model to produce keywords. Data it receives: Your business description only; never your email address. Hostup, Sweden, Stockholm What it does: Runs our server which hosts our database. Data it receives: All data described in section 2. We may also disclose data if the law or a public authority requires it. 6. TRANSFERS OUTSIDE THE EU/EEA OpenRouter is based outside the EU and may pass your business description to AI model providers in other countries, including the United States. Only the business description is sent, never your email address. Where data leaves the EU/EEA, we rely on the safeguards GDPR requires, such as an adequacy decision or the European Commission's Standard Contractual Clauses, as set out in the provider's data processing terms. Mailgun delivers through its EU region. 7. HOW LONG WE KEEP YOUR DATA Email address, business description, keywords, settings, send history Until you unsubscribe. Unsubscribing deletes all of it immediately and permanently. Sign-ups you never confirm Deleted within 8 days. Server logs (including IP addresses) Deleted within 30 days. Database backups Deleted within 30 days of the original data being deleted. 8. YOUR RIGHTS Under the GDPR you have the right to: - Access the personal data we hold about you and get a copy - Correct data that is wrong - Erase your data (the unsubscribe link does this in one click) - Restrict how we use your data in some situations - Receive your data in a portable format - Object to processing based on our legitimate interests, and to the use of your keywords for choosing ads - Withdraw consent at any time, without affecting what happened before To use any of these rights, email contact@yourweeksbrief.com. We aim to reply within one month. We make no decisions about you by automated means that have legal or similarly significant effects. If you think we have handled your data wrongly, you can complain to the Swedish Authority for Privacy Protection, Integritetsskyddsmyndigheten (IMY), at https://www.imy.se, or to the data protection authority in your own EU country. 9. SECURITY, CHILDREN, COOKIES AND CHANGES Security. We protect your data with encrypted connections (HTTPS), signed one-click unsubscribe links and restricted access to the server and database. Children. The service is meant for business owners and is not directed at anyone under 18. We do not knowingly collect data from children. Cookies and tracking. Our website uses no cookies and no analytics. Our emails contain no tracking pixels. Changes. If we change this policy, we update the date at the top. If the change is significant, we will tell you by email before it takes effect. Contact. Samuel Billing, Anders Reimers Väg 9, Stockholm, Sweden, contact@yourweeksbrief.com.