Data practice
Privacy Policy
A plain-language record of what Newcomerly collects, why it is needed, and who helps us operate the service.
Last updated August 28, 2026Who is responsible
Pick Rabbit Studio operates Newcomerly and is responsible for the personal data described in this policy. Contact us at support@newcomerly.com for privacy questions or requests.
Data we collect
When you sign in with Google, we receive the name, email address, and profile image Google makes available with your permission. We also process authentication data such as session identifiers, IP address, user agent, and security logs.
When you use the service, we store your non-sensitive newcomer profile, research requests, generated results, saved items, research history, credit balance and ledger, and follow-up conversation. For purchases, we store transaction identifiers, product, amount, currency, payment status, and credit fulfilment records. Creem processes payment-card details; Newcomerly does not receive or store full card numbers.
When our home page is reached through a Google Display, Google Demand Gen, or Meta advertising URL, our server records one anonymous landing request with limited source, medium, campaign, and creative labels, plus whether a platform click identifier was present. For this pre-consent record, we do not store the raw click identifier, IP address, user agent, referrer, cookie, visitor identifier, or session identifier. It measures aggregate delivery and cannot be used to follow you through the product.
If you allow optional analytics and advertising measurement cookies, we generate random first-party visitor and session identifiers and record campaign parameters such as UTM values, Google and Meta click identifiers, referring page, product events, and purchase value. We load Google Tag Manager and Meta Pixel, and send consented conversion events to Google Ads and Meta Conversions API. Meta may receive hashed email and internal or visitor identifiers, together with browser identifiers, IP address, and user agent, to match and attribute events. Hashing reduces direct exposure but is not anonymisation. After sign-in, the visitor identifier is linked to your internal account identifier so a later purchase can be attributed to the original campaign. We do not place your research text in marketing events or advertising tags.
- Do not submit identity-document copies or numbers.
- Do not submit passwords, bank credentials, or full card details.
- Do not submit exact credit reports or confidential financial records.
How we use data
We use data to authenticate you, maintain your account and research history, generate and improve requested results, manage credits and payments, provide support, prevent abuse, secure the service, diagnose problems, attribute consented advertising, optimise campaigns, and comply with legal obligations.
We do not sell personal data or send research text into advertising audiences. We do not use sensitive application data to make lending or eligibility decisions because Newcomerly does not make those decisions.
Service providers
We share only the information reasonably needed for providers to perform their role: Cloudflare hosts the application and database; Google provides sign-in and, only after you allow optional cookies, Tag Manager and Ads conversion measurement; Meta provides Pixel and Conversions API advertising measurement; DeepSeek processes research prompts and evidence to generate structured responses; Brave Search receives generated web search queries and country context; and Creem processes checkout, tax, payment, and refund events.
DeepSeek and Brave Search do not need your Google identity for ordinary research requests. We use an internal account identifier when needed to operate or protect the service. Providers may process data in countries other than yours under their own terms and safeguards.
Cookies and local storage
We use strictly necessary cookies and similar storage for sign-in sessions, security, account continuity, workspace preferences, and remembering your cookie choice.
With your permission, we also use optional first-party analytics and advertising measurement cookies with consent-aware Google and Meta tags. They help us connect an advertising visit to later product use and purchases across Newcomerly sessions. Google ad personalization remains disabled, and we do not send your research text to advertising tags. You can change your choice using “Cookie settings” in the website footer; choosing only necessary cookies stops future optional measurement and removes the Newcomerly visitor identifier stored in your browser.
Legal bases and international use
Depending on where you live, we process data to perform our contract with you, pursue legitimate interests in operating and securing the service, comply with law, and rely on consent where required. Because Newcomerly and its providers operate internationally, data may be transferred across borders using safeguards required by applicable law.
Retention and security
We keep account, research, and transaction records while your account is active and for as long as reasonably needed to provide the service, resolve disputes, prevent abuse, meet accounting or legal duties, and maintain backup integrity. Retention periods vary by record type.
We use access controls, encrypted transport, provider security features, and other reasonable safeguards. No internet service can promise absolute security, so please keep sensitive data out of your requests.
Your choices and rights
You may ask to access, correct, export, or delete personal data, object to or restrict certain processing, or withdraw consent where it is the legal basis. Rights vary by location and may be subject to identity verification and legal retention duties.
Send a request from the email address connected to your account to support@newcomerly.com. You may also complain to your local data-protection authority. Disconnecting Google access does not automatically delete records already held by Newcomerly; contact us if you also want account deletion.
Children and changes
Newcomerly is for adults and is not directed to anyone under 18. We do not knowingly collect children’s personal data.
We may update this policy as the service changes. We will post the current version here and change the update date. Material changes will receive additional notice when required.