Privacy policy

Information we collect

The information we collect depends on how you use IPN:

• Newsletter subscriptions: your email address, subscription and confirmation status, signup and confirmation dates, and records needed to manage delivery and unsubscribe requests.
• Website access: technical information processed by our hosting and security providers, such as your IP address, browser information, requested pages and access times. During private previews, our access service also processes your email address and authentication information.
• Correspondence: information you provide when you contact us, request support, report an error or raise a privacy concern.
• Optional messaging: if you join our private messaging service, your messaging address or phone number, messages, replies, subscription preferences and delivery records.
• Editorial research: information from news reports, official advisories, public websites and intelligence services. This may include names, professional roles, public statements and other information about people relevant to a story.

We generally collect subscription and correspondence information directly from you. Our service providers also supply authentication, delivery and technical records. Where we collect information about you indirectly, we will provide any notification required by law, unless an applicable exception permits otherwise.

Providing an email address is voluntary, but we need it to deliver the newsletter. Messaging services require a messaging identifier and the information needed to respond. Access to a private preview requires authentication.

How we use information

We use personal information to:

• deliver the services you request, including confirmation emails, briefings and related corrections or service notices;
• manage subscriptions, private access and communication preferences;
• answer questions and respond to support, correction and privacy requests;
• research, prepare and check cybersecurity reporting;
• maintain security, investigate errors and prevent misuse; and
• keep appropriate operational records and meet legal obligations.

We do not sell subscriber information or use the subscriber list for unrelated marketing.

Newsletter subscriptions and unsubscribing

Website signup requires confirmation before your address is added to the newsletter. Confirmation links expire after 24 hours.

You can unsubscribe using the link in a newsletter or by contacting us. We may retain a limited record of your unsubscribe preference so that we can honour it and prevent accidental re-enrolment. Unsubscribing does not automatically erase historical delivery or correspondence records.

AI-assisted research, audio and messaging

We use external AI, research and speech services to help prepare and check briefings and generate audio. Newsletter subscriber lists are not inputs to the editorial generation process.

If you use our optional conversational messaging service, your question, relevant recent conversation and briefing context may be sent to an AI provider to prepare a response. The service may also use external research tools. It is designed to avoid sending personal identifiers or conversation transcripts in search queries.

Please avoid sending passwords, credentials or sensitive personal or confidential information through this service.

We access AI models through exe.dev managed LLM gateway services and Fireworks AI (fireworks.ai). Relevant source material, draft text, narration scripts and, for optional messaging, your question and relevant conversation context may be processed by these services.

Service providers and overseas processing

We use providers to host and secure IPN, store information, deliver communications and support editorial production. Our current services include:

Providers receive information relevant to the services they perform. Some information may be stored or processed outside New Zealand.

We remain responsible for personal information processed on our behalf. Where an overseas transfer is a disclosure subject to the Privacy Act’s overseas-disclosure requirements, we will ensure that a permitted basis applies, such as comparable privacy safeguards.

We may also disclose information where authorised by you or permitted or required by law.

Cookies and technical information

Our hosting and access services may use cookies or similar technologies for authentication and security. Blocking these may prevent access to private areas.

Links to external sources and use of third-party email, feed or podcast applications are subject to those services’ own privacy practices.

Security and retention

We use access controls, protected storage and restricted administrative access to safeguard personal information. No system can guarantee absolute security.

We keep personal information only for as long as needed for the purpose for which it may lawfully be used. This may include delivering subscriptions, respecting opt-outs, resolving disputes, maintaining editorial records and investigating security or delivery problems.

Different records may have different retention periods. Expiry of a confirmation link does not itself delete the associated signup record. Backup copies may remain until their normal retention cycle ends.

If a privacy breach causes, or is likely to cause, serious harm, we will notify the Privacy Commissioner and affected people as soon as practicable, subject to any applicable legal exception.

Your rights and complaints

You can ask us to access or correct personal information we hold about you. We may need to verify your identity before releasing information.

We will respond to access and correction requests as soon as reasonably practicable, normally within 20 working days. If a lawful extension or withholding ground applies, we will explain it.

If we do not make a correction you request, you can ask us to attach a statement of the correction sought.

You can also ask us to delete information. We will consider the request and explain any information we need to retain; New Zealand law does not provide an unrestricted right to deletion.

Please contact letsgo@sierraechocharlie.com with requests or concerns. You may also complain to the Office of the Privacy Commissioner.

Changes to this policy

We may update this policy as our services or practices change. We will publish the revised policy with its effective date and take additional steps to notify you where required.