Legal information
Privacy Policy
How NewEdge360 collects, uses, protects and shares personal information.
Last updated 11 October 2026
Information we collect
We collect account identity, organisation, contact, billing and service-configuration information; records you submit through forms; security and authentication events; service usage and diagnostic data; and payment status supplied by authorised payment providers. For a CMS assistant connection, we also store the connection name, permitted access level, creator, issue and expiry dates, revocation state and last-used time. We do not store full payment-card details or the complete connection secret after it is first shown.
How we use information
We use information to provide and provision services, authenticate users, process orders, administer subscriptions, prevent fraud and abuse, provide support, maintain audit trails, improve reliability and comply with legal obligations.
Customer-controlled data
Business records entered into subscribed applications remain controlled by the customer subject to the applicable service terms. Access follows tenant, role and branch permissions. Customers are responsible for ensuring that their own collection and use of personal information is lawful.
CMS assistant data
When an authorised user invokes the NewEdge360 CMS connection, the requested public website content, SEO context and—only with draft access—unpublished blog content is returned to that user’s assistant. Tool inputs are processed to answer the request and are not stored as a separate prompt history by the CMS. Drafts created through the connection remain in the customer’s CMS for human review. The assistant provider may retain conversation and tool data under the user’s account settings and that provider’s privacy policy.
Sharing and recipients
We disclose information only as needed to contracted infrastructure, communications, payment, security and support providers; an assistant provider such as OpenAI when an authorised user invokes that connection; authorised reseller channels where applicable; or a competent authority where required by law. Providers receive only the information needed for their role.
Retention timelines
Website content and saved drafts remain until an authorised customer deletes them or the customer account is closed under the service terms. CMS connection credentials expire after the administrator-selected period of 1 to 365 days or earlier revocation; the complete bearer secret is never retained. Connection metadata remains with the customer account until it is deleted or a verified deletion request is completed, unless a longer security or legal hold is required. Contact enquiries and support records are normally retained for up to 24 months after the matter closes. Billing and transaction records are retained for the period required by applicable tax and accounting law. Data awaiting deletion may remain in protected backups until the applicable backup expires.
Security
We use access controls, tenant isolation, encryption in transit, audit records and operational monitoring. No internet service can promise absolute security, so customers must also protect credentials, devices and administrator access.
Your choices and rights
Administrators can choose read-only or draft access, set a connection expiry and revoke a connection from the CMS at any time. Authorised users can delete saved drafts in the CMS and manage or delete conversations through their assistant provider. Depending on applicable law, you may also request access, correction, deletion, restriction or export of eligible personal information. Some records must be retained for security, contractual, financial or legal reasons.
Cookies and analytics
The website uses necessary cookies for security and session operation and may use configured first-party analytics to understand aggregate site use. Optional integrations are governed by the consent and configuration shown on the site.
Contact
Privacy questions and eligible rights requests can be submitted through the Contact page. We may verify identity and authority before acting on a request.
Questions
If anything is unclear, contact NewEdge360 before purchasing or continuing to use the service.
Contact NewEdge360