Privacy Policy

Our commitment to protecting your privacy and personal data.

Privacy Policy

At Neuralyn, we are committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy explains how we collect, use, store, and protect your information in accordance with the General Data Protection Law (LGPD - Lei Geral de Proteção de Dados) and the General Data Protection Regulation (GDPR).

1. Data We Collect

We collect the following categories of personal data:

Personal Information:

  • Full name
  • Email address
  • Phone number (optional)
  • Physical address (when required for billing)
  • Tax identification number (CPF/CNPJ for Brazilian users, when required for invoicing)

Login and Authentication Data:

  • Username or email for authentication
  • Password (stored in encrypted and hashed format - we never store plain text passwords)
  • Multi-factor authentication data (when enabled)

Payment Information:

  • Billing address
  • Payment method type
  • Transaction history

Note: We do not store sensitive credit card data. All payment processing is handled by our certified payment processors (Stripe, Mercado Pago) who comply with PCI-DSS standards.

Technical Data:

  • IP address
  • Browser type and version
  • Operating system
  • Device information
  • Time zone and language preferences

Usage Data:

  • Pages visited and features used
  • Actions performed within the service
  • Service preferences and configurations
  • Error logs and performance data

Cookies and Similar Technologies:

  • Session cookies for authentication
  • Preference cookies for user settings
  • Analytics cookies for service improvement

2. How We Collect Data

We collect your data through the following methods:

  • Forms on our website: When you fill out contact, registration, or subscription forms
  • Account registration: When you create an account on our platform
  • Service usage: Automatically collected during your use of our services
  • Cookies and tracking pixels: Through technologies embedded in our website
  • External integrations: When you use social login (Google, Facebook, Apple) or connect third-party services
  • Customer support: When you contact us via email or other channels

3. Purpose of Data Processing

We use your personal data for the following purposes:

  • Account management: To create, maintain, and manage your user account
  • Service provision: To provide, operate, and maintain our services
  • Payment processing: To process subscriptions, payments, and billing
  • Service improvement: To analyze usage patterns and enhance our services
  • Customer support: To respond to inquiries and provide technical assistance
  • Transactional communications: To send confirmations, invoices, and service notifications
  • Marketing communications: To send promotional content (only with your consent, with easy opt-out option)
  • Legal compliance: To comply with legal obligations and regulatory requirements
  • Security: To detect, prevent, and address fraud, abuse, and security issues

4. Legal Basis for Processing (LGPD)

We process your personal data based on the following legal grounds:

  • Contract execution: Processing necessary to fulfill our contractual obligations to you
  • Consent: When you explicitly agree to specific data processing (e.g., marketing communications)
  • Legal obligation: When processing is required by law (e.g., tax records, regulatory compliance)
  • Legitimate interest: When processing is necessary for our legitimate business interests, provided they don't override your rights
  • Credit protection: When necessary for credit analysis and fraud prevention

5. Data Sharing

We may share your data with the following categories of recipients:

  • Payment processors: Stripe, Mercado Pago - for payment processing
  • Cloud infrastructure providers: For data hosting and storage
  • Analytics tools: For service improvement and usage analysis
  • Authentication providers: Supabase - for secure user authentication
  • Legal authorities: When required by law, court order, or regulatory request

Important: We do not sell your personal data to third parties. Any data sharing is limited to what is necessary for service operation and legal compliance.

6. International Data Transfer

Your data may be processed and stored in servers located in:

  • United States
  • European Union
  • Brazil

When transferring data internationally, we ensure adequate protection through:

  • Standard contractual clauses approved by regulatory authorities
  • Ensuring recipients maintain equivalent data protection standards
  • Using services that are certified under recognized data protection frameworks

7. Data Storage and Security

We implement robust security measures to protect your data:

  • Encryption: Data is encrypted in transit (TLS/SSL) and at rest (AES-256)
  • Access control: Strict access controls limit data access to authorized personnel only
  • Monitoring: Continuous security monitoring and intrusion detection
  • Regular audits: Periodic security assessments and vulnerability testing
  • Secure development: Security-focused development practices and code reviews

While we implement comprehensive security measures, no system is 100% secure. We continuously work to improve our security posture and promptly address any identified vulnerabilities.

8. Data Retention Period

We retain your personal data according to the following criteria:

  • Active account data: Retained while your account is active and for the period necessary to provide services
  • After account deletion: Personal data is deleted within 30 days, except where retention is required by law
  • Financial records: Retained for up to 5 years as required by tax regulations
  • Legal obligations: Data may be retained longer if required for legal proceedings or regulatory compliance
  • Anonymized data: Aggregated, anonymized data may be retained indefinitely for analytics purposes

9. Your Rights as a Data Subject (LGPD)

Under the LGPD, you have the following rights regarding your personal data:

  • Confirmation: Confirm whether we process your personal data
  • Access: Access your personal data that we hold
  • Correction: Request correction of incomplete, inaccurate, or outdated data
  • Anonymization or deletion: Request anonymization, blocking, or deletion of unnecessary or excessive data
  • Portability: Request transfer of your data to another service provider
  • Deletion: Request deletion of data processed with your consent
  • Information: Obtain information about entities with which your data has been shared
  • Consent revocation: Revoke consent for data processing at any time
  • Opposition: Object to processing that violates the LGPD

10. How to Exercise Your Rights

To exercise any of your rights, please follow these steps:

  • Contact channel: Send your request to [email protected]
  • Response time: We will respond to your request within 15 business days
  • Identity verification: For security, we may need to verify your identity before processing your request

You can also exercise some rights directly through your account settings, including updating personal information and managing communication preferences.

11. Cookie Usage

We use cookies and similar technologies for the following purposes:

Essential Cookies:

  • Session management and authentication
  • Security and fraud prevention
  • Load balancing and service stability

Functional Cookies:

  • Remembering your preferences and settings
  • Language and region preferences
  • Personalization features

Analytics Cookies:

  • Understanding how visitors use our service
  • Measuring and improving service performance
  • Identifying popular features and content

Managing Cookies:

You can control cookies through your browser settings. Note that disabling certain cookies may affect service functionality. For detailed cookie settings, please visit our Cookie Policy page.

12. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements.

  • Notification: Significant changes will be communicated via email or prominent notice on our website
  • Review: We encourage you to review this policy regularly
  • Effective date: Changes become effective upon posting unless otherwise stated

13. Contact

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

  • Email: [email protected]
  • Subject: Include "Privacy Inquiry" in your email subject for faster processing

We are committed to addressing your concerns and resolving any issues related to your privacy.

Last updated: March 2026