Privacy Policy

1. Controller and contact

Neuronsy is responsible for the processing described in this policy. Privacy and data-rights requests can be sent to contact@neuronsy.com.

2. Information we process

Account data includes your verified email address or phone number, profile fields, locale, time zone, session and security metadata.

Workspace data includes projects, documents, notes, whiteboards, uploaded files and images, topics, imported URLs or repositories, questions, answers, feedback, mastery and review progress.

Billing data includes Stripe customer, checkout, price and subscription identifiers, plan status, billing period and cancellation state. Stripe collects payment details directly. Neuronsy does not receive your complete card number.

3. How information is used

Information is used to provide the service, enforce workspace permissions and plan quotas, process subscriptions, recover durable jobs, prevent abuse, diagnose failures and improve reliability. It is not used to sell advertising profiles.

4. Service providers

Stripe processes checkout and subscription management. Twilio Verify processes the email address or phone number used for sign-in, with SendGrid supporting email delivery.

OpenRouter and the selected model providers process the bounded instructions, source context, images or audio needed for AI and transcription features you request. Some research features use Exa through OpenRouter. When you import a GitHub repository or website, Neuronsy requests the source from GitHub or the URL you provide.

DataFast measures visits and referrals on the public marketing website. DiceBear generates default avatars from a pseudonymous seed. Hosting and security providers process the infrastructure data needed to operate Neuronsy.

5. AI and dictation

When you request an AI feature, Neuronsy sends only the instructions and bounded context needed for that request. Requests to OpenRouter ask for data collection to be disabled and zero-data-retention processing, while the terms of any downstream model provider continue to apply.

Dictation audio is sent for transcription when you use that feature. Neuronsy stores the resulting transcript and usage metadata in the application database, but not the raw audio.

6. Cookies and website analytics

The application uses an opaque HttpOnly session cookie to keep you signed in securely. The public website loads DataFast to measure visits, referral sources and interactions. DataFast does not run inside the authenticated application.

7. Security and retention

Sign-in identifiers are encrypted at rest and separately keyed for lookup. Workspace permissions are tenant-scoped, uploaded sources are malware-scanned, and transport encryption protects data in transit.

Authentication challenges are retained for up to 24 hours. Sessions have a nominal 30-day lifetime and are later purged according to their expiration or revocation state. Acknowledged operational events are retained for 30 days, terminal AI and source-processing jobs for 90 days, and audit, Stripe webhook and terminal checkout records for up to 400 days. Soft-deleted sources are retained for 30 days before purge. Other soft-deleted workspace items and documents can be restored during that window.

8. Public sharing

Learning activity is private by default. If you choose to publish an activity card, the selected activity, mastery labels and avatar become available through a revocable sharing link.

9. Your choices

You can edit profile and workspace data through the product and end active sessions from Settings. Requests concerning access, correction, deletion or export should be sent to contact@neuronsy.com.

10. Changes to this policy

We may update this policy when the service, providers or applicable requirements change. The latest revision date appears at the top of this page. Material changes will use a new acceptance version in the account creation flow.