Privacy Policy

Information You Provide Directly

• Contact and inquiry information — name, email address, job title, employer name, and the content of your message or inquiry submitted via forms, email, or chatbot.
• Account and registration information — name, work email address, job title, organisation name, and password when registering for platform access.
• Event and expo information — name, email, job title, organisation name, and information shared during audit conversations at events.
• Feedback and correspondence — content of any communications, survey responses, or feedback you provide.
• Platform content — data, documents, project information, or other content submitted to the NeuroFolio platform, processed in accordance with our Terms of Service.

Information Collected Automatically

• Usage data — pages visited, features used, links clicked, time spent on pages, and other usage patterns.
• Device and technical data — browser type, operating system, device type, screen resolution, and language settings.
• Log data — IP address, access times, referring URLs, and error logs recorded automatically by our servers.
• Cookies and similar technologies — tracking technologies used to collect information about your browsing activity. See Section 8 for details.
• Chatbot interactions — content of conversations with our chatbot "Neuro," your IP address (in hashed form for rate-limiting), and any contact information you provide.

Information from Third Parties

We may receive information from analytics providers, event platforms, and business networking platforms. We handle such information in accordance with this Privacy Policy and any restrictions imposed by the source.

Providing and improving the Services — to operate, maintain, and improve our platform, website, and related services; to respond to inquiries and support requests; and to deliver written diagnoses and other outputs from our audit process.

Communication — to send you responses to your inquiries, updates about the platform or Design Partner Programme, and, with your consent, marketing communications about our Services, events, and content.

Events and expo activities — to manage event registrations, conduct booth audit sessions, and follow up with written diagnoses and relevant information.

Security and fraud prevention — to detect, investigate, and prevent fraudulent activity, security incidents, abuse, and other harmful conduct; to enforce our Terms of Service.

Analytics and research — to understand how people interact with our website and Services; to analyse usage trends; and to inform product development.

Legal compliance — to comply with applicable laws, regulations, and legal obligations; to respond to lawful requests; and to establish, exercise, or defend legal claims.

Where applicable data protection law requires a legal basis for processing, we rely on: contract performance (processing necessary to provide the Services you have requested); legitimate interests (operating and improving our Services, conducting marketing, preventing fraud, and ensuring security); consent (where we ask for and you provide it, such as for marketing communications — withdrawable at any time); and legal obligation (processing necessary to comply with our legal obligations).

We do not sell your personal information.

Service providers and sub-processors — we engage trusted third-party service providers for cloud hosting, analytics, email communications, and AI model processing. These providers process personal information only on our behalf under appropriate data protection agreements.

AI providers — our platform uses large language model providers to power certain AI features. We take steps to ensure such providers do not use Customer Data for model training. See Exhibit C of our Terms of Service for details.

Business transfers — if NeuroFolio is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will provide notice before your personal information is subject to a different privacy policy.

Legal requirements — we may disclose your information if required by applicable law, legal process, or governmental authority, or if we believe in good faith that disclosure is necessary to protect the rights, property, or safety of NeuroFolio, our customers, or the public.

With your consent — we may share your information with third parties where you have provided your consent.

We retain personal information for as long as necessary to fulfil the purposes for which it was collected, to satisfy legal, regulatory, accounting, or reporting requirements, and to establish, exercise, or defend legal claims.

• Inquiry and contact information — up to three (3) years from last contact
• Account and platform data — duration of engagement plus thirty (30) days following termination or expiration
• Chatbot conversation logs — twelve (12) months from the date of conversation
• Marketing and event data — until you withdraw consent or request deletion
• Usage and analytics data (aggregated/anonymised) — may be retained indefinitely

Depending on your location and applicable law, you may have the following rights:

• Access — request a copy of the personal information we hold about you
• Correction — request correction of inaccurate or incomplete personal information
• Deletion — request deletion of your personal information, subject to certain exceptions
• Restriction — request restriction of processing in certain circumstances
• Data portability — receive your personal information in a structured, machine-readable format
• Objection — object to processing where we rely on legitimate interests
• Withdrawal of consent — withdraw consent at any time where processing is based on consent
• Non-discrimination — we will not discriminate against you for exercising any privacy rights

To exercise any of these rights, contact us at hello@neurofolio.ai with the subject line "Privacy Request." We will respond within forty-five (45) days. We may need to verify your identity before processing your request.

If you are a California resident, please also see Section 9 (California Privacy Rights — CCPA) for additional rights. For a standalone CCPA notice, visit neurofolio.ai/legal/ccpa.

Our website uses cookies and similar tracking technologies to collect information about your browsing activity, improve your experience, and analyse how our website is used.

• Strictly necessary cookies — essential to enable core website functionality. Cannot be disabled.
• Analytics cookies — help us understand how visitors interact with our website by collecting information about pages visited and usage patterns.
• Functional cookies — remember your preferences and settings to enhance your experience.
• Marketing cookies — used to track visitors across websites to display relevant advertisements, where applicable.

You can control and manage cookies through your browser settings. Disabling certain cookies may affect the functionality of our website.

This section applies to California residents and is provided in accordance with the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 ("CCPA").

Categories of Personal Information Collected

In the preceding twelve (12) months, we have collected the following categories of personal information: Identifiers (name, email, IP address); Professional or employment-related information (job title, employer); Commercial information (records of services considered or obtained); Internet or electronic network activity (browsing history, chatbot interactions, usage data); Geolocation data (general location from IP address); and Inferences drawn from the above to create profiles reflecting professional interests.

We do not intentionally collect sensitive personal information as defined under the CCPA.

Sale and Sharing

We do not sell or share personal information as those terms are defined under the CCPA. No opt-out is required, but you may contact us to confirm this at any time.

Your California Rights

• Right to Know — request disclosure of the categories and specific pieces of personal information we have collected, the sources, purposes, and third parties with whom we share it
• Right to Delete — request deletion of personal information we have collected from you, subject to certain exceptions
• Right to Correct — request correction of inaccurate personal information
• Right to Non-Discrimination — we will not discriminate against you for exercising your CCPA rights

How to Submit a California Privacy Request

Submit requests by email to hello@neurofolio.ai (subject: "California Privacy Request") or by mail to: Ensuresap Consulting Inc, Attn: Privacy Request, 971 US Highway 202N, Suite R, Branchburg, NJ 08876. We will respond within forty-five (45) days. For the full standalone CCPA Notice, visit neurofolio.ai/legal/ccpa.