Privacy policy

1. Who is responsible

The controller of the personal data processed through this website (neuroden.ai) is Neuroden, the team that runs this website.

Contact for any data protection question: support@neuroden.ai.

2. The short version

• We do not use cookies.
• We do not use analytics, advertising or tracking tools of any kind.
• We do not store any information about you in your browser.
• The contact form sends your message to us by e-mail. The website itself keeps no copy of it.
• We do not sell, rent or share your data for marketing.

3. Visiting the website

When you open a page, your browser sends technical data to the server that delivers the site: your IP address, the date and time, the page requested, the browser and the operating system, and the referring page. This happens on every website and is needed to show you the page.

Our hosting provider processes this data on our behalf to deliver the site and to protect it against abuse and attacks. We do not use it to identify you and we do not combine it with other data.

Legal basis: our legitimate interest in providing a secure, working website (Art. 6(1)(f) GDPR).

Retention: the hosting provider keeps these logs only for as long as it needs them for delivery and security, then deletes them.

4. When you write to us

You can write to us with the form on the Contact page, or by e-mail to hello@neuroden.ai.

The form sends us an e-mail with what you type into it: your name, your e-mail address or phone number, your message, and the language of the page. Nothing else is added: no IP address and no data about your browser.

To send it, the website uses a small server function run by our hosting provider, Vercel, and the e-mail delivery service Resend (section 5). The function does not keep your message: it passes it on to Resend, and Resend delivers it to our mailbox.

To protect the form against abuse, the function uses your IP address to limit how many messages can be sent in a short time. It keeps the address only in its memory and only as a one-way code (a hash). It uses this code for 10 minutes. After that, it deletes the code the next time it runs, and in any case when it stops. It never writes the address to a log and never puts it in the e-mail.

Like any request to the website, the sending also appears in our hosting provider’s technical logs (section 3).

If the direct sending does not work and your browser runs JavaScript, the page prepares the same message as an e-mail for your own e-mail app, and you decide whether to send it. Without JavaScript, the page shows our e-mail address instead.

If you e-mail us directly, we receive your e-mail address, what you write, and your name and phone number if you give them.

We use this data only to read and answer your message. Please do not send passwords, health data or other sensitive information.

You are not obliged to give us any data. Without it, however, we cannot answer you.

Legal basis: the steps you ask us to take by writing to us (Art. 6(1)(b) GDPR) and our legitimate interest in answering messages (Art. 6(1)(f) GDPR).

Retention: we delete your messages when we no longer need them to answer you, and at the latest 12 months after our last exchange, unless the law requires us to keep them longer. Resend keeps a copy of each e-mail it delivers, with its delivery data, for a limited time set by its own terms, and then deletes it.

5. Who else processes the data

We use three service providers, each bound by a data processing agreement:

• Hosting: Vercel Inc. (United States), which delivers the website and runs the contact form’s server function.
• Sending the form’s messages: Resend, a service of Plus Five Five, Inc. (United States), which delivers the messages from the form to our mailbox.
• E-mail: our e-mail service provider, which stores the messages sent to hello@neuroden.ai and support@neuroden.ai.

We do not give personal data to anyone else, unless the law obliges us to.

6. Transfers outside the EU

Vercel Inc. and Plus Five Five, Inc. (Resend) are based in the United States.

Vercel Inc. is certified under the EU–U.S. Data Privacy Framework, which the European Commission recognises as adequate (Art. 45 GDPR), and it also uses the Commission’s standard contractual clauses (Art. 46 GDPR).

Resend’s data processing agreement includes the Commission’s standard contractual clauses (Art. 46 GDPR). Plus Five Five, Inc. also takes part in the EU–U.S. Data Privacy Framework.

If any other provider processes data outside the European Economic Area, we rely on an adequacy decision or on the standard contractual clauses. You can ask us for a copy of these safeguards at support@neuroden.ai.

7. Your rights

Under the GDPR you have the right to:

• know whether we process data about you and get a copy of it (Art. 15);
• have incorrect data corrected (Art. 16);
• have your data deleted (Art. 17);
• restrict the processing (Art. 18);
• receive your data in a portable format (Art. 20);
• object to processing based on our legitimate interest (Art. 21).

To use any of these rights, write to support@neuroden.ai. We answer within one month. It is free.

You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the country where you live, work or where you think the infringement took place.

8. No automated decisions

We do not make decisions about you based solely on automated processing, and we do not create profiles of visitors.

9. Security

The website is delivered only over an encrypted connection (HTTPS). The form sends your message over an encrypted connection too. Access to our e-mail is protected and limited to the people who answer the messages.

10. Children

This website is not intended for children under 16. We do not knowingly process their data.

11. Changes

If the way the website handles data changes, we update this page and the date at the top.