Privacy Policy

This Privacy Policy explains how Neural Studio, Inc., a Delaware corporation ("Neural Studio," "we," "us," or "our"), collects, uses, discloses, and protects personal information when you visit or use the Neural Studio website, platform, applications, APIs, cloud workspaces, and related services (collectively, the "Services").

This Policy applies to personal information that identifies, relates to, describes, or can reasonably be linked to an individual. It does not apply to information that has been aggregated or de-identified so that it cannot reasonably be linked to an individual.

1. Information We Collect

A. Account and Profile Information

When you create or use an account, we may collect information such as your name, email address, username, organization or affiliation, workspace membership, account settings, and other information you choose to provide.

We use Amazon Cognito, an Amazon Web Services (AWS) service, for authentication and account-access functions. Cognito may process account identifiers, authentication information, login activity, and related security information.

B. Payment and Subscription Information

Payments are processed through Stripe. Stripe may collect payment-card information, billing details, and other information necessary to process a transaction. Neural Studio generally receives transaction information such as payment status, amount, subscription status, billing identifiers, and limited payment-method information rather than your full payment-card number.

C. User Content

"User Content" includes source code, notebooks, datasets, files, model weights, checkpoints, artifacts, prompts, outputs, experiment information, environment configurations, and other materials that you or your collaborators upload, create, store, transmit, or process through the Services.

We process User Content to provide the functionality you request, including storage, collaboration, compute, troubleshooting, security, and support.

D. Compute, Workspace, and Service Usage Information

We may collect information about how the Services are used, including workspace activity, resource requests, GPU or CPU type, runtime, storage usage, jobs, experiment metadata, API requests, feature usage, performance information, error events, billing metrics, and logs.

E. Device and Network Information

When you use the Services, we may receive information such as IP address, browser type, device type, operating system, approximate region derived from IP address, pages or features accessed, referring URLs, and dates and times of access.

F. Product Analytics and Masked Session Replay

We use PostHog for product analytics and session replay. PostHog may collect product-usage events and interaction information such as pages or screens viewed, features used, clicks, navigation, scrolling, timestamps, browser or device information, and similar telemetry.

We configure PostHog session replay with masking intended to prevent text and user-input content from being visible in replay recordings. Session replay may still capture non-textual interface interactions, page structure, navigation, and related metadata.

You should avoid placing passwords, API keys, credentials, or other secrets in fields or locations not intended for secrets.

G. Communications

If you contact us, we may collect the contents of your communication and related contact information.

Neural Studio uses Amazon Simple Email Service (Amazon SES), an AWS service, to send account verification, password reset, security, billing, operational, and other service-related emails.

2. How We Use Information

We may use personal information to:

• provide, operate, maintain, and secure the Services;
• create and authenticate accounts and manage access;
• provide collaborative workspaces and permissions;
• provision compute, storage, networking, and related infrastructure;
• measure resource consumption and calculate usage-based charges;
• process subscriptions and payments;
• provide customer support and troubleshoot problems;
• understand product usage and improve usability, reliability, and performance;
• detect fraud, abuse, unauthorized access, and security incidents;
• send account, security, billing, and service communications;
• enforce our Terms of Service and protect our rights, users, infrastructure providers, and others;
• comply with legal obligations and lawful requests; and
• create aggregated or de-identified operational information.

Where permitted by law, we may also send product or company communications. You can opt out of marketing emails using the unsubscribe method provided in those messages. You cannot opt out of transactional or service communications that are necessary to operate your account.

3. How We Process User Content

As between you and Neural Studio, you retain your ownership rights in User Content. We process User Content as reasonably necessary to provide, secure, maintain, troubleshoot, support, and operate the Services; to follow your instructions; and to comply with law.

We do not sell User Content. We may use aggregated or de-identified operational information that does not reasonably identify you or disclose confidential User Content to understand and improve the reliability, performance, security, and usability of the Services.

If an organization provides you access to Neural Studio or controls a workspace you use, that organization may control User Content in the workspace and may have its own privacy obligations. Requests relating to personal information contained in an organization-controlled workspace may need to be directed to that organization.

4. Service Providers and Infrastructure

We use service providers to operate Neural Studio. These providers may process information on our behalf or as otherwise described in their own terms and privacy notices.

When you request or use compute or storage resources, User Content and technical information reasonably necessary to provide the resource may be transmitted to or processed on the applicable infrastructure provider's systems.

We may add, replace, or remove service providers as our Services evolve. If a change materially affects our privacy practices, we will update this Policy and provide notice as required by law.

5. How We Disclose Information

We may disclose personal information:

• to the service providers described above and other vendors that help us operate the Services;
• to members, owners, or administrators of a workspace as directed by workspace permissions;
• when you direct us to disclose information or connect a third-party integration;
• to comply with applicable law, regulation, legal process, court order, or lawful government request;
• to investigate fraud, misuse, abuse, or security incidents and to protect Neural Studio, users, infrastructure providers, or others;
• in connection with a merger, acquisition, financing, restructuring, bankruptcy, or sale of assets, subject to applicable law; or
• with your consent or as otherwise disclosed when the information is collected.

6. Sale, Sharing, and Targeted Advertising

Neural Studio does not sell personal information for money.

Neural Studio does not currently share personal information for cross-context behavioral advertising or use personal information to serve targeted advertisements across unrelated websites or services.

If these practices change, we will update this Policy and provide any notices, choices, or opt-out mechanisms required by applicable law.

7. Cookies and Similar Technologies

Neural Studio and our service providers may use cookies, local storage, pixels, SDKs, and similar technologies to operate and understand the Services.

These technologies may be used for authentication, security, session management, preferences, fraud prevention, product analytics, and service performance. PostHog may use identifiers or similar technologies for analytics and session replay.

Where we provide privacy or cookie controls, we intend those controls to operate as described. Where applicable law requires consent or an opt-out for a particular technology, we will provide the required choice.

Browser "Do Not Track" signals are not standardized, and the Services do not currently change behavior in response to a generic Do Not Track signal. Where legally required and technically applicable, we will honor recognized opt-out preference signals. Because we do not currently sell personal information or use it for cross-context behavioral advertising, such signals generally do not change those practices.

8. Data Retention

We retain personal information for as long as reasonably necessary for the purposes described in this Policy, including to maintain your account, provide the Services, satisfy contractual obligations, resolve disputes, maintain security, prevent abuse, meet accounting and tax requirements, and comply with law.

When an account or User Content is deleted, copies may remain for a limited period in backups, logs, fraud-prevention systems, billing records, or other systems where deletion is not immediate or where retention is required by law. We may retain aggregated or de-identified information that no longer reasonably identifies you.

9. Security

We use administrative, technical, and organizational safeguards designed to protect personal information and the Services. No method of transmission, storage, or security can guarantee absolute protection.

You are responsible for securing your account credentials, workspace permissions, API keys, secrets, and devices, and for maintaining appropriate backups of important User Content.

10. Your Privacy Rights

Depending on where you live and which laws apply, you may have rights regarding your personal information, such as the right to:

• request access to personal information we maintain about you;
• request correction of inaccurate personal information;
• request deletion of personal information;
• obtain a portable copy of certain personal information;
• opt out of certain sales, sharing, or targeted advertising if those practices apply;
• limit certain uses of sensitive personal information where applicable;
• withdraw consent where processing is based on consent; and
• appeal certain decisions concerning a privacy request where applicable.

These rights vary by jurisdiction and may be subject to exceptions. We may need to verify your identity before completing a request.

You may submit a privacy request through the privacy, support, or contact method made available in the Services or on the Neural Studio website. Authorized agents may submit requests where permitted by law, subject to appropriate verification.

We will not discriminate against you for exercising a privacy right granted by applicable law.

11. U.S. State Privacy Disclosures

U.S. privacy requirements vary by state. Depending on the law that applies to Neural Studio and to you, the categories of personal information we collect may include identifiers, customer records, commercial or subscription information, internet or electronic-network activity, approximate geolocation derived from IP address, professional or organizational information, and information contained in User Content.

We collect these categories from you, your device or browser, members of your workspace, service providers, and the operation of the Services. We use and disclose them for the business and operational purposes described in this Policy.

We do not currently sell personal information or share it for cross-context behavioral advertising. If Neural Studio becomes subject to a state law that grants additional rights, we will honor those rights as required.

12. Children

The Services are intended only for users who are at least 18 years old. Neural Studio does not knowingly permit individuals under 18 to create or use Neural Studio accounts. If we learn that an individual under 18 has created an account or provided personal information in connection with an account, we may take appropriate steps to delete the information and terminate or restrict the account, subject to applicable law. In addition, we do not knowingly collect personal information from children under 13 in a manner that would violate the Children's Online Privacy Protection Act (COPPA).

13. International Users

Neural Studio operates from the United States. If you access the Services from another country, your information may be processed in the United States and in other countries where Neural Studio or its service providers operate. Privacy laws in those countries may differ from the laws where you live.

If Neural Studio becomes subject to additional international data-transfer or privacy requirements, we will implement the measures required by applicable law.

14. Third-Party Services and Links

The Services may contain links to or integrations with third-party products and services. This Privacy Policy does not govern the independent privacy practices of third parties. We encourage you to review their privacy notices before using those services.

15. Changes to This Privacy Policy

We may update this Privacy Policy as our Services, vendors, technology, or legal obligations evolve. The updated Policy will state its effective date.

If a change materially affects how we handle personal information, we will take reasonable steps to notify affected users, such as through email, an in-product notice, or another reasonably conspicuous method, as required by law.

16. Contact

Questions or requests about this Privacy Policy may be submitted to Neural Studio, Inc. through the privacy, support, or contact method published in the Services or on the Neural Studio website.