1. Who We Are

Neura Space GmbH (“Neura”, “Neura Space”, “we”, “our”, or “us”) develops human-centered AI technologies designed to improve how people work, focus, and collaborate with intelligent systems.
This Privacy Policy explains how we collect, use, disclose, retain, and protect personal data when you visit our website, contact us, join an early access or beta program, interact with our services, or otherwise communicate with us.

Controller:
Neura Space GmbH
Kö-Bogen, Königsallee 2b
40212 Düsseldorf
Germany
‍
Email: privacy@neura.space
Alternative contact: info@neura.space
Website: https://neura.space

2. Scope of this Privacy Policy

This Privacy Policy applies to:
- our website;
- contact forms and business communications;
- early access, waitlist, and beta programs;
- product updates and service-related communications;
- support, feedback, and inquiry handling;
- Neura services that link to this Privacy Policy.

This Privacy Policy does not apply to third-party websites, applications, products, or services that are not operated by Neura.
Where Neura provides services to an organization, such as an employer, customer, or enterprise client, Neura may process certain personal data on behalf of that organization. In such cases, the organization is generally the controller of that data and Neura acts as a processor in accordance with the applicable customer agreement and data processing agreement.

3. Information We Collect

Depending on how you interact with Neura, we may collect the following categories of personal data.

3.1 Information You Provide to Us

You may provide personal data directly to us, including:
- name;
- email address;
- company name;
- job title or role;
- contact details;
- account or beta registration information;
- feedback, survey responses, support requests, and messages you send to us;
- information you choose to provide when communicating with us.

3.2 Technical and Website Data

When you visit our website or interact with our online services, we may collect limited technical information, including:
- IP address;
- browser type and version;
- device type;
- operating system;
- referring URLs;
- pages viewed;
- date and time of access;
- approximate location derived from IP address;
- website usage information;
- error logs and security logs.

3.3 Product Usage and Interaction Data

Where you use Neura products, beta features, or adaptive functionality, we may process usage and interaction data, including:
- feature usage;
- navigation events;
- click activity;
- workflow interactions;
- application usage patterns;
- timing and engagement signals;
- settings and preferences;
- system performance data;
- diagnostic and error data.

We process this information to operate, secure, improve, and personalize our services, and to support adaptive AI functionality.

3.4 Customer Content and Integrations

If you use Neura products or integrations, you or your organization may choose to provide or connect certain content, files, workflow data, calendar data, communication data, or other information.
Neura accesses such information only as necessary to provide the services, based on user permissions, customer instructions, applicable contractual terms, or another valid legal basis.
Neura does not access private content without appropriate authorization.

4. How We Use Personal Data

We use personal data for the following purposes:
- to provide, operate, and improve our website and services;
- to manage early access, waitlist, and beta programs;
- to respond to inquiries, support requests, and feedback;
- to communicate service-related information;
- to send product updates, announcements, or marketing communications where permitted by law;
- to personalize user experiences and support adaptive functionality;
- to analyze website and product performance;
- to maintain security and prevent misuse, fraud, abuse, or unauthorized access;
- to debug errors and improve reliability;
- to comply with legal, regulatory, contractual, and accounting obligations;
- to establish, exercise, or defend legal claims.

5. Legal Bases for Processing

Where the GDPR applies, we process personal data only where a valid legal basis exists. Depending on the context, we rely on one or more of the following legal bases:

5.1 Performance of a Contract or Pre-Contractual Measures

We process personal data where necessary to provide services, manage user accounts, administer beta access, respond to business inquiries, or take steps requested before entering into a contract.

5.2 Legitimate Interests

We process personal data where necessary for our legitimate interests, provided that such interests are not overridden by individual rights and freedoms. These interests may include:
- securing our website, systems, and services;
- improving our products and user experience;
- responding to inquiries from business contacts;
- preventing misuse or unauthorized access;
- analyzing service performance;
- developing and testing product features;
- communicating with users and customers about relevant product or service matters.

5.3 Consent

We rely on consent where required by law, including for certain optional cookies, analytics technologies, marketing communications, or optional personalization features.
Where processing is based on consent, you may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing before withdrawal.

5.4 Legal Obligations

We process personal data where necessary to comply with applicable legal obligations, including tax, accounting, regulatory, and compliance requirements.

6. Adaptive Features and Behavioral Signals

Neura may process limited usage, interaction, and workflow-related signals to provide adaptive and personalized functionality.
These signals may include navigation behavior, feature usage, click activity, workflow interactions, timing signals, application usage patterns, and similar interaction data.
‍
We use such information to:
- improve usability;
- personalize user experience;
- support adaptive AI functionality;
- understand product performance;
- improve reliability and security;
- reduce friction in workflows;
- develop and test product features.

Where possible, we use aggregated, anonymized, or pseudonymized data.
Neura does not use behavioral signals to sell personal data or provide personal data to advertisers.
Neura does not record passwords or authentication credentials.
Neura does not intentionally infer sensitive characteristics such as health status, political opinions, religious beliefs, trade union membership, sexual orientation, or similar protected categories unless such information is explicitly provided by the user and supported by an appropriate legal basis.
Neura does not use product telemetry to make disciplinary, promotion, termination, compensation, or employee performance decisions. Neura does not make solely automated decisions that produce legal or similarly significant effects on individuals unless separately disclosed, legally permitted, and supported by appropriate safeguards.

7. AI Features and Model Training

Neura may use artificial intelligence technologies to provide recommendations, personalization, workflow assistance, adaptive experiences, and other intelligent functionality.
AI-generated outputs are intended to assist users. Users remain responsible for reviewing decisions, actions, and outcomes based on such outputs.
Unless expressly stated otherwise or agreed with a customer, Neura does not use customer content or personal data to train third-party foundation models.
Where Neura uses third-party AI providers or infrastructure providers, such providers process data only as necessary to provide the requested functionality and subject to appropriate contractual, confidentiality, security, retention, and data protection safeguards.
Neura may use aggregated, anonymized, or de-identified information to improve its services, provided that such information cannot reasonably be used to identify an individual.

8. What We Do Not Do

Trust is central to Neura.
Neura does not:
- sell personal data;
- provide personal data to advertisers;
- record passwords or authentication credentials;
- access private files or content without appropriate authorization;
- use personal data for unrelated purposes;
- use customer content or personal data to train third-party foundation models unless expressly stated or agreed;
- make solely automated decisions with legal or similarly significant effects on individuals without appropriate disclosure, legal basis, and safeguards.

9. Cookies and Similar Technologies

Neura may use cookies and similar technologies to operate and improve our website and services.
We may use:
- essential cookies and technologies required for website functionality, security, and service operation;
- preference cookies to remember user settings;
- analytics or performance technologies to understand website usage and improve user experience;
- marketing technologies only where permitted by law and, where required, with consent.

Where required by applicable law, optional cookies and similar technologies are used only after consent.
You can manage or withdraw cookie preferences through the cookie settings available on our website. You may also manage cookies through your browser settings, although disabling certain cookies may affect website functionality.

10. Analytics

We may use analytics tools to understand how visitors use our website and how our services perform.
Analytics data may include information such as pages visited, session duration, browser type, device type, approximate location, referral source, and interaction events.
Where required by law, analytics tools that are not strictly necessary are used only with consent.

11. Marketing Communications

We may send product updates, announcements, newsletters, or other marketing communications where permitted by law.
You may opt out of marketing communications at any time by using the unsubscribe link in the communication or by contacting us at privacy@neura.space.
We may still send service-related communications where necessary, such as security notices, account messages, legal updates, or operational information.

12. Third-Party Services and Subprocessors

We may use trusted third-party service providers to operate, secure, and improve our website and services.
These providers may support functions such as:
- cloud infrastructure and hosting;
- database and storage services;
- email delivery;
- analytics;
- customer support;
- security monitoring;
- error logging;
- authentication;
- AI infrastructure or AI model services;
- communication and collaboration tools.

These providers are authorized to process personal data only as necessary to provide services to Neura and are subject to contractual confidentiality, security, and data protection obligations.
Where Neura acts as a processor for enterprise customers, subprocessors are used in accordance with the applicable data processing agreement.

13. International Data Transfers

Neura is based in Germany. Personal data may be processed in Germany, the European Economic Area, or other countries where Neura, its service providers, or its customers operate.
Where personal data is transferred outside the European Economic Area, the United Kingdom, or Switzerland, we rely on appropriate safeguards where required by law. These safeguards may include adequacy decisions, Standard Contractual Clauses, data processing agreements, transfer impact assessments, or other legally recognized transfer mechanisms.

14. Data Retention

We retain personal data only for as long as necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.
‍
Retention periods vary depending on the type of data and the context of processing. In general:
- website security logs are retained for a limited period necessary for security, debugging, and misuse prevention;
- contact inquiries are retained for as long as necessary to respond and maintain appropriate business records;
- beta program and account data are retained for the duration of the beta or service relationship, unless deletion is requested or legal retention obligations apply;
- support communications may be retained to provide support, improve services, and maintain business records;
- analytics data is retained only for as long as necessary for analysis and improvement;
- backup copies may be retained for a limited period according to our backup and security procedures.
‍
When personal data is no longer needed, we delete it, anonymize it, or retain it only where required for legal, security, or compliance reasons.

15. Data Security

We implement appropriate technical and organizational measures designed to protect personal data against unauthorized access, disclosure, alteration, loss, misuse, or destruction.
These measures may include access controls, encryption in transit, system monitoring, security logging, restricted access rights, confidentiality obligations, backup procedures, and vendor security reviews.
However, no online service or method of transmission can guarantee absolute security.

16. Your Rights

Depending on your location and applicable law, you may have the following rights regarding your personal data:
- the right to access your personal data;
- the right to correct inaccurate or incomplete personal data;
- the right to request deletion of your personal data;
- the right to restrict processing;
- the right to object to processing based on legitimate interests;
- the right to object to direct marketing;
- the right to data portability;
- the right to withdraw consent where processing is based on consent;
- the right not to be subject to solely automated decisions that produce legal or similarly significant effects, where applicable.

To exercise your rights, please contact us at:
privacy@neura.space
‍
You may also contact us at:
info@neura.space
‍
We may need to verify your identity before responding to a request.

17. Complaints

If you believe that our processing of personal data violates applicable data protection law, you have the right to lodge a complaint with a competent data protection supervisory authority.
For Neura Space GmbH in Düsseldorf, the competent authority may be:
‍
Landesbeauftragte für Datenschutz und Informationsfreiheit
Nordrhein-Westfalen
Kavalleriestraße 2-4
40213 Düsseldorf
Germany

Website: https://www.ldi.nrw.de
You may also contact the data protection authority in your country or region of residence.

18. Children

Our website and services are not intended for children under the age of 16. We do not knowingly collect personal data from children under 16.
If you believe that a child has provided us with personal data, please contact us so that we can take appropriate steps.

19. Enterprise and Workplace Use

Where Neura services are provided through an organization, such as an employer, enterprise customer, or institution, that organization may be responsible for informing authorized users about how their personal data is processed.
In such cases, Neura processes personal data according to the customer’s instructions, the applicable customer agreement, and any applicable data processing agreement.
If you use Neura through your organization, you may also contact your organization’s administrator or privacy contact for more information about how your organization uses Neura.

20. Changes to this Privacy Policy

We may update this Privacy Policy from time to time.
If we make material changes, we will take reasonable steps to notify users, such as updating the “Last Updated” date, posting a notice on our website, or providing additional notice where appropriate.

21. Contact Us

If you have questions about this Privacy Policy or how Neura processes personal data, please contact us:

Neura Space GmbH
Kö-Bogen, Königsallee 2b
40212 Düsseldorf
Germany

Email:

Website: