Privacy Policy

At NeuralHyve, Inc., we take your privacy seriously. This Privacy Policy explains what data we collect, why we collect it, how we use it, and the choices you have in relation to your data when you use our AI-powered lead qualification platform and related services (the "Services").

By using the Services, you agree to the practices described in this Privacy Policy. This Policy is incorporated by reference into our Terms of Service.

1. Overview

NeuralHyve operates as both a data controller (for data about our own customers and website visitors) and a data processor (for lead data our customers instruct us to process on their behalf). We are committed to transparency, minimal data collection, and strong security practices.

2. Who We Are

NeuralHyve, Inc. is a corporation registered in the State of California, USA, with its principal place of business in Irvine, California. We provide AI agent software for lead capture, qualification, and conversion.

For questions about this Policy, contact us at adam@neuralhyve.com.

3. Data We Collect

We collect different types of data depending on your relationship with us:

Category	Examples	Source
Account data	Name, business email, company name, role, billing address	Provided by you at sign-up
Usage data	Pages visited, feature interactions, session duration, IP address, browser/device type	Automatically via our platform and analytics tools
Communications data	Emails, support tickets, call recordings (with consent), meeting notes	When you contact us or attend calls
Lead/contact data (on behalf of customers)	Names, phone numbers, email addresses, conversation transcripts, CRM fields	Processed as instructed by our customers (you)
Integration data	OAuth tokens, CRM records, calendar events, webhook payloads	Via authorized third-party integrations you connect
Payment data	Billing details, transaction history	Via our payment processor (Stripe); we do not store card numbers

4. How We Use Your Data

We use the data we collect to:

• Deliver the Services — operate AI agents, sync with your CRM, book meetings, and generate reports.
• Maintain and improve the platform — fix bugs, add features, and optimize performance.
• Billing and account management — process payments, manage subscriptions, and send invoices.
• Customer support — respond to your requests, troubleshoot issues, and provide onboarding assistance.
• Security and compliance — detect fraud, prevent abuse, and comply with legal obligations.
• Communications — send product updates, policy changes, and (where you have opted in) marketing emails. You can opt out of marketing at any time.
• Aggregate analytics — produce anonymized, aggregated usage insights to understand how customers use the Services.

We do not use your data for targeted advertising or sell it to third parties.

5. Sharing & Disclosure

We share data only in limited circumstances:

• Service providers. We engage trusted vendors (e.g., cloud infrastructure, analytics, payment processing) under strict data processing agreements. They may only process data on our behalf for specified purposes.
• Your integrations. When you connect third-party tools (HubSpot, Salesforce, Calendly, etc.), data is shared with those platforms as directed by you.
• Legal requirements. We may disclose data if required by law, court order, or to protect the rights, property, or safety of NeuralHyve, our customers, or the public.
• Business transfers. In the event of a merger, acquisition, or sale of assets, customer data may be transferred as part of that transaction. We will notify you in advance.

We never sell, rent, or trade your personal data or your leads' data to third parties for their own marketing purposes.

6. AI Training & Your Data

Your data is used exclusively to train and operate the AI agents we build for you. We do not use your proprietary data — including your leads' conversations, CRM records, or business-specific configurations — to train models that serve other customers.

Aggregate, anonymized usage signals (e.g., response latency benchmarks) may inform general platform improvements. These contain no identifiable customer or lead data.

7. Cookies & Tracking Technologies

Our website and platform use cookies and similar technologies:

• Essential cookies — required for authentication, session management, and security. Cannot be disabled.
• Analytics cookies — help us understand how visitors interact with our site (e.g., page views, time on page). We use privacy-respecting analytics tools.
• Preference cookies — remember your settings and preferences.

You can manage cookie preferences through your browser settings. Disabling certain cookies may affect platform functionality.

8. Data Retention

We retain your data for as long as your account is active or as needed to provide the Services. After account termination:

• Your data is available for export for 30 days.
• After 30 days, we will delete or anonymize your data, unless we are required by law to retain it longer.
• Billing records may be retained for up to 2 months for tax and legal compliance.
• Aggregated, anonymized analytics data may be retained indefinitely.

9. Security

We implement industry-standard technical and organizational measures to protect your data, including:

• Encryption in transit (TLS 1.2+) and at rest (AES-256).
• Role-based access controls and least-privilege principles.
• Regular security audits and penetration testing.
• SOC 2 Type II certification.
• HIPAA-ready deployment configurations available on request.

No system is perfectly secure. In the event of a data breach that affects your rights, we will notify you as required by applicable law.

10. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you.
• Correction — request that we correct inaccurate or incomplete data.
• Deletion — request that we delete your personal data (subject to legal retention obligations).
• Portability — request your data in a structured, machine-readable format.
• Restriction — request that we limit how we process your data in certain circumstances.
• Objection — object to processing based on our legitimate interests.
• Opt-out of marketing — unsubscribe from marketing emails at any time via the link in any email or by contacting us.

To exercise any of these rights, contact us at adam@neuralhyve.com. We will respond within 30 days (or the timeframe required by applicable law).

11. GDPR (European & UK Users)

If you are located in the European Economic Area (EEA) or the United Kingdom, the General Data Protection Regulation (GDPR) or UK GDPR applies to your data. Our legal bases for processing include:

• Contract performance — processing necessary to deliver the Services you've subscribed to.
• Legitimate interests — platform security, fraud prevention, and service improvement.
• Legal obligation — compliance with applicable laws.
• Consent — for marketing communications and non-essential cookies.

Data Processing Agreements (DPAs) compliant with GDPR Article 28 are available upon request. International data transfers to the USA are covered by appropriate safeguards including Standard Contractual Clauses (SCCs).

You have the right to lodge a complaint with your local data protection authority (e.g., the ICO in the UK, or your national supervisory authority in the EEA).

12. CCPA / CPRA (California Residents)

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), grants you additional rights. Under these laws, you have the right to:

• Know what personal information we collect, use, disclose, and sell.
• Delete your personal information (with exceptions).
• Correct inaccurate personal information.
• Opt out of the sale or sharing of personal information. We do not sell or share personal information as defined by CCPA/CPRA.
• Limit use and disclosure of sensitive personal information.
• Non-discrimination for exercising your rights.

To submit a CCPA/CPRA request, email us at adam@neuralhyve.com with "California Privacy Request" in the subject line.

13. Children's Privacy

The Services are not directed to individuals under the age of 18, and we do not knowingly collect personal data from children. If we become aware that we have collected data from a child, we will take steps to delete it promptly. If you believe we may have data from a child, please contact us.

14. Third-Party Links & Integrations

The Services may contain links to or integrations with third-party websites and services (e.g., HubSpot, Salesforce, Calendly). This Privacy Policy does not apply to those third parties. We encourage you to review the privacy policies of any third-party services you connect.

15. Changes to This Policy

We may update this Privacy Policy periodically. When we make material changes, we will notify you by email or by posting a notice in the Services at least 14 days before the changes take effect. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of the Services after the effective date constitutes acceptance of the updated Policy.

16. Contact Us