1. Data controller
The controller of the data collected on this site is [[LEGAL NAME]], with registered address at [[LEGAL ADDRESS]], tax ID [[TAX ID]].
Contact channel for any privacy or data protection request: [email protected].
The controller identification must be completed before final publication. Until then, this policy is a draft subject to legal review.
2. Scope of this policy
This policy applies to browsing the public website neurear360.com and to the forms available there.
The Neurear360 platform —reachable at app.neurear360.com with credentials— is governed by its own contractual terms. When a customer company uses the platform to talk to its own clients, that company acts as controller of that data and Neurear360 acts as processor.
3. What data we process
Depending on how you interact with the site, we may process the following categories:
- Contact and company details you voluntarily enter in the contact form: full name, company, work email, phone and the content of your message.
- Language preference: we store your choice between Spanish and English in your browser local storage.
- Technical visit data: the server publishing the site may log IP addresses and HTTP request data for operation and security. [[CONFIRM SERVER LOG CONFIGURATION AND RETENTION]].
- Aggregated browsing data: if an analytics tool is enabled, usage events without directly identifying personal data will be recorded. [[PENDING ACTIVATION]].
As of the effective date, the form validates the data in the browser and shows a confirmation, but does not yet send it to a server of our own. It is not stored in a Neurear360 database.
4. Why we use the data
- To answer the inquiry you submitted through a form and arrange the next commercial step.
- To remember your language preference during browsing.
- To keep the site secure, available and working properly.
- To comply with applicable legal obligations.
We do not use public website data to build advertising profiles or to make automated decisions with legal effects on individuals.
5. Legal basis
- Consent: when you submit a form and agree to be contacted. You may withdraw it at any time.
- Legitimate interest: for the technical security and abuse-prevention measures needed to operate the site.
- Legal obligation: when a rule requires keeping certain information.
6. Artificial intelligence
The public site includes interactive demos illustrating how the platform reads commercial messages. Those demos run entirely in your browser on a closed set of examples and do not send your text to any artificial intelligence model.
Inside the contracted platform, conversational agents process conversation content to score buying intent, prioritize opportunities and suggest the next action. In that context the customer company defines the purposes and Neurear360 processes the data on its behalf and following its instructions.
- You can request a human at any time: the conversation is handed over to a person with full context.
- Decisions that commercially affect an end customer may be reviewed by the customer company staff.
- Use of data for model training: [[DEFINE POLICY AND CONTRACTS WITH MODEL PROVIDERS]]. This policy does not state that data is never used for training until that condition is contractually verified.
The language model providers that may be involved and the processing locations are not defined yet and must be added before final publication.
7. Controller and processor roles
- Neurear360 as controller: for data it receives directly on its public site and in its own commercial activity.
- Neurear360 as processor: for data that customer companies load or generate inside the platform. In that case the customer instructions define the processing.
8. Third parties, transfers and sub-processors
The public site uses the following third-party services, to the extent indicated:
- Google Fonts (Google LLC): the site downloads the DM Sans and JetBrains Mono typefaces from fonts.googleapis.com and fonts.gstatic.com. As a result of that request, Google receives your IP address and browser data. This is an international transfer to the United States.
- Site publishing infrastructure: [[HOSTING PROVIDER AND REGION]].
Once the platform is commercially live, this section will list the messaging, infrastructure, email and language model providers actually involved, together with their processing location and applicable transfer safeguards.
Recommendation: self-host the typefaces on our own domain to remove the IP transfer to Google. See WEBSITE_LEGAL_COMPLIANCE_REVIEW.md.
9. Cookies and similar technologies
This site does not use first-party or third-party cookies for advertising or profiling.
- Local storage: we store the nr.locale key to remember your language. It is strictly functional and does not identify you.
- Analytics: the site is prepared to push events to a Google Tag Manager container, but no container is loaded at this time, so no information is transmitted. [[CONFIRM WHETHER IT WILL BE ENABLED]].
10. How long we keep data
While the form does not send data to a server of our own, there is no database holding your data to retain.
Once inquiry intake is implemented, these criteria will apply: [[DEFINE RETENTION]] for non-converted commercial inquiries and [[DEFINE RETENTION]] for information linked to a contractual relationship.
11. Your rights
You may request access, rectification, updating, deletion or confidentiality of your personal data, and withdraw any consent you have given. In Argentina these rights are recognized by Law 25.326 on Personal Data Protection.
To exercise them, write to [email protected] stating your request and a contact channel. We will reply within the periods set by applicable regulations.
If you believe your request was not properly handled, you may file a complaint with the Agency for Access to Public Information, the data protection authority in Argentina.
12. Information security
We apply reasonable technical and organizational measures to protect information: HTTPS encryption in transit, role-based access control and environment separation.
Because it is a prerendered static site, the exposed surface is small and does not include end-user databases.
Formal certifications and audits will be documented once they exist. No certification is claimed that has not been obtained.
13. Minors
The site is aimed at professionals and companies. We do not knowingly collect data from people under 18. If we detect an inquiry of that origin, we will delete it.
14. Changes to this policy
If we change this policy, we will update the effective date shown at the top. For substantial changes we will post a visible notice on the site or email those who left their contact details.
15. Contact
Privacy and data protection questions: [email protected].
You can also write to us from the site contact page.