Privacy Policy — NeuroByte

NeuroByte LLC ("NeuroByte," "we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, share, and protect information when you visit our website at getneurobyte.com (the "Site"), engage us for services, or use any of our software products or platforms (collectively, the "Services").

By using the Site or Services, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the Site or Services.

1. Scope of This Policy

This Privacy Policy applies to information we collect:

Through our Site and any forms, demos, or contact features we offer
When you communicate with us by email, phone, or other channels
When you engage NeuroByte for custom development services or use our productized tools (including but not limited to NeuroMaps, NeuroLens, and other offerings)

This Policy does NOT apply to:

Data we process on behalf of business clients in the course of providing Services to them. In those cases, our client is the data controller, and our handling of that data is governed by the agreement between NeuroByte and the client (typically a Master Services Agreement and Data Processing Addendum).
Third-party websites, applications, or services that may be linked from our Site or integrated with our Services. Those are governed by their own privacy policies.

2. Information We Collect

2.1 Information You Provide Directly

We collect information you voluntarily submit, including:

Contact information: name, business name, email address, phone number, mailing address
Account information: username, password, role, and account preferences if you register for any of our products
Payment information: billing address and payment method details. Card payments are processed by our payment processor (currently Stripe); we do not store full payment card numbers on our systems. ACH and check payments are processed through our banking partners.
Project and communication content: information you share with us during scoping calls, requirements gathering, support requests, or general correspondence
Marketing preferences: your subscription status for any newsletters or product updates

2.2 Information Collected Automatically

When you visit the Site or use our Services, we may automatically collect:

Device and usage data: IP address, browser type and version, operating system, device identifiers, referring URLs, pages viewed, time spent, click activity, and approximate location derived from IP
Cookies and similar technologies: see Section 8

2.3 Information Provided by Clients on Behalf of Their End Users

When a NeuroByte client uses our Services to process information about their own customers, employees, or other end users, that data may include personally identifiable information, internal business data, or transactional records. We process this information solely as a service provider on behalf of the client and according to our agreement with that client.

2.4 Information from Third Parties

We may receive information about you from third parties such as referral partners, business directories, integration partners (e.g., Google APIs you authorize us to access), and service providers used to deliver our Services.

3. How We Use Information

We use the information described above for the following purposes:

To provide and operate the Services, including delivering custom development work, hosting productized tools, and providing client support
To communicate with you about your account, projects, support requests, and changes to our Services
To process payments and manage billing
To improve and develop our Services, including analyzing usage patterns, debugging, and building new features
For marketing and business development, including sending newsletters and product announcements (you can opt out at any time)
For security and fraud prevention, including monitoring for unauthorized access, abuse, or violations of our Terms of Service
To comply with legal obligations, respond to lawful requests, and enforce our agreements
For our legitimate business interests, including operating, evaluating, and improving our business and Services

4. Use of Artificial Intelligence

NeuroByte uses third-party artificial intelligence and machine learning services (including large language models) as part of how we build and operate our Services. Where AI is used in connection with information you or your client organization provide:

We do not use client data to train any AI or machine learning models owned or operated by NeuroByte.
We use AI providers under commercial terms that prohibit those providers from using client data to train their public models. We periodically review the terms of our AI vendors to maintain this commitment.
We minimize the data sent to AI providers to what is necessary to perform the requested function.
AI outputs are probabilistic and may contain errors. Where AI is used in client-facing or decision-supporting workflows, we work with clients to design appropriate human review.

If you are an enterprise client and require specific disclosures about which AI providers we use, retention windows, or sub-processors, those will be addressed in your service agreement.

We do not sell your personal information. We may share information in the following circumstances:

Service providers and sub-processors that help us operate our business, including hosting providers, payment processors, analytics providers, AI/ML providers, communication tools, and customer support tools. These parties are contractually limited to using the information only as necessary to provide their service to us.
Business clients receive information processed on their behalf, as defined in the Service Agreement with that client.
Professional advisors including lawyers, accountants, and auditors, under confidentiality obligations.
Legal compliance where we believe in good faith that disclosure is required by law, court order, regulation, or to protect the rights, property, or safety of NeuroByte, our clients, or others.
Business transfers in connection with a merger, acquisition, financing, reorganization, or sale of all or part of our business. In such cases, we will require the recipient to honor the commitments in this Privacy Policy or provide notice of any material changes.
With your consent for any other purpose disclosed at the time you provide the information.

6. Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods depend on the type of data and the context in which it was collected.

For data processed on behalf of clients, retention is governed by our agreement with the client. After termination of services, we will delete or return client data on the timeline specified in the applicable agreement, subject to legal hold or backup retention windows.

7. Data Security

We implement administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, disclosure, alteration, or destruction. These include access controls, encryption in transit, vendor security review, and reasonable employee training.

No system is perfectly secure. We cannot guarantee absolute security. You are responsible for maintaining the confidentiality of any account credentials and for promptly notifying us of any suspected unauthorized use.

8. Cookies and Tracking Technologies

We use cookies, web beacons, and similar technologies to operate the Site, remember your preferences, analyze traffic, and support our marketing. You can control cookies through your browser settings. Disabling cookies may limit functionality of the Site.

We may use third-party analytics tools (such as Google Analytics or similar). These tools collect information sent by your browser as part of a web page request and may use cookies to recognize repeat visitors.

We do not currently respond to "Do Not Track" browser signals.

9. Your Choices and Rights

You have the following choices regarding your information:

Marketing communications: you can opt out of marketing emails by following the unsubscribe instructions in those messages or contacting us directly. We may still send you transactional or service-related communications.
Access, correction, deletion: you may request to access, correct, or delete personal information we hold about you by contacting us at the address in Section 13. We will respond as required by applicable law. We may need to verify your identity before fulfilling certain requests.
Account closure: you may request deletion of your account by contacting us. Some information may be retained as required by law or for legitimate business purposes.

If your personal information is processed by NeuroByte on behalf of a business client (for example, you are an end user of a tool we built for a client), please direct your request to that client. We will support the client in responding.

10. State-Specific Privacy Disclosures

California Residents (CCPA / CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act. These include the right to know what personal information we collect, the right to request deletion, the right to correct inaccurate information, the right to opt out of the sale or sharing of personal information, and the right not to be discriminated against for exercising your rights.

We do not sell personal information as that term is defined under California law. We do not knowingly share personal information for cross-context behavioral advertising.

To exercise your rights, contact us using the information in Section 13. We will verify your request and respond within the timeframes required by law. You may designate an authorized agent to make a request on your behalf.

Other States

We comply with applicable privacy laws in the states where we do business. If you have questions about how a specific state's law applies to your information, please contact us.

11. Children's Privacy

The Site and Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will take appropriate action.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date at the top of this Policy. If we make material changes, we will provide additional notice through the Site or by other reasonable means. Your continued use of the Site or Services after the effective date of any update constitutes acceptance of the updated Policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact:

NeuroByte LLC Attn: Privacy 1706 N 1200 W #1032, Layton, UT 84041 Email: [email protected]