Privacy Policy

1. Who we are

Neureus AI ("Neureus", "we", "us") operates the API at app.neureus.ai and the marketing site at neureus.ai. Contact: hello@neureus.ai.

2. What we collect

Account data

When you register, we create a tenant record containing your workspace ID. We do not store passwords — authentication is via WebAuthn passkeys (public-key cryptography; your private key never leaves your device).

Usage data

• Request logs: Timestamp, endpoint, response time, and HTTP status are written to our analytics infrastructure per request. No request bodies are logged.
• LLM events: Model ID, token counts, latency, and cost estimate are logged per chat completion. Prompt and completion text are not stored.
• Auth events: Passkey register and login successes and failures are logged for security audit purposes.

Product analytics

We use PostHog (us.posthog.com) to track aggregate product usage — page views, feature adoption, and session length. Events are associated with your tenant ID, not personal identifiers like name or email.

Billing data

Payment processing is handled by Stripe. We store your Stripe customer ID and subscription status. Card numbers, expiry, and CVV are never seen or stored by Neureus.

Your AI data

Documents you ingest via RAG, vectors you store, agents you create, and workflows you define are stored in your isolated tenant partition (dedicated database and vector index). Your data is never used to train models or shared with other tenants.

3. How we use your data

• Operate and improve the Neureus platform
• Attribute costs and generate billing records
• Detect and prevent security incidents
• Send transactional emails (receipts, alerts) — no marketing without consent

4. Data sharing

We do not sell your data. We share data only with:

• LLM providers (OpenAI, Anthropic, and edge inference providers) — only when you make a chat completion request. Requests using BYOK keys go directly to your provider account.
• Stripe — for payment processing.
• PostHog — for product analytics.
• Law enforcement — when legally required.

5. Data residency

Neureus is deployed on a global edge network across 300+ locations. Databases are replicated globally. Vector indexes are US-based. If specific data residency is required for your workload, contact sales@neureus.ai to discuss Enterprise options.

6. Data retention

• Account data: Retained until you delete your account.
• Request logs (Analytics Engine): 30-day rolling window.
• Audit log: 90 days.
• Your AI data (documents, vectors, agents, workflows): Retained until you delete them, or until account deletion.

7. Your rights

You may request access to, correction of, or deletion of your personal data at any time by emailing hello@neureus.ai. Account deletion removes all tenant-scoped data within 30 days.

8. Cookies

The dashboard at app.neureus.ai sets a session token in localStorage (not a cookie). The marketing site (neureus.ai) sets no cookies. PostHog may set a first-party analytics cookie; you can opt out via browser settings.

9. Security

All data in transit is encrypted via TLS 1.3. Provider API keys stored in Neureus are encrypted at rest. Passkey credentials store only the public key — private keys are never transmitted. Access to any data requires a valid Bearer session token.

10. Changes

We will update this policy as the product evolves. Material changes will be communicated via email to account holders at least 14 days in advance.

11. Contact

Questions about this policy: hello@neureus.ai