1. Who we are
Neureus AI ("Neureus", "we", "us") operates the API at app.neureus.ai and the marketing site at neureus.ai. Contact: hello@neureus.ai.
2. What we collect
Account data
When you register, we create a tenant record containing your workspace ID. We do not store passwords — authentication is via WebAuthn passkeys (public-key cryptography; your private key never leaves your device).
Usage data
- Request logs: Timestamp, endpoint, response time, and HTTP status are written to our analytics infrastructure per request. No request bodies are logged here.
- LLM events: Model ID, token counts, latency, and cost estimate are logged per chat completion.
- Chat responses (short-term cache): To reduce cost and latency, a chat completion response may be cached for up to 1 hour, keyed to your request. Cached responses are not retained past that window and this cache is skipped for requests that opt into non-deterministic behavior (e.g. extended reasoning).
- Adaptive routing data: When you use automatic model selection, an excerpt of the model's output (up to 500 characters) is retained to improve routing quality. A small number of high-quality outputs may be retained in full for up to 90 days as reference examples for that feature.
- Batch inference: Batch requests and their results (including submitted prompts) are stored in our database so you can retrieve results asynchronously. This data is retained until you delete the batch job or your account.
- Auth events: Passkey register and login successes and failures are logged for security audit purposes.
Product analytics
We use PostHog (us.posthog.com) to track aggregate product usage — page views, feature adoption, and session length. Events are associated with your tenant ID, not personal identifiers like name or email.
Billing data
Payment processing is handled by Stripe. We store your Stripe customer ID and subscription status. Card numbers, expiry, and CVV are never seen or stored by Neureus.
Your AI data
Documents you ingest via RAG, vectors you store, agents you create, and workflows you define are stored in your isolated tenant partition. Your data is never used to train models or shared with other tenants.
3. How we use your data
- Operate and improve the Neureus platform, including adaptive model routing (see above)
- Attribute costs and generate billing records
- Detect and prevent security incidents
- Send transactional emails (receipts, alerts) — no marketing without consent
4. Data sharing
We do not sell your data. We share data only with:
- LLM providers (OpenAI, Anthropic, Google, and edge inference providers) — only when you make a chat completion request, routed through Cloudflare AI Gateway. Requests using BYOK keys go directly to your provider account.
- Cloudflare — as our infrastructure and AI Gateway provider.
- Stripe — for payment processing.
- PostHog — for product analytics.
- Our transactional email provider — for receipts and account alerts.
- Law enforcement — when legally required.
5. Data residency
Neureus is deployed on a global edge network across 300+ locations. Databases are replicated globally. Vector indexes are US-based. If specific data residency is required for your workload, contact sales@neureus.ai to discuss Enterprise options.
6. Data retention
- Account data: Retained until you delete your account.
- Request logs (Analytics Engine): 30-day rolling window.
- Audit log: 90 days.
- Chat response cache: up to 1 hour.
- Adaptive-routing output excerpts: retained indefinitely for routing quality (excerpt only, ≤500 characters); a small number of full high-quality examples are retained up to 90 days.
- Batch inference requests/results: retained until job or account deletion.
- Your AI data (documents, vectors, agents, workflows): retained until you delete them, or until account deletion.
7. Your rights
You may request access to, correction of, or deletion of your personal data at any time by emailing hello@neureus.ai. Account deletion removes all tenant-scoped data within 30 days.
8. Cookies
The dashboard at app.neureus.ai sets a session token in localStorage (not a cookie). The marketing site (neureus.ai) sets no cookies of its own. PostHog may set a first-party analytics cookie; you can opt out via browser settings.
9. Security
All data in transit is encrypted via TLS 1.3. Provider API keys stored in Neureus are encrypted at rest (AES-GCM). Passkey credentials store only the public key — private keys are never transmitted. Access to any data requires a valid Bearer session token.
10. Changes
We will update this policy as the product evolves. Material changes will be communicated via email to account holders at least 14 days in advance.
11. Contact
Questions about this policy: hello@neureus.ai