Privacy Policy

1. Who we are & scope

This Privacy Policy explains how neuralduct ("we", "us", "our") collects, uses, discloses and protects personal information when you use the neuralduct website, web application and related services (the "Service").

We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), and — where it applies — the EU/UK General Data Protection Regulation (GDPR). This policy should be read together with our Terms & Conditions.

2. Information we collect

We do not intentionally collect sensitive information (such as health or biometric data). Please don't upload sensitive personal information into project content.

3. How we collect it

• Directly from you — when you create an account, enter project data, subscribe, or contact support.
• Automatically — through cookies and similar technologies, and from server logs as you use the Service.
• From third parties — for example, our authentication and payment providers confirm account or transaction details.

4. How we use your information

We use personal information to:

• provide, operate and maintain the Service, including saving and syncing your projects;
• authenticate you and secure your account;
• process subscriptions, billing and renewals;
• process floor plans and design data — including sending relevant content to our AI providers — to generate and review designs at your request;
• provide support and respond to your enquiries;
• improve, troubleshoot and develop new features (using aggregated or de-identified data where practical);
• send service-related communications, and (where permitted) product updates you can opt out of; and
• comply with our legal obligations and enforce our Terms.

5. Legal bases (GDPR)

Where the GDPR applies, we rely on the following legal bases: performance of a contract (to provide the Service you sign up for); legitimate interests (to secure, improve and promote the Service in a way that is not overridden by your rights); consent (for certain cookies and marketing, which you can withdraw); and legal obligation (to comply with applicable laws).

6. When we share information

We do not sell your personal information. We share it only:

• with service providers and sub-processors who operate the Service on our behalf (section 7), under confidentiality and data-protection obligations;
• where you direct us to (for example, sharing a read-only design with a client for approval);
• to comply with the law, a lawful request, or to protect our rights, users or the public; and
• in connection with a business transfer (such as a merger or acquisition), subject to this policy.

7. Service providers & sub-processors

We use reputable third parties to deliver the Service. These currently include:

Each provider only receives the information needed to perform its function, and is required to protect it. This list may change as the Service evolves.

8. International data transfers

Our providers may store or process data on servers located outside your country, including outside Australia. Where we transfer personal information internationally, we take reasonable steps to ensure it is handled consistently with this policy and applicable law (including, where relevant, standard contractual clauses).

9. Cookies & analytics

We use cookies and similar technologies to keep you signed in, remember preferences, secure the Service, and understand how it is used. Essential cookies are required for the Service to function. You can control non-essential cookies through your browser settings; disabling some cookies may affect functionality.

10. Data retention

We keep personal information for as long as your account is active or as needed to provide the Service, and thereafter only as required to comply with legal, accounting or reporting obligations, resolve disputes and enforce our agreements. When information is no longer needed, we delete or de-identify it. You can delete projects at any time, and request account deletion as described in section 12.

11. Security

We use technical and organisational measures to protect personal information, including encryption in transit, access controls, and hosting with reputable providers. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Keep your password confidential and notify us promptly of any suspected compromise.

12. Your rights & choices

Subject to applicable law, you may have the right to:

• Access the personal information we hold about you;
• Correct inaccurate or incomplete information (much of which you can edit in your account);
• Delete your account and associated personal information;
• Export a copy of your data in a portable format;
• Object to or restrict certain processing, and withdraw consent where we rely on it; and
• Opt out of non-essential marketing communications.

To exercise any of these rights, contact us via our support page. We will verify your identity and respond within the time required by law.

13. Children's privacy

The Service is intended for professional use and is not directed to children. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us with personal information, contact us and we will delete it.

14. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version here and revise the "Last updated" date. If changes are material, we will take reasonable steps to notify you. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

15. Contact & complaints