Privacy Policy

1. Introduction

This Privacy Policy explains how Neurosecure B.V. ("we", "us", "our") collects, uses, and protects your personal data when you use our AI services, websites, and applications (the "Services").

We are committed to protecting your privacy and processing your personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable European data protection laws.

2. Who We Are (Data Controller)

We act as the data controller for personal data processed under this Privacy Policy.

3. What Data We Collect

We may collect the following categories of data:

• Account Information: name, email address, login credentials.
• Usage Data: interactions with our Services, queries (inputs), outputs generated, logs, and device information (browser type, IP address, operating system).
• Payment Data (if applicable): billing address, payment method (processed securely by third-party providers; we do not store full card details).
• Communication Data: emails, support requests, feedback.
• Cookies & Tracking: we use cookies and similar technologies for functionality, analytics, and security.

4. How We Use Your Data

We process your personal data for the following purposes:

1. To provide and maintain the Services.
2. To personalize your experience (e.g. outputs tailored to your inputs).
3. To process payments and manage subscriptions.
4. To ensure security, prevent fraud, and comply with law.
5. To improve our AI systems and Services.
6. To send important service-related communications (e.g. updates, security notices).
7. With your consent, to send marketing or promotional communications.

5. Legal Bases for Processing

We process personal data under the following legal bases:

• Contract: to provide you with the Services you request.
• Legal Obligation: to comply with tax, regulatory, or law enforcement requirements.
• Legitimate Interest: to improve and secure our Services.
• Consent: for optional uses such as marketing or analytics (where required).

6. Data Sharing

We may share your personal data with:

• Service providers (e.g. hosting, payment processors, analytics).
• Legal authorities when required by law.
• Business partners in case of a merger, acquisition, or restructuring.

We do not sell your personal data.

7. International Transfers

If we transfer personal data outside the EEA, Switzerland, or UK, we ensure adequate safeguards, such as Standard Contractual Clauses (SCCs) or an adequacy decision by the European Commission.

8. Data Retention

We retain your personal data only as long as necessary for the purposes described above:

• Account data: kept until account deletion.
• Payment records: retained as required by tax and accounting laws.
• AI inputs/outputs: stored temporarily to provide the Service and improve quality, unless longer retention is needed with your consent.

9. Your Rights (under GDPR)

You have the following rights:

• Access: request a copy of your personal data.
• Rectification: correct inaccurate data.
• Erasure ("Right to be Forgotten"): request deletion of your data.
• Restriction: limit processing in certain cases.
• Data Portability: receive your data in a machine-readable format.
• Objection: object to processing based on legitimate interests or marketing.
• Withdraw Consent: withdraw consent at any time for processing based on consent.

To exercise your rights, contact us at info@velonova.ai.

You also have the right to lodge a complaint with your local Data Protection Authority (e.g. the Dutch Data Protection Authority, "Autoriteit Persoonsgegevens").

10. Security

We use appropriate technical and organisational measures to protect your personal data, including encryption, access controls, and monitoring. However, no system is fully secure, and we cannot guarantee absolute protection.

11. Children's Data

Our Services are not directed at children under 18. We do not knowingly collect personal data from children. If we become aware, we will delete such data.

12. Changes to this Policy

We may update this Privacy Policy to reflect changes in our practices, legal requirements, or services. We will notify you of material changes (e.g. by email or service notice).

13. Contact Us

If you have questions or requests about this Privacy Policy, please contact us at: