PRIVACY POLICY

1. INTRODUCTION

Neurasyna AI (“we,” “us,” or “the Platform”) respects your privacy and is committed to protecting your personal data. This policy explains how we handle your information in compliance with the EU General Data Protection Regulation (GDPR) and other applicable privacy laws.

2. DATA WE COLLECT

• Account Information: Email address, full name, and password. For Social Sign-ups (Google/Apple), we receive your email and name from the provider.
• Reflective Content: Chat logs, journal entries, and session transcriptions you provide to interact with AI agents.
• Biometric Data (Age Verification): To ensure users are 18+, we use Everypixel.com for age estimation via selfie. The image is processed instantly and is never stored on Neurasyna AI servers.
• Payment Data: Payments are processed via Stripe. We do not store your credit card details on our servers.

3. LEGAL BASIS FOR PROCESSING

We process your data based on:

• Contractual Necessity: To provide the AI services you requested.
• Explicit Consent: For the processing of Special Category Data (personal insights, emotional trends, and psychological motifs), we require your explicit consent during registration.

4. THIRD-PARTY SUB-PROCESSORS

To provide our services, we share data with the following trusted providers, all of whom are configured to respect data privacy:

• AI Models: DeepSeek, Google (Gemini), Assembly AI, Speechmatics, and Open Router. Your data is NOT used to train these third-party models.
• Analytics: Loglesk.io (privacy-focused, cookie-free analytics for the presentation site).
• Hosting: A secure VPS located in Germany.
• External Media: Embedded YouTube videos may set third-party cookies according to Google’s privacy policy.

5. DATA RETENTION & DELETION

• Active Deletion: If you delete a single conversation or transcript, it is immediately removed from our database.
• Audio Files: Audio uploaded for transcription is deleted immediately after the text transcription process is complete.
• Account Deletion: If you delete your account, all personal data is wiped. To prevent credit abuse, your email is hashed/flagged to prevent immediate re-registration for free credits.
• Backups: Encrypted database backups are retained for a maximum of 3 months for disaster recovery.

6. SECURITY MEASURES

We implement industry-leading security to protect your sensitive data:

• Encryption: All data is encrypted at rest using AES-256 and in transit via HTTPS.
• Access Control: Database access is strictly limited to the Provider (Andrei Sandulescu).
• Penetration Testing: We perform periodic security audits using Strix AI pen-testing tools.

7. YOUR RIGHTS (GDPR)

You have the following rights regarding your data:

• Right to Access & Portability: Use the "Download All Data" button in your dashboard to receive a copy of your data.
• Right to Erasure: You may use the "Delete Account & Data" feature at any time.
• Right to Rectification: You can update your name, profile picture, and timezone in settings. Email addresses cannot be changed to prevent system abuse.
• Right to Object: You may withdraw your consent for data processing at any time by deleting your account.

8. THERAPIST DATA RESPONSIBILITY

Therapists using the AI Assistant act as the Data Controller for their clients' data. Neurasyna AI acts as the Data Processor. Therapists are responsible for ensuring they have legal grounds (consent) to process their clients' audio/transcripts.

9. CONTACT US

For any questions regarding this Privacy Policy or to exercise your data rights, please contact:
Email: andrei.sandulescu@neurasyna.ai