PrivacyPrivacy Policy

1. Who we are

Cerebral Blue dba NeuralSeek (“NeuralSeek,” “we,” “us,” or “our”) is the controller of personal information processed through neuralseek.com and the NeuralSeek platform, unless otherwise noted in a customer agreement where NeuralSeek acts as a processor on behalf of an enterprise customer.

Registered address:
Cerebral Blue dba NeuralSeek
50 Biscayne Blvd, Unit 4902
Miami, FL 33132
United States

Privacy contact: [email protected]

2. Information we collect

We collect personal information in three contexts: (a) when you visit our marketing website, (b) when you contact us, request a demo, or apply to our programs, and (c) when your organization uses the NeuralSeek platform under a customer agreement.

2.1 Information you provide directly

• Contact and account data: name, business email, phone number, company name, role, country, and the message body of any inquiry or demo request.
• Recruiting data: resumes, transcripts, cover letters, and any other materials you submit through our internship or careers process.
• Payment data: if you subscribe via the self-serve platform, our payments processor (Stripe) collects billing information directly. NeuralSeek does not store full card numbers.
• Authentication data: when you log into the Partner Portal or Team Portal, we receive your identity-provider profile (typically Google account name, email, and profile photo).

2.2 Information collected automatically

• Website analytics (only with your consent): if you press “Accept” on our cookie banner, we use Google Analytics 4, loaded through Google Tag Manager, to understand how the site is used: pages viewed, how you arrived, approximate location (city level), device and browser type. Google Analytics does not log or store IP addresses. We do not use Google’s advertising features: Google signals are off, the property is not linked to any advertising account, and advertising storage stays denied. If you press “Reject”, ignore the banner, or your browser sends a Global Privacy Control signal, nothing is loaded from Google and no analytics cookie is set.
• Edge security: our CDN (Cloudflare) sets a __cf_bm bot-management cookie (expires in 30 minutes) and may log request metadata (IP, user-agent, timestamp) to defend against attacks.

2.3 Customer-side platform data

When your organization uses NeuralSeek as a platform, the prompts, documents, knowledge-base content, and interaction logs you process are your organization’s data and are handled under the Data Processing Addendum (DPA) executed with that organization.

NeuralSeek does not train models on customer prompts, documents, or interaction logs. In regulated deployments (containerized or on-prem), customer data does not leave the customer’s infrastructure.

3. How we use information

We use personal information to:

• respond to sales inquiries, demo requests, and support tickets;
• send the limited set of transactional and marketing emails you opt into;
• fulfill customer agreements and provide the NeuralSeek platform;
• operate, secure, and improve the marketing website and the platform;
• process recruiting and internship applications;
• comply with legal obligations and enforce our terms;
• defend our infrastructure against fraud, abuse, and attacks.

4. Legal basis (GDPR)

For individuals in the European Economic Area, United Kingdom, and Switzerland, we process personal information under one or more of the following legal bases:

• Performance of a contract — to fulfill a customer agreement or process a request you initiated.
• Legitimate interests — to operate the website, conduct B2B outreach, defend our infrastructure, and improve our products, where these interests are not overridden by your rights.
• Consent — for optional cookies, marketing communications you explicitly opt into, and any other processing where consent is required.
• Compliance with legal obligations — to respond to lawful requests and maintain required records.

5. Sharing and disclosure

We share personal information only where necessary and only with:

• Service providers (subprocessors): cloud hosting (AWS, Vercel, Cloudflare), payments (Stripe), authentication (Google), analytics (Google Analytics, only with your consent), customer messaging (Google Calendar for scheduling), and similar business-operational vendors, bound by data-processing agreements. A current list is available on request to [email protected].
• Customers and partners (with consent): if you ask to be introduced to a NeuralSeek customer or partner, we may share your inquiry with them.
• Legal and safety: when required by law, in response to valid legal process, or to protect the rights, property, or safety of NeuralSeek, our customers, or the public.
• Business transfers: in connection with a merger, acquisition, financing, or sale of assets, subject to standard confidentiality protections.

We do not sell personal information, and we do not share personal information with advertising networks for cross-context behavioral advertising.

6. International transfers

NeuralSeek is based in the United States. Personal information collected through our website is processed in the United States and may be processed in other countries where our service providers operate.

Where we transfer personal information from the EEA, UK, or Switzerland to a country that has not received an adequacy decision, we rely on the European Commission’s Standard Contractual Clauses (SCCs) and equivalent safeguards. SCCs are available on request.

7. Data retention

We retain personal information for as long as needed to provide the services you requested, comply with our legal obligations, resolve disputes, and enforce our agreements. Typical retention windows:

• Sales and support inquiries: up to 36 months from last interaction.
• Customer agreement records: for the duration of the agreement plus the period required by applicable law (commonly 7 years for tax and contract records).
• Recruiting data: up to 24 months from your application, or longer if you ask us to keep your profile on file.
• Website analytics: Google Analytics keeps event data for 14 months, after which it is deleted automatically; aggregated reports are kept for as long as the site is operational.

8. Your rights

Depending on your jurisdiction, you may have the right to:

• access the personal information we hold about you;
• correct inaccurate or incomplete information;
• delete personal information, subject to legal exceptions;
• restrict or object to certain processing;
• port your data to another service in a structured format;
• withdraw consent at any time, without affecting prior lawful processing;
• lodge a complaint with your local data-protection authority.

California residents have additional rights under the CCPA / CPRA, including the right to know, the right to delete, the right to correct, and the right to opt out of any “sale” or “sharing” of personal information. We do not sell or share personal information as those terms are defined under California law.

To exercise any of these rights, email [email protected]. We will verify your identity and respond within the window required by applicable law.

9. Cookies and similar technologies

We use a small set of cookies and similar technologies on our website:

• Strictly necessary: Cloudflare bot-management (__cf_bm) for site security.
• Functional: session state for the Partner and Team Portals.
• Your cookie choice: when you answer the cookie banner we store your answer in your browser (localStorage key ns-consent: the answer, the banner version and the date) so we do not ask on every page. It identifies no one and is never sent to us. We ask again after six months or when this policy changes what you are agreeing to.
• Display preferences: if you switch between light and dark mode, the choice is kept for that browser tab only (sessionStorage key ns-theme).
• Analytics (only with your consent): Google Analytics 4 sets _ga and _ga_<id> cookies to distinguish visits and sessions (they expire after up to two years). They are set only after you press “Accept”.

Nothing optional is set or loaded before you choose. You can change your answer at any time with the “Cookie settings” link in the site footer; withdrawing deletes the analytics cookies. We treat a Global Privacy Control (GPC) signal from your browser as a refusal. You can also manage cookies through your browser settings; disabling strictly-necessary cookies may impair site functionality.

10. Security

We maintain administrative, technical, and physical safeguards designed to protect personal information. These include TLS 1.2+ in transit, AES-256 at rest, role-based access controls, audit logging, and independent security assessments (SOC 2 Type II, ISO 27001 paths). Details are on our Trust Center.

No system is perfectly secure. If you believe your interaction with us is no longer secure, please contact [email protected] immediately.

11. Children’s privacy

Our website and platform are designed for business users and are not directed to children under 16. We do not knowingly collect personal information from children. If we learn we have, we will delete it.

12. Changes to this policy

We may update this policy from time to time. When we do, we will revise the “Last updated” date at the top of this page and, where the change is material, take additional reasonable steps to notify you.

13. Contact us

Questions about this policy or how we handle your personal information? Reach the privacy contact at [email protected], or write to:

Cerebral Blue dba NeuralSeek
Attn: Privacy
50 Biscayne Blvd, Unit 4902
Miami, FL 33132
United States