Privacy Policy

Last revised on September 30th, 2026

Overview

Neurosnap Inc. (“Company”, “Neurosnap”, “Our”, or “We”) respect your privacy and are committed to protecting it through our compliance with this Privacy Policy (“Policy”). This Policy describes the types of information we may collect from you or that you may provide when you visit the website neurosnap.ai or with respect to our software offerings and/or platforms that are accessible through our website (collectively, our “Website”) and our practices for collecting, using, maintaining, protecting, and disclosing that information. If you're a resident of California, Utah, Connecticut, Colorado, Virginia or Nevada or visiting us from the European Economic Area (“EEA”), you should read this Policy and the applicable sections below for residents of California and Nevada and visitors from the UK and EEA.

Please read this Policy carefully to understand our policies and practices regarding your information and how we will treat it. We use your personal data to provide and improve our platform. By using the platform, you agree to the collection and use of information in accordance with this Policy. If you do not agree with our policies and practices, your choice is not to use our Website.

We may modify this Policy at any time by updating this posting and providing you with notice of the updates. All changes are effective immediately following notification, and apply to all access to and use of the Website thereafter. Continued use of our Website following such changes shall indicate your acknowledgment of such changes and agreement to be bound by the terms and conditions of such changes. You are bound by any such modifications and therefore you are expected to visit this page periodically to review this Policy from time to time so you are aware of any changes.

1. Scope

This Policy applies to neurosnap.ai and any subdomains (the “Website”), our software, web applications, APIs, and related online services (together, the “Services”), as well as information we may collect offline (e.g., events, sales or support calls, surveys).

Neurosnap Agent and third-party clients connected through the Neurosnap Model Context Protocol (“MCP”) are optional. You can use the core Neurosnap platform, including its ordinary job and analysis features, without using the Agent or connecting an MCP client. The additional processing described below applies when you choose to use these features.

This Website and the Services may link to or integrate with websites, platforms, social media pages, or content operated by others. Those third parties have their own privacy policies and practices. You understand and agree that Neurosnap is not responsible for the security, privacy, or business practices of any third party.

This Policy applies to information we collect:

  • On the Website and through all associated Neurosnap Services (including software, web apps, and APIs).
  • In email, text, and other electronic messages between you and us.
  • Through our pages, applications, or advertising on third-party services when those pages/apps link to this Policy.

This Policy does not apply to information collected by:

  • Third parties, including through any application, content, or advertising that may link to or be accessible from the Website or Services.

2. Information We Collect (and How We Collect It)

Categories of information

  • Account & Contact Information. Name, email address, organization details (e.g., address, tax ID), and any information you provide during sign-up, purchase, or support requests.
  • Billing & Transactions. Payment method details (processed by our payment providers), invoices, and purchase history needed to fulfill orders and prevent fraud.
  • Content You Provide. Documents, data, and other materials you upload or submit, plus survey responses and other inputs you choose to share.
  • Agent and MCP Information. Agent prompts, conversation history, uploaded or generated files, responses, tool requests and results, job data made available to the Agent or an MCP client, and related usage, billing, and security records. We receive MCP requests and return tool results through our server; a third-party MCP client may separately process information outside Neurosnap.
  • Communications. Records of emails and messages you send to us (including metadata such as time/date and sender information).
  • Usage & Device Information (“Usage Data”). IP address, unique identifiers, device and browser type, operating system, referring/exit pages, pages viewed, feature usage, session timestamps, and similar technical data generated by your interactions with the Website and Services.
  • Cookies & Similar Technologies. Cookies, pixels, web beacons, and local storage used for authentication, preferences, performance, security, and analytics.
  • Third-Party Sources. Information from service providers and partners (e.g., analytics, hosting, or customer support tools) as permitted by law and their policies.

How we collect information

  • Directly from you (e.g., account creation, forms, purchases, uploads, support).
  • Automatically through your use of the Website and Services (e.g., logs, cookies, web beacons).
  • From third parties acting on our behalf or that integrate with our Services.

User Contributions

If you post content to public areas or share with other users, that information is disclosed at your direction. Please use caution when choosing what to share.

In Neurosnap Agent, a personal conversation is available to its creator. A team conversation, including its messages and files, is available to members of that team under the platform’s team access rules. Team credits may pay for a member’s personal or team conversation.

3. How We Use Information

We use the information described above to:

  • Provide and Operate the Services. Create and manage accounts; authenticate users; process transactions; deliver features and customer support.
  • Provide Optional Agent and MCP Features. Send information needed for an Agent request to OpenAI; return relevant Neurosnap data to an authorized Agent or MCP client; maintain conversations, files, and usage records; and carry out tool actions requested through those features.
  • Personalize and Improve. Remember preferences; measure and enhance performance, usability, and reliability; develop new features.
  • Security, Safety, and Integrity. Monitor, prevent, and detect fraud, abuse, and security incidents; protect our users, the Company, and the Services; enforce our Terms and policies.
  • Communicate with You. Send transactional messages (e.g., receipts, updates, account or subscription notices) and respond to inquiries; send marketing communications where permitted.
  • Analytics and Reporting. Analyze aggregate and de-identified usage trends to understand performance and the effectiveness of our campaigns and features.
  • Compliance and Legal. Comply with law, legal process, and enforce rights arising from contracts, including billing and collection.
  • With Your Consent. For any additional purposes that we describe at the time of collection and that you affirmatively approve.

No sale of personal information. We do not sell your personal information. If we ever intend to use or share information in a way not covered here, we will seek your consent where required. We also do not ‘share’ personal information for cross-context behavioral advertising as defined under California law.

How Agent and MCP requests reach other services

When you use Neurosnap Agent, OpenAI processes the prompts, relevant conversation context, files, and Neurosnap data needed to respond. The Agent can use authorized Neurosnap tools and, when network access is available, may query external databases or services such as UniProt, PubChem, AlphaFold DB, or ChEMBL. Such a request can disclose the search terms and relevant portions of your prompts, files, or results to the destination. Restricted mode limits the Agent’s sandbox to specified hostnames, including a shared host used by ChEMBL; it does not prevent processing by OpenAI, access through Neurosnap tools, or access to other resources on an allowed shared host. Recipients outside Neurosnap may apply their own privacy and retention practices.

If you connect a third-party MCP client, the client receives the data returned by the Neurosnap tools it calls and may send that data to its own model provider or other services. You choose and configure that client. Neurosnap cannot determine or control the client’s subsequent use, storage, or disclosure of the data. Review its terms and privacy policy before connecting it, particularly if you work with sensitive information.

4. Retention and transfer of information

Retention of your personal information and data

The Company will retain your personal information and data only for as long as is necessary for the purposes set out in this Policy. We will retain and use your personal information and data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.

The Company will also retain your usage data for internal analysis purposes. Usage data is generally retained for a shorter period of time, except when this data is used to strengthen the security or to improve the functionality of our platform, or we are legally obligated to retain this data for longer time periods.

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize it or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.

Agent conversations and provider retention

Neurosnap stores Agent conversations and their saved files so that you can return to them. Deleting a conversation removes its messages and associated files from active Neurosnap storage, subject to routine backups, records needed for billing, security or legal obligations, and information already sent to other services. Neurosnap normally requests closure of an idle OpenAI Agent session after a short period; this does not delete the conversation saved on Neurosnap.

OpenAI may retain session state, uploaded files, security or abuse-monitoring records, and other information under its applicable policies. Closing or deleting an Agent session is a request to OpenAI to clean up that session; it is not a guarantee that every record is erased immediately. OpenAI states that API data is not used to train its models by default unless the customer opts in, but its Agents API does not currently support Zero Data Retention. We do not promise that Agent data is never stored by OpenAI. See OpenAI’s API data controls and Agents API overview for its current practices.

Transfer of your personal data

Your personal information and data is processed at the Company's operating offices in the US and in any other places where the parties involved in the processing are located. It means that this information may be transferred to — and maintained on — computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those from your jurisdiction. Your consent to this Policy followed by your submission of such information represents your agreement to that transfer.

For transfers to providers acting on our behalf, we take steps reasonably necessary to protect your personal information and data in accordance with this Policy and applicable law, including appropriate safeguards for transfers across jurisdictions. Information sent to independent websites, databases, or MCP clients at your direction may be processed in other countries under those recipients’ own terms and privacy practices.

5. Disclosure of Your Data

Information we may disclose

We may disclose aggregated or de-identified information without restriction. We may disclose personal information that we collect or you provide, as described in this Policy, to:

  • Our subsidiaries and affiliates.
  • Service providers and subprocessors that support our business (e.g., hosting, storage, compute/GPU infrastructure, CDN/DDoS protection, logging/monitoring, customer support, payments, email delivery) and are bound by written confidentiality and data-protection obligations to use the data only for the purposes disclosed here. See Service Providers & Subprocessors below.
  • Recipients of optional Agent or MCP requests when you use those features, including OpenAI for Neurosnap Agent, external databases or websites queried by the Agent, and the MCP client you choose to connect. The information shared depends on the request, tool, and access settings.
  • A buyer or successor in connection with a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all Company assets, in which personal information is among the transferred assets.
  • To fulfill the purpose for which you provide it and for other purposes disclosed at collection.
  • With your consent.

We may also disclose personal information for the following reasons:

  • To comply with law, court order, or legal process (including to respond to government/regulatory requests).
  • To enforce our Terms of Use and other agreements (including for billing and collection)
  • To protect the rights, property, or safety of the Company, our customers, or others (including fraud prevention and credit risk reduction).

Service Providers & Subprocessors (Third-Party Processors List)

We may use third parties to deliver, secure, and support the Services. We require providers acting on our behalf to protect personal information under applicable contractual obligations. As of the date of this Policy, our processors include:

  • Google Cloud — infrastructure/compute
  • MongoDB — managed database services
  • Stripe — payment processing and subscription management
  • Runpod — infrastructure/compute
  • Vultr — infrastructure/compute
  • Cloudflare — CDN, DDoS protection, edge security, data storage
  • OpenAI — AI model processing and hosted Agent execution for the optional Neurosnap Agent feature
  • SendGrid — email automation and marketing

Independent databases, websites, and third-party MCP clients that you choose to use are not necessarily Neurosnap subprocessors. Their handling of information sent to them is governed by their own terms and privacy policies.

We apply data-minimization and share on a need-to-know basis; data is encrypted in transit and at rest where reasonably possible.

6. Security of your personal data

The security of your personal information and data is important to us. Neurosnap is committed to deploying security measures that meet or exceed industry standards and best practices, as outlined on our Security Measures page at neurosnap.ai/security.

However, please remember that no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information and data, we cannot guarantee its absolute security.

Any natural or legal person who processes the data on behalf of the Company may have access to your personal information or data. These third-party vendors collect, store, use, process, and transfer information about your activity on our platform in accordance with their privacy policies.

The safety and security of your information also depends on you. Where we have given you (or where you have chosen) a password for access to certain parts of our Website, you are responsible for keeping this password confidential. We ask you not to share your password with anyone.

Unfortunately, the transmission of information via the internet is not completely secure. Although we do our best to protect your personal information, we cannot guarantee the security of personal information transmitted to our Website. Any transmission of personal information is at your own risk. We are not responsible for circumvention of any privacy settings or security measures contained on the Website.

7. Children's Privacy

In accordance with our Terms of Use, the Website is not designed for use by individuals under the age of 18. Accordingly, we do not intend to or knowingly collect personal information from anyone we know to be under 18 years of age. If you believe we have collected personal data from anyone under 18, please contact us at the email address listed below.

8. What rights do I have in my state?

In addition to the rights above, see Additional US State Privacy Rights for more information.

9. EU & UK Privacy Information

Who this applies to

If you are located in the European Economic Area (EEA) or the United Kingdom, this section supplements the rest of this Privacy Policy.

Controller.

The controller of your personal data (also referred to in this Policy as “personal information”) is Neurosnap Inc.

Your rights

Subject to applicable law, you have the right to:

  • Access, rectify, or delete your personal data.
  • Object to or restrict our processing in certain circumstances (including an unconditional right to object to direct marketing).
  • Data portability, by requesting a copy of certain personal data in a structured, commonly used, machine-readable format.
  • Withdraw consent at any time where processing is based on consent (this will not affect processing carried out before withdrawal).
  • Opt out of marketing communications at any time by using the unsubscribe link in emails or contacting us.
  • Lodge a complaint with your local supervisory authority if you believe we have infringed your rights.

To exercise your rights, email us using the contact information below (subject line: “Privacy Request”). We may need to verify your identity and will respond within the timeframes required by applicable law.

We process personal data only where a legal basis applies, including:

  • Performance of a contract (e.g., creating and administering your account; providing and supporting the Services).
  • Legal obligation (e.g., tax, accounting, compliance).
  • Legitimate interests (e.g., securing and improving the Services, preventing abuse, providing customer support), balanced against your rights and interests.
  • Consent (e.g., certain types of marketing or optional features), which you may withdraw at any time as noted above.

10. US State Privacy Information

Who this applies to

This section supplements this Privacy Policy for residents of California and other U.S. states with consumer privacy laws.

Disclosures at a glance

  • Categories, sources, purposes, and retention. The categories of personal information we collect, the sources, how we use it, who we disclose it to, and how long we keep it are described in the relevant sections of this Privacy Policy.
  • Sensitive personal information (SPI). Where we process SPI, we do so only for limited, permitted purposes (e.g., security, authentication, compliance) and not to infer characteristics about you, consistent with applicable law.

Your rights (state laws)

Subject to applicable law, you may have the right to:

  • Know/Access the personal information we hold about you (and, where required, details about our collection, use, and disclosure).
  • Correct inaccurate personal information.
  • Delete personal information, subject to legal exceptions.
  • Data Portability (receive certain information in a portable, machine-readable format).
  • Opt out of:
    • Targeted advertising (also known as cross-context behavioral advertising),
    • Sale of personal information (as defined by state law), and
    • Profiling in furtherance of decisions that produce legal or similarly significant effects (where applicable, e.g., CO/CT/VA).
  • Appeal a decision regarding your request (CO/CT/VA).
  • Non-discrimination for exercising your rights.
  • Authorized agent (CA). You may designate an authorized agent to submit certain requests on your behalf, subject to verification.

How to exercise your rights

To exercise your rights, email us using the contact information below (subject line: “Privacy Request”). We may need to verify your identity and will respond within the timeframes required by applicable law. You may submit an appeal (CO/CT/VA) by replying to our decision email with “Appeal” in the subject line; we will provide a written response explaining any action taken or not taken.

Opting out of targeted advertising, sale, or profiling

  • Browser controls: Adjust your cookie/ad preferences via our site settings (where available).
  • Global Privacy Control (GPC): Where required by law, we honor Global Privacy Control (GPC) and other recognized universal opt-out mechanisms.

11. Contact Information

To ask questions or comment about this Policy and our privacy practices, contact us at: hello@neurosnap.ai.