Privacy Policy

1. Scope

This Privacy Policy explains how NeuropackLens ("we", "our", or "us") collects, uses, stores, and discloses information when you access or use our website, application, and related services (the "Platform").

2. Information We Collect

We may collect the following categories of data:

• Account data: name, email address, and authentication identifiers.
• Content you upload: packaging images, files, prompts, and analysis inputs.
• Generated outputs: analysis reports, recommendations, concept sketches, and report exports.
• Usage and device data: log events, IP address, browser type, approximate geolocation, and interaction telemetry needed for reliability and security.
• Billing data: plan status, subscription metadata, and payment records provided through our payment processor (we do not store full card numbers).

4. Legal Bases (EEA/UK Users)

Where applicable, we process personal data based on one or more of these legal bases: performance of a contract, legitimate interests, legal obligations, and consent (when required).

5. Data Retention

Analyses and associated uploaded image assets are automatically deleted after 30 days from creation. Access logs are retained for up to 90 days for security monitoring and incident response. You may request earlier deletion as described below.

6. Sharing of Information

We do not sell personal information. We may share data with trusted service providers that support hosting, authentication, AI processing, analytics, customer support, and billing operations, subject to contractual confidentiality and security obligations.

7. Security

We use reasonable administrative, technical, and organizational safeguards, including encryption in transit, encryption at rest, and role-based access controls. No system is perfectly secure, and we cannot guarantee absolute security.

8. Your Privacy Rights

Depending on your location, you may have rights to access, correct, delete, or export your personal data, and to object to or restrict certain processing. To exercise rights, contact us at legal@neuropacklens.com.

9. Children's Privacy

The Platform is not directed to children under 13 (or the age required by local law), and we do not knowingly collect personal data from children.

10. International Transfers

Your information may be processed in countries other than your own. Where required, we use appropriate safeguards for cross-border data transfers.

11. Changes to this Policy

We may update this Privacy Policy periodically. The updated version is effective when posted to this page and reflected by the "Last updated" date above.