Privacy policy

Who we are

NeuralPay ("we") provides infrastructure that lets online stores accept purchases from verified AI agents. We are the controller for data described in this policy. Contact: contact@neural-pay.com.

What we collect, and why

• Sign-up and contact data — name, email, company, store URL, country — when you sign up, request a demo, or contact us. Legal basis: taking steps prior to a contract (Art. 6(1)(b) GDPR) and legitimate interest in responding to you.
• Merchant account and integration data — store platform, catalogue and order metadata processed to provide the service under our terms and data processing agreement.
• Website usage — this site uses no advertising trackers, no third-party analytics cookies, and self-hosts its fonts (no requests to font CDNs). Server logs (IP, user agent) are retained briefly for security.

What we never process

Cardholder data and payment credentials. Payments run between customers, agent operators' payment flows and your payment service provider — outside NeuralPay entirely.

Where data lives

Our infrastructure and databases are hosted in the European Union. Where a sub-processor operates globally, transfers are covered by standard contractual clauses. Our current sub-processor list is available in the data processing terms.

Retention

Sign-up data: until you ask us to delete it or 24 months of inactivity, whichever comes first. Merchant service data: for the duration of the agreement plus statutory retention periods (e.g. invoicing records). Security logs: 90 days.

Your rights

Access, rectification, erasure, restriction, portability and objection — email contact@neural-pay.com and we act within the statutory deadlines. You may also lodge a complaint with your supervisory authority.

Changes

We update this policy as the product evolves; material changes are announced to account holders by email. The date above always reflects the current version.