Privacy Policy

We use personal data to: provide, operate, secure, and support the Services; create and administer accounts; process payments and maintain records; respond to enquiries and provide customer support; send service communications (such as security, billing, and change notices); send marketing communications you can opt out of at any time; understand how the Services are used, through aggregated and anonymised statistics, in order to improve them; detect, prevent, and investigate fraud, abuse, and security incidents; and comply with legal obligations. We do not use Customer Content to train or improve machine-learning models without express consent or opt-in, and we do not sell personal data.

Where laws such as the EU/UK GDPR apply, we process personal data on these bases: performance of a contract (providing the Services you or your organisation signed up for); legitimate interests (securing and improving the Services, business-to-business marketing, and managing our business), balanced against your rights; consent (where required — for example, certain cookies and marketing — which you may withdraw at any time); and compliance with legal obligations. Under India’s Digital Personal Data Protection Act, 2023, we process personal data on the basis of your consent or for legitimate uses recognised by that Act.

We share personal data with: our affiliates, for the purposes described in this Policy; service providers and sub-processors who help us deliver the Services (such as cloud hosting, payment processing, analytics, support, and communications providers), bound by contracts that limit their use of the data to our instructions — a current list of sub-processors is available on request at privacy@nuroen.ai; resellers and partners involved in your purchase, to the extent needed to manage the relationship; professional advisers (lawyers, auditors, insurers) under confidentiality; authorities and other parties where required by law, to protect rights and safety, or to detect and prevent fraud or security issues; and a successor entity in connection with a merger, acquisition, financing, or sale of assets, subject to this Policy. Aggregated or anonymised information that does not identify anyone is not personal data and may be shared for any purpose.

We are based in India and use cloud infrastructure that may store or process data in other countries, including the United States and Europe. Where personal data protected by the GDPR or similar laws is transferred internationally, we rely on appropriate safeguards, including the European Commission’s Standard Contractual Clauses and equivalent mechanisms, together with technical and organisational protections. Enterprise customers may have region-specific hosting or self-hosted deployment options under their agreements.

We retain personal data for as long as needed for the purposes described in this Policy: for the life of your account plus a reasonable period thereafter; for Customer Content, as described in the applicable service agreement (with export and deletion on termination); and longer only where required for legal, tax, accounting, or dispute-resolution purposes. When retention is no longer justified, we delete or anonymise the data, or, where that is not immediately practicable (for example, in backups), we isolate it from further processing until deletion is possible.

We maintain administrative, technical, and organisational measures designed to protect personal data — including encryption in transit, access controls, logging, and monitoring — aligned with recognised industry frameworks, and we test and review these measures periodically. No method of transmission or storage is completely secure, so we cannot guarantee absolute security; we will notify affected customers and authorities of personal-data breaches as required by applicable law.

Subject to applicable law, you may: access the personal data we hold about you and request a copy; correct inaccurate or incomplete data; request deletion; object to or request restriction of processing; receive your data in a portable format; withdraw consent at any time (without affecting prior processing); nominate, under Indian law, another individual to exercise your rights in the event of death or incapacity; and complain to a supervisory authority — including, in India, the Data Protection Board of India, or in the EU/UK, your national data protection authority. To exercise rights, contact us as described in Section 12; we will respond within the time required by applicable law (and in any case within 30 days where feasible). We may need to verify your identity before acting on a request. Opting out of marketing is available in every marketing email or by writing to us; you will still receive service communications.

We use cookies and similar technologies: strictly necessary cookies that make the websites work; functional cookies that remember preferences; analytics cookies that help us understand usage; and, where used, marketing cookies — the latter categories only with consent where required by law. You can manage cookies through our consent banner and through your browser settings; disabling some cookies may affect functionality.

The Services are intended for business and professional use and are not directed to children. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us personal data, contact us and we will delete it.

If you use the Nuroen platform through your employer or another organisation, or interact with an AI agent operated by one of our customers, that organisation controls the personal data processed through the platform and its privacy notices apply. Please direct privacy requests to that organisation; we will refer requests we receive to it and support its response as its processor.

Questions, requests, and complaints: privacy@nuroen.ai, or by post to Atlasiops Technologies Private Limited (512, Zion Prime, 5th Floor, Near Four Pole Structure, Thaltej, Ahmedabad, Gujarat – 380059). In accordance with Indian law, our Grievance Officer is reachable at privacy@nuroen.ai; we will acknowledge grievances promptly and resolve them within the timelines required by applicable law.

We may update this Policy from time to time. The “Last updated” date shows the current version; material changes will be notified on the websites or by email before they take effect. Your continued use of the Services after changes take effect constitutes acknowledgement of the updated Policy.