Privacy Policy
Effective date: 20 April 2026
Last updated: 4 August 2026
Neural AI Works, Inc. ('the Company', 'we') operates the AI agent solution Neural AI ('the Service'). This Privacy Policy explains how we collect, use, retain, and share personal information when you use the Service, and what rights you have over that information. We comply with the data protection laws that apply where you live. Rights and disclosures that apply to specific regions are set out under 'Region-Specific Disclosures' at the end of this document.
Who We Are
The controller responsible for personal information collected through the Service is: Entity: Neural AI Works, Inc. Service: Neural AI (neural-ai.ai) Contact: [email protected] We are incorporated in the United States. Personal information collected through the Service may be stored and processed in the United States and in the locations where our cloud infrastructure operates. See 'International Data Transfers' below.
Information We Collect
We collect the following personal information depending on how you use the Service. [Sales inquiries] - Required: name, phone number, email address - Optional: company or institution name, industry, inquiry details - Collected automatically: IP address, access timestamp [Service diagnostic form] - Collected automatically: IP address, browser local storage identifier (UUID) - Optional: primary inquiry channel, average daily inquiry volume, missed-call frequency, recurring inquiry types, interest in SMS, inquiry types you would like handled by AI [Subscription and payment] - Required: name, institution name, phone number, email address - Collected automatically: payment transaction ID (TID), payment amount, payment timestamp We do not collect or store payment card numbers or other payment credentials. Payment credentials are handled directly by our payment processor, KG Inicis. We do not collect sensitive information such as beliefs, political opinions, health, or sexual orientation, nor government-issued identification numbers.
How We Use Information
We use personal information only for the following purposes, and we take the steps required by law — including obtaining separate consent — if those purposes change. - Receiving and responding to sales inquiries - Signing you up for the Service, creating accounts, and sending invitation emails - Processing subscription payments and confirming payment records - Delivering diagnostic results and improving the Service through anonymized statistical analysis - Meeting legal obligations, including record retention required by law We do not make decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you.
Legal Bases for Processing
We process personal information on the following legal bases. - Consent: receiving sales inquiries and processing the service diagnostic form - Performance of a contract: subscription sign-up, account creation, payment processing, and other processing necessary to provide the Service - Compliance with legal obligations: retaining transaction and payment records as required by law - Legitimate interests: maintaining service security, preventing misuse, and anonymized statistical analysis for service improvement, where not overridden by your rights and interests Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before it.
Service Providers
We engage the following service providers to process personal information on our behalf so that we can operate the Service.
| Service provider | Purpose | Retention period |
|---|---|---|
| KG Inicis | Credit card payment processing | As required by law after payment is completed |
| Resend Inc. (USA) | Sending subscription invitation emails | Deleted immediately after sending |
| Amazon Web Services, Inc. (USA) | Server infrastructure and data storage | For the term of service and any period required by law |
| Slack Technologies, Inc. (USA) | Internal operational notifications | Per Slack's data retention policy after sending |
In each processing agreement we specify, in accordance with Article 26 of the Personal Information Protection Act, that the provider may not process personal information for any purpose beyond the delegated work, along with technical and administrative safeguards and liability for damages. We supervise whether providers handle personal information securely.
International Data Transfers
We are incorporated in the United States and use cloud infrastructure and service providers located in the United States. As a result, your personal information may be stored and processed outside your country of residence, primarily in the United States. - Information transferred: the items listed under 'Information We Collect' - Destination country: United States - Recipients: Neural AI Works, Inc. and the service providers listed under 'Service Providers' - Purpose: providing the Service, operating server infrastructure, sending email, and customer support - Timing and method: transmitted over the internet at the time you use the Service - Retention period: as set out under 'Data Retention and Deletion' Transfers of personal information of data subjects in the Republic of Korea are carried out under Article 28-8 of the Personal Information Protection Act.
Data Retention and Deletion
We retain personal information for the period required by law or for the periods set out below, and we destroy it without delay once that period expires or the purpose of processing is fulfilled.
| Information | Retention period | Basis |
|---|---|---|
| Sales inquiry information | 3 years from the date of inquiry | Act on Consumer Protection in Electronic Commerce, Article 6 and Enforcement Decree Article 6 |
| Service diagnostic data | 1 year from collection | Service operation and improvement (destroyed once the purpose is fulfilled) |
| Payment information | 5 years from the payment date | Act on Consumer Protection in Electronic Commerce, Article 6 and Enforcement Decree Article 6 |
| Service usage records, access logs, IP addresses | 3 months | Protection of Communications Secrets Act, Article 15-2 |
[Deletion process] Personal information that is no longer needed is destroyed with the approval of the Privacy Officer. Information that must be retained by law is moved to a separate database and destroyed once the retention period expires. [Deletion method] Electronic files are deleted using technical methods that make recovery impossible. Printed and other non-electronic records are shredded or incinerated.
Security
We maintain the following measures to protect personal information. - Limiting the number of staff who handle personal information and providing regular privacy training - Managing the granting, modification, and revocation of access rights to processing systems, and operating intrusion prevention systems - Retaining and protecting access logs for processing systems for at least one year - Encrypting important personal information in storage and transit; payment information is encrypted by our payment processor - Installing and regularly updating security software to prevent hacking and other external attacks No method of transmission over the internet or of electronic storage is completely secure. We work continuously to maintain a reasonable level of protection but cannot guarantee absolute security.
Children's Privacy
The Service is intended for business and institutional users. It is not directed to children under 14 (under 13 for residents of the United States), and we do not knowingly collect personal information from children. If we learn that we have collected personal information from a child without the consent of a legal guardian, we will delete it without delay. A legal guardian may exercise the rights described in this Policy on the child's behalf.
Your Rights and Choices
You may exercise the following rights at any time. - Access: request access to the personal information we hold about you - Correction: request that inaccurate information be corrected - Deletion: request that your personal information be deleted - Restriction: request that we stop processing your personal information - Withdrawal of consent: withdraw consent where processing is based on it To exercise these rights, email us at the address under 'Contact Us'. We will act on your request without undue delay and reply with the outcome. We may ask for additional information to verify that you are the data subject or an authorized agent. Information we are required by law to retain may be excluded from a deletion request. Additional rights may apply depending on where you live — see 'Region-Specific Disclosures'. We will not treat you differently or deny you service because you exercised any of these rights.
Changes to This Policy
We may update this Privacy Policy when the law or the Service changes. If we add, remove, or modify any of its contents, we will give notice at least 7 days before the change takes effect, through a notice on our website or by email. If the change materially affects your rights, we will give notice at least 30 days in advance. The effective date and the last updated date appear at the top of this document.
Contact Us
For questions about how we handle personal information, to exercise your rights, or to raise a complaint, contact us at:
- Entity
- Neural AI Works, Inc.
- [email protected]
Region-Specific Disclosures
The following applies in addition to this Policy depending on where you live. If anything below conflicts with the main body of this Policy, the region-specific terms govern for that region.
Republic of Korea — Personal Information Protection Act
If you are in the Republic of Korea, the following applies in addition under the Personal Information Protection Act (PIPA). [Privacy Officer] We have designated the following Privacy Officer to oversee personal information processing and to handle complaints and remedies for data subjects.
- Name
- Soyeon Kim
- Role
- Privacy Officer
- [email protected]
- Phone
- 010-3397-2750
You may contact the Privacy Officer with any question, complaint, or request for remedy relating to the protection of personal information in connection with your use of the Service.
You may also contact the following authorities to report an infringement or to request dispute resolution or consultation.
- Personal Information Infringement Report Centre — privacy.go.kr / ☎ 118 (no area code)
- Personal Information Dispute Mediation Committee — www.kopico.go.kr / ☎ 1833-6972
- Supreme Prosecutors' Office — www.spo.go.kr / ☎ 301 (no area code)
- National Police Agency — ecrm.cyber.go.kr / ☎ 182 (no area code)
California, United States — CCPA/CPRA
If you are a California resident, you have the following rights under the California Consumer Privacy Act, as amended by the CPRA. - Right to know the categories of personal information we collect, the sources, the purposes, and the categories of recipients - Right to delete the personal information we hold about you - Right to correct inaccurate personal information - Right to opt out of the sale of personal information or its sharing for cross-context behavioral advertising - Right to limit the use of sensitive personal information - Right not to receive discriminatory treatment for exercising these rights We do not sell personal information and do not share it for cross-context behavioral advertising, and we have not done so in the preceding 12 months. We do not collect sensitive personal information. To exercise these rights, email us at the address under 'Contact Us'. You may also act through an authorized agent. We will respond within the timeframe required by law.