Privacy Policy
Contents
1. Who we are
NeuralConfig LLC ("NeuralConfig," "we," "us," "our") is a North Carolina limited liability company. This Privacy Policy explains what personal data we collect, how we use it, and the choices you have, across all services we operate — including neuralconfig.com, neuralrepo.com, strandcalls.com, tools.lanpulse.com, lanpulse.com, their subdomains, and any other service we provide (collectively, the "Services").
For product-specific data practices, see the addendum pages linked at the bottom of this policy.
2. Information we collect
2.1 Information you provide
- Account information: when you create an account, we collect your email address and authentication credentials (stored hashed). Some Services may collect additional account details (name, organization).
- Content you submit: material you upload, input, transcribe, or otherwise submit to a Service.
- Communications: messages you send us via email, support channels, or forms.
- Payment information: if you pay for a Service, our payment processor (currently Stripe) collects payment details. We do not store full card numbers; we store a processor-level identifier and billing metadata.
2.2 Information we collect automatically
- Log data: IP address, browser type, operating system, referring URL, pages visited, timestamps, error logs.
- Device data: device identifiers, screen size, language settings.
- Usage data: features used, session duration, API calls made, feature interactions.
- Cookies and similar technologies: see Cookies Policy.
2.3 Product-specific data
Some products collect categories of data beyond the above. Where they do, see the applicable addendum:
3. How we use personal data
We use personal data to:
- Provide, maintain, and improve the Services
- Authenticate users and secure accounts
- Process payments
- Respond to support requests and communicate with you
- Monitor and protect the Services against fraud, abuse, and security threats
- Comply with legal obligations
- Develop new features and perform analytics on aggregated, de-identified data
We do not sell personal data. We do not share personal data with third parties for their direct marketing purposes. We do not use your content to train machine-learning models without your consent except as strictly necessary to provide the Service you requested.
4. Legal bases for processing (EEA / UK)
If you are in the European Economic Area or the United Kingdom, we rely on the following legal bases:
- Contract: to provide the Services you requested
- Legitimate interests: to secure, improve, and administer the Services; to communicate service-related information
- Consent: where you have given explicit consent (for example, marketing communications)
- Legal obligation: to comply with applicable law
5. How we share personal data
We share personal data only in these circumstances:
- Service providers: hosting (Cloudflare), payment processing (Stripe), AI inference (Anthropic), email delivery, analytics — strictly as necessary to operate the Services and subject to confidentiality and data-protection terms.
- Legal and safety: to comply with legal process, enforce our Terms, protect rights and safety, or respond to a government request where permitted by law.
- Business transfer: in connection with a merger, acquisition, reorganization, or sale of assets — subject to notice requirements and an opportunity for you to object where required by law.
- With your consent: anything else only with your explicit consent.
6. Data retention
We retain personal data for as long as reasonably necessary to provide the Services, comply with our legal obligations, resolve disputes, and enforce our agreements. Specific retention periods:
- Account data: for the life of your account plus up to 30 days after deletion to allow for recovery, and thereafter up to 12 months in backups
- Payment records: as required by tax and accounting law (typically 7 years)
- Log data: up to 90 days in active logs, longer in aggregated/de-identified form
- Content you submit: until you delete it; deletion is effective immediately in the live system and propagates through backups within 30 days
Product-specific retention may differ — see addenda.
7. Your rights
Depending on where you live, you may have some or all of the following rights:
- Access: request a copy of your personal data
- Correction: request correction of inaccurate data
- Deletion: request deletion, subject to our legal obligations to retain
- Portability: request your data in a portable format
- Objection / restriction: object to or restrict certain processing
- Withdraw consent: where processing is based on consent
- Do-not-sell / do-not-share (California residents): we do not sell personal data, but you may submit a formal request
- Non-discrimination: we will not deny Services or otherwise discriminate against you for exercising these rights
To exercise any of these rights, email privacy@neuralconfig.com. We will respond within 30 days (or as otherwise required by applicable law). For EEA/UK residents, you also have the right to lodge a complaint with your local data protection authority.
8. Security
We implement reasonable administrative, technical, and physical safeguards appropriate to the sensitivity of the data we process. No system is perfectly secure. If we become aware of a data breach affecting your personal data, we will notify you and applicable authorities as required by law.
9. International transfers
NeuralConfig is based in the United States. If you are outside the U.S., your personal data will be transferred to and processed in the U.S. and in any country where our service providers operate. Where required, we rely on recognized transfer mechanisms (such as Standard Contractual Clauses) to safeguard international transfers.
10. Children's privacy
The Services are not directed to children under 13, and we do not knowingly collect personal data from children under 13. If you believe we have collected data from a child under 13, contact us and we will delete it promptly.
11. Third-party links
The Services may link to third-party websites or services. We are not responsible for the privacy practices of third parties. We encourage you to read their privacy notices before providing them with any data.
12. SMS / text-message program
If you opt in to receive SMS from NeuralConfig (either verbally during a StrandCalls voice call or via a consent checkbox in a NeuralConfig web application), we collect and process the following data specifically for the messaging program:
- Phone number (the one you opt in with)
- Opt-in record: timestamp, method (verbal or web), and where applicable the call recording or signup record that captured your consent
- Message content sent to and received from your number (appointment details, verification codes, inbound replies such as STOP/CONFIRM/CANCEL)
- Delivery metadata: Twilio message SID, delivery status, timestamps
This data is used only to deliver the transactional messages described in the SMS program disclosure and the Terms — Messaging section. Specifically:
- We do not sell phone numbers.
- We do not share phone numbers with third parties for their marketing.
- We do not use SMS data to train machine-learning models.
- Phone numbers and SMS data are not shared with any third party beyond the telephony provider (Twilio) that delivers the messages on our behalf, and any law-enforcement disclosure required by valid legal process as described in sections 5 and 8 of this policy.
Retention: opt-in records and message logs are retained for up to 24 months for billing, compliance, and dispute resolution. Opt-out records are retained indefinitely so that we can honor your opt-out across future interactions. Message body content for inbound replies is retained up to 90 days.
Message frequency, rates, and carriers:
- Frequency: approximately 2 messages per StrandCalls appointment (confirmation + 24-hour reminder) and 1 verification code per NeuralRepo login attempt; frequency varies with user activity.
- Rates: message and data rates may apply. NeuralConfig does not charge for SMS; standard carrier rates apply.
- Carriers: major US carriers (AT&T, Verizon, T-Mobile, and their MVNOs) are supported. Carriers are not liable for delayed or undelivered messages.
See the full SMS program disclosure and the Terms — Messaging section for parallel language.
Opt-out: reply STOP to any message to unsubscribe. Opt-out is honored immediately at the carrier level. You can also email privacy@neuralconfig.com to request opt-out. See the SMS program disclosure for the full list of opt-out keywords.
13. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be announced via reasonable means (for example, email for account holders, or prominent notice on the Services). The "Last updated" date at the top reflects the most recent revision.
14. Contact
For privacy questions, data-rights requests, or concerns, contact us at:
- Email: privacy@neuralconfig.com
- Mail: NeuralConfig LLC, 4030 Wake Forest Rd, Ste 349, Raleigh, NC 27609