Privacy Policy

NeuroArt is the public brand for our AI-powered creative and marketing platform, operated by NeuroVista Labs. The Services include creative AI tools, video generation, marketing workflows, and optional connections to third-party social and messaging platforms. Our contact address is Miami, FL, United States. For privacy questions, email vcapeluto@neurovistalabs.com.

This policy applies to all NeuroArt product areas, including:

• AI image generation (text-to-image, image-to-image, restoration, vision boards)
• Creative packages and print-on-demand workflows
• AI video creation (avatars, talking characters, captions, and exports)
• Marketing & Social (campaigns, scheduling, publishing, leads, inbox, and automations)
• Credits, subscriptions, and billing
• Associate and referral programs where offered

Depending on how you use the Services, we may collect:

• Account information — name, email address, password (stored in hashed form), role, preferences, and profile details you provide when registering or signing in.
• Authentication data — when you sign in via Google, Apple, email and password, we receive identifiers and basic profile information permitted by that provider.
• Connected platform data — when you link social or messaging accounts (Meta (Facebook and Instagram); WhatsApp; TikTok; LinkedIn; YouTube; X (formerly Twitter)), we store OAuth tokens, account or page identifiers, channel metadata, and permissions needed to publish content, sync inbox messages, capture leads, and run automations you configure.
• Content you submit — prompts, images, videos, audio, scripts, campaign copy, ad creative, lead records, conversation threads, automation rules, and other materials you upload or generate.
• Usage and technical data — IP address, browser type, device information, pages viewed, feature usage, API activity, timestamps, error logs, and security signals.
• Payment and billing data — plan selection, credit balance, transaction history, and billing contact details. Card payments are processed by our payment provider; we do not store full card numbers on our servers.
• Referral and associate data — referral codes, attribution metadata, and commission-related records where those programs are used.
• Communications — messages you send through contact forms, support requests, or in-product chat.

We use collected information to:

• Provide, operate, maintain, secure, and improve the Services.
• Authenticate users, prevent fraud, and enforce our Terms of Service.
• Process AI generation requests and deliver outputs you request.
• Fulfill creative packages, exports, and media processing workflows.
• Publish, schedule, and manage content on connected platforms when you authorize us.
• Operate campaigns, lead capture, inbox, comment or DM automations, and analytics you enable.
• Process payments, credits, subscriptions, and associate payouts where applicable.
• Send service-related notices, security alerts, product updates, and support responses.
• Comply with legal obligations and respond to lawful requests.
• Analyze aggregated, de-identified usage to improve performance and reliability.

To generate images, videos, voice, and related outputs, we transmit prompts, media, and configuration you provide to AI and media processing partners. Those partners process data according to their terms and our agreements. You are responsible for ensuring you have rights to any input content (photos, likenesses, trademarks, music, etc.) you submit for processing.

When you connect a third-party account, we access and process data only according to the permissions you grant during authorization. Depending on the platform and features you use, this may include profile identifiers, pages or channels you manage, publishing permissions, messaging permissions, audience or lead data, and engagement metadata.

Supported or planned connection types include:

• Meta (Facebook and Instagram)
• WhatsApp
• TikTok
• LinkedIn
• YouTube
• X (formerly Twitter)

Each platform has its own terms and privacy policy governing data it collects independently of NeuroArt. Disconnecting a platform in Marketing → Connections revokes our access tokens for that integration.

We do not sell your personal information. We share data only with categories of service providers that help us operate the Services, including:

• Cloud hosting and media storage
• AI model and media generation providers
• Social network APIs for publishing, messaging, and analytics
• Payment processors
• Email and transactional messaging

These providers are bound by contractual obligations to protect your data and use it only to perform services on our behalf. We may also disclose information when required by law, to protect rights and safety, or in connection with a merger, acquisition, or asset sale with appropriate notice where required.

We use cookies, local storage, and similar technologies to keep you signed in, remember preferences, measure performance, and protect against abuse. You can control cookies through your browser settings; some features may not function properly if cookies are disabled.

We retain information for as long as your account is active or as needed to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements. Generated media, campaigns, and leads may persist until you delete them or request account deletion. See our Data Deletion page for removal options.

We implement administrative, technical, and organizational measures designed to protect your information, including access controls and encryption in transit where appropriate. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

Depending on your location, you may have rights to:

• Access, correct, or delete personal information we hold about you.
• Disconnect social or messaging integrations at any time from Marketing → Connections.
• Export or delete content you created within the product where those controls are available.
• Opt out of non-essential marketing emails (transactional and security emails may still be sent).
• Object to or restrict certain processing where applicable law provides such rights.
• Lodge a complaint with a supervisory authority if you are in the EEA, UK, or another region with such a process.

To exercise these rights, contact vcapeluto@neurovistalabs.com or follow the instructions on our Data Deletion page.

If you are a California resident, you may have additional rights under the CCPA/CPRA, including the right to know, delete, and correct personal information, and to opt out of certain sharing. We do not sell personal information as defined by California law. If you are in the EEA, UK, or similar jurisdictions, we process personal data based on contract performance, legitimate interests, consent where required, and legal obligations.

The Services are not directed to children under 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children.

If you access the Services from outside the United States, your information may be processed in the United States and other countries where we or our providers operate. Those countries may have different data protection laws than your country of residence.

We may update this Privacy Policy from time to time. We will post the revised version on https://neuroartai.com and update the "Last updated" date. Continued use of the Services after changes constitutes acceptance of the updated policy where permitted by law.

Questions about this Privacy Policy? Email vcapeluto@neurovistalabs.com or write to NeuroVista Labs, Miami, FL, United States.