Neyton Privacy Policy
Last updated: August 27, 2026
Effective date: August 27, 2026
This Privacy Policy explains how Neyton LLC ("Neyton," "we," "us") collects, uses, and shares personal information when you visit neyton.ai, create an account, or use our software-as-a-service platform, APIs, and AI agent features (the "Services").
Our role: controller and processor
- When you interact with us directly — you visit our website, sign up, contact support, or administer an account — Neyton is the controller of your personal information and this Policy governs.
- When our business customers use the Services to process information about their own users and end users, Neyton acts as a processor (service provider) on the customer's behalf. That customer is the controller, its own privacy policy governs, and our handling of that data is set by our agreement with the customer (including our Data Processing Addendum). If you are an end user of one of our customers, please direct privacy requests to that customer; we will assist them as required.
1. Information we collect
Information you provide
| Category | Examples |
|---|---|
| Account information | name, work email, password, company name, job title |
| Billing information | billing contact, billing address, and payment-card details (processed by our payment processor; we do not store full card numbers) |
| Content you submit | text, prompts, files, and documents you or your users send to the Services ("Input"), and the responses the Services generate ("Output") |
| Support and communications | messages you send us, survey responses, and information you provide in sales or support conversations |
Information we collect automatically
| Category | Examples |
|---|---|
| Usage data | features used, API calls, request volume, timestamps, referring pages, and actions taken in the Services |
| Device and log data | IP address, browser type, operating system, device identifiers, and crash/diagnostic data |
| Cookies and similar technologies | session and preference cookies, and analytics identifiers — see Section 6 |
Information from third parties
We may receive information from single-sign-on providers you use to log in, from our business customers who invite you to their account, and from analytics, security, and fraud-prevention vendors.
We do not intentionally collect sensitive personal information, and we ask that you not submit it to the Services except where a customer has configured the Services for that purpose under an appropriate agreement.
2. How we use information
We use personal information to:
- provide, operate, secure, and maintain the Services;
- authenticate users and administer accounts;
- process payments and send billing communications;
- respond to support requests and communicate about the Services, including service and security announcements;
- monitor, analyze, and improve the Services, including reliability, performance, and safety of AI features;
- detect, investigate, and prevent fraud, abuse, security incidents, and violations of our Terms;
- send marketing communications about our products (you can opt out at any time); and
- comply with legal obligations and enforce our agreements.
AI processing
To generate Output, Input is processed by our systems and by AI model providers that act as our subprocessors. We do not use Input or Output to train or fine-tune foundation models for use outside of providing the Services, and we contractually require our AI model providers not to use Input to train their models other than as needed to provide the Services. We may use aggregated and de-identified data, and usage data, to operate, secure, and improve the Services.
Legal bases (where applicable, e.g., EEA/UK)
We rely on: performance of a contract (providing the Services); our legitimate interests (securing and improving the Services, marketing to businesses); consent (certain cookies and marketing); and compliance with legal obligations.
3. How we share information
We share personal information with:
- Service providers / subprocessors who process data on our behalf — cloud hosting, AI model providers, analytics, payment processing, customer support, email delivery, and security. A current list of subprocessors is available on request to privacy@neyton.ai.
- Our business customers, where you are an authorized user or end user of their account, so they can administer that account.
- Professional advisors — lawyers, accountants, auditors — as needed.
- Authorities and other parties when required by law, to respond to legal process, to protect the rights, property, or safety of Neyton, our users, or the public, or to enforce our Terms.
- In a corporate transaction — a merger, acquisition, financing, or sale of assets — information may be transferred as part of that transaction, subject to this Policy.
We do not sell personal information, and we do not share it for cross-context behavioral advertising, as those terms are defined under US state privacy laws.
4. Data retention
We retain personal information for as long as needed to provide the Services and for the purposes described in this Policy. Account and content data are retained for the life of the account and then deleted or de-identified within 90 days of account closure, except for copies in routine backups (deleted on a rolling basis) and information we must keep to comply with law, resolve disputes, or enforce agreements. When we act as a processor, retention of customer data is governed by our agreement with the customer.
5. Security
We maintain administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit, access controls, and logging. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
6. Cookies and analytics
We use strictly necessary cookies to operate the Services and, with your consent where required, analytics and preference cookies to understand usage and improve the Services. You can control cookies through your browser settings and, where offered, our cookie banner. We honor Global Privacy Control (GPC) signals as an opt-out of any "sale"/"share" where applicable. We use Cloudflare for website and infrastructure analytics.
7. Your rights and choices
Depending on where you live, you may have the right to:
- access the personal information we hold about you;
- correct inaccurate information;
- delete your information;
- port a copy of certain information;
- opt out of sale/share and targeted advertising (we do not do these) and, where applicable, certain profiling;
- withdraw consent where processing is based on consent; and
- appeal a denial of a request, and lodge a complaint with your data protection authority or state attorney general.
To exercise these rights, email privacy@neyton.ai. We will verify your request using account information and respond within the time required by applicable law (generally 45 days in the US, extendable). You may use an authorized agent. We will not discriminate against you for exercising your rights.
If you are an end user of one of our business customers, please contact that customer; we will help them fulfill your request.
California "Shine the Light": California residents may request information about disclosures of personal information to third parties for their direct marketing purposes. We do not make such disclosures.
8. International data transfers
We are based in the United States and process personal information there and in other countries where we or our subprocessors operate. Where we transfer personal information out of the EEA, UK, or Switzerland, we use appropriate safeguards such as the European Commission's Standard Contractual Clauses. Contact privacy@neyton.ai for more information.
9. Children
The Services are for business use and are not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact privacy@neyton.ai and we will delete it.
10. Changes to this Policy
We may update this Policy from time to time. If we make material changes, we will notify account administrators by email or through the Services and update the "Last updated" date above. Changes take effect when posted unless stated otherwise.
11. Contact us
Neyton LLC Email: privacy@neyton.ai Legal notices: legal@neyton.ai
For the purposes of applicable EEA/UK data protection law, the controller is Neyton LLC.