Privacy Policy

Effective date: July 19, 2026

This Privacy Policy describes how NeuralStash (“we”, “us”), operated by Haider Shah (Founder, CEO & CTO), processes personal data when you browse, search, download, upload, subscribe, or create an account. By using the service you acknowledge this policy. For cookie-specific details see our Cookie Policy.

Who is responsible

Controller contact for privacy matters: privacy@neuralstash.com. General support: contact@neuralstash.com.

Information we collect

• Account data — email, display name, role (buyer/contributor), profile settings, and consent choices when you sign in (for example with Google).
• Usage data — search terms, page views, downloads, favorites, collections, and saved searches used to operate quotas, ranking, and product quality.
• Contributor data — uploaded files, metadata you provide or that our tools draft, review outcomes, and portfolio information.
• Billing metadata — Premium purchase status and Stripe customer identifiers. Card numbers are handled by Stripe, not stored on NeuralStash servers.
• Security and abuse data — IP-derived signals, request logs, and fraud-prevention indicators needed to protect the service.
• Cookies and similar tech — as described in the Cookie Policy, including essential, analytics, and advertising categories based on consent.

How we use data

• Provide sign-in, downloads, license receipts, and contributor dashboards
• Enforce daily quotas and prevent scraping or abuse
• Improve search, catalog quality, and site reliability
• Process Premium subscriptions and related support
• Measure traffic and, with consent, support advertising partners when ads are enabled on the site
• Respond to legal requests, DMCA notices, and security incidents

Legal bases (where applicable)

Depending on your location, we rely on contract performance (providing the service), legitimate interests (security, product improvement), consent (non-essential cookies and certain ads), and legal obligations (tax, law-enforcement, IP claims).

Retention

We keep account and transactional records while your account is active and as long as needed for compliance, disputes, or security. Rejected contributor masters are removed under our retention rules described in Contributor Terms. Logs are kept for a limited period unless needed longer for investigations. When data is no longer needed we delete or anonymize it where feasible.

Processors and third parties

We use trusted processors to run NeuralStash, including Supabase (auth/database), Backblaze B2 (file storage), Vercel (hosting), Upstash (rate limits/queues), Stripe (billing), and optionally analytics or advertising partners when those features are enabled. Each provider processes data under its own terms and our instructions.

Your rights

Depending on your jurisdiction (for example GDPR or CCPA/CPRA), you may request access, correction, deletion, portability, restriction, or objection. Email privacy@neuralstash.com from your account email. We aim to respond to verified requests within 30 days where required by law. You may also have the right to lodge a complaint with a supervisory authority.

Do not sell or share my personal information

NeuralStash does not sell personal information for money. Like many sites, we may share limited data with advertising or analytics partners when you accept non-essential cookies, which can be considered a “sale” or “share” under some US state laws for cross-context behavioral advertising.

To opt out: reject non-essential cookies in the consent banner, adjust preferences when available in account settings, or email privacy@neuralstash.com with the subject “Do Not Sell or Share” and your account email. We will honor verified requests as required by applicable law.

Children

NeuralStash is not directed to children under 13 (or the minimum age in your country). We do not knowingly collect personal data from children. If you believe a child provided data, contact privacy@neuralstash.com and we will delete it.

Security

We use industry-standard controls such as HTTPS, access-restricted databases, and provider security features. No online service is 100% secure; please use a strong password with your identity provider and contact us if you suspect unauthorized access.

International transfers

Our providers may process data in the United States and other regions. Where required, we rely on appropriate safeguards such as provider standard contractual clauses and security controls.

Changes

We may update this policy as the product evolves. Material changes will be posted on this page with a new effective date.

Contact

Privacy: privacy@neuralstash.com
General: contact@neuralstash.com
Web: Contact page