Privacy Policy

NeuraNote ("we," "our," or "us") is a product developed and operated by XALTRAX INC., a Delaware corporation. We are committed to protecting your privacy and ensuring the security of your personal information and study materials.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered learning platform at neuranotelabs.com.

1. Account Information

• Name and email address (via Clerk authentication)
• Profile information and preferences
• Subscription and billing information (processed by Stripe)

2. Content You Upload

• Documents (PDFs, DOCX, PPTX, TXT files)
• Audio and video recordings for transcription
• Text content created in our AI Editor
• Notes, flashcards, quizzes, and other generated content

3. Usage Information

• Feature usage and interaction data
• API requests and responses (for Unlimited plan users)
• Performance metrics and error logs
• Device information, browser type, and IP address

We use your information to:

• Provide Services: Process your documents, generate AI content, and deliver core features
• Improve AI Quality: Optimize our RAG system and embedding generation (aggregated data only)
• Personalization: Tailor study materials and recommendations to your learning style
• Communication: Send important updates, security alerts, and optional newsletters
• Billing: Process payments and manage subscriptions via Stripe
• Security: Detect fraud, abuse, and unauthorized access
• Legal Compliance: Meet regulatory requirements and respond to legal requests

We share your information only in these limited circumstances:

• Service Providers: Clerk (auth), Stripe (billing), Vercel (hosting), MongoDB Atlas (database), Cloudflare (CDN/storage)
• AI Processing: OpenAI (embeddings, chat), ElevenLabs (TTS) — only for inference, never for training
• Legal Requirements: When required by law, subpoena, or to protect our rights
• Business Transfers: In case of merger, acquisition, or asset sale (with user notification)

We do NOT: Sell your data, share it for advertising, or use it for marketing outside of NeuraNote.

We implement industry-standard security measures:

• Encryption in transit (TLS/SSL) and at rest (AES-256)
• Regular security audits and penetration testing
• Access controls and multi-factor authentication for team members
• Automated backups and disaster recovery procedures
• GDPR and CCPA compliance frameworks

You have the right to:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and data
• Portability: Export your data in a structured format
• Opt-Out: Unsubscribe from marketing emails
• Object: Object to processing based on legitimate interests

To exercise these rights, contact us at hello@xaltrax.com

We retain your data for as long as your account is active or as needed to provide services. When you delete your account:

• Personal data is deleted within 30 days
• Uploaded documents and content are permanently deleted
• Aggregated, anonymized analytics may be retained for service improvement
• Billing records are retained for 7 years for tax compliance

For questions about this Privacy Policy or to exercise your rights: