Privacy Policy

This Privacy Policy describes how NeroEngine (“we,” “us,” or “our”) collects, uses, and shares information when you visit our website or use our platform. By using NeroEngine, you agree to the practices described in this policy.

1. Information We Collect

Account information. When you register, we collect your name, email address, company name, and password (stored as a hashed value). We never store your password in plaintext.

Business data. Information you enter into the platform — contacts, deals, proposals, quotes, and notes — is stored in our database and associated with your organization.

AI API keys. If you add an API key for OpenAI, Anthropic, or another provider, it is encrypted at rest using AES-128 symmetric encryption. The plaintext key is only held in memory during an active AI request.

Usage and analytics data. We use Google Analytics to understand how visitors interact with our marketing website (neroengine.io). Google Analytics collects information such as pages visited, time on page, general geographic region, browser type, and device type. This data is associated with a cookie and processed by Google. We do not use Google Analytics inside the authenticated application.

Waitlist information. If you join our waitlist, we collect your email address and the plan tier you selected.

Communications. If you contact us by email, we retain that correspondence.

2. How We Use Your Information

• To provide, operate, and improve the NeroEngine platform.
• To send transactional emails — account creation, password resets, team invitations, and waitlist confirmations.
• To understand how our marketing website is used and improve it (via Google Analytics).
• To respond to your support requests and communications.
• To enforce our Terms of Service and detect abuse.

3. Google Analytics and Cookies

Our marketing website uses Google Analytics, a web analytics service provided by Google LLC. Google Analytics uses cookies — small text files stored in your browser — to collect standard internet log information and visitor behavior data. This information is transmitted to and stored by Google on servers in the United States.

Google may use this data in accordance with its own Privacy Policy. We have enabled IP anonymization, meaning your full IP address is not stored by Google.

Opting out. You can prevent Google Analytics from collecting your data by installing the Google Analytics Opt-out Browser Add-on. You can also manage cookies through your browser settings.

4. How We Share Your Information

We do not sell your personal data. We share information only in the following limited circumstances:

• AI Providers. When you use AI features, input data is sent to your configured AI provider (OpenAI, Anthropic, etc.) to fulfill the request. This is governed by that provider's terms and privacy policy.
• Google Analytics. Usage data from our marketing website is shared with Google as described in Section 3.
• Email delivery. We use Resend to send transactional emails. Your email address is shared with Resend solely for delivery purposes.
• Legal requirements. We may disclose information if required by law, court order, or to protect the rights and safety of NeroEngine or others.

5. Data Retention

We retain your account and business data for as long as your account is active. If you delete your account, we will delete your data within 30 days, except where we are required to retain it for legal or compliance purposes. Waitlist emails are retained until you request removal.

6. Your Rights

Depending on your location, you may have the right to access, correct, export, or delete your personal data. To exercise these rights, contact us at support@neroengine.io. We will respond within 30 days.

If you are in California, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect and the right to request deletion. We do not sell personal information as defined by CCPA.

7. Security

We use industry-standard measures to protect your data, including encrypted connections (TLS), encrypted storage of sensitive credentials, and hashed passwords. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. Children

NeroEngine is not directed at children under 13. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, contact us and we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes by email. The effective date at the top of this page reflects the date of the most recent revision. Continued use of NeroEngine after a revision constitutes acceptance of the updated policy.

10. Contact

If you have questions or concerns about this Privacy Policy or how we handle your data, contact us at support@neroengine.io.