LEGAL
Privacy Policy
Last updated: February 9, 2026
1. Who We Are
NeuralBuilt (“we,” “us,” or “our”) is an AI consulting and education company operated by Trey Mossman, based in Colorado, United States. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit neuralbuilt.ai (the “Site”) and use our community membership services (the “Services”).
2. Information We Collect
2.1 Information You Provide
- Account Information: When you create an account, we collect your full name, email address, and password (stored securely hashed).
- Payment Information: When you subscribe, payment is processed by Stripe. We do not store your credit card number, CVV, or full card details. We store your Stripe customer ID and subscription ID to manage your membership.
- Contact Form Submissions: If you submit our contact form, we collect your name, email, and message content.
2.2 Information Collected Automatically
- Analytics Data: We use Google Tag Manager and Google Analytics to collect anonymized usage data including pages visited, time on site, referral sources, device type, and browser information.
- Authentication Tokens: We use browser local storage to maintain your login session via Supabase Auth. These are not traditional cookies but function similarly to keep you signed in.
- Server Logs: Our hosting provider (Vercel) may collect standard server logs including IP addresses, request timestamps, and user agent strings.
3. How We Use Your Information
- Provide, maintain, and improve our Services
- Process your membership subscription and payments
- Send you membership-related communications (meeting reminders, account updates)
- Respond to your inquiries and support requests
- Analyze usage patterns to improve our Site and Services
- Protect against unauthorized access and abuse
We do not sell, rent, or trade your personal information to third parties. Period.
4. Third-Party Services
We use the following third-party services that may process your data:
Supabase
Authentication and database hosting. Stores your account data. Servers located in the United States. Privacy Policy
Stripe
Payment processing. Handles all credit card and billing data. PCI DSS Level 1 compliant. Privacy Policy
Vercel
Website hosting and content delivery. May process server logs. Privacy Policy
Google Analytics / Tag Manager
Anonymized website analytics and event tracking. Privacy Policy
5. Cookies and Local Storage
We use browser local storage (not traditional cookies) to maintain your authentication session. This is essential for the Site to function and cannot be disabled while using authenticated features.
Google Analytics may set cookies for analytics purposes. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.
6. Data Retention
- Account Data: Retained for as long as your account is active. Upon account deletion, your data is removed within 30 days.
- Payment Records: Stripe retains transaction records as required by financial regulations. We retain subscription metadata for billing reconciliation.
- Analytics Data: Anonymized analytics data is retained for up to 26 months by Google Analytics.
- Server Logs: Automatically purged by Vercel per their retention policy.
7. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you.
- Correction: Request that we correct any inaccurate or incomplete data.
- Deletion: Request that we delete your personal data and account.
- Portability: Request a machine-readable copy of your data.
- Objection: Object to the processing of your data for certain purposes.
- Withdrawal of Consent: Withdraw consent where processing is based on consent.
To exercise any of these rights, contact us at privacy@neuralbuilt.ai. We will respond within 30 days.
8. California Privacy Rights (CCPA)
If you are a California resident, you have the right to:
- Know what personal information we collect, use, and disclose
- Request deletion of your personal information
- Opt out of the sale of personal information (we do not sell your data)
- Not be discriminated against for exercising your privacy rights
To submit a CCPA request, email privacy@neuralbuilt.ai.
9. European Privacy Rights (GDPR)
If you are located in the European Economic Area (EEA) or United Kingdom, our legal basis for processing your data is:
- Contract Performance: Processing necessary to provide the Services you subscribed to.
- Legitimate Interests: Analytics and security monitoring to improve our Services.
- Consent: Where you have explicitly consented to specific processing activities.
You may lodge a complaint with your local data protection authority if you believe your rights have been violated.
10. Data Security
We implement industry-standard security measures to protect your data, including encrypted data transmission (TLS/SSL), hashed password storage, secure API authentication, and role-based access controls. However, no method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security.
11. Children’s Privacy
Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected data from a child under 18, we will delete that information promptly. If you believe a child has provided us with personal data, please contact us at privacy@neuralbuilt.ai.
12. International Data Transfers
Your data is processed and stored in the United States. If you access our Services from outside the United States, your information will be transferred to and processed in the United States, where data protection laws may differ from those in your jurisdiction.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the “Last updated” date. Your continued use of the Services after changes constitutes acceptance of the updated policy.
14. Contact Us
If you have questions about this Privacy Policy or our data practices, contact us at: