Privacy Policy on Collection, Processing, and Protection of Personal Data

1. Terms

• Operator: sole proprietor CTRL (IIN 980417351242).
• User: an individual using the Site and/or the Bot.
• Personal data: information relating to an identified or identifiable User.
• Processing: any action with personal data, including collection, recording, storage, use, transfer, blocking, and deletion.
• Site: https://neuroplace.ai/.
• Bot: https://t.me/veoseebot.

2. Data We Process

• Account data such as first name, last name, username, email, and password in protected form.
• Data received from third-party authorization providers, such as identifier, name, or email, depending on provider settings.
• Prompts, generation settings, uploaded materials, generation results, and operation metadata.
• Telegram identifiers, profile display data, messages, commands, and technical interaction metadata when the Bot is used.
• Technical data, including IP address, browser and device details, language, cookies, and event or security logs.
• The Operator does not aim to process special categories of personal data or biometric data and expects Users not to upload such data without lawful grounds.

3. Purposes of Processing

• Account registration, authentication, and security.
• Providing access to Site, Platform, and Bot functionality.
• Processing support requests and sending service notices.
• Analytics and service improvement, including Google Analytics, Yandex Metrica, and Mixpanel.
• Payments, settlements, and related operational accounting where applicable.
• Compliance with the laws of the Republic of Kazakhstan and lawful requests from competent authorities.

4. Legal Basis and Consent

The Operator processes personal data on lawful grounds, including consent where required, contract performance, legitimate operational needs, and other grounds permitted by the laws of the Republic of Kazakhstan.

Consent may be given in writing or through actions in the Site or Bot interface that are technically recorded and allow confirmation of the fact of consent.

By using the Site and/or the Bot, the User confirms familiarity with this Policy. Where separate consent is required for a specific operation, the Operator requests it additionally.

5. Disclosure to Third Parties

Personal data is shared only to the extent necessary for the purposes stated in this Policy and in compliance with applicable law.

The Operator may disclose personal data to competent state authorities in cases and under procedures established by law. Personal data is not placed in public personal-data sources by the Operator.

• Hosting, infrastructure, and storage providers.
• Analytics providers, including Google Analytics, Yandex Metrica, and Mixpanel.
• Payment partners and payment service providers where applicable.
• External AI providers and technology partners involved in generation or request processing.
• Telegram as the technical environment for Bot delivery and interaction.

6. Storage and Cross-Border Processing

Personal data may be stored by the Operator and its contractors in systems used to provide the services.

Because the Platform uses external AI providers, analytics services, and Telegram, cross-border transfer or processing may occur depending on the usage scenario.

Such transfer and processing are carried out subject to the requirements of the laws of the Republic of Kazakhstan.

7. Retention Periods

Personal data is retained no longer than necessary for processing purposes unless a longer period is required by law.

Data related to generation services, including prompts, results, and metadata, may be retained longer to support service history, security, and quality improvement.

Where the law allows, the User may request cessation of processing or deletion of data, and the Operator will review such request within the applicable legal framework.

8. Cookies and Analytics

The Site uses cookies and similar technologies for core functionality, security, and analytics. Browser settings may be used to manage cookies, but disabling them can affect certain features.

Cookies are not used inside the Telegram Bot interface itself.

9. User Rights and Requests

Requests should be sent to support@neuroplace.ai. The Operator may request proof that the requester is the data subject or account owner.

Unless another period is required by law, the Operator provides information relating to the User within 3 business days from receiving the request.

• To receive information about the processing of their personal data.
• To request correction or update of inaccurate personal data.
• To demand blocking, deletion, or destruction of personal data where permitted by law.
• To withdraw consent where processing is based on consent and withdrawal is legally available.

10. Security and Final Provisions

The Operator applies organizational and technical measures to protect personal data against unlawful access, alteration, disclosure, blocking, or destruction.

The laws of the Republic of Kazakhstan apply to this Policy and the related relations between the User and the Operator.

The Operator may update this Policy. The current version is published on the Site and becomes effective upon publication unless otherwise required by law.