Privacy policy

1. Scope and parties

Neiroport provides access to AI models through a unified interface. In this policy, “we” and “the service” refer to the administration of Neiroport, and “user” means a visitor or account holder. Available contact channels appear at the end of this document.

If you submit information about other people through the API, you determine the purpose of that submission and must have an appropriate legal basis. Neiroport processes the request to provide the selected service. Payment and external sign-in services may independently determine how they process data on their own pages.

This policy describes the service and does not replace a separate consent, data processing agreement or other document when required by applicable law. Accepting the terms of service does not by itself constitute consent to advertising or every additional processing activity.

2. Information we process

Account information includes email address, name or display name, account identifier, registration date, status, role, email verification, language, theme and display currency. Password sign-in uses a cryptographic password hash; passwords are not stored in plaintext.

External sign-in information includes your identifier in Google, Telegram or Yandex ID, name and email if provided within the requested permissions. We do not receive the password to your external account. The link remains until it is removed or the relevant records are deleted.

API usage records include account, key, model and request identifiers, routing preferences, timestamps, status, error code, latency, token counts, price version, calculated cost and related balance entries. Keys that can be revealed again are stored encrypted, and a hash is used for authentication.

Request content includes messages, system instructions, images, files, code, tool parameters and other material you send to a model. It is processed to obtain and return the response. Neiroport usage records store metadata and accounting information rather than a persistent text transcript. A conversation in the open playground remains in page memory and may disappear when the page is closed or refreshed.

Payment information includes amount, currency, the exchange rate locked for the invoice, payment method, invoice and transaction identifiers, status, checkout link, timestamps and necessary provider confirmations. Card details are entered with the payment service. Neiroport does not request or store complete card numbers, CVV/CVC codes or private cryptocurrency wallet keys.

When you continue with AI support, the conversation and limited safe information about your own account are sent to the selected AI model to prepare a reply. Conversations are saved in your account; when you request an operator, the history is included in a support ticket. Do not send keys, passwords or payment credentials

Support and security information includes the subject, category and content of a request, correspondence, materials you provide, administrative audit records and information necessary to investigate errors or misuse. The infrastructure processes IP addresses and HTTP or browser information when establishing connections; technical logs may contain this information depending on infrastructure configuration.

Browser information consists of necessary cookies and local language, theme and currency preferences. The cookie policy explains their purpose and duration. Registration does not request special-category or biometric information. Do not submit sensitive information without a valid basis and confirmation that the processing is permitted.

3. Purposes and legal bases

Information necessary for account creation, authentication, model access, billing, payments, support and performance of the terms is processed to enter into or perform the agreement or provide a service you request.

Necessary technical information helps protect accounts, limit automated attacks, investigate incidents and prevent fraud. Where available under applicable law, this relies on the service’s legitimate interests, balanced against users’ rights. Mandatory financial records and lawful authority requests are processed to meet the relevant legal obligation.

Where an activity requires consent, it is requested separately for the stated purpose. You can withdraw it through support. Withdrawal does not invalidate past lawful processing or end processing supported by an independent legal basis. Advertising messages are separate from necessary account notifications and require their own basis.

Without necessary account information or delivery of request content to a selected model, some functions cannot be provided. Optional information and external sign-in remain your choice.

4. AI requests and responses

To fulfil a request, Neiroport sends its content and necessary parameters to external model-processing infrastructure and returns the response to your application or playground. External participants may process request information, tool activity and errors under their own retention and processing rules.

Neiroport does not independently train its own AI models using your requests or responses. This is not a guarantee that every external participant offers zero retention or excludes security review or training. If your data requires special confidentiality conditions, confirm the permitted processing arrangement with support before submitting it.

Agents, IDEs and plugins you choose may submit code, file contents and command results. You control their permissions and settings. Neiroport receives the information actually sent through the API. Avoid unnecessary passwords, private keys, complete payment credentials or third-party personal data.

5. Recipients and external services

Authorised staff and technical specialists, hosting and infrastructure services, AI-processing participants, email delivery and payment services may receive access limited to what is needed for a specific function, security, contract performance or legal obligation.

Google, Telegram and Yandex ID process information when you choose their sign-in method. Cryptocurrency payments use Heleket; card and instant bank transfer payments use the connected payment service when available. Review the separate terms and policies on their pages.

We do not sell account data or publish your requests. Independent third-party advertising is not a purpose of the processing described here. Disclosure to competent authorities requires an appropriate legal basis and is limited to the required information.

6. International processing

Website infrastructure and external participants may operate in different countries. A foreign sign-in service, payment method or model may involve an international transfer. Russian-language pages or ruble prices do not mean all processing takes place exclusively in Russia.

Transfer eligibility, notices, contractual requirements and safeguards depend on the parties’ locations and applicable law. This policy does not claim specific localisation, contractual safeguards, adequacy decisions or guarantees that have not been separately confirmed. Contact support for the processing conditions relevant to your situation before submitting restricted information.

7. Retention and deletion

Account information, settings and identity links remain while the account is used and they are needed to provide the service. Request metadata, balance records and support correspondence are retained as needed for accounting, usage history, disputes, security and mandatory retention. There is currently no universal automatic deletion after a fixed number of days for these records.

A sign-in session lasts up to seven days, external sign-in verification up to ten minutes and an email sign-in code ten minutes. Expiry prevents further use of the credential; it does not guarantee immediate deletion of every associated technical record. Cleanup depends on the record’s purpose and maintenance procedures.

On a deletion request, we verify account ownership, identify data that can be erased or anonymised and explain records that must remain for legal obligations, unsettled accounting or the protection of rights. Active production database backups are refreshed daily and normally retained for up to seven days. Deleted information may remain in protected backups until their scheduled replacement.

External services apply their own retention rules. Deleting your Neiroport account does not automatically delete your Google, Telegram or Yandex ID account or payment records a payment service must retain independently.

8. Security

The service uses HTTPS, access restrictions, password hashing, encryption for stored secrets, protected session cookies, request validation and controls against misuse. Administrative changes are recorded. Access is granted according to role and operational need.

No system provides absolute security. Confirmed incidents are addressed to limit their consequences, with notices where required by applicable law. Protect your email, external accounts, devices and API keys, and promptly report suspicious access.

9. Your rights

Subject to applicable law, you may request information about processing, access and a copy of your data, correction, erasure, restriction, objection to particular processing or portability. You may withdraw consent where it is the basis of processing and complain to a competent supervisory authority.

Name, language, theme and currency can be changed in settings; API keys can be disabled in the dashboard. Contact support to close an account, obtain a data copy, remove an external identity link or make another privacy request. Minimal additional information may be needed to verify ownership, but we will not ask for your password, sign-in code or complete API key.

Requests are handled within the deadlines required by applicable law. If a lawful restriction prevents full fulfilment, we explain it. A request does not remove mandatory record-retention obligations.

10. Automated processing and minors

Cost calculations, limits and technical request restrictions operate automatically. If you believe a calculation or restriction is incorrect, contact support for review. AI output is not a legal determination of your rights and should not be the sole basis for significant decisions about a person.

The service is intended for adults with the necessary legal capacity. If you believe a minor’s information was submitted without a valid basis, notify support so the circumstances and appropriate action can be assessed.

11. Updates and contact

The current policy is available at a permanent link with a revision date. Material changes to purposes, data categories or processing conditions are accompanied by a notice in the service or another available channel. Fresh consent is requested separately where necessary.

Privacy requests can be sent through dashboard support or the Telegram contact below. Avoid posting secrets or unnecessary personal information in public correspondence. For an account-related request, provide its email address and a description of the request.