Privacy Policy

1. Scope and controller

This policy explains how NeuraEdge Limited ("NeuraEdge", "we", "us", or "our") handles personal data when you visit neuraedge.ai or use ESG.Study, Mastery.Study, or OntoScience. Product-specific terms and cookie policies may provide additional information for a particular service.

NeuraEdge is responsible for the processing described here. A provider you choose or a service you connect may separately process data under its own terms and privacy policy.

Corporate website

2. neuraedge.ai

Data we receive

When you submit the contact form, we receive the details you choose to enter, including your name, telephone number, email address, company, enquiry type, and message. Our hosting infrastructure may also process ordinary request data such as IP address, browser information, requested page, and request time for delivery, security, and fault diagnosis.

All contact-form fields are voluntary. If you do not provide a way to contact you, we may be unable to respond to your enquiry.

How we use it

We use contact details to respond to your enquiry and request data to operate, secure, and troubleshoot the website. The current website does not load a third-party advertising or analytics service.

Domain-specific learning platform

3. ESG.Study

ESG.Study may process account and profile details, authentication records, subscription and transaction records, course progress, bookmarks, assessment answers and results, support messages, and content you submit to learning or AI-assisted features. It also stores browser data needed for authentication, security, sessions, language, and interface preferences.

We use this information to provide the learning service, preserve progress, administer subscriptions, personalize the learning experience, answer support requests, protect accounts, and maintain service reliability. When you invoke an AI or connected feature, the inputs required for that request may be sent to the provider used by that feature.

General-purpose learning platform

4. Mastery.Study

Mastery.Study may process account and profile details, authentication records, subscription information, study plans, course and video progress, bookmarks, test answers and results, support messages, and content submitted to AI-assisted study features. Browser storage may retain data needed for authentication, security, sessions, language, and interface preferences.

We use this information to deliver courses and assessments, track the progress you ask us to retain, administer access, improve reliability, and respond to support requests. Inputs are sent to an external AI or connected service only when the relevant feature requires that service to fulfil your request.

Local-first desktop application

5. OntoScience

OntoScience stores application configuration, projects, knowledge bases, indexes, artifacts, credentials, and bounded sanitized diagnostics locally. It does not send product analytics, traces, session recordings, prompts, generated artifacts, or source maps to a NeuraEdge or third-party telemetry service.

Data leaves the device only through a workflow you explicitly invoke, such as sending selected inputs to an AI provider, connector, OAuth provider, marketplace, deployment service, or storage endpoint. Bring-your-own-key credentials stay in the device's credential store and are used only for the provider request you select. NeuraEdge does not receive your BYOK credential.

Settings > Data can report and delete application-managed data. It does not delete external project locations, linked directories, or arbitrary files outside the application-owned data root.

6. Shared practices

Purposes and legal bases

Depending on the context and applicable law, we process data to perform a contract with you, respond before entering a contract, comply with legal obligations, pursue legitimate interests such as service security and support, or act on your consent. You may withdraw consent for future processing where consent is the applicable basis.

Service providers and disclosures

We may disclose only the data needed to cloud infrastructure providers, payment processors, and AI infrastructure and model-inference providers that help deliver a service. A service you choose to connect may separately receive data needed for the workflow you request. We may also disclose data when required by law, to protect users or our services, or in connection with a corporate transaction. We do not sell personal data or use it for third-party behavioural advertising.

AI-assisted features

When you choose an AI-assisted feature, the inputs and outputs needed to fulfil your request may be processed by third-party AI infrastructure and model inference providers. Those providers may retain data for security, abuse prevention, or service operation under their applicable terms. NeuraEdge does not use your prompts or outputs to train AI models.

Payments

Payment-card details are entered directly into controls hosted by our payment processor and do not pass through NeuraEdge servers. NeuraEdge does not collect or store full payment-card numbers or security codes. We retain only the transaction, customer, and subscription identifiers and the billing records needed for payments, refunds, support, and accounting.

International processing

A service or provider may process data in a jurisdiction different from your own. Where applicable law requires it, we use an appropriate transfer basis or contractual safeguard for that processing.

Retention and security

We retain personal data only while it is needed for the purposes described above, account administration, dispute resolution, security, or a legal obligation. Contact and support records are deleted when they are no longer needed for those purposes. After a verified deletion request, account and product data is deleted or irreversibly anonymized unless a limited record must be retained for a legal, accounting, security, or dispute purpose. Backup copies expire through the normal backup cycle. Transaction, invoice, refund, and accounting records are retained for at least seven years where required by Hong Kong law. We use reasonable technical and organizational measures designed to protect data, but no system can guarantee absolute security.

Communications

We send only account, authentication, security, billing, support, and material service notices. We do not send marketing email. If that changes, we will seek any consent required by law and provide an effective way to opt out before sending marketing messages.

7. Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a copy of personal data, and to complain to a data protection authority. You may also manage available account, cookie, and local-data controls directly in the relevant product.

We may need to verify your identity before completing a request. Some data may be retained where the law permits or requires it. We do not discriminate against users for exercising privacy rights.

Formal Hong Kong requests for access to or correction of personal data are handled within the period required by the Personal Data (Privacy) Ordinance, normally no later than 40 days. If we lawfully refuse a request, we will give the reason where required.

8. Children

Our products are intended only for consumers who are at least 18 years old and legally able to enter a contract. We do not knowingly offer accounts or hosted services to anyone under 18. If you believe a person under 18 has provided personal data, contact us so we can review and take appropriate action.

9. Changes to this policy

We may update this policy when our products, practices, or legal obligations change. We will publish the revised effective date here and provide additional notice when required by applicable law.