Privacy & Cookie Policy

Your privacy and data protection are our top priorities

Last Updated: October 14, 2025

Privacy Policy

1. Our Roles in Data Processing

As a Data Controller

When you visit our website or contact us directly (e.g., via email or forms), we act as the Data Controller, determining how and why your personal data is processed.

As a Data Processor

When our clients use our Services (e.g., AI Voice Agents or Operator Support Assistants) to interact with their customers ("End-Users"), our clients are the Data Controllers, and we act as the Data Processor, processing data strictly according to their instructions as outlined in our Data Processing Agreement (DPA).

If you are an End-User interacting with a NeurX-powered agent, please direct privacy inquiries to the company you interacted with (the Data Controller). We assist our clients in fulfilling such requests as required by law and our DPA.

2. Information We Collect

As a Data Controller

We collect the following information for our own business purposes:

As a Data Processor

On behalf of our clients, we may process the following categories of End-User data as instructed:

We also use anonymized, aggregated metadata (e.g., system response times, session failure rates, AI response accuracy) to maintain and improve our infrastructure. This data is not used to identify individuals.

3. How We Use Your Information

As a Data Controller

We use your information to:

  1. Provide, maintain, and improve our website and Services.
  2. Manage client relationships and provide customer support.
  3. Respond to inquiries and send administrative updates (e.g., changes to terms or policies).
  4. Ensure the security and integrity of our platform.
  5. Comply with legal obligations.

Legal Basis: We process this data based on our legitimate interests (e.g., operating our business and website) or to fulfill contractual obligations with our clients.

As a Data Processor

We process End-User data solely to provide our Services to clients, including:

All processing is governed by the client's instructions in our DPA. We do not sell, trade, rent, or disclose personal data for monetary or other valuable consideration, except as required by law, with explicit consent, or as necessary to fulfill our obligations under the DPA.

4. Data Sharing and Sub-processors

We do not sell or rent your personal data. We may share data only in the following cases:

For data transfers outside the EU/EEA (e.g., for specialized services like Large Language Models), we use safeguards such as Standard Contractual Clauses (SCCs) or the EU-U.S. Data Privacy Framework to ensure GDPR compliance.

5. Data Security

We implement industry-standard technical and organizational measures to protect your data, including:

6. Data Retention

As a Data Controller: We retain personal data only as long as necessary for the purposes outlined in this policy or as required by law.

As a Data Processor: End-User data retention is determined by our clients and governed by our DPA. Upon contract termination, we return or delete all personal data as instructed, subject to legal retention obligations.

7. Your Data Rights

Under GDPR, you have the following rights over your personal data:

How to Exercise Your Rights

8. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. Significant changes will be communicated by posting the updated policy on our website with a revised "Last Updated" date.

Contact Us:

Email: privacy@neur-x.com

Address: Zaventem, Brussels, Belgium