neuvosight

Privacy Policy

This policy explains what personal data Valumetric collects, why, and who processes it on our behalf. Neuvosight OÜ is the data controller.

1. Controller

Controller
Neuvosight OÜ
Address
Sepapaja tn 615551 TallinnHarju maakondEstonia
Registry code
17479001
Contact
info@neuvosight.com

2. What we collect

  • Account data: your email address. There is no password, and we do not ask for your name.
  • Model data: the assumptions, scenarios and company names you enter and choose to save.
  • Report requests: the email address you give to have a PDF report sent to you, an optional company name, and any UTM campaign parameters in the URL you arrived from.
  • Waitlist signups: the email address you give to be notified when paid access to a product opens, and which product you asked about.
  • Subscription data: which products you are subscribed to and when access renews or ends. Card details never reach us; they are handled by Lemon Squeezy.
  • Usage analytics: anonymous, aggregated product events (which features are used, which steps are completed). We do not link these to your account.
  • Technical data: server logs and IP addresses, used for security and abuse prevention such as rate limiting. IP addresses are stored as a one-way hash for that purpose, not in raw form.

3. Why, and on what legal basis

  • To provide the service and your account, and to deliver what you subscribed to (performance of a contract, GDPR Art. 6(1)(b)).
  • To send you a report you requested by email (performance of a contract / your request, Art. 6(1)(b)).
  • To notify you when paid access to a product you asked about opens up (your request, Art. 6(1)(b)).
  • To keep the service secure and prevent abuse, including rate limiting (legitimate interests, Art. 6(1)(f)).
  • To understand aggregate product usage and improve the model (legitimate interests, Art. 6(1)(f)).
  • To meet accounting and legal obligations (Art. 6(1)(c)).

4. Who processes data for us

We use the following providers. Each processes data on our instructions under a data processing agreement, except Lemon Squeezy, which acts as an independent controller for the payment itself in its role as Merchant of Record.

Vercel Inc.
Application hosting and delivery (USA / EU regions)
Supabase
Authentication and database (EU region)
Resend
Transactional email (report delivery, sign-in links, waitlist confirmations)
Airtable
Records report-request contact details and waitlist signups as sales leads
PostHog
Product analytics, anonymous and not linked to your account
Lemon Squeezy (Sold through Link, LLC)
Payments, invoicing and VAT as Merchant of Record

5. Cookies

We use no advertising or tracking cookies, and there is no cookie consent banner because none is needed for what we set.

The only cookies are a session cookie that keeps you signed in, and a preference cookie remembering whether you enabled test mode. Our analytics are configured to keep no cookies and no persistent identifier, storing events in memory for the page visit only.

6. International transfers

Some providers are established outside the European Economic Area or process data there. Where that happens, transfers rely on the European Commission's Standard Contractual Clauses or an adequacy decision. You can ask us for details of the safeguards for any specific provider.

7. How long we keep it

  • Account and scenario data: until you ask us to delete your account, after which it is removed.
  • Subscription records: for as long as required by accounting and tax law.
  • Report-request lead records: up to 24 months from the request, unless you ask us to delete them sooner.
  • Waitlist signup records: until the product you signed up for launches, or up to 24 months from signup, whichever is sooner.
  • Rate-limiting records: automatically deleted after one day.
  • Aggregated analytics: retained in non-identifying form.

8. Your rights

Under the GDPR you may request access to your data, correction, deletion, restriction of processing, portability, and you may object to processing based on legitimate interests. Write to info@neuvosight.com and we will respond within one month.

If you believe we have handled your data unlawfully you may complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, aki.ee), or to the supervisory authority in your own country of residence.

9. Children

The service is not directed at children and is not intended for anyone under 18.

10. Changes

We may update this policy. The date at the top shows when it last changed; material changes will be announced in the application or by email.

←
Privacy Policy