BUSKERA UAB, company code 308066311, V. Nagevičiaus g. 3, LT-08237 Vilnius, Lithuania ("Neurokit", "we", "us"), is the controller of personal data processed through https://neurokit.cloud (the "Service"). This notice sets out what we collect, why, and what you can do about it, in line with the EU GDPR.
1. What we collect
• Account — name, email address, hashed password and any API keys you generate.
• Billing — the packs you buy and the transactions that go with them. Full card numbers stay with our payment providers and are never stored on our servers.
• Content — prompts, briefs, files, images and audio you send in (Input) and everything the Service generates for you (Output).
• Usage and device signals — which tools you use, tokens spent, timestamps, IP address, browser, operating system and approximate location derived from IP.
• Support — the tickets and messages you send us and our replies.
• Cookies — described in the Cookie Policy.
A friendly request: keep sensitive personal data — health, biometric, government identifiers, special-category information — out of the material you feed into the tools.
2. Why we use it (GDPR legal bases)
• Operating the platform, running your Input into Output and managing your account — performance of a contract.
• Charging for packs and keeping tax and accounting records — contract and legal obligation.
• Support, security, fraud prevention and product improvement — our legitimate interests.
• Non-essential cookies and marketing communications — your consent, which you can withdraw at any time.
We do not use your Input, Output or usage patterns to train, fine-tune or benchmark our own AI models.
3. Sharing with third parties
To fulfil your requests, the necessary portion of your Input is forwarded to the third-party AI providers behind each tool. Beyond that, personal data is shared only with the vendors that help us run the platform — hosting, email delivery, analytics, customer support, payment and fraud-prevention — each acting as our processor under written contract. We do not sell personal data. Public authorities receive it only where a valid legal request compels us to hand it over.
4. Transfers outside the EEA
Where a processor is located outside the European Economic Area, we rely on the safeguards GDPR recognises — most commonly the EU Standard Contractual Clauses supported by a transfer impact assessment, or an adequacy decision covering the destination country.
5. How long we keep it
Account records are kept for the life of the account plus a short wind-down window. Invoicing and other accounting records are retained for the period Lithuanian tax and company law requires (up to ten years). Content, telemetry and support logs are kept only for as long as they remain useful for the purpose that justified collecting them.
6. Security
We use industry-standard measures: encryption in transit and at rest, encrypted storage of secrets and API keys, role-based access controls, logging and monitoring. No online service is impenetrable, but where a data breach affecting you occurs and the law requires notification, we notify you and the supervisory authority within the deadlines GDPR sets.
7. Your rights
Under the GDPR you can ask for access to your data, corrections, erasure, restriction, portability, or object to specific processing, and withdraw any consent you have given (without affecting the lawfulness of what happened before you withdrew it). Send requests to [email protected] — we reply within one month. Complaints go to Lithuania's State Data Protection Inspectorate (VDAI, https://vdai.lrv.lt) or the data-protection authority in the EU country where you live or work.
8. Children
Neurokit is intended for adults; we do not knowingly collect personal data from anyone under 18. If a minor has submitted personal data to us, contact us and we will remove it.
9. Updates
We refresh this notice as the platform and the rules around it evolve. The "Last updated" date on the cover tracks the current version, and material changes will be signalled in advance.
Contact
BUSKERA UAB
· Company code 308066311
· V. Nagevičiaus g. 3, LT-08237 Vilnius, Lithuania
· +370 691 98504