1. Who We Are

NeuraHive Ltd ("NeuraHive", "we", "us", "our") operates the website at neurahive.co.uk and the NeuraHive platform — an AI-powered website creation and management service. Our registered address is in England and Wales. For privacy enquiries, contact us at info@neurahive.co.uk.

2. What Data We Collect

We collect the following categories of personal data:

• Account data: email address, name, and profile information provided when you sign up or connect via Google OAuth.
• Usage data: pages visited, features used, AI builds initiated, and interactions with your sites.
• Content data: business descriptions, prompts, and website content you create using our platform.
• Payment data: billing information processed securely by Stripe. We do not store card details.
• Technical data: IP address, browser type, device information, and cookies.

3. How We Use Your Data

We use your data to:

• Provide, operate, and improve the NeuraHive platform
• Generate AI-powered websites using your business descriptions
• Process payments and manage your subscription
• Send transactional emails (magic links, receipts, important notices)
• Respond to support requests
• Comply with legal obligations

We do not sell your personal data to third parties. We do not use your content to train AI models without your explicit consent.

4. Legal Basis for Processing

Under UK GDPR, we process your data on the following bases:

• Contract: processing necessary to provide the service you signed up for
• Legitimate interests: improving our platform, preventing fraud, and ensuring security
• Legal obligation: complying with applicable laws
• Consent: where you have opted in to marketing communications

5. Third-Party Services

We use trusted third-party services to operate the platform:

• Supabase — database and authentication (EU/US)
• Anthropic — AI content generation (US)
• Stripe — payment processing (US/EU)
• Resend — transactional email delivery
• Vercel — hosting and infrastructure (US/EU)
• Unsplash — stock imagery

Each provider operates under their own privacy policy and appropriate data transfer safeguards.

6. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law.

7. Your Rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data ("right to be forgotten")
• Restrict or object to processing
• Data portability
• Withdraw consent at any time

To exercise any of these rights, email info@neurahive.co.uk. We will respond within 30 days.

8. Cookies

We use essential cookies to maintain your session and authentication state. We do not use third-party advertising or tracking cookies. You can disable cookies in your browser settings, though this may affect platform functionality.

9. Security

We implement industry-standard security measures including encryption in transit (TLS), encrypted storage, and access controls. However, no method of transmission over the internet is 100% secure and we cannot guarantee absolute security.

10. Children

NeuraHive is not intended for children under 13. We do not knowingly collect data from children. If you believe a child has provided us with personal data, contact us immediately.

11. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes via email or a prominent notice on the platform. Continued use after changes constitutes acceptance.

12. Contact

For privacy questions or to exercise your rights: info@neurahive.co.uk

You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.