← Neonalab

Privacy Policy

Valid from October 4, 2026

In short. We process what you gave us yourself and what is needed for the service to work. We do not train shared models on your private materials. We do not collect social media passwords, cookies, or private e-signature keys — we do not ask for them at all.

Who we are

Neonalab is a content lab. We check claims, sources, and materials using fixed protocols and turn them into content, descriptions, and documentation. We do not conduct physical, laboratory, or medical testing of products.

What data do we process

CategoryExamplesBasis
accountemail, language, time zoneperformance of the contract
materialsphotos, videos, logos, texts that you uploadedperformance of the contract
brand datacatalog, prices, topics, style, rulesperformance of the contract
social media connectionaccess tokens, account ID, allowed scopesyour explicit action
intake before registrationquestionnaire answers, links you provided for analysisyour consent
paymentsfact and payment amount, invoiceslegal recordkeeping obligation
action logwho changed what and when, IP addresssafety and claim handling

What we do not do

Separately on independent reviews

Neonalab publishes product comparisons. Private data of commercial clients is not used in them — unpublished prices, reports, and payer materials are unavailable to the editorial side, even with a shared technical base. A commercial client does not have the right to edit an independent review. If a brand in the comparison is our client, this is disclosed in the material itself.

Artificial intelligence

Some of the work is done by automated agents. Where you interact with them, it is marked — you always know you are talking to a program, not a person. The agent does not make up personal experience or make decisions about your budget or access.

Transfer to third parties

To operate the service, we use providers of cloud computing, models, acquiring, and social APIs. They are given exactly what is needed for a specific operation. The list of providers and processing countries will be published here before commercial use begins.

Retention periods

Brand materials and data — while the account is active, then according to the data deletion procedure. Unsaved intake form — 24 hours. Activity log — up to 12 months. Financial records — as required by law.

Your rights

Access, correction, deletion, export, restriction of processing, withdrawal of consent, complaint to a supervisory authority. Requests — [email protected], reply within 30 days.

Children

The service is not intended for people who have not reached the age at which local law allows independent consent to data processing. Age verification is performed before the first interaction.

Changes

We will notify you about material changes on this page and by email. The effective date is above.

The legal entity details, the country of data processing, and the legal basis will be added to this document before commercial use begins. We are not listing them now because we will not make them up.