Privacy Policy

NeuroDesk ("we," "us," or "our") designs and manages technology systems for homes, businesses, contractors, and trades. Our services can include websites, business communications, CRM and lead workflows, Google review automation, custom software, managed IT, and connected systems. We operate at neurodesk.co. This policy explains how we handle information when you visit our website, contact us, or use a NeuroDesk service.

We collect information in two ways: information you provide to us directly, and information collected automatically through your use of the platform. Information you provide: - Business, account, billing, contact, and project information - Payment information (processed securely through our payment provider; we do not store card details) - Customer, lead, or household information that you upload, sync, submit, or ask us to process - Communications and service content, which may include messages, chat content, call details, form submissions, support requests, and workflow records depending on the configured service Information collected automatically: - Usage data, including pages visited, features used, and session duration - Device and browser information - IP address and approximate location

We use the information we collect to: - Provide, configure, support, secure, and improve NeuroDesk services - Operate approved website, phone, messaging, chat, CRM, review, automation, IT, and connected-system workflows - Process payments and manage your subscription - Send you service updates, receipts, and support communications - Diagnose issues and develop or improve services - Comply with legal obligations We do not sell your data or your customers' data to any third party.

When NeuroDesk processes customer, lead, caller, website visitor, or household data for a client, we use it to provide the configured service and related support. The categories processed, authorized purposes, access, retention, and deletion procedures depend on the service configuration and applicable agreement. Clients remain responsible for the data they direct us to process, including providing required notices, establishing a lawful basis, obtaining any required consent, respecting opt-out requests, and configuring access appropriately. NeuroDesk does not sell client or end-user data.

Configured services may process communications such as calls, voicemail, SMS, email, website chat, form submissions, and CRM activity. AI-assisted features may use approved business information and conversation context to perform configured tasks, such as answering common questions, collecting project details, routing a request, drafting a response, or supporting booking. The client is responsible for required notices and consent, including any requirements that apply to automated communications, call handling, recording, marketing, or cross-border data processing. Opt-out and human-escalation procedures are configured according to the service and applicable agreement.

Payments are processed by third-party payment providers. We do not store your full card number or card security code. Fees, subscriptions, usage charges, and payment requirements are defined in the applicable order, proposal, or service agreement.

We use cookies and similar technologies to: - Keep you logged in to your account - Understand how you use the platform - Improve performance and user experience You can control cookie settings through your browser. Disabling cookies may affect your ability to use certain features of the platform.

We do not sell personal information. Depending on the configured service, we may share information with: - Service providers and subprocessors that support hosting, communications, payments, AI-assisted features, analytics, software, devices, and service delivery - Professional advisors such as lawyers and accountants, where required - Law enforcement, regulators, or other parties when required or permitted by law We limit sharing to what is reasonably needed for the service or lawful purpose. Provider handling depends on the service configuration, provider role, applicable terms, and legal requirements. Providers may process information in another province, state, or country, where it may be subject to the laws of that jurisdiction.

Retention depends on the information, configured service, client instructions, service agreement, security needs, and legal or accounting obligations. When information is no longer required, we delete, anonymize, or securely dispose of it according to the applicable process. You may request access, correction, or deletion by contacting privacy@neurodesk.co. Some information may need to be retained where permitted or required by law.

Depending on your location, you may have the right to: - Access the personal information we hold about you - Correct inaccurate or incomplete information - Request deletion of your personal information - Withdraw consent for certain uses of your data - Lodge a complaint with a privacy regulator To exercise any of these rights, contact us at privacy@neurodesk.co. We respond in accordance with applicable law after completing any required identity verification. Permitted limits and extensions may apply.

We use administrative, technical, and organizational safeguards appropriate to the information and service. These can include access controls, secure transmission, authentication, monitoring, vendor controls, and documented operational procedures. No system or transmission method is completely secure, but we take reasonable steps to reduce risk and respond to identified issues.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and, where appropriate, by sending you an email. Your continued use of the platform after changes are posted constitutes your acceptance of the updated policy.

For privacy-related questions or requests, contact us at: NeuroDesk Email: privacy@neurodesk.co Website: neurodesk.co