Translation of the original Portuguese version. In case of any discrepancy, the Portuguese version prevails.
1. Data controller
The controller of personal data collected through neuralranks.com and the Neural Ranks platform is Idealbrand, Lda, a company incorporated in Portugal, VAT number PT515295515, with its registered office at Avenida da Liberdade, 615, 1.º, 4710-251 Braga, Portugal. For any privacy question, write to hello@neuralranks.com with the subject “Privacy”.
2. Data we process
| Situation | Data | Source |
|---|---|---|
| Creating and using an account | Name, email, password (stored hashed), company, website, preferences and usage logs | Provided by you |
| Billing | Name or company, billing address, VAT number, country and payment history (card details stay with Stripe) | Provided by you and by Stripe |
| Free check | Domain, topic and IP address | Provided by you |
| Audit, demo, contact and suggestions or complaints | Name, email, company, website, topic and message | Provided by you |
| Website chat | Questions, the page they were asked on and your email, if you leave it | Provided by you |
| Technical data | IP address, browser type, security logs and rate-limit logs | Collected automatically |
| Website visit statistics | Page visited, referring site (for example a search engine or an AI assistant), language, device type and a random identifier that changes every day. We do not store the IP address or use cookies. Kept for 24 months. | Collected automatically |
The data you enter into the platform about brands, topics, questions and competitors is generally not personal data. We do not ask for, and do not intend to process, special categories of data.
3. Purposes and legal bases
| Purpose | Legal basis (GDPR) |
|---|---|
| Creating and managing the account, providing the service, sending reports and alerts | Performance of a contract, Art. 6(1)(b) |
| Invoicing, accounting and tax obligations | Legal obligation, Art. 6(1)(c) |
| Responding to audit, demo and contact requests, suggestions and complaints | Pre-contractual steps and legitimate interest, Art. 6(1)(b) and (f) |
| Security, fraud and spam prevention, rate limiting | Legitimate interest, Art. 6(1)(f) |
| Improving the platform with aggregated data | Legitimate interest, Art. 6(1)(f) |
| Measuring website visits anonymously, without cookies, to understand where they come from and improve the content | Legitimate interest, Art. 6(1)(f) |
| Newsletter and marketing communications | Consent, Art. 6(1)(a), which you can withdraw at any time |
4. Who we share data with
We only share data with providers that help us deliver the service, bound by contract and by the GDPR:
| Provider | Role | Location |
|---|---|---|
| Hostinger | Hosting of the website, platform and database | European Union |
| Stripe Payments Europe, Ltd. | Payment processing and invoicing | Ireland (EU) |
| Brevo (Sendinblue SAS) | Sending transactional emails | France (EU) |
| AI model providers (OpenAI, Anthropic, Google, Perplexity) | Answers to the questions about brands and topics used in analyses. We send no personal data in these requests. | USA and EU |
Where a provider processes data outside the European Economic Area, the transfer relies on an adequacy decision, such as the EU-US Data Privacy Framework, or on standard contractual clauses approved by the European Commission. We do not sell personal data. We may also disclose data to authorities where required by law.
5. How long we keep data
- Account data: while the account is active. After you delete it, data is erased within 30 days, including backups.
- Invoices and billing data: 10 years, as required by law.
- Audit, demo and contact requests, suggestions and complaints: 24 months after the last contact.
- Chat conversations: 12 months.
- Log of emails sent: 12 months.
- Rate-limit logs: 2 days. Security logs: up to 12 months.
6. Your rights
You can request access to, rectification, erasure, restriction and portability of your data, and object to processing based on legitimate interest. Where processing is based on consent, you can withdraw it at any time. In the platform, under Settings, you can download your data and delete your account. For other requests, write to the email above. We reply within one month.
You also have the right to lodge a complaint with Portugal’s data protection authority, the Comissão Nacional de Proteção de Dados (CNPD), www.cnpd.pt, or with the supervisory authority in your country of residence.
7. Automated decisions
We do not make decisions based solely on automated processing that produce legal effects or similarly significantly affect you. The platform’s analyses concern brands and topics, not people.
8. Security
We apply appropriate technical and organisational measures, described on the Security page. If a data breach poses a risk to your rights, we notify the CNPD within 72 hours and inform affected individuals where the law requires.
9. Children
Neural Ranks is intended for professionals and is not directed at anyone under 18.
10. Cookies
We only use strictly necessary cookies and local storage. See the Cookie Policy.
11. Changes
We may update this policy. The date of the last update appears at the top of the page and, for material changes, we notify customers by email.
Questions about this document? Write to hello@neuralranks.com.