1. Who we are
Neoxra is a service operated by Meridian Global LLC, a New York limited liability company. This policy explains what personal data we collect, why we collect it, and how we use it.
Privacy Policy
Last updated: 2026-06-01
2. Data we collect
When you create an account, we collect your name, email, and Google account ID (via OAuth). When you subscribe, Stripe collects your payment details on our behalf; we never see or store your full card number. When you use the Service, we log your generation requests, outputs, and basic usage metadata (timestamps, IP, browser type) for product reliability and abuse prevention.
3. How we use your data
We use your data to: (a) operate, maintain, and improve the Service; (b) authenticate you and gate paid features; (c) communicate with you about your subscription, product updates, or security issues; (d) generate aggregate, de-identified analytics that inform product decisions; (e) detect and prevent fraud and abuse.
4. AI model providers
Generation requests are processed through third-party large language model providers including Anthropic (Claude) and Google (Gemini). Your prompt and any reference material you supply are transmitted to these providers under their respective data-processing terms. We do not allow these providers to train their models on your inputs where opt-out is supported by their API tier.
5. Third-party processors
We use the following sub-processors to operate the Service: Stripe (payments), Anthropic (AI generation), Google (OAuth, Gemini, Search Console integration), Render (backend hosting), Vercel (frontend hosting), and Resend or similar transactional email providers (planned). Each is bound by its own data-processing terms.
6. Data retention
Account data is retained for as long as your account is active. Generation history is retained for up to 24 months unless you request earlier deletion. Payment records are retained for 7 years to comply with US tax and accounting requirements.
7. Your rights
You may request a copy of your personal data, correction of inaccuracies, or deletion of your account at any time by emailing support@neoxra.com. We will respond within 30 days. Deletion of your account removes your generation history and authentication records; financial records may be retained to meet legal obligations.
8. Security
We use industry-standard practices to protect your data: HTTPS in transit, encrypted database storage at rest (managed by Render), session tokens with rotation, and least-privilege internal access. No system is perfectly secure; we will notify affected users without undue delay in the event of a breach involving personal data.
9. International transfers
Our infrastructure is hosted in the United States. By using the Service from outside the US, you consent to your data being transferred to and processed in the US.
10. Children
The Service is not directed at children under 13. We do not knowingly collect data from children under 13. If you believe we have, contact us and we will delete it.
11. Changes
We may update this policy from time to time. Material changes will be announced via email or a notice on the Service at least 30 days before taking effect.
12. Contact
Questions about this policy or your data? Email support@neoxra.com. Meridian Global LLC, New York, NY.