Privacy Policy - Neerbei

Effective date: 05.06.2026

Controller: Neerbei

This Privacy Policy explains how Neerbei processes personal information when users visit the website, create accounts, publish business profiles, upload content, purchase products, use AI functions, contact us, or otherwise use the platform.

1. Responsible Party

The responsible party is Neerbei.

2. Information We Process

Depending on how you use Neerbei, we may process:

• account and contact data, such as name, email address, phone number, login identifiers, authentication data, and profile image;
• business profile data, such as business name, address, services, descriptions, links, opening hours, logos, images, gallery media, contact person, social media links, keywords, reviews, and comments;
• usage and technical data, such as IP address, browser type, device data, pages viewed, timestamps, approximate location, cookies, local storage, session activity, security logs, and error logs;
• payment and billing data, such as selected products, checkout sessions, Stripe customer or subscription IDs, invoices, payment status, transaction records, and billing email;
• AI-related data, such as prompts, business profile input, uploaded reference images, generated text, generated images, reply drafts, SEO suggestions, recommendations, and automation output.

3. Public Business Profile Data

Business profile information submitted for publication is public by design. It may be visible to visitors, search engines, AI systems, social platforms, and other third parties. Users are responsible for avoiding confidential, private, or unlawful information in public profiles.

4. Purposes of Processing

We process information to:

• provide, display, and manage the platform and public business profiles;
• authenticate users, secure accounts, prevent abuse, and protect the platform;
• process purchases, subscriptions, invoices, billing, support, and service messages;
• provide AI-assisted features, profile generation, SEO text, replies, images, recommendations, and automation;
• analyze, troubleshoot, improve, personalize, and protect Neerbei, and comply with legal, tax, accounting, or operational obligations.

5. Legal Bases and Operational Grounds

Depending on your location, processing may be based on contract performance, consent, legitimate business interests, legal obligations, fraud prevention, security, or protection of rights. For US users, these purposes may also be described as business or operational purposes.

6. Authentication and Keycloak

Login, authentication, account sessions, password handling, and related account management may be processed through Keycloak or a similar identity provider. Authentication-related data may be shared with or processed by that provider to keep accounts secure and functional.

7. Payments and Stripe

Payments, subscriptions, invoices, billing portal functions, and payment events may be processed through Stripe. Stripe may collect payment details, card data, billing information, fraud-prevention data, tax-related data, and transaction information under its own notices. Neerbei stores limited payment records needed to fulfill products, manage subscriptions, reconcile invoices, provide support, and meet legal or tax obligations.

8. Analytics, Cookies, and Tracking

Neerbei may use cookies and similar technologies for necessary functions, security, login, basket, checkout, preferences, analytics, and tracking. Google Analytics may be used for website usage measurement. Microsoft Clarity may be used for session analytics, heatmaps, and behavior analysis. Meta Pixel may be used where enabled for marketing measurement. See the Cookie Policy for more information.

9. AI Processing

AI features may send the information needed to generate results to AI providers such as Google Gemini/Google AI or similar providers. This may include business profile data, prompts, uploaded images, location context, and generated outputs. AI results may be inaccurate and must be reviewed before use.

10. Third-Party Providers

Neerbei may use third-party providers for hosting, databases, storage, content delivery, email, analytics, authentication, payments, AI, maps or lead tooling, social integrations, security, and infrastructure. Current or intended providers include Keycloak, Stripe, Google Analytics, Microsoft Clarity, Meta/Facebook, Google Gemini/Google AI, Google Places-related tooling, AWS/S3/CloudFront or similar storage/CDN services, email/SMTP providers, and social platforms where configured.

11. Sharing and Disclosure

We may share information with service providers, processors, payment providers, authentication providers, analytics and AI providers, hosting and storage providers, professional advisors, authorities where required, parties involved in business transfers, and the public where information is part of a public business profile. We do not intend to sell personal information for money. Some analytics, advertising, or tracking activity may be considered sale, sharing, targeted advertising, or similar regulated activity under applicable privacy laws.

12. Storage Duration

We keep information as long as needed to provide the service, maintain accounts and profiles, complete transactions, comply with legal, tax, accounting, and security duties, resolve disputes, prevent fraud, enforce agreements, keep backups, and support legitimate operations. Deleted profile data may remain where retention is legally or operationally necessary.

13. Security

We use reasonable technical and organizational measures to protect information. However, no system, network, website, database, AI service, or transmission can be guaranteed to be completely secure.

14. User Rights

Depending on your location, you may have rights to:

• request access to personal information;
• request correction, deletion, restriction, objection, portability, or withdrawal of consent;
• opt out of marketing communications or certain tracking where required;
• appeal certain privacy decisions where applicable law provides that right.

15. US State and California Privacy Rights

If US state privacy laws apply to Neerbei, residents may have additional rights, including rights to know, access, correct, delete, port, opt out of sale or sharing, opt out of targeted advertising, or limit certain processing. Neerbei will handle applicable privacy requests and opt-out requirements as required by the laws that apply to the service.

16. International Users and Transfers

Information may be processed in countries other than where you live. These countries may have different data-protection laws. Where required, Neerbei uses appropriate transfer safeguards.

17. Children and Minors

Neerbei is intended for adults and business users. We do not knowingly collect personal information from children under 13, or a higher age where local law requires parental consent. If you believe a child has provided personal information, contact us so we can review it.

18. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be posted with a new effective date. If changes are material, we will take reasonable steps to notify users where appropriate.

19. Contact

Privacy questions and requests may be sent to Neerbei.