🔒 Privacy policy
Neurallux (the “Service”, “Platform”, “we”) respects your privacy and is committed to protecting personal data. This Privacy Policy explains what we collect, how we use, store, and safeguard it.
1Data we collect
1.1 Registration data:
- •Username
- •Email address
- •Password (stored hashed/encrypted)
1.2 Telegram account data:
- •Phone number linked to the account
- •Telegram API hash and ID (provided by you)
- •Telegram session tokens (stored encrypted)
1.3 Platform activity data:
- •Actions inside the automation builder
- •Block usage statistics
- •Workflow data (branches, conditions, actions)
- •Error logs and UI interaction logs
1.4 Financial and billing data:
- •Purchase and top-up history
- •Transaction details (date, amount, payment method)
- •Payment operation identifiers (we do not store full card numbers)
1.5 Technical data:
- •IP address, browser, and device information
- •Cookies and auth tokens
- •Login times and session duration
2How we use data
We use collected data to:
- •provide access to the Service;
- •connect and manage Telegram accounts;
- •configure and run automation;
- •process payments, track credits, and renew active resources;
- •provide AI integrations (OpenAI, DeepSeek, Gemini, etc.);
- •improve the Service (analytics, diagnostics, optimization);
- •support users and respond to feedback;
- •meet legal and tax obligations.
3Storage and security
- 🔐Sensitive data (Telegram sessions, passwords, tokens, financial identifiers) is encrypted.
- 👥Access is restricted to staff who need it for their duties.
- 🛡️We use industry-standard measures such as SSL, AES-256, backups, and log auditing.
- 💬Telegram chat content is not stored unless you explicitly enable that in workflow settings.
4Payment processor data
- •We do not store full card numbers or payment passwords.
- •Processing is performed by licensed payment processors that meet PCI DSS requirements.
- •We receive only transaction IDs and status information needed to credit balances and activate resources.
5Your rights
You have the right to:
- ⚖️request access to your data;
- ✏️request corrections;
- 🗑️delete your account and related data;
- 🚫withdraw consent to processing where applicable;
- 💰request deletion of transaction history except where retention is required by law;
- 📞lodge a complaint with a supervisory authority if your rights are violated.
To exercise these rights, contact us at support@zerafy.com or Telegram.
6Retention
- •Data is kept only as long as needed to provide the services.
- •After account deletion, personal data is permanently erased except records required for accounting.
- •Financial records (top-ups, debits) may be retained in encrypted form for the period required under applicable accounting and tax rules.
7Sharing with third parties
We may share limited data with:
- •payment operators — to process transactions;
- •AI and cloud API providers (OpenAI, DeepSeek, Gemini, etc.) — to fulfill requests;
- •government authorities — upon lawful official request.
Transfers are encrypted and limited to the minimum necessary.
8Applicable law and standards
We aim to align our processing with widely recognized data-protection standards, including GDPR-style rights where they apply. Your specific rights and remedies depend on the laws of your country or region of residence, including any mandatory consumer or privacy rules that cannot be waived by contract.
9Policy updates
- •We may change this Policy at any time.
- •Updates take effect when the revised version is published on the site.
- •Material changes may also be communicated by email.