Last updated: September 2026
Data Processing Addendum
How we protect and manage personal information when delivering NeuraCamp.
Purpose
This Data Processing Addendum (DPA) supplements the NeuraCamp Terms of Service and applies when NeuraCamp processes personal information on behalf of users. It describes how we protect, handle, and manage personal data.
Roles
NeuraCamp acts as a data processor. The user is the data controller. We process personal information only to deliver the service and in accordance with the user's instructions as described in our Terms of Service and Privacy Policy.
Data categories
The categories of personal information we process include account details (name, email), profile information (experience, skills, goals), assessment responses, anonymised usage analytics, and a limited payment record for Neura Pro purchases (payment id and order id, amount, currency, and timestamps). We do not process special category data such as health or biometric information, and card, UPI, and bank details are handled by our payment provider, not by us.
Security measures
We protect personal information with industry-standard encryption in transit and at rest, enforced access controls that limit each account to its own data, secure authentication through a trusted provider, regular security reviews, and incident response procedures. Access to personal information is restricted to authorized personnel on a need-to-know basis.
Sub-processors
We work with trusted partners for authentication, secure cloud infrastructure, AI-assisted processing, payments, email delivery, and anonymised analytics. All partners operate under data-protection agreements and follow industry security standards. Our current sub-processors are a payment provider (payment processing), a cloud hosting provider (application hosting in the United States), a managed database provider (database hosting in the United States), an authentication provider, an email provider (email delivery), a product analytics provider (loaded only after cookie consent), an error monitoring provider (with personal information scrubbed), an AI model provider (resume parsing, question generation, the career advisor, and fun facts), a logo service (company logos), and a form service (contact form processing).
Data subject rights
Users can exercise their data rights (access, correction, deletion, portability) by contacting us. We support these rights through in-app profile editing, account settings, and direct email requests. Deletion requests are processed within 24 hours.
Data retention
Personal information is retained while the account is active. Upon account deletion, all associated personal information is permanently removed within 24 hours. We do not retain backups of deleted accounts beyond a standard 24-hour backup window.
International transfers
Personal information may be processed in jurisdictions outside the user's country of residence. We use appropriate safeguards for international transfers, including data-protection agreements with all partners.
Incident response
In the event of a data breach, we will assess the scope, contain the incident, notify affected users without undue delay, and take corrective action. Breach notifications will include the nature of the incident, the likely consequences, and the measures taken.
Contact
For any questions about this DPA or data processing practices, email us at shravan@neuracamp.com. We aim to respond within one business day.
Questions? Email shravan@neuracamp.com