NextNeural
Privacy Policy
NextNeural is provided by Supercraft Inc., Delaware, US.
Effective November 4, 2026 · Last updated November 4, 2026
Controller: Supercraft Inc., a Delaware corporation (“Supercraft”, “we”, “us”, “our”)
Address: 8 The Green, Ste 4000, Dover, Kent County, Delaware 19901, USA
Privacy contact: [email protected]
1. Who this policy covers
This policy explains how Supercraft handles personal information collected through the NextNeural marketing website at nextneural.ai (the “Website”), including when you browse, fill in a form, book a call, request a demo, try a voice AI demo, subscribe to updates, or contact us.
What this policy does not cover
- The NextNeural platform. Information that customers and their end users process in the NextNeural products (for example call audio, transcripts, CRM records and documents) is governed by the privacy terms and data processing terms that apply to the platform under the customer’s agreement. These terms are presented to customers when they onboard to the platform. For that information, our customer decides how it is used and we act as its service provider or processor.
- Visitors in India. Visitors using the India site (nextneural.ai/in) are served by Superstellar Media Labs Pvt. Ltd. under its own privacy policy.
- Third-party sites. The Website may link to other sites (for example LinkedIn, event pages and partner sites). We do not control them and are not responsible for their privacy practices.
2. Definitions
- Personal information means information that identifies, relates to, or could reasonably be linked to you or your household or device.
- Sell and share have the meanings given in California law: “sell” means disclosing personal information for money or other valuable consideration; “share” means disclosing it for cross-context behavioral advertising.
- Service provider means a company that processes personal information on our behalf under a contract that limits how it can use it.
3. Information we collect
3.1 Information you provide
| What | When |
|---|---|
| Name, work email, company, company size, phone number | Contact, book-a-call, try-voice-AI and other lead forms |
| Anything you write in a message or free-text field | Contact and enquiry forms |
| Email address | Newsletter and event-alert sign-ups |
| Call or meeting scheduling details | Booking a call |
| Communications with us | Email, calls, chats |
3.2 Information collected automatically
- Device and usage data: IP address, browser type and version, operating system, device type, language, pages viewed, links clicked, time on page, referring and exit pages, timestamps.
- Marketing attribution: UTM parameters (source, medium, campaign, content, term) are saved with your form submission so we know which campaign brought you here.
- Cookies and similar technologies: see Section 8.
- Approximate location: derived from your IP address (country or region level).
3.3 Voice AI demo
When you use a voice AI demo on the Website, we collect and record your voice and the conversation, create a transcript, and collect the phone number or other details you provide and technical details of the session. We use them to run the demo, to follow up with you if you asked us to, and to maintain, secure and troubleshoot the demo experience.
- We do not use recordings to train AI models, and we do not create voiceprints or otherwise use your voice to identify you.
- Recordings and transcripts are kept for 6 months and then deleted, unless you ask us to delete them sooner or we must keep them for legal reasons.
- Before the demo starts we ask you to tick a box agreeing to the recording. If you do not agree, the demo is not available to you.
- Please do not use a demo to share sensitive information such as financial account numbers, health information or government IDs.
- Recordings are processed by our voice infrastructure providers (Section 5) on our instructions.
3.4 Information from other sources
- Business contact providers, which we may use to verify or complete business contact details (for example company and role).
- Referral and event partners, when you register for an event or request information through a partner.
- Public sources, such as your professional profile, when relevant to a business enquiry.
3.5 Information we do not seek
We do not seek sensitive personal information through the Website (such as government IDs, financial account numbers, precise geolocation, health data, or data revealing racial or ethnic origin, religion or union membership). If you volunteer it in a free-text field or during a demo, we use it only to handle your request. We do not use sensitive personal information to infer characteristics about you.
4. How we use personal information
| Purpose | Examples |
|---|---|
| Respond to you | Answer enquiries, schedule calls, provide requested demos and trials |
| Communicate | Send confirmations and service messages; send newsletters and event alerts if you opted in |
| Sales and relationship management | Qualify and follow up on business enquiries; keep records of our interactions |
| Operate and secure the Website | Hosting, performance, spam and bot protection (Cloudflare Turnstile), fraud and abuse prevention |
| Improve our Website and products | Analytics, usability, content and campaign performance |
| Marketing and advertising | We run Google Ads to bring visitors to the Website. With your permission, Google Ads and Google Analytics tags measure which ads lead to visits and enquiries, and may be used to show you our ads on other sites |
| Legal | Comply with law, respond to lawful requests, enforce our terms, protect rights and safety |
AI and model training. We do not use the personal information you submit through Website forms, or voice demo recordings and transcripts, to train AI or machine-learning models.
Automated decision-making. We do not make decisions about you that have legal or similarly significant effects solely by automated means.
5. How we disclose personal information
We do not sell personal information for money. Because we use Google Ads and Google Analytics, Google may receive online identifiers and activity data (such as cookie IDs, IP address, pages viewed and ad interactions) from your browser. Under some state laws this can count as “sharing” for cross-context behavioral advertising, or as a “sale” for targeted advertising. See Sections 8 and 9.2 for how to opt out.
We disclose personal information to:
| Recipient | Purpose | Examples |
|---|---|---|
| Hosting, CDN and security providers | Run and protect the Website | Cloudflare |
| Email and messaging providers | Send transactional and marketing email | Mailgun, Resend, Listmonk |
| CRM | Store and manage leads in our own NextNeural CRM (cloud.nextneural.ai), operated by us and our affiliates; access is limited to staff with a business need | NextNeural CRM |
| Analytics, tag management and advertising | Measure Website use and advertising performance | Google Tag Manager, Google Analytics, Google Ads |
| Voice and AI infrastructure providers | Run voice demos (telephony, speech recognition and speech synthesis) | Our voice platform providers |
| Affiliates | Respond to you and operate the NextNeural service | Superstellar Media Labs Pvt. Ltd. (India) |
| Professional advisers | Legal, accounting, audit, insurance | As needed |
| Parties to a business transaction | Merger, acquisition, financing or sale of assets | As needed |
| Authorities and others | To comply with law or legal process, or to protect rights, safety and security | As needed |
All service providers are bound by contract to use personal information only for the services they provide to us. A current list of service providers is available on request at [email protected].
6. Retention
We keep personal information only as long as needed for the purposes in Section 4, including to meet legal, accounting or reporting needs. Typical periods:
| Category | Retention |
|---|---|
| Lead and enquiry records (held in NextNeural CRM) | 24 months after our last interaction, then deleted or anonymized |
| Newsletter and event-alert subscriptions | Until you unsubscribe, plus a suppression record so we honor your opt-out |
| Voice demo recordings and transcripts | 6 months |
| Website hosting and security logs (Cloudflare) | Cloudflare’s standard default retention; we do not configure extended log storage |
| Google Analytics data | Up to 14 months for event-level data, per our Google Analytics data-retention setting; aggregated reports may be kept longer |
| Records of privacy requests | 24 months |
We may keep information longer if required by law or needed to establish or defend legal claims.
7. Security
We use administrative, technical and physical safeguards appropriate to the sensitivity of the information, including encryption in transit, access controls, least-privilege access for staff and vendor reviews. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If we confirm a breach of security affecting your personal information, we will notify affected individuals without unreasonable delay and in any event within 7 days of confirming it (or sooner where the law requires), and will notify regulators as the law requires.
8. Cookies and similar technologies
We and our providers use cookies, local storage, pixels and similar tools.
| Type | Purpose | Examples |
|---|---|---|
| Strictly necessary | Security, remembering your region (nn_region, up to 1 year) and your cookie choices (nn_consent, 180 days), bot protection | Cloudflare, first-party |
| Analytics | Understand how the Website is used | Google Analytics (via Google Tag Manager) |
| Advertising / marketing | Measure Google Ads conversions and, where enabled, remarketing | Google Ads |
Your choices. You can block or delete cookies in your browser settings; some features may stop working. Analytics and advertising cookies are controlled through our cookie preferences panel (footer link “Cookie Preferences”). Until you accept them, Google Analytics and Google Ads do not set cookies on your device. Through Google Consent Mode they may still receive limited signals without cookie identifiers (for example the page visited and your IP address), which Google uses for aggregate measurement. You can also use Google’s tools: Google Ads Settings and the Google Analytics opt-out browser add-on.
We honor Global Privacy Control signals as a request to opt out of sale and sharing for that browser. Do Not Track: there is no common standard for Do Not Track signals, and we do not currently respond to them.
9. Your privacy rights
9.1 Rights available to U.S. residents
Depending on where you live (including California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah and Virginia), you may have the right to:
- Know and access the categories and specific pieces of personal information we hold about you, and the sources, purposes and recipients;
- Correct inaccurate personal information;
- Delete personal information we collected from you, subject to exceptions;
- Obtain a portable copy of your information;
- Opt out of the sale or sharing of personal information, targeted advertising and certain profiling;
- Limit the use of sensitive personal information (we do not use it beyond what the law permits; see Section 3.5);
- Not be discriminated against for exercising these rights.
9.2 Do Not Sell or Share My Personal Information
Use the “Do Not Sell or Share My Personal Information” link in the Website footer, turn on Global Privacy Control in your browser, or email [email protected].
9.3 How to make a request
Email [email protected]. We will:
- respond to your request within 7 days, acknowledging it, asking for any verification we need, and telling you the expected completion date;
- verify your identity, usually by matching your request to information we hold (for example by sending a confirmation link to the email address on file); we will not ask for more than we need;
- complete the request within 45 days, extendable once by up to 45 more days with notice to you (the legal maximum; we aim to finish sooner);
- provide information free of charge, up to twice per 12 months, unless requests are manifestly unfounded or excessive.
Authorized agents. You may use an authorized agent; we may ask for your written permission and to verify your identity directly.
Appeals. If we decline your request, you may appeal by replying to our decision with the subject “Appeal”. We will respond within the period required by your state’s law (generally 45 to 60 days) and explain how to contact your state attorney general if you are still not satisfied.
Marketing emails. Unsubscribe using the link in any email (we honor requests within 10 business days, as CAN-SPAM requires), or write to us.
9.4 California disclosures
In the preceding 12 months we collected the following categories of personal information (as defined in the CCPA):
| CCPA category | Collected | Source | Purpose | Disclosed to | Sold / shared |
|---|---|---|---|---|---|
| Identifiers (name, email, phone, IP, online identifiers such as cookie IDs) | Yes | You; your device | See Section 4 | Service providers, affiliates, Google | Online identifiers are shared via Google Ads and Analytics; not sold for money |
| Customer-records information (company, role) | Yes | You | Respond; sales | Service providers, CRM | No |
| Commercial information (enquiries, demo interest) | Yes | You | Sales; improvement | Service providers, CRM | No |
| Internet or network activity (pages, ad interactions) | Yes | Your device | Analytics; ad measurement; security | Google, Cloudflare | Shared via Google Ads and Analytics |
| Geolocation (approximate) | Yes | Your IP address | Security; analytics | Hosting and analytics providers | No |
| Audio information (demo calls) | Yes, if you use a demo | You | Run the demo | Voice providers | No |
| Professional or employment information | Yes | You | Sales | Service providers, CRM | No |
| Inferences (lead interest or priority) | Limited | Derived by us | Prioritize follow-up | Internal use only | No |
| Sensitive personal information | No | n/a | n/a | n/a | n/a |
We do not knowingly sell or share the personal information of anyone under 16. Shine the Light: California residents may ask once a year for the categories of personal information disclosed to third parties for their direct marketing and the identities of those third parties. We do not make such disclosures. CalOPPA: see Section 8 on Do Not Track.
Nevada: we do not sell covered information as “sale” is defined under Nevada law. You may submit an opt-out request at [email protected].
10. Visitors from outside the United States
The Website is intended for business visitors worldwide; visitors in India use the India site (see Section 1). If you are in the European Economic Area (EEA), the United Kingdom or Switzerland, this section applies to you in addition to the rest of this policy.
Controller and contact. Supercraft Inc. is the controller of your personal data. Our EU and UK contact point for privacy questions and requests is [email protected].
Legal bases.
| Purpose | Legal basis |
|---|---|
| Respond to enquiries, schedule calls, provide requested demos | Performance of a contract or steps at your request before one; our legitimate interests in responding to business enquiries |
| Voice demo recording and transcript | Your consent, given before the demo starts; you can withdraw it at any time |
| Newsletters and event alerts | Your consent (or, for existing business contacts where permitted, legitimate interests with an easy opt-out) |
| Analytics and Google Ads measurement or remarketing cookies | Your consent, through the cookie preferences panel |
| Sales follow-up and B2B relationship management | Our legitimate interests in growing our business, balanced against your rights |
| Website security, spam and abuse prevention | Our legitimate interests in securing the Website |
| Legal compliance and claims | Legal obligation; legitimate interests |
Your rights. You have the right to access, correct, erase, restrict or object to the processing of your personal data, to data portability, and to withdraw consent at any time without affecting earlier processing. You can object at any time to direct marketing. Contact [email protected]; we respond within 7 days (Section 9.3) and complete requests within one month, as the law requires. You may also lodge a complaint with your local supervisory authority (in the UK, the Information Commissioner’s Office).
Transfers. You send your information directly to us in the United States. When we then pass it on to others outside the EEA and UK, we protect it as follows: (1) with service providers certified under the EU-U.S. Data Privacy Framework and its UK Extension (for example Cloudflare and Google), we rely on that certification, with the EU Standard Contractual Clauses and the UK International Data Transfer Addendum as a fallback in their data processing terms; (2) with providers that are not certified, and with our affiliate Superstellar Media Labs Pvt. Ltd. in India, we use the EU Standard Contractual Clauses and the UK Addendum. You can request a copy of the relevant safeguards at [email protected].
Automated decisions. We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects.
11. International transfers
We are based in the United States and our providers and affiliates may process information in the United States, India and other countries. These countries may have data protection laws different from your own. Where required, we use contractual safeguards for such transfers.
12. Children’s privacy
The Website is a business site and is not directed to children. We do not knowingly collect personal information from anyone under 18. If you believe a child has given us personal information, contact [email protected] and we will delete it.
13. Links to other sites
The Website may contain links to third-party sites and embedded third-party content (for example video, scheduling and social links). Their own privacy policies apply once you leave or interact with them.
14. Changes to this policy
We may update this policy. We will post the new version with a new “Last updated” date and, if changes are material, provide additional notice (such as a banner or an email to subscribers). We review this policy at least every 12 months. Previous versions are available on request.
15. Contact us
Supercraft Inc.
8 The Green, Ste 4000, Dover, Kent County, Delaware 19901, USA
[email protected]