Privacy Policy
Last updated: August 2026
1. General Information
This Privacy Policy describes how NEUROPREDICT SLL (hereinafter, «NEUROPREDICT»), as Data Controller, processes the personal data of users who access and browse the www.neuropredict.eu website (hereinafter, the «Website»), in accordance with Regulation (EU) 2016/679 (GDPR), Organic Law 3/2018 (LOPDGDD), and other applicable regulations.
2. Identity of the Data Controller
For the purposes of processing personal data collected through the Website, NEUROPREDICT acts as the Data Controller.
3. Personal data we process
Depending on the User's interaction with the Website, NEUROPREDICT may process the following categories of personal data:
- Identification and contact details: name and surname, email address.
- Communication data: content of queries or requests sent by the User.
- AI interaction data: the messages you send to the AI coaches, the audio of a voice mock interview, its transcript and the written evaluation generated from it.
- Browsing and usage data: IP address, device type, browser, operating system and technical data associated with the use of the Website.
4. When do we collect data?
NEUROPREDICT may collect personal data from the User in the following instances:
- While browsing the Website, using cookies and similar technologies, in accordance with the Cookies Policy.
- When the User sends queries, requests for information or communications through the means provided on the Website.
- During subsequent interactions between the User and NEUROPREDICT for the management of such requests or communications.
5. Purposes of the processing and legal basis
Where you have given your consent, we may also send commercial communications related to products and services marketed by Neuropredict.
You may object to processing based on legitimate interest at any time by exercising your right as indicated in section 11 below.
6. Recipients and data communications
Personal data is not communicated to third parties for their own purposes, and is never transferred for commercial purposes. The data may be accessed by technology providers acting as data processors under contracts in accordance with Article 28 of the GDPR:
Data may additionally be communicated to public authorities where NEUROPREDICT is under a legal obligation to do so.
7. International Data Transfers
Anthropic, OpenAI and Resend are established in the United States and process the data they receive there. Using the AI features or receiving a transactional email therefore involves a transfer of personal data outside the European Economic Area.
Supabase, Inc. is also established in the United States, but the database holding your account data, study sessions and interview records is located in the European Union (Frankfurt, eu-central-1). A transfer may nevertheless occur where the provider accesses that data from outside the EEA for support or maintenance purposes.
Google Cloud (Google Ireland Ltd.) and Stripe Payments Europe, Ltd. are established in the European Union and process the data within it.
These transfers are carried out under the appropriate safeguards required by Chapter V of the GDPR, namely the European Commission's Standard Contractual Clauses included in the data processing agreement signed with each provider and, where the provider is certified, the EU–U.S. Data Privacy Framework. A copy of the safeguards applying to a given transfer may be requested at privacy@neuropredict.eu.
8. Artificial Intelligence Features
The Study Coach and the Interview Coach are powered by third-party generative AI models. You are told inside each feature that you are talking to an artificial intelligence and not to a person, and content written by a model is labelled as such (Article 50 of Regulation (EU) 2024/1689).
To produce an answer, the following is sent to the model provider:
- Study Coach: your messages, your first name and a summary of your own study statistics (tests completed, accuracy per topic, streak, level).
- Interview Coach (text): your messages and your first name.
- Interview Coach (voice): the audio of the session, streamed from your browser to the provider, together with your first name and your chosen corps. The audio is transcribed and the transcript is then used to generate your written evaluation.
We never send your email address, your surname, your payment details or your account identifiers to these providers. Where your first name is unknown, the model is addressed with a neutral placeholder instead.
Under the API terms of these providers, the content sent to them is not used to train their models. They may retain it for a limited period for abuse-monitoring purposes only.
These features are used solely to produce study material and mock-interview feedback. They do not carry out automated decision-making producing legal effects or similarly significantly affecting you within the meaning of Article 22 GDPR: no evaluation determines access to a service, a price, or the outcome of any selection process. A mock-interview evaluation is disclosed to your academy only if you have explicitly enabled sharing, which you may withdraw at any time; the transcript is never disclosed to an academy.
9. Retention periods
- Data associated with requests and communications: for the time necessary for their management and, subsequently, duly blocked during the limitation periods of applicable legal actions.
- Browsing and analytical data: during the periods indicated in the Cookies Policy.
- Contracted services data: for the time necessary to carry out the stated purposes and until the limitation period for applicable legal actions, taking into account relevant legal regulations.
- Consent-based processing: until you expressly revoke your consent.
Once the indicated periods have expired, the data will be kept blocked when necessary for compliance with legal obligations.
10. Security and confidentiality
NEUROPREDICT processes personal data confidentially and has adopted appropriate technical and organisational measures to guarantee a level of security appropriate to the risk, preventing its loss, alteration, unauthorised access or improper processing.
11. User Rights
As the owner of the personal data, you have the right to contact NEUROPREDICT at any time and free of charge to exercise the following rights:
Right of Access
Be informed as to whether your personal data is being processed and access such data.
Right of Rectification
Request rectification of inaccurate personal data without undue delay.
Right to Revoke Consent
Revoke consents granted (including commercial information). Revocation will not affect the lawfulness of prior processing.
Right to Object
Object to the processing of your personal data for reasons related to your particular situation.
Right to Data Portability
Receive your personal data in a structured, commonly used and machine-readable format.
Right to Restriction of Processing
Request that processing be restricted in certain circumstances.
Right of Erasure
Request the erasure of your personal data where applicable legal requirements are met.
Right to Challenge Automated Decisions
Obtain human intervention and challenge decisions based on automated processing.
To exercise these rights, send a request to privacy@neuropredict.eu. You also have the right to file a complaint with the Spanish Data Protection Agency at www.aepd.es.
12. Cookies and Similar Technologies
The Website uses cookies and similar technologies. Detailed information on their use, typologies, purposes and settings can be found in the Cookies Policy.
13. Modifications to the Privacy Policy
NEUROPREDICT reserves the right to modify this Privacy Policy to adapt it to regulatory, technical or operational changes. The current version will be available on the Website, indicating the date of the last update.