Last updated: July 2026
Data Processing Addendum
How we protect and manage personal information when delivering NeuraCamp.
Purpose
This Data Processing Addendum (DPA) supplements the NeuraCamp Terms of Service and applies when NeuraCamp processes personal information on behalf of users. It describes how we protect, handle, and manage personal data.
Roles
NeuraCamp acts as a data processor. The user is the data controller. We process personal information only to deliver the service and in accordance with the user's instructions as described in our Terms of Service and Privacy Policy.
Data categories
The categories of personal information we process include account details (name, email), profile information (experience, skills, goals), assessment responses, and anonymized usage analytics. We do not process special category data such as health, biometric, or financial information.
Security measures
We protect personal information with industry-standard encryption in transit and at rest, enforced access controls that limit each account to its own data, secure authentication through a trusted provider, regular security reviews, and incident response procedures. Access to personal information is restricted to authorized personnel on a need-to-know basis.
Sub-processors
We work with trusted partners for authentication, secure cloud infrastructure, AI-assisted processing, and anonymized analytics. All partners operate under data-protection agreements and follow industry security standards. A current list of sub-processor categories is available on request.
Data subject rights
Users can exercise their data rights (access, correction, deletion, portability) by contacting us. We support these rights through in-app profile editing, account settings, and direct email requests. Deletion requests are processed within 24 hours.
Data retention
Personal information is retained while the account is active. Upon account deletion, all associated personal information is permanently removed within 24 hours. We do not retain backups of deleted accounts beyond a standard 24-hour backup window.
International transfers
Personal information may be processed in jurisdictions outside the user's country of residence. We use appropriate safeguards for international transfers, including data-protection agreements with all partners.
Incident response
In the event of a data breach, we will assess the scope, contain the incident, notify affected users without undue delay, and take corrective action. Breach notifications will include the nature of the incident, the likely consequences, and the measures taken.
Contact
For any questions about this DPA or data processing practices, email us at shravan@neuracamp.com. We aim to respond within one business day.
Questions? Email shravan@neuracamp.com