Privacy Notice

NeuroQP is operated by Common Frame Labs GmbH, doing business as NeuroQP. Common Frame Labs GmbH is responsible for the personal data described in this notice, except where we process personal data in customer research content only on behalf of a customer organization.

Our registered address is Salvisbergstrasse 5, 3006 Bern, Switzerland. Our UID is CHE-275.757.306. You can contact us at info@neuroqp.com.

Scope

This Privacy Notice applies when you visit neuroqp.com, create or use a NeuroQP account, participate in an organization, use the research application or anonymous demo, contact support, or otherwise interact with NeuroQP.

Personal data we collect

We collect the following categories of personal data:

• Account and organization data: your name, email address, profile information, organization, role, memberships, invitations, and account identifiers.
• Research and service data: project and study information, uploaded images and files, labels, settings, comments, filenames, generated results, trained models, statistics, exports, and records of actions taken in the service. Research data is not necessarily personal data, but it can become personal data if you include information that identifies a person.
• Support data: your name, organization, messages, attachments, and other information you send when asking for help or providing feedback.
• Technical and usage data: IP address, browser and device information, session and request identifiers, approximate location, pages or features used, timestamps, errors, and security events.
• Legal records: the Terms and Privacy Notice versions associated with your account, when you accepted or acknowledged them, and whether this happened during signup or in the application.

We receive this data from you, your organization and its administrators, your browser or device, our service providers, and your use of NeuroQP.

How and why we use personal data

We use personal data to provide accounts and the NeuroQP service, process customer research content, operate the anonymous demo, provide support, communicate about the service, maintain security, prevent abuse, diagnose problems, improve reliability and usability, keep evidence of legal acceptance, enforce our Terms, and comply with law.

Where a legal basis is required, we rely on performing our contract with you or your organization, our legitimate interests in operating and protecting NeuroQP, consent where we ask for it, and compliance with legal obligations. You can withdraw consent at any time for future processing based on consent.

We do not use private customer research content or generated results to train general models unless you expressly opt in.

Organizations and research content

If your account belongs to a university, laboratory, company, or other organization, that organization controls its workspace and can manage membership and access. Authorized members may see shared projects, research content, results, and support communications within the organization.

When we process personal data contained in customer research content only to provide NeuroQP on an organization's instructions, the organization is responsible for that data and we act as its service provider or processor. Requests concerning organization-controlled data may need to be directed to the organization.

Do not upload patient data or identifiable human health information. You are responsible for having the rights and permissions needed for information you submit.

Anonymous demo

You can try NeuroQP without an account. To operate and protect the demo, we use a browser identifier, your IP address and derived identifiers, approximate country, region and city, bot-check information, the legal versions you accepted, trial settings, uploaded non-human mouse research images, generated results, errors, and interactions with the demo.

Demo links are accessible to anyone who has the link until the trial expires. If you choose to share a link through a social network or another service, that provider receives the information you choose to share and handles it under its own terms and privacy policy.

If you expressly opt in, we may retain selected processed images and related technical research metadata for longer to evaluate and improve NeuroQP's image-analysis methods. Declining does not limit your use of the demo. Your statutory privacy rights remain unaffected, and those rights do not apply to information that no longer identifies or can reasonably be linked to a person.

Cookies, browser storage, and analytics

NeuroQP uses necessary cookies and browser storage for authentication, security, bot protection, the anonymous-demo browser identifier, and preferences such as theme, sidebars, viewers, training controls, and result tables. These technologies are required to provide features you request and remain active without analytics consent.

With your permission, we use Google Analytics 4 on public pages such as the landing page, blog, and documentation. It helps us understand visits and interactions with public content. We do not use it inside authenticated research projects, and advertising storage remains disabled.

Public-site analytics is off until you accept it. You can reject analytics without losing access and can change your choice later through the privacy settings. Withdrawing consent stops future collection from that browser and NeuroQP attempts to remove accessible Google Analytics cookies.

Service providers and other disclosures

We use service providers to operate NeuroQP. These currently include Clerk for authentication and organizations; Convex for application infrastructure, data and some file storage; Vercel for web hosting and request handling; DigitalOcean Spaces for research-file storage; RunPod for scientific processing; Slack for the beta support-chat bridge; Cloudflare Turnstile for demo abuse prevention; and Google Analytics for optional public-site analytics.

Each provider receives only the data needed for its role. For example, RunPod processes storage identifiers, research images and scientific job data. Slack can receive your organization name, first name and a limited preview of a beta support message. Google receives public-site analytics only after consent.

We do not sell personal data or disclose it to advertisers for targeted advertising. We may disclose personal data when required by law, to professional advisers bound by confidentiality, or where reasonably necessary to investigate misuse or protect NeuroQP, our users, or others. If NeuroQP or Common Frame Labs GmbH is sold or reorganized, personal data may be transferred to the successor subject to this Notice and applicable law.

International transfers

NeuroQP operates globally, and our providers may process personal data outside your country, including in Switzerland, the European Economic Area, the United Kingdom, and the United States. Where required, we use recognized safeguards such as adequacy decisions or approved contractual protections.

Retention

We retain personal data only for as long as needed for the purposes described above, the customer relationship, security and dispute handling, and legal obligations.

• Account and organization information is generally kept while the account or organization remains active and for a limited period afterwards where needed.
• Customer research content and generated results are kept until the customer deletes them, the service ends, or an agreed retention period applies. Project deletion removes project records and associated stored artifacts through our deletion process.
• Uploaded demo images and generated demo results are kept for no more than one month. Shorter periods can apply to abandoned trials. Temporary signup attribution is kept for up to 24 hours.
• Temporary project exports are normally available for up to seven days.
• Support, security and technical records are kept for as long as reasonably needed to provide support, protect the service, and resolve issues.
• Legal acceptance records are kept for as long as reasonably needed to document the agreement and meet legal obligations.
• Opted-in demo contributions can be kept for longer for the stated evaluation and improvement purpose.

Deletion from backups and service-provider systems may take additional time.

Your rights

Depending on where you live, you may have rights to access, correct, delete, restrict, object to processing, or receive a portable copy of your personal data. You may withdraw consent for future processing where we rely on consent. You may also complain to the data-protection authority where you live or work.

Some rights depend on the processing and applicable law. We may retain information where required by law, needed to protect rights, or no longer connected to an identifiable person. For organization-controlled research content, contact your organization first where appropriate.

To make a request, email info@neuroqp.com. We may need to verify your identity and authority before acting on it.

Security

We use reasonable technical and organizational measures to protect personal data, but no system is risk-free.

Children's data

NeuroQP is not directed to children under 16, and we do not knowingly collect personal data from children under 16.

Changes

We may update this notice as NeuroQP changes. We will publish the current version and effective date on this page. We may also notify you through the service or by email and ask you to acknowledge a materially updated version before continuing to use the application.

Contact

For privacy requests or questions, contact info@neuroqp.com.

• Common Frame Labs GmbH
• UID CHE-275.757.306
• Salvisbergstrasse 5
• 3006 Bern
• Switzerland