Privacy Policy

neurocollective LLC ("we," "us," or "neurocollective") operates the website at https://neurocollective.ai and provides human + AI partnership advisory services, professional certifications, assessment tools, and educational programs.

This Privacy Policy explains what personal information we collect, why we collect it, how we use and protect it, and the choices you have regarding your data. It applies to all interactions with our website, enrollment processes, certification programs, and related services.

By using our services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not use our services.

We collect information in several categories depending on how you interact with our services:

Identity Data

• Full name, email address, and phone number provided during enrollment or contact
• Account credentials used to access our platform

Professional Data

• Job title, company name, industry, and professional role
• Information relevant to your certification pathway and organizational context

Payment Data

• Payment transactions are processed by Stripe. We do not store credit card numbers, CVVs, or full card details on our servers.
• We retain transaction identifiers, billing addresses, and payment confirmation records as needed for accounting and support.

Usage Data

• Page views, scroll depth, click interactions, and navigation patterns collected through first-party analytics
• Assessment responses and quiz results when you use our PACE assessment tool

Device and Browser Data

• User agent string, browser type and version, operating system
• IP address, collected primarily for consent audit trails and security purposes

Cookie Data

• Visitor identifier cookie (nc_vid) for consent linkage
• Consent preferences cookie (nc_consent) to remember your choices
• Authentication cookies managed by Supabase for logged-in sessions
• See our Cookie Policy for a full inventory

Special Category Data

• Accessibility needs or accommodation requests, collected only with your explicit consent and used solely to ensure equitable access to our programs

We use the information we collect for the following purposes:

• Enrollment Processing: To verify your identity, process payments, and create your certification account
• Certification Delivery: To provision your access to course materials through our LMS partner, Southern Nazarene University (NSU) Blackboard, and to issue and verify credentials upon completion
• Communication: To send enrollment confirmations, access instructions, program updates, and respond to your inquiries
• Analytics and Improvement: To understand how visitors use our website and services so we can improve the experience, using first-party analytics only
• Assessment Services: To deliver PACE assessment results and personalized recommendations based on your responses
• Legal Compliance: To maintain records required by tax law, respond to legal process, and enforce our terms of service
• Security: To detect and prevent fraud, unauthorized access, and other security incidents

We process your personal information under the following legal bases:

• Consent: For analytics tracking, marketing communications, and newsletter subscriptions. You may withdraw consent at any time through your account settings or by contacting us.
• Contract Performance: For processing enrollment, delivering certification programs, provisioning LMS access, and fulfilling our obligations under our terms of service.
• Legitimate Interest: For website security, fraud prevention, service improvement, and maintaining the integrity of our certification programs. We balance these interests against your privacy rights.
• Legal Obligation: For maintaining financial records required by tax law, responding to valid legal requests, and complying with applicable regulations.

We share your personal information only with the service providers necessary to deliver our services. We do not sell your personal information to third parties.

• Stripe:Payment processing. Stripe receives your payment details to process transactions securely. See Stripe's Privacy Policy.
• Supabase:Database infrastructure. Your account data and enrollment records are stored in our Supabase-hosted PostgreSQL database. See Supabase's Privacy Policy.
• Resend:Transactional email delivery. Your email address is shared with Resend to send enrollment confirmations, access credentials, and service communications. See Resend's Privacy Policy.
• Southern Nazarene University (NSU):LMS delivery partner. Your name and email address are shared with NSU to provision your Blackboard LMS access for certification coursework.

We may also disclose your information if required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of neurocollective, our users, or others.

We retain your personal information only as long as necessary to fulfill the purposes described in this policy, unless a longer retention period is required or permitted by law.

• Website session data: Retained for up to 2 years from the date of collection
• Enrollment profiles: Retained for the duration of your active credential plus 3 years following expiration or revocation
• Consent records: Retained for 7 years as immutable audit records, in accordance with regulatory best practices
• Payment records: Retained as required by applicable tax law, with a minimum of 7 years

Automated data retention enforcement is under development. During this period, retention schedules are enforced through periodic manual review. You may exercise your data rights at any time via our privacy request form.

When your data reaches the end of its retention period, it will be securely deleted or anonymized so that it can no longer be associated with you.

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Right of Access: You may request a copy of the personal information we hold about you.
• Right to Deletion: You may request that we delete your personal information, subject to legal retention requirements.
• Right to Correction: You may request that we correct inaccurate or incomplete personal information.
• Right to Portability: You may request a machine-readable copy of your personal information to transfer to another service.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to Object: You may object to processing based on legitimate interest grounds.

To exercise any of these rights, please use the privacy request form below or email us at [email protected]. We will respond to verified requests within 30 days.

Our services are not directed at children under the age of 16. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at [email protected] and we will promptly delete such information.

Our certification programs are designed for adult professionals and organizational representatives. Enrollment requires that you are at least 18 years of age or an authorized representative of an organization.

Global Privacy Control (GPC)

We honor Global Privacy Control signals. When we detect a GPC signal from your browser, we treat it as a valid opt-out of the sale or sharing of personal information and limit analytics tracking accordingly.

California Consumer Privacy Act (CCPA) Disclosures

If you are a California resident, you have additional rights under the CCPA:

• Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected about you.
• Right to Delete: You may request deletion of your personal information, subject to certain exceptions.
• Right to Opt-Out: We do not sell your personal information. If this changes, we will provide a clear opt-out mechanism.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

To exercise your California privacy rights, submit a request through our privacy request form or email [email protected].

Your personal information is processed and stored in the United States, where neurocollective LLC is based and where our infrastructure providers operate.

If you access our services from outside the United States, your information will be transferred to, stored, and processed in the United States. By using our services, you consent to this transfer. We take reasonable steps to ensure that your data is treated securely and in accordance with this Privacy Policy, regardless of where it is processed.

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or applicable laws. When we make material changes, we will:

• Update the "Effective Date" at the top of this policy
• Notify enrolled users via email of significant changes that affect their rights or our data practices
• Post the updated policy on our website

We encourage you to review this policy periodically. Your continued use of our services after changes are posted constitutes your acceptance of the updated policy.

If you have questions about this Privacy Policy, your personal information, or wish to exercise your data rights, please contact us:

• Email: [email protected]
• Website: https://neurocollective.ai
• Location: Oklahoma, USA

We aim to respond to all privacy-related inquiries within 30 days.