Privacy Policy
Last updated: March 2026
1. Data Controller
YCY CONSULTING AND INVESTMENT SL
NIF: B22450688
Address: Calle Mester De Clerecia 34, 28978 Cubas De La Sagra (Madrid), Spain
Email: info@neuroplugin.com
Website: https://neuroplugin.com
2. Data we collect
We collect the following data when you purchase or use our products:
- Account data: Name, email address, billing address
- Payment data: Processed securely by Stripe/PayPal (we never store card numbers)
- Usage data: Pages visited, download history, support tickets
- Technical data: IP address, browser type, device information (via server logs)
3. Legal basis for processing (GDPR Art. 6)
- Contract performance — to process your purchase and deliver the product
- Legitimate interest — to improve our products and prevent fraud
- Consent — for marketing communications (you can opt out at any time)
- Legal obligation — to comply with tax and accounting regulations
4. How we use your data
- To process purchases and deliver license keys
- To provide customer support
- To send product updates and security notices (you can opt out)
- To improve our products and website
- To comply with legal and tax obligations
5. Data sharing
We do not sell your personal data. We share data only with:
- Payment processors: Stripe (Stripe, Inc. — EU data processing)
- Hosting provider: Server located in EU
- Email service: For transactional emails only
All third-party processors comply with GDPR and have Data Processing Agreements in place.
6. International transfers
Your data is stored on servers located in the European Union. If any data is transferred outside the EU (e.g., Stripe US), it is protected by Standard Contractual Clauses (SCCs) as approved by the European Commission.
7. Cookies
We use essential cookies for site functionality (login sessions, cart). No tracking or advertising cookies are used. For details, see our Cookie section below.
| Cookie | Purpose | Duration | Type |
|---|---|---|---|
| PHPSESSID | Session management | Session | Essential |
| wordpress_logged_in_* | Authentication | Session | Essential |
| wp_edd_* | Cart & purchases | 30 days | Essential |
8. Your rights (GDPR)
As a data subject in the EU, you have the right to:
- Access your personal data (Art. 15)
- Rectification of inaccurate data (Art. 16)
- Erasure (“right to be forgotten”) (Art. 17)
- Restriction of processing (Art. 18)
- Data portability in machine-readable format (Art. 20)
- Object to processing (Art. 21)
- Withdraw consent at any time (Art. 7)
To exercise these rights, contact us at info@neuroplugin.com. We will respond within 30 days.
You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD): www.aepd.es
9. Data retention
- Account data: Retained while your account is active, deleted within 30 days of account deletion request
- Purchase records: 5 years (Spanish tax law obligation)
- Server logs: 90 days
- Support tickets: 2 years after last interaction
10. Security
We implement appropriate technical and organizational measures including HTTPS encryption, secure password hashing (bcrypt), regular backups, and access controls.
11. Changes
We may update this policy. Significant changes will be communicated via email to registered users. The latest version is always available at this URL.
12. Contact
For privacy-related questions:
YCY CONSULTING AND INVESTMENT SL
Email: info@neuroplugin.com
Address: Calle Mester De Clerecia 34, 28978 Cubas De La Sagra (Madrid), Spain