Confidential
by construction.

Every connection between the application and Neylyzer is encrypted in transit. The service accepts an encrypted session only.

Account data, research, and backups reside on encrypted infrastructure. Credentials for the database, for inference, and for inbound webhooks live in the production environment, outside the client.

An account is reached by authentication. The session is a bearer token, bound to that account. Closing an account requires the password a second time. Sign-in, recovery, and other sensitive routes are rate-limited.

Private research is scoped to the account that created it. One account cannot read another’s. Other people see material only after an explicit act of publication. The public market record is stored apart from customer research.

An answer is produced by an enterprise model under contract. Only the material required for that request is transmitted, and only to produce the answer. The contract bars that material from the training of foundation models. Payment data stays out of the request.

The purchase is completed by the store that bills the subscription. Neylyzer retains entitlement. Card numbers and payment credentials remain with the store.

Failure reports omit screenshots. Personal data stays off by default. A report may carry an account identifier, and nothing of the research or the correspondence. Product measurement masks text and images. The record shows that a question was asked. The wording stays on the account.

Information is kept for the life of the account. Deletion removes it from the active systems. Backup copies expire with the backup cycle. They exist for recovery, and they are overwritten when the cycle ends. An address from a deleted account cannot register again for thirty days. The hold is an abuse control.

Production is operated by a small number of people, and only to run the service. Research is kept off advertising networks. The application does not collect an advertising identifier.

Firms that process data for Neylyzer do so under contract, and only for the function they perform: inference, payment state, hosting, notification delivery, or measurement. The research is not an asset of theirs.