Privacy Policy

1. Information We Collect

A. Account Information

When you create an account on Neuplace, we collect:

• Your name and email address.
• Your timezone and interface preferences.
• Authentication data (cryptographically hashed passwords or Google OAuth IDs).

B. Connected Services Information

You may authorize Neuplace to connect to third-party services like Google (Gmail, YouTube) and RSS feeds. When you do, we collect:

• Gmail: Neuplace only processes emails that Gmail itself categorizes as Promotions or Updates, and Social if you turn it on. For each of those emails we store the sender's name and address, the subject and the timestamps. Your Primary inbox is never read.
• Email bodies are never stored: when you open an email, its content is fetched from Google at that moment and shown to you. It is never written to our database; it is held only in a temporary cache for up to 15 minutes, so reopening the same email does not fetch it again.
• YouTube: Neuplace uses YouTube API Services. With your permission (read-only access, youtube.readonly) we read the list of channels you subscribe to — each channel's name, description and image — and check that list daily. When a channel has not appeared in any connected user's subscriptions for 30 days, its description and image are deleted. New videos from those channels are read from YouTube's public feeds. Your use of YouTube data through Neuplace is also covered by the Google Privacy Policy.
• RSS & Podcasts: We fetch publicly accessible feeds and episode descriptions you explicitly subscribe to.

C. Usage Information

We track basic interaction timestamps (such as when you open or mark an item as read) to compute mathematical freshness heuristics for your feed ranking. Neuplace does not build psychological or behavioral profiles.

2. User Content Ownership

Neuplace acts strictly as an aggregator and exploration platform. We do not claim ownership over the content you ingest. The copyrights and intellectual property rights of newsletters, YouTube metadata, podcast audio, and RSS articles remain entirely with their original authors and platforms.

3. How We Use Information

We use the collected information strictly for operational purposes:

• Deliver, operate, and maintain the Neuplace service.
• Organize incoming newsletters, video uploads, and feed posts into a single chronological stream.
• Power the Recon engine, which uses rule-based heuristics, not AI, to highlight returning sources and burst activity.
• If you turn on Auto Tagging, label the sources you follow by topic and type (see section 5).
• Send you essential service alerts, security notifications, and billing receipts.

4. Google Data Disclosure (Limited Use Policy)

Neuplace's use and transfer to any other app of information received from Google APIs adheres strictly to the Google API Services User Data Policy, including the Limited Use requirements.

5. AI Features: Auto Tagging

Auto Tagging labels each source you follow — a newsletter sender, an RSS feed, or a YouTube channel — with a topic and a type — for example a publication or a store — so you can browse your feed by subject. It is off by default and runs only after you turn it on in Settings and confirm what it shares. We record when you gave that consent.

When it is on, we send Google's Gemini API the following about each source, and nothing else:

• Name: for an email source, the sender name shown on its messages; for RSS and YouTube, the feed or channel title.
• Domain: the publisher's website domain, for example reddit.com.
• Description: the publisher's own public description — from its website for email sources (for a Substack or beehiiv newsletter, from its public page on that platform), from the feed for RSS, and from the channel's YouTube profile for YouTube.
• Type: whether the source is an email sender, an RSS feed, or a YouTube channel.

To find that description, our servers visit the publisher's public website or newsletter page. These requests come from our servers and do not identify you. For a Substack or beehiiv newsletter, we find its page using the part of the sender's address before the "@", so that platform receives that name; we do this for no other address.

We never send Gemini the contents or subject of any email, sender email addresses, or anything that identifies you or your account.

Sources are shared across Neuplace: when several people follow the same publisher, the labels worked out for it are shown to each of them who has turned Auto Tagging on. If you have not turned it on, you see no labels. We use Gemini's paid service, under which Google does not use the data we send to train its models.

You can turn Auto Tagging off at any time. We then stop sending anything new; information already sent cannot be recalled.

6. Data Retention & Deletion

We operate an ephemeral storage architecture designed to purge stale data automatically:

• Free Tier Retention: Feed updates have a 7-day default retention period before being automatically purged.
• Pro Tier Retention: Pro subscribers choose their own retention period, including keeping items until they delete them.
• Trash Auto-Purge: Soft-deleted items are permanently erased after 14 days in trash by default. Pro users can choose a different period, or keep them until they empty the trash.
• Revoking Google Access: Separately from deleting data in Neuplace, you can remove Neuplace's access to your Google account (Gmail and YouTube) at any time on Google's security settings page: security.google.com/settings/security/permissions.
• Account Deletion: You can delete your account at any time via settings. Deletion permanently removes your feed entries, settings and metadata, and asks Google to revoke Neuplace's access to your Google account. If Google cannot confirm the revocation, you can remove Neuplace yourself on your Google Account permissions page. Sources you followed that no other user follows are deleted as well.

7. Third-Party Processors

We use carefully vetted infrastructure partners to deliver our service:

8. Cookies & Website Analytics

The Neuplace app uses only the cookies it needs to work: your login session and protection against forged requests.

Our public website uses Google Analytics to count visits and see which pages are read. It sets analytics cookies and processes your IP address and browsing activity on our site, and only does so after you accept analytics cookies in the banner. You can withdraw that choice at any time. Google Analytics runs on the website only — never inside the app, and never on your feed or email data.

9. Security

We safeguard your information through industry-grade defense practices:

• All network traffic is encrypted with HTTPS/TLS.
• Google authorization tokens are encrypted before they are stored, and no credential is ever kept in plain text.
• Strict SSRF isolation guards prevent unauthorized server-side network requests.

10. Your Rights (GDPR, KVKK & CCPA)

Depending on where you live — including under the EU GDPR and Türkiye's Personal Data Protection Law (KVKK) — you have the right to:

• Access: learn whether we process your personal data and receive a copy of it.
• Rectification: have inaccurate data corrected.
• Erasure: delete your account yourself in Settings, or ask us to.
• Portability: receive the data you gave us in a structured, machine-readable format.
• Objection and withdrawal of consent: object to processing, or withdraw a consent you gave — for example by turning off Auto Tagging or declining analytics cookies.
• Complaint: lodge a complaint with your data protection authority — in Türkiye, the Personal Data Protection Authority (KVKK).

To exercise any of these, email us at the address below. We answer within 30 days.

11. Data Controller & Contact

Neuplace is operated by Adil Kaan Güryuva, Harem İskele Cad. Derya Ap. No:65 Kat:1, Üsküdar / İstanbul, Türkiye, who is the data controller for the personal data described in this policy. Users in Türkiye can read our KVKK Aydınlatma Metni (in Turkish).

For questions or data requests about this Privacy Policy, contact: contact@neuplace.app