Neuto is designed to separate public verification signals from restricted identity evidence, contracts, credentials and enterprise records.
1. Scope
This Privacy Policy describes the information practices of Neuto AI™ in connection with the Neuto public website, Neuto™ Creator Passport, enterprise Control Room, verification services, developer interfaces, contact workflows and related products or services that reference this policy. Enterprise customers may also be subject to customer-specific agreements, data-processing terms, security schedules and deployment requirements.
2. Privacy roles and enterprise deployments
Depending on the service and deployment, Neuto AI™ may act as an organization determining why and how certain information is processed, or it may process information on behalf of an enterprise customer that controls the relevant data and user relationships. Where an enterprise customer controls the data, requests concerning that data may need to be directed first to the customer or organization administrator.
3. Information we collect
Information may include account and authentication data; business contact information; organization and workspace information; creator identity and representative relationships; music, media and asset metadata; rights assertions; policy and consent instructions; authorization requests and decisions; provenance and chain-of-custody events; verification records; claims and evidence references; API and device information; audit logs; security telemetry; and information submitted through contact or support channels.
Neuto does not intend public verification pages to disclose private evidence by default. Public-facing records should be limited to fields specifically designated for verification or controlled disclosure.
4. How information is used
Neuto AI™ may use information to provide and secure the services; authenticate users; administer workspaces and permissions; maintain identity, rights and asset records; evaluate policy and authorization requests; generate provenance and audit evidence; provide verification; operate APIs; respond to inquiries; detect abuse or security events; maintain service reliability; improve product functionality; and satisfy contractual, regulatory or legal requirements.
5. Creator, media, rights and authorization data
Creator Passport can record identity states, creator-authorized representatives, asset relationships, rights assertions, policy versions, authorization decisions, consent states, evidence references and derivative or provenance relationships. These records support operational decision-making and auditability. A record, verification state or authorization output does not by itself constitute a judicial determination of copyright ownership, identity rights, licensing status or legal entitlement.
8. Security and access controls
The platform supports role-based access control, workspace isolation, authentication safeguards, API credential controls, audit logging, restricted evidence access, secure transport and operational security monitoring. Production deployments should also use controls appropriate to their risk profile, such as multifactor authentication, managed secrets, encryption, protected object storage, malware scanning, backups, vulnerability management and incident response. No networked system can guarantee absolute security.
9. Retention and deletion
Information is retained for periods appropriate to the purpose for which it was collected, applicable enterprise instructions, security needs, audit integrity, contractual requirements and law. Certain authorization, provenance, security or audit events may need to be preserved after an account or workspace is deactivated where retention is necessary to maintain evidentiary integrity, investigate abuse or comply with legal obligations.
10. Privacy rights and choices
Depending on jurisdiction and the nature of the relationship with Neuto AI™, individuals may have rights to request access, correction, deletion, portability, restriction, objection or information about processing. Requests may be subject to identity verification and lawful limitations. Where an enterprise customer controls the relevant information, Neuto may direct the request to that customer.
11. Automated processing and authorization systems
Neuto may automatically evaluate machine-readable policies, permissions and request context to produce technical authorization outcomes. These outcomes are designed to implement configured rules and evidence states; they are not intended to make legal judgments about an individual or replace contractual, licensing or legal review where such review is required.
12. International processing and data location
Service providers and enterprise deployments may process information in jurisdictions other than the user's location. Where required, Neuto AI™ and its customers may use contractual, organizational or technical safeguards for cross-border processing. Enterprise deployments may be subject to additional data-residency arrangements.
13. Children and minors
Neuto's enterprise services are not directed to children for independent use. Organizations managing information relating to minors are responsible for ensuring that appropriate authority, consent and safeguards exist before submitting that information to the platform.
14. Changes to this Policy
This Privacy Policy may be updated as Neuto AI™ services, operating practices and legal requirements evolve. The date at the top of this page identifies the current revision. Material changes may be communicated through the website, product interface or enterprise channels where appropriate.
15. Contact
Privacy, data protection and general inquiries may be sent to info@neutoai.com or submitted through the Neuto AI™ contact page.