Privacy Notice

NeonData LLC (“NeonData,” “we,” “us”) is committed to protecting the privacy of everyone who interacts with our website, our products, and our team — visitors, prospective customers, the clinics and businesses that subscribe to NEON (“Customers”), and Customers’ own patients (“Guests”). This notice explains what personal data we collect, why, and the choices available to you.

Personal data we collect

• Site visitors and prospects: name, email, phone, and company details submitted through forms such as Contact or Request a Demo.
• Customer users: account credentials, role and permission settings, and usage logs needed to operate the Service, including EMR MCP and Shared IQ MCP access.
• Guest data: where Customer uses NEON to store patient information, NeonData processes that data as a service provider / business associate on Customer’s behalf, under the terms of our Business Associate Agreement — not as the data controller.

How we use personal data

• To provide, maintain, and improve the Service.
• To respond to inquiries submitted through Contact, Get Support, or Careers.
• To send product updates and, where you’ve opted in, marketing communications.
• To meet legal, security, and compliance obligations.

Sharing of information

We do not sell personal data. We share data with subprocessors who help us operate the Service (such as cloud hosting and payment processing providers) under contractual confidentiality and security obligations, and with regulators or law enforcement where required by law.

Data security

We maintain administrative, technical, and physical safeguards appropriate to the sensitivity of the data we handle, including encryption in transit and at rest, role-based access controls, and audit logging. See our Trust Center for more detail on our security and compliance posture.

Data retention

We retain personal data for as long as needed to provide the Service and to meet legal, accounting, or reporting obligations, after which it is deleted or anonymized.

Your privacy rights

Depending on where you live, you may have rights to access, correct, delete, or port your personal data, and to object to certain processing. To exercise these rights, contact us using the details below. If your data was submitted to us by a NEON Customer (for example, as a patient of a clinic that uses NEON), please contact that Customer directly, as they control how their patient data is used.

Cookies

Our website uses cookies and similar technologies as described in our Cookie Notice.

Children’s privacy

Our website and marketing are not directed to children, and we do not knowingly collect personal data from children.

International data transfers

Personal data may be processed in the United States. Where required, we rely on appropriate safeguards for any cross-border transfer of personal data.

Changes to this notice

We may update this notice from time to time. Material changes will be posted on this page with an updated effective date.

Google API Data

NeonData's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• Google data is used only to provide and improve user-facing features of the Service
• Google data is not used to serve advertising
• Google data is not transferred to third parties except as necessary to provide the Service
• No human reads your Google data except with your explicit permission for support purposes

12. Mobile Information and Text Messaging

When a clinic using NeonData EMR enables patient text messaging, we process patient phone numbers, opt-in consent records, and message content on behalf of that clinic, solely to deliver the messages the clinic initiates — such as appointment reminders, confirmations, and other care-related notifications.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties, excluding aggregators and providers of the text-message services, and only to the extent necessary to deliver the messages you have consented to receive.

You can opt out of text messages at any time by replying STOP to any message, or by contacting the clinic that sends them. Reply HELP for assistance. Message and data rates may apply, and message frequency varies. Full messaging terms are in Section 12 of our Terms of Service.

How to Delete Your Data

You can remove your data from NeonData at any time. There are two steps, and you can do either independently.

1. Disconnect the source. Sign in at https://app.puzldata.com/portal, open your account page, find the connected source under Data Sources, and choose Disconnect. This immediately deletes the stored access credentials for that source and stops all further data collection. You can do this yourself, without contacting us.

2. Request deletion of data already collected. Email privacy@neondata.co from the address associated with your account, stating which account and which source you want erased. We delete the corresponding records within 30 days and confirm by email.

Facebook and Instagram. For data obtained through a connected Facebook Page or Instagram Business account, you may additionally revoke NeonData's access directly from Facebook: go to Settings & Privacy → Settings → Business Integrations, select NeonData, and choose Remove. Revoking access there stops future collection; email us as described above to also erase data already stored.

Deleting an account removes its ingested source data, stored credentials, and derived reporting. We may retain limited billing and audit records where required by law.

Contact us

Questions about this notice can be sent to privacy@neondata.co.