Privacy Policy
Last Updated: October 1, 2026
Studio Prism and Neorion, Inc. ("Company", "we", "us") are committed to protecting your privacy and ensuring transparency in how we collect, use, and protect your personal information. This Privacy Policy applies to the Neorion Studio desktop application, our website, and all associated online services (collectively, the "Services").
1. Purpose of Data Collection
We collect and process personal data solely for specific, explicit, and legitimate purposes:
- Account Identification & Authentication: To create and manage user accounts, authenticate identities, protect account security, and transmit vital service notifications.
- Service Delivery & Billing: To issue and verify software licenses, process subscriptions and transactions through our Merchant of Record partner (Paddle.com Market Limited), and provide smart AI-assisted translation capabilities.
- Platform Optimization & Security: To detect and resolve system errors, monitor platform availability, and continuously improve desktop and web application performance.
2. Categories of Information Collected
- Account Registration Information: Name, email address, profile picture (optional), OAuth profile information (e.g., from Google), and securely hashed passwords (for direct registrations).
- Payment and Billing Details: Transaction identifiers, invoice history, and billing email. All payment card details are collected and processed directly by our reseller partner, Paddle.com Market Limited. We never store complete credit card numbers or sensitive financial instruments on our servers.
- Automated Technical & Diagnostic Data: Operating system version, platform type, application crash logs, connection IP address, and anonymized performance metrics.
3. Google API Services User Data Policy Compliance & Limited Use Disclosure
Neorion's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
- Google Data Accessed: When signing in with Google OAuth, we access your basic public profile information, specifically your email address, display name, and avatar image.
- Purpose of Access: We use Google user data exclusively for account authentication, identity verification, and profile management within Neorion.
- No Sale or Third-Party Transfer: We do not sell, rent, or lease Google user data to any external third parties under any circumstances.
- No Advertising: Google user data is never used or transferred for serving advertisements, including retargeting, personalized advertising, or market profiling.
- No AI/ML Model Training: We explicitly do not use Google user data to train, retrain, or fine-tune generalized artificial intelligence (AI) or machine learning (ML) models.
- Revocation of Access: You can revoke Neorion's access to your Google account at any time via the Google Account Permissions Settings.
4. Third-Party Service Providers & Sub-Processors
We partner with vetted, industry-leading sub-processors to deliver core application functionality:
| Sub-Processor | Service Rendered | Data Transferred |
|---|---|---|
| Paddle.com Market Limited | Merchant of Record, payment processing, subscription management | Email, billing address, transaction IDs |
| Cloudflare, Inc. / Neon, Inc. | Cloud hosting, edge routing, encrypted serverless PostgreSQL database | User accounts, license states, system logs (Encrypted) |
| Google LLC / OpenAI, L.L.C. / Anthropic PBC | Optional AI translation processing (invoked upon user request) | User-submitted text segments for translation (transient processing only on AI provider infrastructure, not retained or used for training) |
5. Data Retention, Account Deletion & User Rights
We retain personal information only for as long as necessary to fulfill the purposes outlined in this policy or as required by applicable commercial and tax retention statutes.
- Data Subject Rights: Under GDPR, CCPA, and relevant data protection laws, you hold the right to access, rectify, restrict, or request complete erasure of your personal data.
- Account Deletion Procedure: You may request the permanent deletion of your account and all associated personal data at any time through your account dashboard or by emailing contact@neorion.net. We process all verifiable erasure requests within 30 days.
6. Data Security Measures
We employ comprehensive technical and administrative safeguards to protect your personal data from unauthorized access, loss, or disclosure:
- Strict Transport Layer Security (TLS 1.3) encryption for all client-server communications
- One-way cryptographic salting and hashing for authentication credentials
- Restricted database access controls and automated threat mitigation via cloud firewalls
7. Contact Information & Inquiries
Entity: Studio Prism / Neorion, Inc.
Business Registration: 561-09-03510
Privacy Contact & Data Deletion Requests: contact@neorion.net