LEGAL

Privacy Policy

LAST UPDATED — 30 SEP 2026

This Privacy Policy explains how Neurolist, a trade name of Germ Bud LLC (30 N Gould St #43911, Sheridan, WY 82801, USA), collects and uses personal information when you use our website and services. For questions or requests, contact neurolist.agency@gmail.com.

1. Information we collect

Information you give us

Account details: name, email address, company name and password (if you create an account). Passwords are stored in hashed form by our authentication provider; we cannot see them.
Order details: the packages, products, variants and quantities you order, your marketplace, and your contact details. If you order as a guest, we use the email address you give at checkout to identify your order and to send your private order link.
Brief content: product names, listing and competitor links, notes, design references, brand kit details, and the files you upload (for example raw product photos and logos).
Messages you exchange with our designers, and the name and email of any partner agency you assign to an order.

Payment information

Payments are processed by Stripe. Your card details go directly to Stripe; we receive only limited information such as the payment status, amount and the last four digits of the card.

Information collected automatically

Technical information needed to run the website securely, such as IP address, browser and device type, and server logs.
Information stored in your browser: your login or guest session and the contents of your order builder (cart). See our Cookie Policy.

2. How we use your information

to create and manage your account;
to process orders and payments, and to deliver designs, revisions and support;
to communicate with you about your orders, including requests for missing information;
to show delivered work in our portfolio, unless you opt out (see our Terms, section 9);
to keep the website secure and prevent fraud and abuse;
to meet legal, tax and accounting obligations.

If you are in the European Economic Area or the United Kingdom, we rely on these legal bases: performance of our contract with you; our legitimate interests (running and securing our business, showing our portfolio); compliance with legal obligations; and your consent where it is required.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

Service providers that host and run the website on our behalf: our hosting, database, authentication and file storage provider, Stripe for payments, and Google (Gmail), which we use to send order emails. They may process information only to provide their services to us.
Partner agencies you assign to an order, which can see that order and its materials.
Authorities or other parties when required by law, or to protect our rights, customers or the public.
A successor business if our business is sold or reorganized, subject to this policy.

4. International transfers

We are based in the United States and our service providers may process information in the United States and other countries. Where the law requires it, we use appropriate safeguards such as standard contractual clauses.

5. How long we keep information

Account information: for as long as your account is active.
Order and payment records: for as long as needed for tax and accounting purposes (typically up to 7 years).
Brief materials, uploaded files and messages: for as long as your account is active or as needed to provide revisions and support. You can ask us to delete them earlier.

6. Your rights

Depending on where you live, you may have the right to access, correct, delete or export your personal information, to object to or restrict certain processing, and to withdraw consent. California residents have the right to know, delete and correct personal information and not to be discriminated against for exercising these rights. To make a request, email us from the email address used for your account or order. We may need to verify your identity. If you are in the EEA or UK, you may also lodge a complaint with your local data protection authority.

7. Security

We use reasonable technical and organizational measures to protect your information, including encrypted connections, access controls and private file storage. No online service can be completely secure.

8. Children

Our services are intended for businesses and are not directed to anyone under 18.

9. Changes

We may update this policy. The "Last updated" date shows the latest version. If a change is significant, we will let account holders know.

10. Contact

Germ Bud LLC (Neurolist) · 30 N Gould St #43911, Sheridan, WY 82801, USA · neurolist.agency@gmail.com