Privacy Policy
Last updated: 2 August 2026
This policy explains what personal data NeoX collects, why we collect it, who we share it with, and what you can do about it. It covers neox.ws, the Inference Expert Audit, and the business communications we send.
It does notcover the NeoX product deployed inside a customer’s own environment. NeoX runs within your perimeter and reads telemetry you already emit; in that context you are the controller of your own data and we act only on your instructions under a separate agreement.
1. Who we are
NeoX builds an operational control plane for self-hosted AI inference. The controller of the personal data described here is NeoX Cloud Ltd., a company registered in Israel at 10 Ben Tzion Israeli, Givatayim, Israel.
We are subject to the Israeli Privacy Protection Law and, where we offer our services to people in the United Kingdom or the European Economic Area, to the UK and EU GDPR.
You can reach us about anything in this policy at sales@neox.ws.
2. What we collect, and where it comes from
There are three ways personal data reaches us.
When you visit the website
We use Vercel Analytics, which records aggregate page views and referrers. It does not use cookies and does not build a cross-site profile of you. Our hosting provider also keeps standard server logs, which include IP addresses, for security and reliability.
Worth stating plainly because it is unusual: our typefaces are self-hosted, compiled into the site at build time. Loading a page here does not send your IP address to Google Fonts.
When you request an Inference Expert Audit
The audit request form is a Google Form embedded in our site, and the scheduler is a Google Calendar appointment page. Through these we receive the details you enter — typically your name, work email, organisation, role, and whatever you tell us about your infrastructure — along with your chosen appointment time.
The audit itself is a conversation. We do not connect to your environment, we take no credentials, and no data from your systems passes to us unless you choose to share it during the call.
When we contact you first
We run business-to-business outreach to people whose professional role suggests our product is relevant to them. Where we contact you without prior contact, we obtained your business contact details from publicly available professional sources or from a B2B contact data provider, currently Apollo.io. The data involved is limited to business contact information: name, work email, job title, employer and public professional profile.
You can ask us to stop and to erase your details at any time, and we will act on it. One request is enough.
3. Why we use it, and our legal basis
| Purpose | Legal basis (UK/EU GDPR) |
|---|---|
| Running and securing the website | Legitimate interests — operating a functioning, secure site |
| Responding to an audit request and holding the session | Steps taken at your request prior to entering a contract |
| B2B outreach to relevant professional roles | Legitimate interests — direct marketing to businesses, balanced against your rights and subject to your objection |
| Aggregate analytics to understand what is useful | Legitimate interests — improving our own content |
We do not sell personal data, we do not share it with advertising networks, and we do not use it for automated decision-making that produces legal or similarly significant effects.
4. Who we share it with
We do not sell or rent personal data. We share it only with service providers who process it on our behalf, under contract:
- Vercel — website hosting, image delivery and privacy-friendly analytics.
- Google — the audit request form, the scheduling page, and our own email and calendar.
- Apollo.io — the contact database used for business outreach.
This list is accurate as of the date at the top of this page. If we add a tool that processes personal data, we update it here.
We may also disclose personal data where the law requires it, or to establish or defend legal claims.
5. International transfers
We are based in Israel, which the European Commission recognises as providing an adequate level of data protection. Personal data reaching us from the EEA therefore does not require additional safeguards.
Our service providers are largely US-based, so data also moves to the United States. Those transfers rely on the EU Standard Contractual Clauses and the UK International Data Transfer Addendum, incorporated into each provider’s data processing agreement.
6. How long we keep it
We keep personal data only as long as it serves the purpose it was collected for.
- Audit requests and related correspondence: 24 months from our last contact with you
- Prospect contact records where no conversation followed: 24 months, after which they are deleted
- Server logs: as retained by our hosting provider under its standard policy
- Records we must keep for legal or accounting reasons: for the period the relevant law requires
When you ask us to stop contacting you, we keep the minimum needed to honour that request — usually just your email address on a suppression list, so we do not contact you again by mistake.
7. Your rights
Depending on where you live, you may have the right to access a copy of your data, correct it, delete it, restrict or object to how we use it, receive it in a portable format, and object to direct marketing at any time. Objecting to marketing is absolute — we will stop, without asking you to justify it.
If you are in California, the CCPA as amended gives you rights to know, delete, and correct, and to opt out of the sale or sharing of personal information. We do not sell or share personal information as those terms are defined, so there is nothing to opt out of — but you can still exercise the other rights.
To exercise any of these, email sales@neox.ws. We will respond within one month. We will not treat you differently for asking.
If you are unhappy with how we have handled your data, you can complain to a supervisory authority — the Israeli Privacy Protection Authority, or in the UK the Information Commissioner’s Office, or your national authority in the EEA. We would rather you came to us first, but that is your right either way.
9. Security
We use encryption in transit, access controls on the systems that hold personal data, and reputable providers with recognised security practices. No system is perfectly secure, and we would rather say so than imply otherwise.
10. Children
This is a product sold to organisations. It is not directed at children, and we do not knowingly collect data from anyone under 16.
11. Changes to this policy
If we change this policy we will update the date at the top. Where a change materially affects how we use your data, we will take reasonable steps to tell you rather than relying on you to notice.
12. Contact
Questions, requests, or complaints about this policy or your data: sales@neox.ws.