Neurico Global Privacy Notice

Effective date: 29 July 2026
Version: v4

This notice explains how APIKO TEKNOLOJİ YAZILIM VE DANIŞMANLIK LİMİTED ŞİRKETİ, trading as Neurico ("Neurico", "we", "us", or "our"), handles personal information when you visit our website, create an account, purchase or manage a subscription, use an inference endpoint or API, or contact us.

1. Who is responsible

Controller: APIKO TEKNOLOJİ YAZILIM VE DANIŞMANLIK LİMİTED ŞİRKETİ
Registered address: Maslak Mah. AOS 55. Sk. 42 Maslak B Blok No: 4 İç Kapı No: 542, Sarıyer, İstanbul, Türkiye
MERSIS: 0071102557300001
Tax ID: 0711025573
Email: hello@neurico.ai

2. Information we collect

Depending on how you use Neurico, we may collect:

• identity and contact information, including name, email, phone number, country, city, address, postal code, and information required for billing;
• account and subscription information, including selected plan, renewal, cancellation, payment status, invoice details, and limited payment-method information returned by the payment service;
• technical and security information, including IP address, browser, device, session, authentication, rate-limit, error, and audit records;
• Service usage information, including request time, token counts, selected model, provider cost, estimated savings, quota, latency, status, and routing result;
• prompts, messages, files, instructions, retrieval context, tool inputs, and model responses that you submit through the Service ("User Content"); and
• support, complaint, marketing-preference, and other communications.

Neurico does not store full payment-card details.

3. How we use information

We use personal information to:

• create and secure your account and verify your identity;
• provide endpoints, APIs, model routing, usage controls, and support;
• process subscriptions, payments, invoices, renewals, cancellations, and refunds;
• measure usage, token volume, cost, savings, reliability, and performance;
• apply your retention and account settings;
• prevent or investigate fraud, abuse, unauthorized access, and security incidents;
• communicate about the Service and respond to requests or complaints;
• maintain legal, tax, accounting, and transaction records;
• establish, exercise, or defend legal rights; and
• send optional product news or offers where you have chosen to receive them.

We do not sell personal information or User Content. We do not use User Content to train a Neurico general-purpose model.

4. Legal bases

Where data-protection law requires a legal basis, the basis depends on the activity:

• contract performance for accounts, authentication, subscriptions, payments, routing, usage reporting, and support;
• legal obligation for tax, accounting, consumer, regulatory, and official requests;
• legitimate interests for proportionate security, fraud prevention, service reliability, audit records, and protecting legal rights; and
• consent for optional marketing or another activity where consent is required.

You can withdraw consent for future processing at any time. This does not affect processing that was lawful before withdrawal.

5. User Content and model providers

Neurico processes User Content to route your request and return the result. Depending on the selected model and supported settings, User Content may be sent to one or more Model Providers in Türkiye, the European Economic Area, the United States, or another country.

Model Providers have their own retention, logging, security, and training practices. Provider-side handling is governed by the applicable provider terms and supported configuration. Avoid submitting sensitive or third-party personal information unless you have a lawful reason and it is necessary for your request.

6. Retention

When content retention is disabled, Neurico does not retain new prompt and response content after in-memory request handling, except where temporary security, support, abuse-prevention, or legal processing is necessary.

When content retention is enabled for an eligible endpoint, the current standard period is shown in the Service. Disabling retention affects new requests; content already stored follows the expiry setting that applied when it was created.

We generally keep:

• account and contract records while the relationship is active and for applicable limitation and legal periods afterward;
• transaction, invoice, tax, and accounting records for legally required periods;
• usage and security metadata for a proportionate period needed for billing, reporting, auditability, fraud prevention, and legal claims; and
• support and complaint records for the period needed to resolve the matter and protect rights.

Account deletion includes the recovery period shown in the Service. Information may remain where law, financial-record requirements, security, fraud prevention, or legal claims require it.

7. Who receives information

We disclose information only as reasonably necessary to:

• cloud, database, email, security, monitoring, support, payment, billing, accounting, and professional-service providers;
• Model Providers selected to complete a request;
• advisers, insurers, auditors, and transaction counterparties where needed to protect rights or complete a corporate transaction; and
• government, regulatory, tax, judicial, or law-enforcement authorities where required.

We require service providers to protect information and use it only for the agreed purpose, subject to applicable law.

8. International transfers

Neurico and its providers may process information in countries other than your country of residence. Where a transfer requires a safeguard, we use the mechanism applicable to that transfer, such as an adequacy decision, approved standard contractual clauses, binding corporate rules, a Turkish standard contract, or a statutory derogation.

An EU or UK transfer mechanism does not replace requirements that apply to a transfer from Türkiye.

9. Your rights

Depending on where you live, you may have rights to:

• know whether and how personal information is processed;
• access or receive a copy;
• correct inaccurate or incomplete information;
• request deletion, destruction, restriction, or anonymization;
• object to certain processing;
• receive portable information;
• withdraw consent for future processing;
• object to certain solely automated decisions;
• learn the recipients of information; and
• complain to a competent data-protection authority.

Residents of Türkiye have the rights in Article 11 of Law No. 6698. Residents of the EEA and United Kingdom may also have GDPR or UK GDPR rights. Other local rights apply where required.

To exercise a right, email hello@neurico.ai. We may verify your identity and country of residence before responding.

10. Security

Neurico uses administrative, technical, and organizational safeguards designed to protect personal information, including access controls, credential protection, encryption in transit, managed secret storage, logging, rate limiting, and audit records.

No service can guarantee absolute security. Protect your email session and API keys and avoid submitting personal information that is not needed for a request.

11. Children

The Service is intended for adults and is not directed to anyone under 18. Do not create an account if you are under 18.

12. Changes

We may update this notice when the Service, providers, practices, or legal requirements change. The effective date identifies the current version. We will provide advance email or in-product notice of a material change where required.

13. Contact

Privacy questions, complaints, and rights requests may be sent to:

APIKO TEKNOLOJİ YAZILIM VE DANIŞMANLIK LİMİTED ŞİRKETİ
Maslak Mah. AOS 55. Sk. 42 Maslak B Blok No: 4 İç Kapı No: 542, Sarıyer, İstanbul, Türkiye
MERSIS: 0071102557300001 · Tax ID: 0711025573
hello@neurico.ai