Privacy Policy

Neon Next Generation PTY LTD ('we', 'our', 'us') is committed to protecting your privacy and handling your personal data with transparency and care.

This Privacy Policy applies to all users of our services worldwide, regardless of your location. We have designed our practices to meet a high global standard of privacy protection.

By using our services, you acknowledge that your personal data will be processed in accordance with this Privacy Policy. If you do not agree, please discontinue use of our services.

We collect only what is reasonably necessary to deliver and improve our services.

2.1 Personal Information

• Full name
• Email address and phone number
• Billing and mailing address
• Company name (if applicable)

2.2 Account and Usage Data

• Login activity and timestamps
• IP addresses and device information
• Browser type and operating system
• Server usage and performance metrics

2.3 Payment Information

Payment details are processed securely via third-party payment processors (e.g. Stripe). We do not store full payment card details on our systems.

2.4 Cookies and Tracking Data

See Section 6 for full details on our cookie practices and your consent options.

2.5 Voluntarily Provided Data

• Support requests and communications
• Feedback, survey responses, and submitted forms

We do not collect sensitive information (such as health, biometric, or financial account data) unless explicitly required and with your informed consent.

We process personal data only when we have a lawful reason to do so. Depending on the nature of the processing, we rely on one or more of the following bases:

• Consent: For marketing communications and non-essential cookies. You may withdraw consent at any time (see Section 9).
• Contractual Necessity: To provide the services you have requested, including account management, hosting, and VPN services.
• Legal Obligation: To comply with applicable laws and respond to lawful requests from authorities.
• Legitimate Interests: To maintain service security, prevent fraud, and improve our offerings, provided these interests do not override your rights. Specifically, our legitimate interests include: detecting and preventing abuse or unauthorised access, improving system performance, and protecting the integrity of our infrastructure.

We use your data strictly for the following purposes:

• Service delivery: account management, subscriptions, hosting, and VPN services
• Customer support: responding to inquiries and resolving issues
• Communications: service updates, maintenance notices, and (with consent) marketing
• Security and fraud prevention: detecting abuse, unauthorised access, or attacks
• Service improvement: analytics, debugging, and performance optimisation
• Legal compliance: responding to regulatory, tax, and law enforcement obligations

We do not use your data for automated decision-making or profiling that produces legal or significant effects on you.

We do not sell your personal data. We do not share your data for third-party advertising purposes.

We may disclose data to the following categories of recipients:

• Cloud infrastructure and hosting providers (e.g. server and storage platforms)
• Payment processors (e.g. Stripe)
• Analytics and monitoring services (for performance and security)
• Professional advisors (legal, accounting, and compliance)
• Regulatory or law enforcement authorities, where required by law or valid legal process

When we share data with service providers, we require them to handle it in accordance with this policy and applicable privacy laws. We conduct due diligence on all third-party processors before engaging them.

International Data Transfers

Your data may be stored or processed in countries other than your own. Where this occurs, we implement appropriate safeguards including contractual protections equivalent to those recognised in major international privacy frameworks. You may request details of the safeguards in place by contacting us at contact@neonnextgeneration.com.

We use cookies and similar technologies to operate and improve our services.

Types of Cookies We Use

• Essential cookies: required for authentication and core functionality. These cannot be disabled as they are necessary for the service to function.
• Performance cookies: anonymous analytics and usage insights to help us improve the service.
• Functional cookies: remembering your preferences and settings.
• Marketing cookies: used for advertising purposes only with your explicit prior consent.

Your Cookie Choices

When you first visit our website, a cookie consent banner will allow you to accept or decline non-essential cookies by category. You can update or withdraw your preferences at any time via the cookie settings link in the footer of our website, or by adjusting your browser settings to block or delete cookies.

Withdrawing cookie consent will not affect any processing carried out on the basis of consent before it was withdrawn. Note that disabling certain cookies may affect the functionality of our services.

We retain personal data only for as long as necessary to fulfil the purposes described in this policy:

• Account data: retained during active use and for up to 2 years after account closure
• Financial records: retained for up to 7 years to meet standard legal and accounting requirements
• Logs and technical data: retained for up to 12 months, then securely deleted or anonymised
• Support communications: retained for up to 2 years from the date of the last interaction

When data is no longer required, we securely delete or anonymise it so it can no longer be associated with you. Deletion requests submitted under Section 9 may be subject to overriding legal retention obligations.

We implement appropriate technical and organisational measures to protect your personal data, including:

• Encryption of sensitive data in transit and at rest
• Access controls and multi-factor authentication systems
• Secure infrastructure with regular security reviews and penetration testing
• Strict internal data access policies on a need-to-know basis
• Employee training on data handling and security practices

Despite these measures, no system is completely secure. We cannot guarantee absolute security, but we will act promptly to contain and communicate any incident that affects your data.

Regardless of your location, we honour the following rights for all users:

• Access: request a copy of the personal data we hold about you
• Correction: request correction of inaccurate or incomplete data
• Deletion: request that we delete your personal data, subject to any legal retention obligations
• Restriction: request that we limit how we process your data while a dispute is resolved
• Portability: receive your data in a structured, commonly used, machine-readable format
• Objection: object to processing carried out on the basis of legitimate interests
• Withdraw Consent: withdraw previously given consent at any time, without affecting the lawfulness of prior processing

How to Exercise Your Rights

To submit a request, email us at contact@neonnextgeneration.com with the subject line 'Privacy Request' and include:

• Your full name and the email address associated with your account
• A description of the right you wish to exercise
• Any supporting details that will help us locate your data

We will acknowledge your request within 5 business days and respond in full within 30 days. We may ask you to verify your identity before processing your request. If your request is complex or we receive multiple requests, we may extend the response period by up to 30 additional days, and we will notify you if this is the case.

Our services are not directed at children under the age of 16. We do not knowingly collect personal data from anyone under 16 without verifiable parental or guardian consent.

We do not use technical age-verification systems, and we rely on users to provide accurate information. If you believe we have inadvertently collected data from a minor, please contact us immediately at contact@neonnextgeneration.com and we will delete it promptly.

Parents or guardians may contact us to request access to, correction of, or deletion of their child's data using the process described in Section 9.

VPN Services: No-Activity-Logging Policy

We operate a strict no-activity-logging policy for our VPN services. We do not log:

• Browsing activity or visited websites
• Traffic content or payload data
• DNS queries or connection destinations
• Originating IP addresses assigned to VPN sessions
• Connection timestamps tied to individual users

We may collect minimal operational data (such as aggregate server load and uptime statistics) solely for performance and reliability purposes. This data is never linked to individual users and cannot be used to identify your activity.

In the event of a valid legal order requiring disclosure, we can only provide data we actually possess. Our no-logging policy means we have no activity data to disclose even if compelled by a court or authority.

Hosting and Network Monitoring

We monitor our hosting infrastructure solely to:

• Maintain service integrity and uptime
• Detect fraud, abuse, or security threats
• Enforce our Terms and Conditions
• Comply with lawful obligations

All monitoring is limited, proportionate, and subject to strict internal access controls. Monitoring data is not used for any purpose beyond those listed above.

We work with the following categories of third-party processors who may handle your personal data on our behalf. All processors are bound by data processing agreements that require them to handle your data securely and in accordance with this policy.

• Payment processing: Stripe (stripe.com) for secure handling of subscription payments
• Cloud infrastructure: Server and storage providers used to host our platforms and services
• Email delivery: Transactional and notification email services
• Analytics: Aggregated, anonymised usage analytics to help us improve performance
• Security monitoring: Infrastructure and threat detection services

We do not share your data with processors beyond what is necessary for the specific purpose for which they are engaged. If you have questions about a specific processor, contact us at contact@neonnextgeneration.com.

In the event of a data breach that poses a risk to your rights or interests, we will:

• Take immediate steps to contain and mitigate the impact
• Notify affected users without undue delay, and within 72 hours of becoming aware where practicable
• Notify relevant authorities as required by applicable law
• Provide clear information about what happened, what data was affected, what we are doing about it, and what steps you can take to protect yourself

We maintain an internal incident response plan and conduct regular reviews to ensure our breach response procedures remain effective.

We may offer the option to register or log in to our services using third-party authentication providers such as Google or Discord. If you choose to use social login, the following applies:

• We receive a limited set of profile data from the provider (typically your name, email address, and profile picture) based on the permissions you grant at the time of login
• We do not receive or store your password for the third-party service
• The information we receive is used solely to create or authenticate your account with us
• Your use of the third-party authentication service is governed by that provider's own terms and privacy policy

You may disconnect a social login from your account at any time via your account settings. Disconnecting will not delete your account with us, but you will need to set a password to continue accessing your account.

We are not responsible for the data practices of third-party authentication providers. We encourage you to review their privacy policies before using social login.

We do not sell your personal data to third parties, and we do not share your personal data with third parties for cross-context behavioural advertising purposes.

If you are a resident of a jurisdiction with specific opt-out rights (such as California under the CCPA, or similar laws elsewhere), you have the right to:

• Opt out of the sale or sharing of your personal data, even though we do not engage in these practices
• Request disclosure of the categories of personal data collected, the purposes for which it is used, and any third parties it has been shared with
• Request deletion of your personal data, subject to legal exceptions
• Not be discriminated against for exercising any of these rights

To exercise any of these rights, contact us at contact@neonnextgeneration.com with the subject line 'Do Not Sell Request' or 'Privacy Rights Request'. We will respond within 30 days and will not charge a fee for reasonable requests.

Even though we do not sell data, we maintain this section to be transparent about your rights and to ensure users in all jurisdictions can exercise them with confidence.

You have the right to receive a copy of the personal data we hold about you in a structured, commonly used, and machine-readable format, and to transmit that data to another service provider where technically feasible.

What You Can Request

• Account profile data (name, email, contact details)
• Billing history and transaction records
• Support ticket history
• Any other personal data you have provided to us directly

Operational data such as server logs, anonymised analytics, and system-generated metadata may not be included in a portability export as this data is not attributable solely to you.

How to Request a Data Export

To request a portable copy of your data, email us at contact@neonnextgeneration.com with the subject line 'Data Portability Request'. Include your full name and account email address. We will provide your data export within 30 days in a standard format such as JSON or CSV, depending on the data type.

There is no charge for a data portability request. If your request is manifestly excessive or repetitive, we reserve the right to charge a reasonable administrative fee or decline the request, with written explanation.

What We Do

We may use certain usage data to understand how our services are used in aggregate and to improve the user experience. This includes:

• Analysing feature usage patterns to prioritise product improvements
• Monitoring performance and reliability metrics by service tier
• Identifying and resolving issues affecting groups of users

Any analytics we carry out are conducted at an aggregate or anonymised level wherever possible. We do not build individual behavioural profiles for the purpose of targeting, scoring, or making decisions about you.

What We Do Not Do

• We do not track your activity across third-party websites or services
• We do not build individual profiles for advertising or marketing segmentation purposes
• We do not use behavioural data to make automated decisions that produce legal or significant effects on you
• We do not use tracking pixels or third-party advertising tags on our platform without your explicit consent

If you object to any form of usage analytics, you may contact us at contact@neonnextgeneration.com to discuss the options available to you, including opting out of non-essential analytics.

We want to be transparent about how artificial intelligence (AI) and machine learning (ML) technologies may interact with your data.

Current Use

We may use automated tools and ML-based systems to:

• Detect abuse, spam, fraud, or security threats on our platform
• Monitor infrastructure performance and predict capacity needs
• Filter or flag content that may violate our Acceptable Use Policy

These uses are operational in nature. They are not used to make decisions about you personally, and any flagged activity is reviewed by a human before any action is taken against an account.

What We Do Not Do

• We do not use your personal data to train external AI or ML models
• We do not sell or license your data to AI companies or data brokers
• We do not use AI to make fully automated decisions with legal or significant effects on you without human review

Future Changes

If we introduce new AI-powered features that involve processing your personal data in a materially different way, we will update this policy and notify you in accordance with Section 19 before those features are deployed.

Your Rights

If you believe an automated system has made an incorrect assessment about you or your account, you have the right to request human review. Contact us at contact@neonnextgeneration.com with the subject line 'Automated Decision Review Request'.

We may update this Privacy Policy from time to time. When we do:

• The revised policy will be posted with an updated version number and effective date
• For minor clarifications, we will update the document with no further notice
• For material changes, we will notify you by email or prominent notice within the service at least 14 days before the change takes effect
• Material changes will require your active acknowledgement before you continue to use our services

We recommend reviewing this policy periodically. A version history is maintained below.

Version History

• Version 2.2: April 12, 2026: Added social login, do not sell, data portability, profiling, and AI/ML sections
• Version 2.1: April 12, 2026: Added third-party processor section, expanded rights request process, refined cookie withdrawal process, updated retention schedule
• Version 2.0: April 12, 2026: Revised to global scope, added cookie consent detail, expanded rights and VPN logging policy
• Version 1.0: January 13, 2026: Initial policy

For any privacy-related enquiries, requests, or concerns:

We aim to acknowledge all privacy-related requests within 5 business days and respond in full within 30 days.

If you believe we have not handled your personal data in accordance with this policy, we encourage you to contact us first at contact@neonnextgeneration.com so we can work to resolve the matter directly. We take all privacy complaints seriously and will respond within 30 days.

If you are not satisfied with our response, you may escalate your complaint to the relevant privacy or data protection authority in your jurisdiction. We will cooperate fully with any such investigation and will not penalise you for making a complaint in good faith.