Legal

Privacy Policy

Last updated: April 19, 2026 · Effective: April 19, 2026

NEROX, Inc. ("NEROX", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy describes how we collect, use, disclose, and safeguard information about you when you use the NEROX platform, website, and related services.

Information We Collect

Account Information

When you create an account, we collect your name, email address, and password. For paid plans, we collect billing information including payment method details (processed by our payment processor, Stripe).

Usage Data

We collect information about how you use the Service, including: API calls made and their parameters, solver jobs submitted (problem type, size, solver chosen, runtime), benchmark results, experiment configurations, and feature usage patterns.

Problem Data

We temporarily process optimization problem instances you submit to the Service in order to return results. We do not permanently retain raw problem data beyond your plan's job history period (7 days on free, 90 days on paid plans).

Technical Data

We automatically collect IP address, browser type and version, operating system, referring URLs, device identifiers, and timestamps of Service access for security and performance monitoring purposes.

How We Use Information

We use the information we collect to: provide and improve the Service; process payments and manage your subscription; send transactional emails (job completion notifications, billing receipts, password resets); respond to support requests; detect and prevent fraud and abuse; analyze usage patterns to improve performance and develop new features; and comply with legal obligations.

We do not sell your personal data to third parties. We do not use your problem data to train machine learning models without explicit written consent.

Information Sharing

We share information only in the following circumstances:

Service Providers: We share data with third-party vendors who help us operate the Service, including Stripe (payment processing), Modal (GPU compute infrastructure), Vercel (hosting), and PostHog (analytics). These providers are contractually bound to use data only to provide their services to us.

Legal Requirements: We may disclose information when required by law, regulation, legal process, or governmental request.

Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your data is subject to a different privacy policy.

Data Retention

Account data is retained for as long as your account is active. Job history (solver outputs and metadata) is retained according to your plan tier: 7 days on free, 90 days on Pro, 1 year on Business. Raw problem input data is deleted after each job completes.

Upon account deletion, we delete your personal data within 30 days, except where we are required to retain it for legal or compliance purposes.

Security

We implement technical and organizational measures to protect your information against unauthorized access, loss, or alteration. These include encryption in transit (TLS 1.3) and at rest (AES-256), API key scoping, role-based access controls, and regular security audits.

No security system is perfect. We encourage you to use strong, unique passwords and enable two-factor authentication in your account settings.

Cookies & Tracking

We use cookies and similar tracking technologies for authentication (session cookies), preference storage, and analytics. You can control cookie preferences through the cookie banner presented when you first visit the Service.

Essential cookies are required for the Service to function and cannot be disabled. Functional cookies remember your preferences. Analytics cookies help us understand usage patterns.

Third-Party Services

The Service integrates with or links to third-party services (such as GitHub for OAuth login). These services have their own privacy policies and we are not responsible for their practices. We encourage you to review the privacy policies of any third-party services you connect to your NEROX account.

Your Rights

Depending on your location, you may have rights including: the right to access and receive a copy of your personal data; the right to correct inaccurate data; the right to delete your personal data; the right to restrict or object to processing; and the right to data portability.

To exercise any of these rights, contact us at support@driftrail.com. We will respond within 30 days.

Children's Privacy

The Service is not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that a child has provided personal information, we will delete it promptly.

International Transfers

NEROX operates from the United States. If you are accessing the Service from outside the US, your information may be transferred to and processed in the United States. Where required by law, we use appropriate safeguards (such as Standard Contractual Clauses) for international transfers.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a prominent notice in the Service. The "Last updated" date at the top of this policy reflects when changes were last made.

Contact Us

For privacy-related questions, data requests, or to report a concern, contact our Data Protection team at support@driftrail.com. You may also write to us at NEROX, Inc., 251 Little Falls Drive, Wilmington, DE 19808, United States.