GDPR Privacy Notice

Last Updated: September 8, 2026

This GDPR Privacy Notice explains how Neeblo ("Neeblo", "we", "us", or "our") processes personal data in connection with our websites, applications, software platforms, products, and services.

This Notice applies to individuals located in the European Economic Area ("EEA") and, where applicable, the United Kingdom ("UK") and Switzerland.

1. Data Controller

Where Neeblo determines the purposes and means of processing your personal data, Neeblo acts as the data controller.

Where Neeblo processes personal data on behalf of a customer under the customer's instructions, Neeblo generally acts as a data processor.

The applicable role depends on the specific processing activity.

2. Personal Data We Process

Depending on your interaction with Neeblo, we may process:

• Identification information

• Contact information

• Account information

• Company and professional information

• Subscription and billing information

• Technical and device information

• IP address

• Usage and analytics information

• Communications and support requests

• Content submitted to our Services

• Information associated with connected third-party services

• Preferences and configuration data

We generally do not request special categories of personal data unless a specific Service expressly requires and lawfully supports such processing.

3. Legal Bases for Processing

Depending on the circumstances, we process personal data based on one or more of the following legal bases under applicable data protection law:

Contract

Processing may be necessary to provide Services, manage accounts, process subscriptions, or fulfill our contractual obligations.

Legitimate Interests

We may process information where necessary for legitimate interests, such as:

• Service security

• Fraud prevention

• Product improvement

• Analytics

• Network and information security

• Business administration

• Customer support

We consider and balance our interests against your rights and freedoms.

Consent

Where required, we rely on your consent for activities such as certain marketing communications or non-essential cookies.

You may withdraw consent at any time where processing is based on consent.

Legal Obligations

We may process personal data where necessary to comply with legal or regulatory requirements.

4. Purpose of Processing

We may process personal data to:

• Provide the Services

• Create and manage accounts

• Process transactions

• Provide customer support

• Authenticate users

• Maintain security

• Detect fraud and abuse

• Improve our products

• Analyze usage

• Communicate with users

• Provide AI-assisted functionality

• Maintain integrations

• Comply with legal requirements

5. AI Processing

Some Neeblo features use AI technologies.

Depending on the Service, submitted content may be processed by Neeblo and authorized technology providers to generate AI-assisted results or perform requested operations.

Where Neeblo acts as a processor, customer instructions and applicable contractual terms govern the processing of customer data.

Where legally required, we implement appropriate safeguards for AI-related processing.

6. Data Processors and Subprocessors

We may use third-party service providers to process personal data on our behalf.

These may include providers for:

• Cloud infrastructure

• Hosting

• Databases

• Security

• Analytics

• Customer support

• Payment processing

• AI infrastructure

• Email delivery

• Monitoring

• Communication

• Authentication

Where required by GDPR, appropriate contractual and organizational safeguards are implemented.

7. International Transfers

Personal data may be transferred outside the EEA, UK, or Switzerland.

Where a transfer requires safeguards under applicable law, we may rely on mechanisms such as:

• Adequacy decisions

• Standard Contractual Clauses

• Appropriate supplementary measures

• Other lawful transfer mechanisms

8. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, unless a longer period is required by law.

Retention periods may depend on:

• The type of data

• The purpose of processing

• The relationship with the user

• Legal and regulatory obligations

• Security and fraud-prevention requirements

9. Your GDPR Rights

Subject to applicable legal conditions and limitations, you may have the right to:

• Access your personal data

• Correct inaccurate personal data

• Request deletion

• Restrict processing

• Object to processing

• Receive certain personal data in a portable format

• Withdraw consent

• Object to direct marketing

• Lodge a complaint with a supervisory authority

10. Right to Object

Where we process personal data based on legitimate interests, you may have the right to object to such processing.

You may also object to direct marketing at any time.

11. Automated Decision-Making

Where applicable law provides specific rights regarding solely automated decision-making or profiling, you may have additional rights.

Neeblo does not intend to make decisions producing legal or similarly significant effects based solely on automated processing unless permitted by applicable law and appropriate safeguards are in place.

12. Cookies

We may use cookies and similar technologies.

Where required, we request consent before placing non-essential cookies.

You can manage certain cookie preferences through your browser or available cookie-management tools.

13. Data Security

We use appropriate technical and organizational measures designed to protect personal data.

These measures may include access controls, encryption, authentication, monitoring, logging, backup systems, and security procedures.

14. Data Breaches

Where required by applicable law, Neeblo will notify the relevant supervisory authority and/or affected individuals of personal data breaches within the legally required timeframe.

15. Complaints

If you believe your data protection rights have been violated, you may contact us first.

You also have the right to lodge a complaint with the supervisory authority in your country of residence, workplace, or the place of the alleged infringement.

16. Processor Relationships

If you use Neeblo as a business customer and provide personal data to Neeblo for processing, you may be responsible for determining the lawful basis and providing appropriate notices to the individuals concerned.

Where required, Neeblo may enter into a Data Processing Agreement ("DPA") with customers.

17. Children's Data

Our Services are not intended for children where use would violate applicable age restrictions.

We do not knowingly process children's personal data in violation of applicable law.

18. Changes

We may update this GDPR Privacy Notice periodically.

The latest version will be published through our Services.

19. Contact

For GDPR and privacy-related requests, contact Neeblo through our official website or the support channel associated with your account.

Neeblo

Website: https://www.neeblo.com

© 2026 Neeblo. All rights reserved.