Effective Date
May 11, 2026
Last Updated
May 11, 2026
Quick Reference: What We Do NOT Collect
Before the full policy, this summary addresses the most common privacy question for a developer-tools company:
Power Claude does NOT collect, transmit, store, or process any of the following:
- Your Claude prompts or instructions sent to Claude
- Claude's responses or outputs
- Claude session transcripts or conversation history
- Anthropic API keys stored in your environment
- Source code files open in your editor or project workspace
- Terminal output from Claude Code commands
- Any content generated by or provided to Anthropic's Claude models
The Power Claude extension runs locally on your machine. Its core function — managing account rotation and rate-limit recovery — operates without transmitting your Claude conversation content to Neural-LLM's servers.
1. Who We Are
Neural-LLM ("Neural-LLM," "we," "our," or "us") is the controller of personal data collected through our website at https://neural-llm.com (the "Site"), the Power Claude subscription service (the "Service"), and the Power Claude VS Code extension (the "Extension"), collectively the "Products."
For GDPR and UK GDPR purposes, Neural-LLM is the data controller.
Data Protection Officer / Privacy Contact: Privacy Team (no DPO appointed at launch) Email: State of Utah, USA
2. Information We Collect
2.1 Account Information
When you register for an account, we collect:
- Email address — used for login, license delivery, subscription notices, and transactional communications
- Name (optional at registration; may be required for billing)
- Password (stored in hashed form — we do not have access to your plaintext password)
2.2 Billing Information
All payment transactions are processed by our third-party billing processor (see Section 6). We receive and store:
- Billing name and address — for invoice generation and tax compliance
- Last 4 digits of payment card and card type (not full card number — this stays with the processor)
- Subscription tier and billing history — to maintain your account and entitlements
- Transaction IDs — for support and dispute resolution
We do not store full credit card numbers, CVV codes, or full bank account numbers.
2.3 License Validation Telemetry
When the Extension validates its license key against our servers, we collect:
- License key hash (one-way hash of your key — not the key itself)
- Timestamp of the validation event
- IP address of the machine performing validation
- User-agent string of the Extension version
- Machine fingerprint (a non-personally-identifiable hardware/OS hash used to enforce per-seat limits — see Section 6.4)
License validation telemetry is the only data that travels from your local installation to our servers during normal Extension use.
2.4 Website and Site Analytics
When you visit the Site, we may collect:
- IP address (may be truncated or anonymized depending on analytics configuration)
- Browser type and version
- Operating system
- Referring URL
- Pages visited and duration
- Click events (where analytics is enabled)
We use None at launch for site analytics (e.g., Plausible Analytics, Fathom, or a self-hosted solution). Our default configuration is to use privacy-preserving, cookieless analytics where technically feasible. If we deploy a cookie-based analytics solution, we will obtain prior consent as described in Section 4.
2.5 Support Communications
If you contact our support team, we collect:
- The content of your message
- Any diagnostic information you voluntarily provide (e.g., extension version, OS)
- Your email address
We will never ask you to share Claude conversation content in a support ticket. Do not include such content.
2.6 Information We Do Not Collect
To repeat and expand the Quick Reference:
| Category | Collected? | |---|---| | Claude prompts / instructions | No | | Claude model outputs / responses | No | | Claude session transcripts | No | | Anthropic API keys | No | | Source code in your editor | No | | Terminal output | No | | Keystrokes | No | | Screen recordings or screenshots | No | | Microphone or camera data | No | | Location data beyond IP-level | No |
3. How We Use Your Information
We use collected information for the following purposes:
| Purpose | Legal Basis (GDPR) | Data Used | |---|---|---| | Providing and operating the Products | Contract performance (Art. 6(1)(b)) | Account info, billing info, license validation | | Processing payments and billing | Contract performance / Legal obligation (Art. 6(1)(b), (c)) | Billing info | | License-key issuance and per-seat enforcement | Contract performance (Art. 6(1)(b)) | License hash, machine fingerprint | | Sending transactional emails (receipts, renewal notices, security alerts) | Contract performance / Legitimate interests (Art. 6(1)(b), (f)) | Email address | | Providing customer support | Legitimate interests (Art. 6(1)(f)) | Support communications | | Site analytics and product improvement | Legitimate interests / Consent (Art. 6(1)(f) or (a)) | Analytics data | | Legal compliance and fraud prevention | Legal obligation / Legitimate interests (Art. 6(1)(c), (f)) | Account info, IP, billing | | Marketing communications (opt-in only) | Consent (Art. 6(1)(a)) | Email address |
We will not use your information for any purpose incompatible with the purpose for which it was collected, unless we obtain your consent or are required to do so by law.
4. Cookies and Tracking Technologies
4.1 Essential Cookies
We use cookies that are strictly necessary to operate the Site, maintain your login session, and provide the Service. These cookies cannot be disabled without preventing the Site from functioning. No consent is required for essential cookies.
4.2 Analytics Cookies (Opt-In)
If we use cookie-based analytics (beyond our default cookieless analytics), we will:
- Display a cookie consent banner on your first visit;
- Obtain your affirmative consent before setting analytics cookies;
- Provide a mechanism to withdraw consent at any time.
4.3 Marketing Cookies (Opt-In)
We do not use third-party advertising cookies by default. If we ever deploy marketing or retargeting cookies, we will obtain explicit prior consent.
4.4 Cookie Management
You can control cookies through your browser settings. Instructions for common browsers:
- Chrome:
chrome://settings/cookies - Firefox:
about:preferences#privacy - Safari: Preferences > Privacy
Note that disabling essential cookies may impair Site functionality.
5. Data Retention
| Data Category | Retention Period | |---|---| | Account information | Duration of account + 3 years after closure (for dispute resolution and legal compliance) | | Billing records and invoices | 7 years from transaction date (tax and accounting requirements) | | License validation logs | 90 days rolling window | | Site analytics data | 13 months (aggregated/anonymized thereafter) | | Support communications | 3 years from ticket close | | Marketing consent records | Duration of consent + 3 years (for proof of consent) |
Upon account closure, we will delete or anonymize personal data within 30 days, except where retention is required by applicable law or legitimate business purposes listed above.
6. Third-Party Service Providers
We share data with the following categories of processors, each bound by a data processing agreement or equivalent:
6.1 Billing Processor
Authorize.Net (a payment-gateway service operated by Visa USA Inc.), accessed via Neural-LLM's e-commerce platform
- Data shared: Full billing information (cardholder name, billing address, card token), email address, subscription details
- Purpose: Payment processing, recurring-billing token storage, fraud prevention (AVS / CVV2 / Advanced Fraud Detection Suite)
- Privacy policy: https://www.authorize.net/about-us/privacy/
- Transfers: US-only processing (Authorize.Net is a US entity); no EU-US transfer mechanism required for non-EU customers. EU customers' data is governed by Standard Contractual Clauses through the our e-commerce platform merchant agreement.
6.2 Commerce Platform
Our e-commerce platform
- Data shared: Order information, account email, billing address, subscription state
- Purpose: Order management, subscription lifecycle, license-key issuance + storage on our e-commerce platform order custom fields, recurring-billing orchestration
- Role: Sub-processor under Neural-LLM's data controller responsibility. our e-commerce platform runs entirely inside Neural-LLM's own our platform instance; no third-party our e-commerce platform SaaS is involved.
6.3 Cloud Infrastructure / Hosting
Self-hosted (e.g., AWS, DigitalOcean, Hetzner)
- Data shared: All data stored on our servers
- Purpose: Data storage, hosting, infrastructure
- Transfers: None — data resides on Neural-LLM-controlled servers in the United States
6.4 License Validation Service
Neural-LLM operates its own license validation endpoint. The machine fingerprint used for per-seat enforcement is computed locally using a combination of hardware identifiers and is hashed before transmission. The fingerprint is not reversible to any personally identifiable information.
6.5 Email Service Provider
To be selected before launch (e.g., Postmark, SendGrid)
- Data shared: Email address, name (if available), email content
- Purpose: Transactional emails, renewal notices, security alerts
- Transfers: To be documented once an email provider is selected
6.6 Anthropic, PBC
We do not share your Claude conversation content or Anthropic API keys with Anthropic on your behalf. Anthropic receives data directly from you when you use your Anthropic account. Neural-LLM is not a sub-processor of Anthropic's data. Any data Anthropic holds about you is governed by Anthropic's own privacy policy.
Power Claude is an independent tool. It does not act as a conduit for your data to flow to Anthropic.
6.7 No Sale of Data
We do not sell personal data to third parties for their own marketing purposes. This applies universally, including for California residents under CCPA / CPRA.
7. International Data Transfers
Neural-LLM is a sole proprietorship operating from the State of Utah, United States, and operates servers in the United States. If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, your personal data may be transferred to countries that do not provide the same level of data protection as your home country.
For such transfers, Neural-LLM relies on one or more of the following mechanisms:
- Standard Contractual Clauses (SCCs) approved by the European Commission (for EEA-to-third-country transfers)
- UK International Data Transfer Agreements (IDTAs) (for UK transfers)
- Adequacy decisions where applicable
A copy of the applicable transfer mechanism can be requested at
8. Your Rights
8.1 GDPR Rights (EEA and UK Residents)
If you are located in the EEA or UK, you have the following rights under the GDPR / UK GDPR:
| Right | Description | |---|---| | Access | Receive a copy of personal data we hold about you | | Rectification | Correct inaccurate or incomplete data | | Erasure ("Right to be Forgotten") | Request deletion of your personal data, subject to legal retention obligations | | Restriction | Ask us to restrict processing of your data in certain circumstances | | Portability | Receive your data in a structured, machine-readable format | | Objection | Object to processing based on legitimate interests or for direct marketing | | Withdraw Consent | Withdraw consent at any time for consent-based processing | | Automated Decision-Making | Not be subject to solely automated decisions with significant effects (we do not currently use such decision-making) |
To exercise these rights, contact
Supervisory Authority: You have the right to lodge a complaint with your local data protection authority. For EEA residents, a list of authorities is at https://edpb.europa.eu/about-edpb/board/members_en. For UK residents: the ICO at https://ico.org.uk/.
8.2 CCPA / CPRA Rights (California Residents)
If you are a California resident, you have the following rights under the California Consumer Privacy Act (as amended by CPRA):
| Right | Description | |---|---| | Know | Know what categories and specific pieces of personal information we collect, use, disclose, and sell | | Delete | Request deletion of your personal information | | Correct | Request correction of inaccurate personal information | | Opt-Out of Sale/Sharing | Opt out of the sale or sharing of personal information (we do not sell or share for cross-context behavioral advertising) | | Limit Use of Sensitive PI | Limit use and disclosure of sensitive personal information to specified purposes | | Non-Discrimination | Not receive discriminatory treatment for exercising your CCPA rights |
Categories of personal information collected: Identifiers (name, email, IP), commercial information (billing/subscription records), internet/network activity (license validation logs, analytics). No sensitive personal information as defined under CPRA is collected.
Do Not Sell or Share: Neural-LLM does not sell or share personal information as defined under CCPA/CPRA.
To exercise CCPA rights, contact https://neural-llm.com/privacy-request. We will respond within 45 days (extendable by 45 additional days with notice).
Authorized Agent: California residents may designate an authorized agent to submit requests. We may require written proof of authorization.
9. Children's Privacy
The Products are not directed to, and we do not knowingly collect personal data from, children under 16 years of age (or the applicable minimum age in your jurisdiction). If you are under 16, do not use the Products. If we become aware that we have collected personal data from a child under 16 without verifiable parental consent, we will delete it promptly.
If you believe we may have inadvertently collected information from a child, please contact
COPPA Notice (US): The Products are not directed to children under 13 as defined under the Children's Online Privacy Protection Act (COPPA). We do not knowingly collect personal information from children under 13.
10. Security
We implement the following measures to protect your personal data:
- Encryption in transit: All data transmitted between your browser/extension and our servers uses TLS 1.2 or higher.
- Encryption at rest: Personal data stored on our servers is encrypted at rest using AES-256 or equivalent.
- Access controls: Access to personal data is restricted to employees and contractors with a legitimate business need, governed by role-based access controls.
- Password hashing: Account passwords are stored using a strong, salted hashing algorithm (e.g., bcrypt or Argon2).
- License key handling: License keys are never stored in plaintext on our servers; only one-way hashes are retained.
Breach Notification: In the event of a personal data breach that is likely to result in high risk to your rights and freedoms, we will:
- Notify affected users without undue delay and within 72 hours of becoming aware (where technically feasible);
- Report to the relevant supervisory authority as required by GDPR Article 33; and
- Provide clear information about the nature of the breach, categories of data affected, and steps being taken.
No security system is perfect. We cannot guarantee absolute security of your data. You are responsible for maintaining the security of your account credentials.
11. Marketing Communications
We may send you marketing emails if you have opted in during account registration or subscription. You can unsubscribe at any time by:
- Clicking the "Unsubscribe" link in any marketing email; or
- Contacting
This email address is being protected from spambots. You need JavaScript enabled to view it.
Unsubscribing from marketing emails will not prevent us from sending transactional emails (receipts, renewal notices, security alerts), which are necessary for the Service.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by:
- Posting the updated policy on the Site with the revised "Last Updated" date; and
- Sending an email to your registered address at least 14 days before changes affecting your rights become effective.
Your continued use of the Products after the effective date constitutes acceptance of the revised policy. If you do not agree, you should delete your account before the effective date.
13. Contact
For any privacy-related questions, requests, or complaints:
Neural-LLM Privacy Team (no DPO appointed at launch) Email: State of Utah, USA
For GDPR-related inquiries by EU residents, our EU representative (if applicable) is: No EU representative has been appointed (Neural-LLM does not currently target EU residents). EU residents may contact
For GDPR-related inquiries by UK residents, our UK representative (if applicable) is: No UK representative has been appointed (Neural-LLM does not currently target UK residents). UK residents may contact
Cross-referenced in: Terms of Service § 7, EULA § 5, Acceptable Use Policy