The short version
If you browse newrali.com, we collect almost nothing: our hosting provider sees the usual request details, and that’s it. If you use the Newrali platform, we hold your account details and the content your workspace puts into it, and we use them to run the service you signed up for. We don’t sell them, share them for advertising, or train AI models on them. The intelligence your team puts into a workspace belongs to your organisation: they decide what goes in and why, and we process it only on their instructions.
Who we are
Newrali is made and run by Yunison Technologies LLC (“Newrali”, “we”, “us”). This policy covers two things:
- newrali.com, this website;
- Newrali Cloud, the hosted Newrali platform at app.newrali.com.
It doesn’t cover Newrali installed on a customer’s own infrastructure. There, the customer runs the software, and we receive none of the data in it except what they choose to send us for support. The International Missing Person Hackathon website has its own policy.
Two kinds of data, two roles
Some data is about you: your account, your billing, your visit to this site. For that, we decide how it’s handled, and this policy is the whole story.
The rest is what a workspace puts into the platform: sources, documents, notes, and the people, places and events an investigation is about. That belongs to the organisation that runs the workspace. They decide what goes in and why, and we store and process it only on their instructions, as their processor. If you have a question about information held about you inside an organisation’s workspace, that organisation is the right first contact. We’ll help them answer.
Browsing newrali.com
Our hosting provider, Cloudflare, sees your IP address and basic request details, such as your browser type and the pages you ask for, and uses them to serve the site and block abuse. We use no tracking cookies, no analytics that identify you, and no ad tech.
The site remembers two things in your browser only: your light or dark theme, and whether you dismissed the announcement at the top. They never leave your device.
The homepage shows how many people are in our Discord community. To fetch that number your browser asks Discord directly, so Discord sees your IP address, as it would on any page that embeds its content.
Links to our Discord, to the calendar where you book a briefing, and to the platform take you to services with their own policies.
Using Newrali Cloud
Your account. Your email address, your name, and a password, which we store only as a hash. If you turn on two-factor authentication or add a passkey, we store what’s needed to check it: the authenticator secret and backup codes, or the passkey’s public key. The passkey’s private key stays on your device. We record your sign-ins and sessions to keep the account secure.
Your workspace. Which workspaces and teams you belong to, your role in each, and the invitations you send, which hold the invitee’s email address.
Your work in the platform. What you do in a workspace is written to that workspace’s audit trail: who changed what, and when. The trail belongs to the workspace and is visible to its administrators. It’s how a team stands behind its findings.
Billing. If your workspace subscribes, payment runs through Stripe. Your card details go to Stripe, never to us. We keep your Stripe customer reference, your plan and your invoices.
Email we send. Sign-in and account security messages, invitations to workspaces, and notifications from your workspace, such as a colleague mentioning you. These are operational messages about your account and your work. We don’t run a marketing list.
Logs. The platform writes application and access logs, including IP addresses, to run the service, investigate problems and defend against abuse. We don’t retain them: they’re kept only for as long as they’re in use and aren’t archived.
AI assistance. The platform’s entity recognition and other analysis run inside the platform itself. We don’t send your content to any outside AI provider, and we don’t train models on it. Self-hosted deployments can connect a model of their operator’s choosing; what it sees is their decision.
Who we share it with
We use these providers to run the service. Each processes data only on our behalf, under terms that stop them using it for their own purposes:
- Cloudflare serves this website and carries the connection between your browser and the platform.
- Vultr runs the server Newrali Cloud lives on, in Europe, and stores the files your workspace uploads and our encrypted database backups.
- Resend sends the emails described above.
- Stripe handles payments.
We don’t sell personal data and we don’t share it with advertisers. We’d disclose it outside this list only if we were legally required to.
How long we keep it
Your account stays until you ask us to delete it, or your workspace administrator removes you. Deleting a workspace removes what it held.
Workspace content stays as long as the workspace does. When a subscription ends or a workspace is deleted, we remove its content from our systems within 30 days, and from backups as they rotate out over the following weeks. Before that, the workspace can export everything it holds.
Logs aren’t retained, as described above. Billing records are kept for as long as tax and accounting law requires.
Your rights
You can ask to see, correct, export or delete the personal data we hold about you, or object to how we use it, at any time. Email privacy@newrali.com. We’ll respond within 30 days. If your request concerns content inside an organisation’s workspace, we’ll pass it to that organisation and help them answer. You can also complain to your local data protection authority.
Where your data lives
Newrali Cloud runs on a server in Europe. Some of our providers may process data in other countries, including the United States. When data crosses borders, we rely on recognised safeguards such as the EU Standard Contractual Clauses. If your data has to stay in a particular country, Newrali also runs on your own infrastructure.
Security
Connections to the platform are encrypted in transit. Passwords are stored as hashes, and passkeys and two-factor authentication are available to every account. Inside the platform, every request is checked against a central authorisation policy, and changes to a workspace’s record are audited. Database backups are encrypted before they leave the server. Our security posture sets this out in detail, including what is still ahead. If a breach affects your data, we’ll tell you, and the organisation that runs your workspace, without undue delay.
Children
Newrali is built for professional use. You must be 18 or over to hold an account. If we learn that a child has created one, we’ll delete it.
Changes
If we change what we collect or how we use it, we’ll update this page before the change takes effect and tell account holders by email.