Privacy policy

NeuroHelen Grow · Version dated 30 September 2026

This policy describes data processing when using neurohelengrow.com: signing in, preparing videos, connecting Instagram, making payments and contacting support. Direct data-processing questions to service support. Do not send passwords, access tokens or full card details.

The service operator and company responsible for personal data processing is YURII HRES TRADING L.L.C. SP (United Arab Emirates).

1. Data we process

Account: user identifier, email address, name received during authentication and sign-in session information.

Instagram: the connected professional account’s identifier and username, access token, information about its Reels and available publication metrics. Access depends on permissions granted by the user and Meta.

Materials: uploaded or imported videos, selected frames and covers, descriptions, titles, hashtags, processing settings, schedules and publication results.

Payments: selected package, amount, currency, order and payment identifiers, payment status, access period and number of generated variations.

Support: user messages, AI and specialist replies, request times and status, and the account name and email. Conversations are stored on the server and available to the user and an authorized support specialist. The necessary conversation history is sent to the AI to generate a reply.

Technical information: requests, errors and session-security information. Infrastructure providers may process IP addresses and browser information.

2. Why data is used

Data is needed for authentication, saving materials, preparing Reel variations, executing schedules, retrieving available statistics, managing payments and limits, support and service security. Depending on the purpose and applicable law, processing is based on performance of a contract, legal obligations or consent where required. Visiting this page does not itself constitute consent to all types of processing.

3. Sign-in and material storage

Google or email/password sign-in uses Google Firebase Authentication. The service receives authentication confirmation and user information to establish its own session. Google and Instagram passwords do not need to be provided to NeuroHelen Grow. For email registration, password data is processed by Firebase Authentication.

Account data, uploaded materials, generated variations, connections, schedules and package records are stored in the service’s server database and file storage. Video preparation and processing also run on the server. Firebase is used for authentication, not for storing user videos.

4. External services and shared data

Google / Firebase Authentication: authentication and related data. See the Firebase privacy information linked below.

OpenAI API: descriptions and instructions for generating titles, captions and hashtags, plus questions and relevant AI support conversation history. To identify the content of an uploaded video, selected frames and an extracted audio track are sent to OpenAI; recognized speech is used to describe the content. The complete video file is not sent for this purpose. Responses API requests disable response storage using the store parameter; this does not mean the provider keeps no technical logs.

Meta / Instagram: connected-account authorization, retrieval of its materials and metrics, and delivery of videos, covers and captions for publications chosen by the user. Instagram retrieves files using temporary signed links. Prepared Reels are published according to the user’s schedule.

YooKassa and Stripe: payment processing. YooKassa handles ruble payments and Stripe handles dollar payments. The service sends order information and receives payment confirmation. Full card numbers and security codes are entered on the payment provider’s page and are not stored in the NeuroHelen Grow database.

Resend: the recipient’s email address and a service notification about a specialist’s reply. The full conversation is not included. Email replies arrive in the corporate Namecheap Private Email mailbox and are not automatically added to the chat.

Telegram: specialist notifications about new support requests and a link to the private account area. These notifications do not include conversation text or the user’s email.

Server infrastructure: hosting the application, database and files, and processing requests necessary to run the service.

External providers apply their own processing and retention terms. Their infrastructure may be located in different countries; processing is not restricted exclusively to the Russian Federation. This policy does not confirm a specific storage location for every copy held by external providers.

5. Instagram disconnection and package expiry

Instagram is connected through its authorization page. You can disconnect the account in your account area: the saved connection token is deleted and publication tasks that have not started are canceled. A submission already accepted by Instagram may still complete. App access can also be revoked in Instagram settings.

Disconnecting Instagram does not automatically delete materials and statistics already saved in NeuroHelen Grow. Expiry of paid or free access blocks new variations and publications but retains the connection and materials. The service does not delete Reels already published on Instagram when an account is disconnected or a package expires.

6. Retention and protection

Account data access is checked against the user session. Instagram tokens are encrypted at rest. Payment secrets are used on the server and are not exposed to browsers. Administrative usage information is available to the service owner.

Materials are retained for account functionality until deleted by the user or through a deletion request. The entire account is not automatically deleted when a package expires. Service history of generated variations and results is stored separately: deleting a draft does not reset usage or automatically erase this history.

There is no single automatic retention period covering all technical logs and backups. Deletion requests separately consider materials, connections, service history and information that must be retained for mandatory obligations or payment disputes. The procedure and outcome are clarified when the request is reviewed; immediate deletion of every copy is not promised.

7. Statistics and advertising use

The service records the number of prepared and published variations and available Instagram metrics. Purchasing a package alone does not authorize advertising use of a user’s name, videos, account, review or identifiable story. Such use requires a separate basis and consent where necessary.

8. Rights and data deletion

Through support, you can request processing information, correction or deletion, or withdraw consent for processing based on consent. Proof of account ownership may be required to protect against unauthorized requests. The AI assistant does not delete data or confirm completion: issues requiring human involvement are passed to a specialist in the same chat automatically or through the specialist-request button. See Data deletion for the procedure.

9. Cookies and browser settings

Service cookies are used for sign-in and secure Instagram connection. Firebase authentication settings, the selected language and selected Instagram account are stored in the browser. Disabling or clearing this storage may require signing in again and selecting settings again.