Privacy policy

This policy covers two distinct situations:

• The neuron.mg website: data about people who visit it or write to us through the contact form. Neuron is the data controller.
• Client projects: data our clients entrust to us to design, build, train or maintain their solutions (AI, web, mobile, IoT). In this context Neuron acts as a data processor: the client remains the owner of its data and decides how it is used.

Neuron, a sole proprietorship operated by M'Crai Lahidama, with its head office at Antarandolo, Fianarantsoa, Madagascar.

Contact: contact@neuron.mg · +261 34 80 370 73

• Contact form: name, email address, message and, if you provide them, company, phone number, services of interest and timeline.
• Technical data: IP address, browser type and connection time, recorded in the hosting provider's logs to keep the site secure. Your IP address is also used temporarily, without being stored, to prevent abusive use of the form.

We do not collect any sensitive data and we do not carry out any profiling.

• Responding to your request and, where relevant, preparing a commercial proposal, based on your consent. Retention: 3 years after our last exchange.
• Site security and spam prevention, based on our legitimate interest. Log retention: 12 months maximum.

When you entrust data to us (customer databases, documents, support histories, training datasets, sensor readings, application user accounts), you remain its owner and controller. Neuron processes it only:

• to carry out the engagement defined in the signed contract or quote;
• according to your documented instructions;
• for as long as that engagement requires.

For projects involving personal data, we sign a data processing agreement with you that sets out the nature of the data, the purposes, the security measures and the authorised sub-processors.

• Everyone who works on your project is bound by a duty of confidentiality.
• Access is restricted to the team members who need it for the engagement.
• We can sign a non-disclosure agreement (NDA) from the very first conversation, at your request.
• We only mention a client or project in our references with its written consent.

• Encryption in transit (HTTPS/TLS) and, where the infrastructure allows, at rest.
• Named accounts, strong passwords and two-factor authentication on sensitive tools.
• Least privilege: everyone accesses only what they need.
• Separate environments (development, testing, production). Testing is done on anonymised or synthetic data wherever possible.
• No client data on unsecured personal devices.

AI projects call for particular care. Our commitments:

• Your data is used only for your project. It is never used to train models for other clients, nor for our own products.
• Models trained or fine-tuned on your data are dedicated to you.
• If a third-party AI service is used (language model, speech recognition…), we tell you which one before using it, and configure it so that it does not retain your data or use it for training, where the provider allows.
• We minimise data to what is strictly necessary and favour anonymisation or pseudonymisation before training.

The hosting location and technical providers (cloud, databases, AI services) are chosen together with you and listed in the data processing agreement. We do not add any new sub-processor with access to your data without informing you first.

If a data breach affects your project, we notify you within [72 hours] of becoming aware of it, with the information needed to assess the impact and, if necessary, notify the authorities and the people concerned.

At the end of the engagement, as you prefer:

• we return all of your data in a usable format;
• then delete it from our systems within [30 days], unless the law requires us to keep it.

Written confirmation of deletion is provided on request.

Some providers may be located outside Madagascar. In that case we make sure they offer an adequate level of protection (contractual commitments, recognised certifications). For client projects, such transfers are agreed with you beforehand.

Under Malagasy Law No. 2014-038 of 9 January 2015 on the protection of personal data and, for people located in the European Union, the GDPR, you have the right to access, rectify, erase, object to and restrict the processing of your data, and to withdraw your consent at any time.

Website visitors: write to us at contact@neuron.mg; we reply within one month.

People whose data is part of a client project: please contact the organisation concerned first, as it is the data controller. We help it respond to your request.

You may also lodge a complaint with the Malagasy data protection authority (CMIL).

This policy may change. The date of the last update is shown in the table of contents. Commitments specific to each client project are set out in its contract and data processing agreement, which prevail in case of difference. See also our terms of use.