Privacy Policy

How 3D Geodata Academy handles personal data on neurones3d.com, in the Neurones 3D application, and when you buy a licence.

Draft prepared for review; please have legal counsel confirm before publication.

Last updated: 11 September 2026

1.Who is responsible for your data

The data controller for the personal data described in this policy is:

3D Geodata Academy operates the website neurones3d.com and publishes the Neurones 3D desktop application. The company also operates the website learngeodata.eu, whose own privacy policy covers its courses. If you have any question about this policy or about how your data is handled, contact us at the address above.

2.What data we collect and how

We keep data collection to the strict minimum needed to run the download service, the launch list, the feedback form and, once they open, sales. Specifically:

Data you give us through the download form or the launch list

• First name, so we can address you personally.
• Email address, so we can send you the download link and, if you asked for the download, a short series of getting-started emails and 3D Geodata Academy's weekly newsletter; or, if you joined the launch list, a message when licences go on sale and nothing else.

These are the only fields on those forms, and you provide them voluntarily. Both use double opt-in: you confirm your email by clicking a link in a confirmation message before we add you to any list. An unconfirmed request expires after 72 hours.

Data you give us through the feedback form

Your message and the optional details the form offers (the kind of request, the area of the program, how much it matters to you) and, only if you enter it, an email address. The message is emailed to us and kept in a file on our server so we can read feedback together. The email address is used to reply to that message and for nothing else: it is not added to any list.

Data we need when you buy a licence

When the store is open: your name, email address, billing address and country, your VAT number if you buy as a business, the edition you bought, the order and invoice, and the licence key issued to you. The key carries your name and email address, and the application shows them, so that a key stays tied to the person who bought it. We also keep the record of what you accepted at checkout, including your consent to immediate delivery. Payment card details are collected by the payment provider; we never see or store them.

Technical data from the website

Like any website, our hosting infrastructure automatically records limited technical information when you visit, such as your IP address, the date and time of the request, and basic request metadata. This is used only to keep the service running, to protect it against abuse, and to apply rate limiting. It is not combined with the form data to build a profile of you.

Data the application collects

None. The Neurones 3D desktop application contains no telemetry, no analytics, no account system, and no cloud connection. It runs entirely on your own computer and works fully offline. Paid features are unlocked by an offline licence key that is checked on your machine; there is no activation server and no call to us when you use a key. The 3D files you open in the application stay on your machine and are never transmitted to us.

3.Why we process it, and our legal bases

Under Article 6 of the General Data Protection Regulation (GDPR), we rely on the following legal bases:

• Consent (Article 6(1)(a)): to send you the download link with a short series of getting-started emails and 3D Geodata Academy's weekly newsletter (download form), or to tell you when licences go on sale (launch list, nothing else). You give this consent through the double opt-in sign-up, and you can withdraw it at any time, without affecting the lawfulness of processing carried out before withdrawal.
• Contract (Article 6(1)(b)): to take your order, deliver your licence key and answer questions about your purchase.
• Legal obligation (Article 6(1)(c)): to issue and keep invoices and the record of the contract, as French commercial, tax and consumer law require.
• Legitimate interest (Article 6(1)(f)): to keep the website secure, to prevent abuse and fraud, and to apply rate limiting, using the limited technical logs described above; and to read and answer the feedback you send us, which is how the program is improved. Our legitimate interest is running a safe and reliable service and a better program, balanced against your rights and freedoms.

4.Email delivery and sub-processors

We rely on a small number of service providers (sub-processors) who process personal data on our behalf and under our instructions, each under a data processing agreement that meets Article 28 of the GDPR:

• Resend (Resend, Inc., United States) delivers the emails of the download service and the launch list, including the double opt-in confirmation and the download link, and holds the list of confirmed contacts, with the launch list kept as its own segment. It processes your first name and email address only to send those messages. Every message carries a one-click unsubscribe link. More information: resend.com/security/gdpr.
• Website hosting is provided by Hostinger International Limited, 61 Lordou Vironos Street, 6023 Larnaca, Cyprus, which processes the technical request data described in section 2 in order to serve the website, and stores the feedback file.
• Checkout and payment, once the store is open: SureCart runs the order flow and the customer record, and Stripe (Stripe Payments Europe Ltd, Ireland), or PayPal where it is offered, processes the payment.

We do not sell your personal data, and we do not share it with third parties for their own marketing.

5.How long we keep data

• First name and email address (download and launch list): kept for as long as you remain subscribed, and at most three years after your last interaction with our emails. When you unsubscribe or ask us to delete your data, we remove it from our active lists promptly, retaining at most a minimal suppression record so that we do not email you again by mistake.
• Feedback messages: three years from our last exchange about them.
• Orders, invoices and accounting records: ten years, as article L123-22 of the French Commercial Code requires; the record of the contract and of the consent you gave at checkout, ten years (article L213-1 of the Code de la consommation).
• Technical security logs: kept for a limited period for security and anti-abuse purposes, then deleted or anonymized: 12 months.

6.Your rights under the GDPR

If you are in the European Union or the European Economic Area, you have the following rights over your personal data:

• Access: obtain confirmation of whether we process your data and a copy of it.
• Rectification: have inaccurate or incomplete data corrected.
• Erasure: have your data deleted, in the cases provided by law.
• Restriction: ask us to limit how we use your data in certain circumstances.
• Portability: receive the data you provided in a structured, commonly used, machine-readable format.
• Objection: object to processing based on our legitimate interest.
• Withdraw consent: withdraw your consent to marketing emails at any time, for example by using the unsubscribe link in any message or by contacting us.
• Directives after death: set out what should happen to your data after your death (article 85 of the French Loi Informatique et Libertés).

To exercise any of these rights, contact us at howto@learngeodata.eu. We will respond within the timeframe set by the GDPR (in principle one month).

You also have the right to lodge a complaint with a supervisory authority. In France, this is the Commission Nationale de l'Informatique et des Libertés (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07: cnil.fr. You can also contact the authority of the EU country where you live.

7.International data transfers

Our website host is established in the European Union (Cyprus). Some other providers process personal data in the United States:

• Resend processes and stores contact data in the United States. The region an email is sent from does not change where that data is kept. The transfer is covered by the Standard Contractual Clauses in Resend's data processing agreement and by its certification under the EU-U.S. Data Privacy Framework.
• SureCart and the payment providers may process order and payment data in the European Union and the United States, under the Standard Contractual Clauses or the EU-U.S. Data Privacy Framework.

For details about a specific provider's transfer arrangements, or a copy of the relevant clauses, contact us at howto@learngeodata.eu.

8.Cookies and tracking

This website uses no advertising trackers, no analytics scripts and no third-party cookies. We do not track you across sites and we do not build advertising profiles. The videos on this site are self-hosted, so playing one contacts no other company.

The site stores only what a feature you use needs in order to work. These items are strictly necessary, so they do not require consent, but we list them so you know exactly what is kept:

• n3d_board (cookie, HttpOnly, SameSite=Lax, kept for 12 months). A random token set by the public board at /roadmap.html when the board loads, so that one browser counts as one vote. It contains no personal data and is not linked to your name or email address.
• n3d-feedback-draft (your browser's local storage). A draft of the message you are typing into the feedback form, so that a refresh does not lose it. It never leaves your browser until you press send, and it is removed once the message is sent.
• n3d_consent (your browser's local storage, kept for six months). Your choice in the cookie settings, so we do not ask again on every page.

The cookie settings, reachable from Cookie settings in the footer of every page, also list two optional categories, Analytics and Media. Neither is in use today. If either is ever introduced, it will stay off until you switch it on there. If your browser sends a Global Privacy Control signal, we treat it as a refusal of every optional category.

You can delete these items at any time from your browser's settings. Deleting n3d_board simply means the board counts your next vote as a new voter's.

9.Security

We apply reasonable technical and organizational measures appropriate to the limited data we handle, including:

• data minimization: we collect only a first name and an email address through the sign-up forms, and nothing through the application;
• double opt-in confirmation, which reduces the risk of unwanted or fraudulent sign-ups;
• encrypted connections (HTTPS) for the website;
• no exposure of licence signing keys, which stay under our sole control;
• reliance on established providers for email delivery, hosting and payment.

No method of transmission or storage is perfectly secure, but we work to protect your data against unauthorized access, loss, or misuse.

10.Children

Neurones 3D and this website are aimed at professionals, researchers and adult learners. They are not directed at children, and we do not knowingly collect personal data from anyone under the age of 16. If you believe a child has provided us with personal data, contact us at howto@learngeodata.eu and we will delete it.

11.Changes to this policy

We may update this policy from time to time, for example to reflect changes in our practices or in the law. When we do, we will revise the "Last updated" date at the top of this page. For significant changes affecting how we use your personal data, we will take reasonable steps to inform you. Please review this page periodically.