Privacy Policy for Neat

Last updated: August 25, 2026

1. Introduction

   Neat (“we,” “us,” or “our”) is committed to respecting and protecting the privacy of our users (“you” or “your”). This Privacy Policy describes how we collect, use, disclose, and safeguard your personal information when you use Neat, our visual discovery and inspiration platform accessible via web and mobile applications.

   To the extent permitted by local law, by accessing or using Neat, you acknowledge that you have read and understood the terms of this Privacy Policy.

2. Information We Collect

   We collect the following categories of information:

   • Account and Profile Information
     • Name, email address, username, password, and profile photo.
     • Demographic details you choose to provide (e.g., country of residence, interests).
   • Content and Activity Data
     • Content you upload, save, or share (e.g., images, boards, comments, likes).
     • Information about your interactions with the app, such as searches, follows, and engagement with content.
   • Device and Technical Data
     • Device identifiers, operating system, browser type, IP address, and app version.
     • Log data, including timestamps, usage statistics, and crash reports.

   Cookies and tracking technologies. We use cookies, web beacons, and similar technologies to analyze usage, remember preferences, and enhance functionality.

   Data about others. Please do not share personal data about others, whether as part of your content or referrals, unless you have their permission to do so.

3. How We Use Your Information

   We process your information for the following purposes:

   • To operate, maintain, and improve Neat and its features.
   • To personalize your experience.
   • To communicate with you about updates, security alerts, and support inquiries.
   • To analyze usage trends and develop new features.
   • To display relevant advertisements and sponsored content, and send marketing communications, where applicable.
   • To enforce our Terms of Service and protect the integrity and security of our platform.

4. Sharing and Disclosure of Information

   We may share your information in these circumstances:

   With Other Users

   Content you post (e.g., images, boards, comments) may be visible to other users, subject to your privacy settings.

   With Service Providers

   We engage trusted third-party vendors to support operations (e.g., hosting, analytics, customer support), who process data on our behalf under strict confidentiality agreements.

   For Legal and Compliance Purposes

   We may disclose information to comply with legal obligations, respond to lawful requests, protect our rights or the rights of others, or prevent fraud and abuse.

   With Advertisers and Partners

   We do not sell your personal information for money. Like many online services, we may share Device and Technical Data (described in Section 2) with third-party advertisers, analytics providers, and business partners for research and marketing purposes. Most of this activity happens through online cookies and trackers, which you can manage and delete; visit https://www.allaboutcookies.org for more information. You can opt out by contacting us at legal@neatinspo.com or clicking the unsubscribe link at the bottom of marketing emails.

   In the Context of a Corporate Transaction

   We may disclose personal information in the context of actual or prospective business transactions (e.g., investments in or financing of our company, public stock offerings, the sale, transfer or merger of all or part of our business, assets or shares, liquidation or reorganization). Following any completed transaction, the respective company (as applicable) may continue to process your personal information as our affiliate as permitted by applicable law.

5. International Data Transfers

   Your information may be processed and stored in the United States or other countries outside your home jurisdiction. Where data is transferred internationally, we implement safeguards such as Standard Contractual Clauses or rely on adequacy decisions in accordance and to the extent required by applicable law.

6. Data Retention

   We retain your personal information only as long as reasonably necessary to fulfill the purposes described in this policy, comply with legal obligations, resolve disputes, and enforce our agreements. To determine the appropriate retention period for personal information, we consider the amount, nature and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure of your personal information, the purposes for which we process your personal information and whether we can achieve those purposes through other means, and the applicable legal requirements. You may request deletion of your account and associated data at any time (see Section 8). When we no longer have a business need to process your personal information, we may deidentify, aggregate, or delete it.

7. Security

   We employ technical and organizational measures designed to protect your information against unauthorized access, loss, misuse, or alteration. However, no system is completely secure; please notify us immediately if you believe your account has been compromised.

8. Your Rights and Choices

   Depending on your jurisdiction, you may have the following rights:

   • Access, correct, or delete your personal information.
   • Withdraw consent for processing, where applicable.
   • Restrict or object to certain processing activities.
   • Data portability (receive a copy of your data in a structured format).
   • Withdraw consent.
   • Lodge a complaint with a supervisory authority.
     • For users in the European Economic Area – the contact information for the data protection regulator in your place of residence can be found here: https://edpb.europa.eu/about-edpb/board/members_en
     • For users in the UK – the contact information for the UK data protection regulator is below:
       The Information Commissioner’s Office
       Water Lane, Wycliffe House
       Wilmslow - Cheshire SK9 5AF
       Tel. +44 303 123 1113
       Website: https://ico.org.uk/make-a-complaint/

   To exercise these rights, please contact us at legal@neatinspo.com. We will respond in accordance with applicable law.

   Under California’s Shine the Light law (California Civil Code Section 1798.83), you may have the right to opt out of our disclosure of your personal information (as defined by this law) to third parties for their direct marketing purposes. You may send us requests to legal@neatinspo.com. In your request, you must include the statement “Shine the Light Request,” and provide your first and last name and mailing address and certify that you are a California resident. We reserve the right to require additional information to confirm your identity and California residency.

   Some Internet browsers may be configured to send “Do Not Track” signals to the online services that you visit. We currently do not respond to “Do Not Track” signals. To find out more about “Do Not Track,” please visit http://www.allaboutdnt.com.

9. Children’s Privacy

   Neat is not intended for children under 18, and we do not knowingly collect personal information from children. If we learn that someone under 18 has provided us with personal data, we will take steps to delete such information promptly.

10. Changes to This Privacy Policy

    We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will notify you of material changes by posting the updated policy within the app and updating the “Last updated” date. Your continued use of Neat after such changes constitutes acceptance.

11. Contact Us

    If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us at legal@neatinspo.com.

12. Additional Notice to European Users

    Where this Notice to European users applies. The information provided in this “Notice to European users” section applies only to individuals in the United Kingdom and the European Economic Area (i.e., “Europe” as defined at the top of this Privacy Policy). It also should be read to apply to users from other jurisdictions with privacy laws that apply to use and are consistent with the rights and obligations described below.

    Controller. Neat is the controller in respect of the processing of your personal information covered by this Privacy Policy.

    Legal Bases. With respect to each of the purposes for which we use your personal information, the GDPR requires us to ensure that we have a “legal basis” for that use. Our legal bases for processing your personal information described in this Privacy Policy are listed below.

    • Where we need to perform a contract, we are about to enter into or have entered into with you (“Contractual Necessity”).
    • Where it is necessary for our legitimate interests and your interests and fundamental rights do not override those interests (“Legitimate Interests”). More detail about the specific legitimate interests pursued in respect of each Purpose we use your personal information for is set out in the table below.
    • Where we need to comply with a legal or regulatory obligation (“Compliance with Law”).
    • Where we have your specific consent to carry out the processing for the Purpose in question (“Consent”).

    We have set forth in the below table the legal bases we rely on with respect to the relevant purposes for which we use your personal information.

    Purpose	Categories of personal information involved	Legal basis
    Service delivery and operations	Account & Profile Data Content & Activity Data Device & Technical Data	Contractual Necessity
    Security	Account & Profile Data Content & Activity Data Device & Technical Data	Compliance with Law Legitimate Interests. We have a legitimate interest in ensuring the ongoing security and proper operation of our Service and associated IT services, systems, and networks.
    Service improvement and analytics	Account & Profile Data Content & Activity Data Device & Technical Data	Legitimate Interests. We have a legitimate interest in providing you with a good service, which is personalised to you and that remembers your selections and preferences. Consent, in respect of any optional cookies used for this purpose.
    Direct marketing	Account & Profile Data Content & Activity Data Device & Technical Data	Legitimate Interests. We have a legitimate interest in promoting our operations and goals as an organisation and sending marketing communications for that purpose. Consent, in circumstances or in jurisdictions where consent is required under applicable data protection laws to the sending of any given marketing communications.
    Interest-based advertising	Account & Profile Data Content & Activity Data Device & Technical Data	Consent
    Events, promotions and contests	Account & Profile Data Content & Activity Data Device & Technical Data	Contractual Necessity to administer the promotions and contests in accordance with the terms or rules thereof (including communicating with you as and where necessary) In respect of promoting these promotions and contests: Legitimate Interests – we have a legitimate interest in promoting these promotions and contests, including associated publicising of our business and operations. Consent – in circumstances or in jurisdictions where consent is required under applicable data protection laws to the sending of any given promotional communications.
    Newsletter and communications	Account & Profile Data Content & Activity Data Device & Technical Data	Legitimate Interests. We have a legitimate interest in promoting our operations and goals as an organisation, including sending through our newsletter and other communications. Consent, in circumstances or in jurisdictions where consent is required under applicable data protection laws to the sending of any given communications, including our newsletter.
    Compliance and protection	Account & Profile Data Content & Activity Data Device & Technical Data	Compliance with Law. Legitimate interest. Where Compliance with Law is not applicable, we and any relevant third parties have a legitimate interest in participating in, supporting, and following legal process and requests, including through co-operation with authorities. We and any relevant third parties may also have a legitimate interest of ensuring the protection, maintenance, and enforcement of our and their rights, property, and/or safety.
    Research and development. To create aggregated, de-identified and/or anonymized data	Account & Profile Data Content & Activity Data Device & Technical Data	Legitimate interest. We have legitimate interest, and believe it is also in your interests, that we are able to take steps to ensure that our Services operate as intended.
    Further uses	Account & Profile Data Content & Activity Data Device & Technical Data	The original legal basis relied upon, if the relevant further use is compatible with the initial purpose for which the Personal Information was collected. Consent, if the relevant further use is not compatible with the initial purpose for which the personal information was collected.

    No sensitive personal information. We ask that you not provide us with any sensitive personal information (e.g., information related to racial or ethnic origin, political opinions, religion or other beliefs, health, biometrics or genetic characteristics, information related to sex life or sexual orientation, trade union membership, or information pertaining to criminal convictions) on or through the services, or otherwise to us. If you provide us with any sensitive personal information to us when you use the services, you must consent to our processing and use of such sensitive personal information in accordance with this Privacy Policy. If you do not consent to our processing and use of such sensitive personal information, you must not submit such sensitive personal information through our services.

    No Automated Decision-Making and Profiling. As part of the Service, we do not engage in automated decision-making and/or profiling, which produces legal or similarly significant effects.

    Additional Processing Outside of Europe. We are a U.S.-based company and many of our service providers, advisers, partners or other recipients of data are also based in the U.S. If you use the Service, your personal information will be accessed and processed in the U.S. It may also be provided to recipients in other countries outside Europe. The U.S. and other countries of processing may have data protection regimes that are different, and less protective than, those in your home country.

    Where we share your personal information with third parties who are based outside Europe or your home country, we implement additional measures, safeguards, and/or contractual provisions as required by applicable data protection law to support the transfer. You may contact us if you want further information on the specific mechanism used by us when transferring your personal information out of Europe.