Privacy Policy

Last updated: 30 September 2026

This Privacy Policy explains how yNeurals Inc ("yNeurals", "we", "us") handles information in connection with this website (yneurals.com) and our security product yMussel. We keep what we collect to the minimum needed and never sell it.

1. yMussel — what it accesses

yMussel is a decoy-based intrusion tripwire for Microsoft 365. It runs only after an administrator of your Microsoft 365 tenant grants explicit, read-only consent. With that consent, yMussel reads only the Microsoft 365 / Microsoft Entra sign-in activity needed to detect when a planted decoy account is touched.

yMussel does not:

• read your email, files, documents, chats, or calendars;
• make any change to your tenant, users, or data (it is read-only);
• access anything beyond the sign-in activity required to watch the decoy.

2. Data we process for yMussel

To raise an alert, we process the sign-in events relating to the monitored decoy — for example the time of the event, the source IP address, and the account or application involved. We use this solely to detect a decoy being touched and to notify you. Alerts and a minimal incident record are generated so you have evidence of what happened and when.

3. Why we process it (purpose)

We process this data to provide the security-monitoring service you have engaged us to perform for your organization, and for no other purpose.

4. Storage, security and retention

Data is stored securely in Microsoft Azure, kept separate per customer tenant, and protected in transit and at rest. We retain incident and health records for 12 months, after which they are deleted. On request, or when your service ends, we delete your data.

5. Sharing

We do not sell your data and do not share it with third parties, except: (a) the cloud infrastructure providers that host the service (e.g. Microsoft Azure) acting on our behalf; and (b) where required by law. If you are served by a managed service provider (MSP), alerts and reports about your tenant are shared with that provider at your direction.

6. This website

If you contact us through this site, we collect the details you provide (such as your name, email address, and message) to respond to your enquiry. The site uses only the cookies needed for it to function.

7. Your rights

Subject to applicable law (including the GDPR where it applies), you may request access to, correction of, or deletion of your personal data, and you may object to or restrict certain processing. To exercise these rights, contact us using the details below.

8. Contact

yNeurals Inc — privacy@yneurals.com. yNeurals Inc is a corporation registered in the State of Delaware, United States. Mailing address: 4732 Rising Sun Avenue, Philadelphia, PA 19120, USA.

We may update this policy from time to time; the "last updated" date above reflects the current version.