Privacy Policy

Last updated: October 10, 2026 · Effective date: October 10, 2026

Neon on Main is a business based in Rockwall, Texas, USA (our mailing address, in Dallas, is under Contact below). Our service is offered to businesses in the United States. This policy explains how we handle personal information when you visit neononmain.com or app.neononmain.com, use our services, contact us, or appear in material used for a preview of a business's website.

Public information can still be personal information. You don't have to be a customer to use the rights in this policy.

The short version. The full policy below is what counts.

  • We collect what we need to build, run and bill for your website, and to prepare previews for businesses.
  • We don't sell personal information or use it for targeted advertising.
  • We don't use ad trackers. Our emails may contain tracked links, so we know if a link was clicked. We don't use tracking pixels to see whether an email was opened.
  • A preview that doesn't turn into a plan is archived for up to 12 months, then deleted automatically. We may send the business occasional follow-up emails until it unsubscribes.
  • A business owner can delete their preview at any time with the "Delete my preview" button. That also stops all contact from us.
  • Questions, or want something deleted? Email hello@neononmain.com.

1. Who is responsible for your information

Neon on Main is responsible for information we use for our own purposes: accounts, billing, contacting businesses, previews, support and security. Under some privacy laws this makes us the "controller" or "business."

When we host information only on a customer's instructions (for example, information on their website or sent through its contact form), the customer decides how it's used. We act as their "processor" or "service provider" under our Data Processing Agreement. This policy doesn't replace that customer's own privacy notice.

If your request is about information one of our customers controls, please contact that business. You can contact us too, and we'll help point your request the right way.

Privacy contact: hello@neononmain.com, or write or call us using the details in section 14.

2. What we collect and where it comes from

Stripe collects your full card details directly. We never receive or store your full card number or security code.

We don't try to collect sensitive information, such as medical records, government ID numbers, precise location, biometrics, or information about protected characteristics. Please don't send it to us. We don't run facial recognition on photos. We use private messages only to provide the service, give support, keep things secure, and meet legal duties.

We keep a copy of emails we send (such as previews, sign-in codes and receipts) with the account, preview or billing record they relate to, and delete them on the same schedule as that record.

3. Why we use information

We won't use personal information for a new purpose that isn't reasonably related to these without telling you first, and asking for your consent where the law requires it.

We need basic account and billing details to provide a paid plan or a purchase. A mobile number is optional.

4. Previews for businesses, and how we contact them

Before a business is a customer, we may build a private preview of a new website for it. To make it realistic, we copy the business's own photos and text from its current website and public business listings. We add public facts (such as hours, address and services) and our own design and writing. We keep a note of where material came from and can tell you on request.

We don't collect private social media posts, sensitive information or unrelated personal details for previews. Some copied photos may show people, such as staff. They appear only in the private preview and are deleted with it. Anyone in a photo can ask us to remove it at hello@neononmain.com.

How we contact businesses. We only contact businesses in the United States, and we follow the US CAN-SPAM Act. Our emails say who we are, use honest subject lines, and include our postal address and an easy way to unsubscribe. We honor unsubscribes promptly, and always within 10 business days. We don't treat a published email address as consent. Our first email to a business links to this policy.

You can unsubscribe or ask us to stop contacting you at any time, and we'll stop. We then keep only a small record so we don't contact you again. A preview doesn't mean the business endorses us or has given us permission to reuse its material.

5. AI processing

We use Anthropic's Claude models, through Anthropic's commercial service, to help understand change requests and prepare website content and code. The request, the relevant parts of the website, and some technical context may be sent to Anthropic. We send only what the task needs. We store the messages you send our site editor in your preview or dashboard, and its replies, to run the service (to make your changes, keep a record of what changed and keep the editor safe), and we delete them when your preview or account is deleted.

We don't train AI models on your private content. Under Anthropic's commercial terms, what we send and get back isn't used to train its models by default, and we don't opt into any training or feedback programs.

Not training on data doesn't mean it's never stored. Anthropic may keep data for a limited time for safety, abuse prevention or legal reasons, as Anthropic's commercial terms and privacy policy describe.

AI prepares drafts. A person approves anything before it's published. We don't use AI to make decisions about people that have legal or similarly serious effects. Usage limits and routine security checks are just how we run the service.

6. Who we share information with

We share information only as needed for the purposes in this policy. These companies help us run Neon on Main:

See our list of service providers for what each one does and what information it handles. We update that page before we add a new one, and we follow our Data Processing Agreement's notice process for customer data.

We also share limited information with our own authorized staff and professional advisers (such as accountants and lawyers) when needed.

Providers working for us are bound by contracts that limit how they use information and require security. Stripe also acts on its own account for fraud prevention and legal compliance, under its own privacy notice.

We may share limited information when the law requires it, to establish or defend legal claims, or to deal with a serious security or safety issue. If our business is reorganized, financed, merged or sold, relevant information may go to advisers and a buyer, with confidentiality and privacy protections.

Website content you approve is public to the audience you choose. A private preview can be seen by anyone who has its link.

We don't sell personal information, share it for cross-context behavioral advertising, or use it for targeted advertising. Mobile numbers and text-message opt-in information are never sold or shared with third parties or affiliates for their marketing or promotional purposes. We share them with our text-message provider only to deliver messages, or when the law requires it.

7. Cookies and technical logs

We don't use advertising trackers. The customer portal uses one essential cookie, nom_session, to keep you signed in. It lasts up to 30 days, or until you sign out. Cloudflare, our host, may set strictly necessary security cookies to protect against bots and attacks. If you block essential cookies, you may not be able to sign in.

Product analytics on our own pages. On the pages of our own service (your private preview, the sign-up page, your Site Review and your dashboard), we use PostHog, a product analytics service, to see how people use them and where they get stuck. If you're in the European Economic Area, the UK, Switzerland, anywhere outside the United States, or a US state whose law requires everyone's consent to be recorded (such as California, Florida, Pennsylvania or Washington), it runs only if you click "Accept" on the notice at the bottom of the page. Elsewhere in the United States it runs unless you opt out with the "Analytics choice" link. Wherever you are, if your browser sends a Do Not Track or Global Privacy Control signal, it doesn't load at all. When it's on, it records the pages you visit, the buttons and links you click, a few steps (such as trying a change or choosing a plan), your device and browser type, and a recording of how you move around the page. Everything you type is hidden from these recordings, and your dashboard's text is hidden too. We don't send PostHog your name or email address; if you're signed in, we use a random-looking code instead. PostHog stores this in the United States on our behalf, and we keep it for up to 12 months. It never runs on our customers' websites. You can change your choice anytime with the "Analytics choice" link at the bottom of those pages, or by clearing your browser's data for our site.

Visits to this website from your preview or our email. If you come to neononmain.com from your business's preview or from a link in one of our emails, we record that visit too, in the same way: the pages you see, the links and buttons you click, and how you scroll. What you type is never recorded. The visit is linked to your business's preview, so we can see that someone from your business looked at, say, our pricing. To know it's you, your preview (once PostHog is allowed to run) or our email link leaves a small cookie, nom_pros, holding the same random-looking code, for up to 90 days. Your "Accept" or "No thanks" is remembered in a cookie called nom-analytics, so you aren't asked twice, and "No thanks" also removes nom_pros. The same rules apply as above: where the law asks for your consent first, nothing runs until you click "Accept", and a Do Not Track or Global Privacy Control signal turns it off. Other visitors to this website aren't tracked at all.

Apart from the product analytics described above, we don't use cookies that aren't essential.

Our emails may contain tracked links, so we know if a link was clicked. We don't use tracking pixels to see whether an email was opened. Replies, preview visits and actions in the portal create ordinary delivery and technical records.

Customer websites can include their own features, such as maps, videos, booking tools, or analytics carried over from their old site. Those are the customer's choices, and the customer's own notices and consent controls need to cover them.

Because we don't sell information, share it for behavioral advertising or run targeted ads, there's nothing for a Global Privacy Control signal to opt you out of there. We still treat it, and Do Not Track, as a "no" to analytics: with either one on, we don't measure or record your visits. We honor any opt-out signal the law requires us to.

8. Where information is processed

We're based in Texas, and our service is offered to businesses in the United States. Information is processed in the US, and in other countries where our providers operate. Cloudflare, for example, runs a global network, and Proton, our email provider, is based in Switzerland. Our list of service providers shows where each one operates.

9. How long we keep information

If a legal hold or duty means we must keep something longer, we use it only for that reason and delete it when the reason ends. Stripe may have its own legal retention periods.

10. Security and incidents

We protect information with encryption in transit, access controls, restricted admin access, sign-in with one-time email codes, and reputable providers. No system is perfectly secure.

If a data breach happens, we investigate. We tell affected customers, people and regulators when the law requires, within the legal deadlines. For customer data we handle on a customer's behalf, we tell that customer without undue delay and help them as our Data Processing Agreement and the law require.

11. Your privacy rights

Email hello@neononmain.com or write to us, and tell us what you'd like. You don't need an account. We may check your identity, or an agent's authority, in a reasonable way. We won't ask for sensitive documents we don't need.

Depending on the law of the state where you live, you may have the right to:

Marketing emails. If you unsubscribe or ask us to stop marketing to you, we always stop, whatever state you're in.

How we respond. Where state law gives you rights (such as access, deletion, correction and portability), we usually reply within 45 days, or sooner if required, with extensions only where allowed. If we turn down your request and you have a right to appeal, email hello@neononmain.com with "Privacy appeal" in the subject. If we deny the appeal, we'll tell you how to contact your state's regulator. Authorized agents can make requests with proof of authority.

California. If California's privacy law (CCPA/CPRA) applies to us, sections 2, 3 and 6 describe what we collect, where it comes from, why, and who receives it, including over the last 12 months. We haven't sold personal information or shared it for cross-context behavioral advertising. We only use sensitive personal information for purposes the law allows without a right to limit. We don't knowingly sell or share information about anyone under 16.

We won't treat you differently for using your rights. If you ask us to delete information we need to run your account, we may not be able to keep providing the service, and we'll explain that. We may keep limited information where the law allows or requires it, and we'll explain any refusal.

12. Children

Our service is for adult business users. It isn't aimed at children under 13, and we don't knowingly collect information from them. Contact us if you think we have.

If a customer's website content includes a child's photo or details, we handle it on that customer's instructions. Customers must have the rights and permissions needed.

13. Changes to this policy

We update this policy when our practices change, and show the new date at the top. For important changes that affect existing users, we give advance notice by email or in the portal. Where the law requires it, we ask for your consent before using information for a new purpose.

14. Contact

Neon on Main
Mailing address: 539 W. Commerce St #4419
Dallas, TX 75208, USA
Privacy and support: hello@neononmain.com
Phone: (469) 887-6412