The fine print, in plain English

GDPR Compliance

How we handle personal data for visitors and clients in Europe and the UK, and how to use your rights.

Effective October 25, 2026

Who this page is for

Neon Manatee is based in Florida and mostly serves businesses in the United States. If you are in the European Economic Area, the United Kingdom or Switzerland, the General Data Protection Regulation (GDPR) or its UK and Swiss versions give you specific rights over your personal data. This page explains how we honor them. It adds to our Privacy Policy.

Why we are allowed to use your data

  • To perform a contract: order details, project information and payment records needed to deliver what you bought.
  • Legitimate interests: replying to questions you send us, sorting spam, keeping the site secure and counting visits without cookies.
  • Legal obligations: keeping invoices and tax records.
  • Consent: anything else, which we would ask you for first and which you could withdraw at any time.

Your rights

  • Access the personal data we hold about you and get a copy.
  • Correct data that is wrong or incomplete.
  • Delete your data when we no longer need it or you withdraw consent.
  • Restrict or object to how we use it, including for our legitimate interests.
  • Receive your data in a portable format.
  • Withdraw consent at any time where we rely on it.
  • Complain to your local data protection authority. We would appreciate the chance to fix the problem first.

International transfers

Our website, database and service providers are in the United States. When your data moves there from Europe or the UK, we rely on our providers' standard contractual clauses or equivalent safeguards to protect it.

Service providers we use

  • Square, for payments.
  • DreamHost, for hosting and the database.
  • Our email provider, for order confirmations and replies.
  • Anthropic, for the AI assistant, message sorting and app estimates.
  • Google Fonts, for the fonts on this site.

Each receives only what it needs to provide its service to us.

Automated decisions

We use AI to sort contact messages and to suggest app prices. These suggestions never make a final decision that has a legal or similarly significant effect on you. Our team reviews messages, and every app price starts at our published minimums and is confirmed before you pay.

How to make a request

Send privacy questions and requests through our contact page and choose the option for a question about our services. Tell us it is a privacy request and we will reply within 30 days, usually much sooner.

We may ask you to confirm your identity before acting on a request, so we never hand your data to someone else. We answer within one month, and tell you if we need longer for a complex request.