Privacy Policy

Last updated 2026-09-10. Written in-house and pending review by outside counsel before this policy is treated as final.

Who we are

Longitude Studio is a strategic AI advisory and implementation firm operating with teams in Brazil and the United States. This policy covers longitudestudio.com and the contact form on it. For any question about this policy or your data, use the contact form.

What we collect

When you submit the contact form: your name, work email, company (optional), the topic you selected, and the message you write. We use this only to reply to your inquiry. It is stored in our database and used to send you a reply and an internal notification to our team. We never sell or rent this information.

When you accept analytics cookies: Google Analytics 4 records page views, navigation between pages, button clicks, and which topic a contact form submission was about (never the message itself). Microsoft Clarity records session replays and heatmaps of mouse movement, scrolling, and clicks, with input masking enabled and the entire contact form excluded from recording. See the cookie policy for the full list of cookies each tool sets.

Spam protection: Cloudflare Turnstile runs on the contact form to block automated submissions. It may process your IP address and browser characteristics as part of that check. This runs regardless of your analytics choice, since it protects the form itself rather than measuring visitor behavior.

Legal basis

For visitors in Brazil, the Lei Geral de Proteção de Dados (LGPD) applies. For visitors in the European Union, the General Data Protection Regulation (GDPR) applies. Contact form data is processed on the basis of your consent to be contacted and our legitimate interest in responding to inquiries. Analytics and related tools run only on the basis of your explicit, revocable consent, collected through the cookie banner before any such script loads.

Who we share data with

We use a small number of processors to run this site and reply to you: Neon (database hosting), Resend (transactional email), Inngest (background job processing for sending that email), Vercel (site hosting), Cloudflare (CDN, DDoS protection, and Turnstile spam protection), and, only with your consent, Google and Microsoft for analytics. None of these processors may use your data for their own purposes.

International transfers

Because the firm operates across Brazil and the United States, and our processors operate globally, your data may be processed outside the country where you are located. We rely on our processors’ standard contractual and security safeguards for these transfers.

How long we keep it

Contact form submissions are kept as long as needed to respond to your inquiry and for a reasonable follow-up period afterward. Analytics data follows each tool’s own retention settings, which you can review on their respective privacy pages.

Your rights

You can ask us to access, correct, or delete the personal data we hold about you, and you can withdraw analytics consent at any time from the cookie policy page. Use the contact form for any of these requests.

Children

This site is intended for business visitors and is not directed at children.

Changes to this policy

We will update the date at the top of this page when this policy changes and, for material changes, note them here.