Privacy policy

1. Data we collect

We collect only what you give us and the minimum needed to run the site:

• Contact form: name, work e-mail, company (optional), your message and the language you were browsing in.
• Technical data: your browser sends standard information such as IP address, browser type and pages requested. Our hosting provider keeps server logs for security and troubleshooting.
• Language preference: a cookie named NEXT_LOCALE remembers whether you chose English or Portuguese. It contains no personal data.

2. Why we use it

We use your data to:

• reply to your message and discuss a possible project (legal basis: steps prior to a contract, at your request);
• keep the website secure and available (legal basis: our legitimate interest);
• remember your language choice (legal basis: your consent, given when you switch language).

3. Who we share it with

We do not sell personal data. We share it only with service providers that help us run the site, under contracts that limit what they can do with it:

• Vercel Inc. (USA): hosting and server logs.
• Resend Inc. (USA): delivery of contact-form messages to our inbox.
• Google Fonts: typography is served from Google's servers, which receive your IP address when fonts load.

4. International transfers

We operate in Brazil and serve clients in the United States, so your data may be processed in either country. Our providers apply contractual safeguards recognised under the LGPD and the GDPR for international transfers.

5. How long we keep it

Contact messages are kept for up to 24 months after our last exchange, or longer if we sign a contract and the data becomes part of our business records. Server logs are kept for a short period by our hosting provider. You can ask us to delete your data at any time (see section 7).

6. Cookies and analytics

We use one functional cookie (NEXT_LOCALE) for language preference. We do not run advertising trackers. If we adopt privacy-friendly analytics in the future, this policy will be updated before it goes live.

7. Your rights

Depending on where you live, you may have the right to:

• access the personal data we hold about you and receive a copy;
• correct inaccurate or incomplete data;
• request deletion, anonymisation or blocking of data that is unnecessary or processed unlawfully;
• object to processing based on legitimate interest, or withdraw consent;
• receive information about the third parties we share data with;
• file a complaint with a supervisory authority, such as the Brazilian ANPD.

8. Security

The site is served over HTTPS, form submissions are validated on the server and access to our inbox and hosting accounts is protected by strong authentication. No method is perfectly secure, but we take reasonable measures proportional to the data we handle.

9. Children

Our services are aimed at businesses. We do not knowingly collect data from anyone under 18.

10. Contact and updates

To exercise your rights or ask anything about this policy, write to contato@southscaleai.com. We may update this policy from time to time; the date at the top shows the latest version.