Privacy Policy

1. Scope and controller

This notice applies to personal data processed through loudscale.com, including contact requests, Opportunity Brief requests, free tools, and newsletter subscriptions. LoudScale determines why and how this website data is processed. Contract-specific processing may also be covered by a proposal, service agreement, or data processing agreement.

2. Data we collect

• Contact details such as name and work email.
• Business details such as company, website, industry, size, objectives, budget range, and project context.
• Form attribution such as the page, service, industry, and region connected with a request.
• Newsletter subscription, unsubscribe, and suppression records.
• Security and abuse-prevention identifiers derived from network addresses. Tool-access records include an email address, access-token hash, IP-derived hash, tool/source context, privacy acknowledgement, marketing choice and the browser user-agent string (limited to 500 characters). Hashing does not make these records anonymous.
• Analytics and usage data only when you allow analytics cookies: pages viewed, navigation paths, referrers, UTM/campaign parameters, device and browser information, approximate location, scroll depth, engagement time, outbound and CTA clicks, form identifiers (not field values), site search queries, and truncated client error messages.
• Your cookie consent choice stored locally asls_cookie_consent_v1.

Free tools and AI settings

Tool inputs may include text, URLs, business context or images. Website diagnostics can send a submitted public URL to our server for fetching and analysis. Browser tools save access details, preferences and, where supported, drafts on your device.

When you choose an AI provider, prompts and inputs are sent directly from your browser to that provider or your configured endpoint using your API key. LoudScale does not receive that key through this flow. The selected provider’s terms, retention practices and usage charges apply. A local provider is processed at the endpoint you configure.

API keys use browser session storage by default. Turning on “Remember on this device” saves the key in local storage until you clear it or clear site data. Browser storage is not a secure vault; avoid remembering keys on shared devices.

Please do not submit sensitive personal data, confidential client data, medical data, financial account data, or government identifiers through general website forms or tools unless you have established that the processing is appropriate and permitted.

3. Why we use data

• To respond to a request and take steps toward providing services.
• To deliver service-related confirmations and correspondence.
• To send marketing emails where you have separately consented.
• To measure, analyze, and improve the website, content, and user experience when analytics consent is granted.
• To protect the site, prevent abuse, and maintain records needed for legal or operational purposes.

Depending on the applicable law, these purposes rely on your request, consent (for example, for marketing email and optional analytics/marketing cookies), legitimate business interests (for example, essential security and site operation), contractual necessity, or a legal obligation. You can withdraw marketing email consent and change cookie preferences at any time without affecting earlier lawful processing.

4. Service providers and transfers

We use service providers to operate the website and communications, including Cloudflare for hosting, security, D1 records, private R2 files, queues, and abuse protection; Zoho ZeptoMail for transactional email; and Google Analytics 4 for optional analytics and (if enabled) advertising measurement signals. These providers may process data in the United States or other countries. Where required, we use contractual and organizational safeguards for international transfers. Google Fonts and Logo.dev may also receive ordinary network request data when fonts or third-party brand logos are loaded. We do not sell personal data. We do not use PostHog or other session-replay vendors on this website.

5. Retention

We keep inquiry records only while reasonably needed to respond, follow up, establish or manage a business relationship, resolve disputes, and meet legal obligations. Newsletter records are kept while a subscription is active; unsubscribe information may be kept as a suppression record so the address is not re-added by mistake. One-time lead-magnet download grants expire after the configured delivery window; the private resource remains in Cloudflare R2 until it is replaced or removed. Abuse-prevention records are routinely removed after their short rate-limit window. Google Analytics retention follows the property settings; contact us for the current property retention period or a privacy request. Tool-access details expire in the browser after 30 days; that browser expiry does not itself delete server records. Tool drafts, saved preferences and remembered API keys remain locally until removed or site data is cleared. Session-only API keys are cleared when the browser session ends. Consent choices remain in your browser until you change them or clear site data. Retention may be extended where required by law or a legal claim.

6. Your rights

Subject to the law that applies to you, you may ask to access, correct, delete, restrict, transfer, or object to processing of your personal data; withdraw consent (for example, for marketing email or optional cookies); or complain to a competent data protection authority. UAE data subjects may have rights under Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data. EEA/UK and certain US state residents may have additional local rights, including the right to opt out of “sale” or “sharing” for cross-context behavioral advertising. We do not sell personal data. Optional marketing cookies, if enabled by you, may involve advertising measurement; you can deny or revoke that category at any time.

Send a request to privacy@loudscale.com. We may need to verify your identity before completing a request. Newsletter recipients can also use the unsubscribe page. To manage cookies, use the on-site banner, the footerCookie settings control, or the tools described in theCookie Policy.

7. Cookies and analytics

LoudScale uses Google Analytics 4 with Google Consent Mode v2. Analytics and marketing storage default to denied. A consent banner lets you accept all, reject non-essential, or customize categories. The Google tag is blocked on a new visit until analytics is allowed (Basic mode). Marketing measurement features are enabled only when analytics and marketing are both allowed. Withdrawing analytics disables measurement, removes the site’s GA cookies and reloads the page so the previously loaded tag is no longer running. Your changed choice is saved before the reload. See theCookie Policyfor categories, storage names, events we measure, and how to change preferences.

8. Security, children, and changes

We use access controls, encryption in transit, input validation, rate limiting, and security headers appropriate to this website. No online system can be guaranteed completely secure. This business website is not directed to children, and we do not knowingly collect children’s personal data through its forms. We may update this notice as practices or legal requirements change and will post the revised date here.