Privacy Policy

This policy exists to answer one simple question: what does Audace Studio do with the data of people who visit this site, talk to our team, or use Audace Intelligence. It is written in plain language, with no decorative clauses and no important decisions buried inside long paragraphs.

We work with digital products, data and artificial intelligence every day. We know exactly what can be done with personal information, which is precisely why we choose to collect little, keep it only as long as needed, and never turn visitors into inventory.

This policy covers the Audace Studio website, the interactive tools published on it, our contact forms, and Audace Intelligence. Client projects delivered under contract are governed by that project's agreements, including its data processing addendum.

Audace Studio is an AI-native studio for strategy, digital product, UX, UI, branding, artificial intelligence, software engineering, automation, platforms, SaaS and enterprise systems. We operate as a single team, from first diagnosis to production.

For the purposes of Brazil's General Data Protection Law (LGPD, Law 13.709/2018) and, where applicable, the GDPR, Audace Studio is the controller of personal data processed through this site. When we process data inside client engagements, we act as a processor under the controller's documented instructions.

Data protection officer and official privacy channel: privacy@audace.studio. We answer data subject requests within 15 calendar days.

No account is required to browse. Most of this site works without you handing us any personal information at all. The data below is the only data that ever reaches us.

Information you provide

• Name, work email, company and role, when you submit a contact form or request a proposal.
• The challenge description, estimated budget, timeline and business context you choose to share.
• The content of messages sent by email, meeting scheduling, or our official channels.
• Answers you voluntarily provide in the site's interactive tools, such as the Solution Builder and the diagnostic modules.

Information collected automatically

• Truncated IP address, device type, operating system and browser.
• Pages viewed, referral source and aggregate time on page.
• Preferences stored locally in your browser: language, theme and accessibility panel settings.
• Technical security and reliability records, including application errors and rate limits.

We do not collect sensitive data, we do not build individual behavioural profiles, we do not buy contact lists, and we do not enrich your data from third-party sources.

We use a minimal set of cookies and local storage. Essential ones keep the site working: selected language, accessibility preferences and abuse protection. Analytics cookies, when active, are anonymised and used only to understand which content genuinely helps.

The Cookie Policy breaks down every category, every technology and how to withdraw consent at any time.

We measure audience in aggregate to decide what to write, what to improve and what to remove. IP addresses are anonymised and we never cross that measurement with identifying data.

No metric collected on this site feeds third-party behavioural advertising. If that ever changes, we will update this policy and ask for explicit consent before anything is switched on.

Contact forms exist to start a commercial conversation, not to feed a marketing database. What you send is routed to the responsible team, read by people, and answered within two business days.

If the conversation does not turn into a project, we keep the record only for the period needed for commercial history and legal obligations, as described under retention. You can ask us to delete it sooner at any time.

Audace Intelligence is the public assistant on our website. It helps visitors discover solutions, understand services, explore case studies, clear up doubts, request a quote and start projects.

What it does not do

• It does not access any internal Audace Studio database.
• It has no access to client information, contracts, repositories or live projects.
• It cannot disclose confidential, commercial or NDA-protected information.
• It must not be used to send sensitive data, credentials, personal documents or restricted information.

Messages exchanged with the assistant are sent to a language model provider to generate the reply. We process only what is necessary for that purpose, and we recommend keeping the conversation to information you would share in a first business email.

AI-generated answers may contain inaccuracies. They are not a commercial proposal and do not constitute binding legal, accounting or technical advice. Any Audace Studio commitment is made by people, in writing.

• Answer enquiries, prepare proposals and run commercial conversations.
• Deliver contracted projects and keep communication going through delivery.
• Keep the site secure, stable and protected from automated abuse.
• Understand, in aggregate, which content and tools create value.
• Comply with legal, contractual, tax and regulatory obligations.

We do not sell personal data. We do not rent it, license it, or share it for third-party advertising.

• Consent: analytics cookies and optional communications.
• Performance of a contract or pre-contractual steps: proposals, quotes and project delivery.
• Compliance with a legal or regulatory obligation: tax and accounting records.
• Legitimate interest: application security, fraud prevention and continuous improvement of the site, always balanced against your rights and kept to minimal impact.

We share data only with vendors required to run this site and our work, always under contract and for a limited purpose.

• Hosting and content delivery infrastructure.
• Language model providers that process Audace Intelligence messages.
• Email, calendar and commercial relationship tools.
• Anonymised audience measurement.
• Public authorities, where there is a legitimate legal request.

None of these partners is allowed to use your data for their own purposes.

• Commercial messages that did not become a project: up to 24 months.
• Client and project records: for the contract term and any applicable statutory retention period.
• Technical and security logs: up to 12 months.
• Aggregated, anonymised metrics: indefinitely, as they cannot identify anyone.

Once the period ends, data is deleted or permanently anonymised.

You have a set of rights we honour in full, with no bureaucracy and no cost.

• Confirm that processing exists and access your data.
• Correct incomplete, inaccurate or outdated data.
• Request anonymisation, blocking or deletion of unnecessary or excessive data.
• Request portability to another provider.
• Withdraw consent and object to processing based on legitimate interest.
• Learn who we share your data with.

Email privacy@audace.studio with the subject “Data subject request” and tell us what you need. We do not require proprietary forms or an account to exercise your rights.

We may ask for additional information solely to confirm your identity and prevent third parties from reaching data that is not theirs. We reply within 15 calendar days, and explain clearly whenever a request cannot be fully met because of a legal obligation.

• Encryption in transit (HTTPS/TLS) across every page and API call.
• Secrets and access keys stored outside the codebase, rotated periodically.
• Least-privilege access to systems and data.
• Rate limiting and input validation on public endpoints, including Audace Intelligence.
• Code and dependency review as part of our engineering process.

No system is infallible. In the event of an incident with material risk to data subjects, we will notify those affected and the competent authority within statutory deadlines, describing what happened and what we did about it.

Part of our infrastructure and some language model providers operate outside Brazil, mainly in the United States and the European Union. In those cases, transfers rely on standard contractual clauses and equivalent protection commitments, in line with articles 33 to 36 of the LGPD.

When something material changes, a new purpose, a significant new vendor, a new measurement technology, we update the date at the top of this page and call out the change. Changes that require consent take effect only after you authorise them.

Privacy: privacy@audace.studio. General matters: hello@audace.studio. If you prefer, use the contact form, it reaches the same people.