Privacy Policy
Longcloud AI Limited (“Longcloud”, “we”, “us”, or “our”) is committed to protecting your privacy and handling your personal information responsibly. This Privacy Policy explains how we collect, use, store, and disclose personal information in accordance with the New Zealand Privacy Act 2020 and its Information Privacy Principles (IPPs).
By using our website (longcloud.nz) or engaging our services, you agree to the collection and use of your personal information as described in this policy.
Who We Are
What Personal Information We Collect
We collect personal information that is necessary for the purposes described in this policy. This may include:
2.1 Information You Provide to Us
- Name and contact details (email address)
- Company or organisation name
- Project details and requirements you share with us via our contact form
- Budget and timeline preferences
- Any other information you choose to share in correspondence with us
2.2 Information Collected Automatically
- IP address and general location data
- Browser type and version
- Pages visited and time spent on our website
- Referring website or source
- Device type and operating system
2.3 Information Collected During Service Delivery
When we provide software development, AI, or consulting services to you, we may collect additional information necessary to complete those services. The nature of this information will be outlined in your service agreement.
How We Collect Personal Information
We collect personal information in the following ways:
- Directly from you when you submit our contact/project brief form
- When you email or otherwise communicate with us
- Automatically via cookies and analytics tools when you visit our website
- From publicly available sources such as LinkedIn or company registries, where relevant to a business relationship
- During the course of providing services under a client agreement
Why We Collect and Use Your Information
We collect and use personal information for the following purposes (in accordance with IPP 2):
- To respond to your project inquiries and provide proposals
- To deliver software development, AI, and consulting services
- To communicate with you about your project or engagement
- To send you relevant updates about Longcloud (you may opt out at any time)
- To improve our website and services based on usage analytics
- To comply with our legal and regulatory obligations
- To manage our business operations and maintain business records
We will not use your personal information for any purpose that is incompatible with the primary purpose of collection without your consent.
Sharing Your Personal Information
We respect your privacy and do not sell your personal information. We may share your information in the following limited circumstances:
5.1 Service Providers
We may share information with trusted third party providers who assist us in operating our business, including:
- Cloud hosting and infrastructure providers
- Email and communication platforms
- Website analytics services (e.g., anonymous usage data)
- Accounting and legal service providers
These providers are required to handle your information securely and only for the purposes we specify.
5.2 Legal Requirements
We may disclose personal information if required by law, court order, or where we believe disclosure is necessary to protect the safety of any person or to comply with a legal obligation.
5.3 Business Transfers
If Longcloud AI Limited is involved in a merger, acquisition, or sale of assets, personal information may be transferred as part of that transaction. We will notify affected individuals where required by law.
5.4 Overseas Disclosure
Some of our service providers are located outside New Zealand, so personal information may be stored or processed overseas. Where that happens, we take steps to ensure the recipient provides comparable privacy protections, in accordance with IPP 12 of the Privacy Act 2020. Our main overseas providers are:
- Supabase, our database and backend platform, hosted on Amazon Web Services in the ap-southeast-2 (Sydney) region in Australia
- Cloudflare, edge hosting, serverless compute and the D1 database for some client applications. Cloudflare is a United States company and its network is global by design, so a request may be served from whichever data centre is closest to you.
- Microsoft Azure, cloud hosting and AI workloads for certain deployments, with the hosting region agreed for each project
- Vercel, delivery of this website, a United States company operating a global content delivery network
- Microsoft (Clarity and Advertising) and Google (Google Analytics), website analytics and advertising, both United States companies. See section 6 for how we use cookies and analytics, and how to withdraw consent.
- GitHub, source code management, a United States company
Where a project requires personal information to stay within a particular jurisdiction, we either pin storage to compliant geographic boundaries using Cloudflare's regional restrictions or host that project's data store in the AWS Sydney region or Microsoft Azure instead. Residency requirements are agreed with you before a platform is chosen. Our Security Policy sets out each provider's certifications.
Cookies and Website Analytics
Our website uses cookies, small text files stored on your device, to improve your experience and analyse website traffic. We use:
- Essential cookies: Necessary for the website to function correctly
- Analytics cookies: To understand how visitors interact with our website (e.g., pages visited, time on site). This data is aggregated and anonymised where possible.
6.1 Microsoft Clarity and Microsoft Advertising
We partner with Microsoft Clarity and Microsoft Advertising to capture how you use and interact with our website through behavioral metrics, heatmaps, and session replay to improve and market our products/services. Website usage data is captured using first and third-party cookies and other tracking technologies to determine the popularity of products/services and online activity. Additionally, we use this information for site optimization, fraud/security purposes, and advertising. For more information about how Microsoft collects and uses your data, visit the Microsoft Privacy Statement.
Microsoft Clarity is only loaded after you accept cookies. You can withdraw consent at any time using the Manage Cookies link in our website footer.
6.2 Google Analytics
We use Google Analytics 4 to measure how many people visit our website and which pages they find useful. It records the pages you view, the site or search that referred you, an approximate location derived from your IP address, and basic device and browser details. Google Analytics 4 does not log or store your individual IP address, and we do not use it to identify you personally. Analytics data is retained for 26 months and then deleted automatically. For more information about how Google handles this data, see the Google Privacy Policy.
- Before you accept cookies, Google Consent Mode holds analytics storage at denied, so no Google Analytics cookies are set. Google Analytics still sends cookieless pings that carry no identifier and are used only for aggregate, modelled reporting.
- After you accept, analytics storage is granted and the Google Analytics cookies listed in our Cookie Policy are set.
- Advertising storage stays denied at all times, whichever choice you make, so Google Analytics is never used for advertising or remarketing on this website.
You can withdraw consent at any time using the Manage Cookies link in our website footer. Our Cookie Policy lists each Google Analytics cookie and its lifetime, and explains Google's browser opt out add on, which blocks Google Analytics across every website you visit.
You can control or disable cookies through your browser settings. Please note that disabling cookies may affect the functionality of our website. By continuing to use our website, you consent to our use of cookies as described above.
Storage and Security of Your Information
We take the security of your personal information seriously. We implement appropriate technical and organisational measures to protect your information from unauthorised access, loss, misuse, or disclosure. These measures include:
- Secure communications (HTTPS/TLS encryption)
- Access controls limiting who can view personal information
- Regular review of our data handling practices
- Use of reputable, security conscious third party platforms
We retain personal information only for as long as it is needed for the purpose it was collected, or as required by law. When information is no longer needed, it is securely deleted or anonymised.
Your Rights Under the Privacy Act 2020
Under the New Zealand Privacy Act 2020, you have the following rights:
8.1 Right of Access (IPP 6)
You have the right to request access to personal information we hold about you. We will respond to access requests within 20 working days.
8.2 Right of Correction (IPP 7)
You have the right to request correction of personal information we hold about you if it is inaccurate, incomplete, or misleading.
8.3 Right to Withdraw Consent
Where we rely on your consent to process personal information (e.g., for marketing communications), you may withdraw your consent at any time by contacting us.
To exercise any of these rights, please contact us at paul@longcloud.nz or nick@longcloud.nz. We may need to verify your identity before processing your request.
Marketing Communications
We may occasionally send you information about our services or relevant industry updates. You can opt out of marketing communications at any time by:
- Clicking the 'unsubscribe' link in any marketing email
- Emailing us at paul@longcloud.nz or nick@longcloud.nz with the subject line "Unsubscribe"
Opting out of marketing communications will not affect transactional or service related communications necessary for an ongoing engagement.
Children's Privacy
Our website and services are not directed at individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected personal information from a child, we will take steps to delete that information as soon as possible.
Links to Third party Websites
Our website may contain links to third party websites. This Privacy Policy does not apply to those websites. We encourage you to review the privacy policies of any third party sites you visit, as we have no control over their privacy practices.
Complaints
If you believe we have breached your privacy rights under the Privacy Act 2020, we encourage you to contact us first so we can resolve the matter:
If you are not satisfied with our response, you may lodge a complaint with the Office of the Privacy Commissioner (OPC):
We will acknowledge your complaint within 5 working days and work to resolve it promptly.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we do, we will update the effective date at the top of this document. We encourage you to review this policy periodically.
For significant changes, we will endeavour to notify affected individuals directly where reasonably practicable.
Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or our handling of your personal information, please contact us:
© 2026 Longcloud AI Limited. All rights reserved. · This policy is governed by the laws of New Zealand.