Overview
This Privacy Policy explains how Latitudes Technology Consulting LLC ("Latitudes," "we," "us," or "our") collects, uses, stores, and shares information when you use the Latitudes.dev website, engage Latitudes for consulting or custom development, use Latitudes Gateway, or interact with related automation and AI services.
The information involved depends on the service. Website visitors may submit contact details or generate basic analytics. Consulting clients may provide workflow, system, and project information needed to scope and deliver requested work. Latitudes Gateway separately helps organizations connect approved AI tools to business applications with identity controls, access grants, and audit logging.
Information We Collect
Depending on how you use the service, we may collect:
- Account and contact information, such as name, business email, company name, and messages you submit.
- Authentication information from identity providers, such as user ID, email address, organization, role, and session status.
- Connection and configuration data, such as approved applications, connector settings, access grants, OAuth status, and credential metadata.
- Audit and security logs, such as user actions, requested tools, approval decisions, timestamps, source application names, and error events.
- Website and operational telemetry, such as page events, browser metadata, request logs, diagnostics, and service health metrics.
Google User Data
If you connect a Google account or Google Workspace service to Latitudes Gateway, we access only the Google user data authorized by the Google OAuth consent screen and required to provide the selected Gateway feature.
Depending on the Google APIs and scopes approved by you or your organization, this may include:
- Basic Google account information, such as name, email address, and account identifier.
- Google Workspace or Google Cloud resource metadata needed to list, configure, or govern approved connections.
- Content or records from connected Google services only when a user or approved workflow requests that access through Latitudes Gateway.
- OAuth access tokens, refresh tokens, and related authorization metadata needed to maintain the connection.
How We Use Information
We use collected information to:
- Provide, operate, secure, and support the Latitudes.dev website, consulting engagements, custom solutions, and Latitudes Gateway.
- Authenticate users and enforce organization-level access controls.
- Connect approved AI clients and business applications at the user's or organization's direction.
- Record audit trails for approvals, connector activity, administrative actions, and security review.
- Troubleshoot, monitor reliability, prevent abuse, and improve user-facing features.
- Respond to support requests, security incidents, legal obligations, and customer instructions.
We do not use Google user data for advertising. We do not sell Google user data. We do not use Google user data to train general-purpose AI models.
Google API Services User Data Policy
Latitudes Gateway's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
How We Share Information
We share information only as needed to provide and protect the service:
- With your organization and its administrators, according to the roles and access controls they configure.
- With service providers that host, secure, monitor, authenticate, or support the service, under appropriate confidentiality and security obligations.
- With connected applications, AI tools, or upstream APIs only when you or your organization authorize that connection or workflow.
- When required to comply with law, enforce agreements, prevent abuse, or protect the rights and safety of Latitudes, customers, users, or the public.
Storage and Security
We use reasonable administrative, technical, and organizational safeguards designed to protect information from unauthorized access, loss, misuse, or alteration. Credentials and tokens are stored in managed secret stores or service databases appropriate to the deployment environment and are not exposed to browser clients.
No method of transmission or storage is perfectly secure. Customers should configure access only for users and systems they authorize.
Retention and Deletion
We retain information for as long as needed to provide the service, meet security and audit requirements, comply with legal obligations, resolve disputes, and enforce agreements.
When a customer removes a connection, revokes OAuth access, or closes an account, we delete or deactivate related credentials according to the service workflow. Audit records may be retained where needed for security, compliance, or customer governance. You may also revoke Google OAuth access from your Google Account security settings.
Your Choices
- You can choose not to connect a Google account or can revoke access later.
- Customer administrators can manage users, approvals, access grants, and connected applications.
- You may contact us to request access, correction, export, or deletion of personal information, subject to customer instructions and legal requirements.
Contact
Questions about this Privacy Policy or Latitudes data handling can be sent to hello@latitudes.dev.