Privacy policy

Information you give us. When you request a demo or send us a message, we collect what you enter in the form:

• Demo request: your name, work email, phone number, country, organisation, role, organisation size, the product or service you are interested in, and your message.
• Contact form: your name, email, the reason for your message, and your message.

How you found us. With your form, we record how you reached our website: the referring website's name (not the full address), the campaign tags in the link you followed, the page you first landed on, the button you clicked to reach the form, and an ad click identifier if you came from a Google or LinkedIn ad. If you have allowed analytics, this can include your first visit in the last 90 days; otherwise it covers only your current visit.

How you use the website. If analytics is on (see Cookies and similar storage), Google Analytics records the pages you view, the buttons and links you click, whether you start or submit a form, and general information about your device, browser and approximate location (country and city). It does not receive your name, email, phone number, organisation or message.

Security checks. Our forms use Google reCAPTCHA Enterprise and Firebase App Check to block automated abuse. These services assess your browser and interaction to decide whether a request comes from a person.

• Replying to your request and discussing how we can work together. Data used: form details. Basis: your consent when you submit the form; for EEA/UK visitors, steps you ask us to take before a contract and our legitimate interest in responding.
• Understanding which channels and campaigns bring enquiries, so we spend our marketing well. Data used: how you found us; analytics data. Basis: your consent (analytics); for EEA/UK visitors, consent.
• Improving the website. Data used: analytics data. Basis: your consent.
• Keeping the forms secure. Data used: security checks. Basis: legitimate use for security and fraud prevention.
• Meeting legal and accounting obligations, if you become a customer. Data used: contract and billing records. Basis: legal obligation.

We do not sell your personal data, use it for advertising profiles, or make automated decisions about you.

When you first visit, a Privacy choices banner appears. In the European Economic Area, the United Kingdom and Switzerland, it asks whether you allow analytics, and analytics stays off until you choose Allow analytics. Elsewhere, it tells you that analytics is on, and it stays on unless you choose Turn off analytics. You can change your choice at any time with the Privacy choices link at the bottom of every page; declining switches analytics off and deletes the Google Analytics cookies. We ask again after six months.

• lsl-consent (browser storage): remembers your privacy choice. Kept until you change it; asked again after 182 days. Always set (strictly necessary).
• lsl-theme (browser storage): remembers light or dark display. Kept until you change it. Set when you pick a theme.
• lsl-first-touch (browser storage): remembers how you first found us, for your enquiry. Kept for 90 days. Only with analytics on; removed if you decline.
• lsl-last-touch (browser session storage): remembers how this visit began, for your enquiry. Kept until you close the browser. Only with analytics on; removed if you decline.
• _ga, _ga_* (cookies, Google Analytics): distinguish visits and visitors for statistics. Kept for up to 2 years, as set by Google. Only with analytics on.
• reCAPTCHA / App Check (Google security storage): distinguish people from automated traffic. Set by Google, on the form and sign-in pages, for security.

We use no advertising cookies.

We use the following service providers. They process data on our instructions and under their data-processing terms.

• Google LLC / Google Cloud: Firebase Hosting (serves the website), Cloud Functions and Cloud Firestore (receive and store form submissions, in Mumbai), Firebase Authentication (sign-in). They receive form details, how you found us, and technical request data.
• Google LLC: Google Analytics 4. It receives usage data, only with analytics on.
• Google LLC: reCAPTCHA Enterprise and Firebase App Check. They receive browser and interaction signals on form pages.
• Google LLC: Google Workspace (Gmail). It carries a notification email to our team containing your form details.

If we adopt a CRM or other tool that receives personal data, we will add it here before it does.

We may also disclose data where the law requires it, or to protect our rights, or to a successor if our business is transferred, under the same protections.

• Enquiries that are being discussed: while the conversation is active.
• Enquiries that did not go further, or ended: 24 months after our last interaction, then deleted.
• Partnership, press and general messages: 24 months after our last interaction.
• Customer records: for the length of the contract.
• Records that are also accounting records: 8 years, as company law requires.
• Test, spam and duplicate submissions: 30 days.
• Our team's notification emails: the same periods as the record they relate to.
• Google Analytics data: 14 months.

Deletion of website enquiries runs automatically each day.

Under India's Digital Personal Data Protection Act 2023 and its Rules, you can:

• ask what personal data we hold about you and how we use it;
• ask us to correct, complete, update or erase it;
• withdraw your consent at any time (this does not affect what we did before);
• nominate someone to exercise these rights if you die or become unable to;
• raise a grievance with us, and then with the Data Protection Board of India.

If you are in the EEA or the UK, you also have rights under the GDPR: access, rectification, erasure, restriction, portability, objection to processing based on legitimate interests, and withdrawal of consent, and you may complain to your data protection authority.

To make a request, email hello@longshortlabs.com from the address you used, or tell us how to verify that the request is yours. We will reply within 30 days, or sooner where the law requires.

You can switch analytics off at any time through Privacy choices, or with a browser add-on that blocks Google Analytics.

Grievance Officer: Lokesh Jaiswal, Director, Longshort Labs Pvt. Ltd.
Email: hello@longshortlabs.com
Address: 2nd Floor, Shop No. 8, Plot No. 768/33, Shadi Khampur, Delhi 110008, India

If you are not satisfied with our response, you may complain to the Data Protection Board of India. Visitors in the EEA or the UK may complain to their data protection authority.

Our website and services are intended for institutions and professionals. We do not knowingly collect personal data from anyone under 18. If you are under 18, please ask a parent or guardian to contact us for you. If we learn that we have received data from someone under 18 without verifiable consent from a parent or guardian, we will delete it.

We store form submissions in India, in Google Cloud's Mumbai region. Some of our providers, including Google Analytics, Gmail and the security checks, may process data in other countries, including the United States. We rely on our providers' contractual safeguards, including standard contractual clauses for data from the EEA and UK, and do not transfer data to any country restricted by the Government of India.

We protect personal data with access controls (only named administrators can see enquiries), encryption in transit and at rest provided by Google Cloud, bot protection on our forms, and logs that exclude personal data. No method of transmission or storage is completely secure, but we work to protect your data and will notify you and the authorities of a breach where the law requires.

We will post any change to this policy on this page and update the date above. For significant changes we will ask for your choice again. Questions: hello@longshortlabs.com.

This policy was reviewed and approved by our legal counsel and took effect on 18 October 2026.