Legal

Privacy policy

Last updated 30 September 2026

Wealthy people value discretion, and so do we. This policy explains what Servolia LLC (trading as Latitax) collects and why.

What we collect

Your email address when you sign in or subscribe; the profile you choose to give (citizenship, residence, family, income types and ranges, company details); the questions you ask Latitax AI and its answers; orders and payment status (card details are handled by Stripe and never reach us); and basic technical data such as IP address, used to prevent abuse.

Why

To provide the service you asked for, answer your questions, generate reports, run your account and billing, prevent abuse, and improve our research: questions our database could not answer are reviewed so we can research them. We do not sell your data. We measure visits to our public pages, and tell Meta when an account is created or a purchase is made so we can measure our advertising; see Cookies and measurement below. You can opt out of both in one click.

Who processes it for us

Vercel (hosting), Cloudflare (network and AI processing), Anthropic (AI processing for member answers and reports), our database provider, Stripe (payments), Resend (email), Google Workspace (our internal records of accounts and orders) and Telegram (internal alerts to our team about new accounts and payments). Those records and alerts carry your name, email, product and amount only, never your financial profile, questions or reports. Google Analytics (visit measurement) and Meta (advertising measurement), unless you opt out. Each processes data only to provide its service to us.

How we protect it

Your financial profile, your questions and Latitax's answers, and your reports are encrypted at rest with AES-256-GCM. IP addresses are stored only as keyed hashes. All traffic is encrypted in transit. Sign-in uses single-use links that expire in 15 minutes. Staff access to the admin requires a second factor from an authenticator app, and every admin action is recorded in an audit log. No third-party script ever runs on your account, portal, reports, questions or sign-in pages.

Cookies and measurement

Strictly necessary cookies: a session cookie when you sign in, a visitor cookie that counts free questions, a cookie that remembers an analytics opt-out, and, for staff only, a two-factor cookie.

Analytics: Google Analytics runs on our public pages to count visits and see which pages people use, so we can improve the site. It never runs on private pages, IP addresses are anonymised, and Google's advertising features are switched off.

Advertising measurement: no Meta script runs on this site. When you create an account, buy, or ask for your Exit Readiness result by email, our server tells Meta that the event happened, identified only by a one-way hash of your email and your browser type (plus the amount, for a purchase), so we can measure our ads.

Adverts: if you arrive from one of our adverts, a first-party cookie notes which one (the source, the campaign and the date, no personal data) for 30 days, so that we know which adverts bring members. If you then create an account or buy, that campaign name is recorded with it.

To opt out of all three, use "Analytics opt-out" at the foot of any page. It takes effect at once and lasts a year on that browser.

How long

Account data for as long as your account exists; questions are deleted automatically after three years; security records after 90 days; billing records as long as tax law requires (with your email removed if you delete your account).

Your rights

You can download a copy of your data or permanently delete your account yourself from your account page. You can also ask for correction or restriction, and object to processing, including under the UK and EU GDPR: write to hello@latitax.com. You may also complain to your data protection authority.