Privacy

Privacy notice.

We collect as little as possible, we never sell it, and there is no third-party form processor sitting between you and us. This page says exactly what happens to anything you send.

The detail

What we collect and why.

Who we are

Enterprise AI Studio is a production AI implementation practice run by Kevin Owens, a four-time Chief Product Officer. We are the data controller for this site. For anything in this notice, contact Contact the studio.

What we collect

Things you type into a form. When you send a brief, request a checklist read-out, or join a waitlist, we receive the fields on that form — name, work email, company, role, company size, engagement type, timeline, budget band, and your message — plus which page you sent it from and any UTM parameters in the URL. Our server also records the submitting IP address and browser user agent with the submission, as basic abuse protection.

Things we do not collect unless you ask us to. The AI Implementation Readiness Checklist scores entirely in your browser. Your answers are not sent anywhere unless you fill in the read-out form and press the button — at which point your score and the pillar breakdown are sent with your email address so we can reply.

Server logs. Our host keeps standard request logs (IP, timestamp, path, user agent) for operations and security.

Why we collect it

To reply to you, to scope work you have asked us to scope, to send a read-out or resource you asked for, and to keep the site working and free of spam. That is the whole list. We do not build advertising profiles.

Who processes it for us

Render — application and static hosting; processes every request to this site.

PostgreSQL database (hosted by Render) — stores form submissions.

SMTP email provider — delivers the notification email that tells us a brief arrived, and our reply to you.

Google Analytics 4 (property G-DPS2MFLM6Q) — page analytics, and only after you accept. See below.

Google Fonts — serves the Inter and JetBrains Mono webfonts; your browser requests them directly from Google.

Cal.com — if and when scheduling is enabled, a booking link will hand you off to Cal.com, whose own privacy notice applies to what you enter there. Today the booking button points back at our own contact form.

We do not use a third-party form processor. Forms post to our own server.

Analytics and consent

Analytics are denied by default. We load Google Analytics 4 under Consent Mode v2 with analytics_storage, ad_storage, ad_user_data, and ad_personalization all set to denied before any tag runs. Nothing is stored on your device for analytics until you press “Accept analytics” in the banner.

Your choice is remembered in your browser's local storage under the key eas_consent, with the value granted or denied. That value never leaves your browser.

Changing your mind. Clear this site's local storage (or your site data for enterpriseaistudio.com) in your browser settings and reload — the banner reappears and you can choose again. Declining is permanent until you do that; we do not re-ask.

What we never do

We do not sell or rent your information. We do not run ad retargeting or share data with ad networks. We do not send your submissions to a third-party form processor. We do not add you to a mailing list because you sent a brief — only the explicit checkbox does that.

How long we keep it

Form submissions: up to 24 months from the last contact, then deleted. Submissions that are plainly spam are deleted as we find them. Server logs: up to 90 days. Analytics data: retained on Google's default GA4 schedule of 14 months, and only for visitors who accepted. Email correspondence is kept as long as the business relationship needs it.

Your rights and how to exercise them

You can ask us for a copy of what we hold about you, ask us to correct it, or ask us to delete it. You can also ask us to stop emailing you at any time. Send the request to Contact the studio from the address you used, and we will confirm within one business day and complete it within 30 days. There is no charge, and we will not ask you to justify the request.

If you are in the UK or EU, you also have the right to complain to your local supervisory authority.

Changes to this notice

If we add or remove a processor, or change what we collect, we update this page and the date below.

Last updated: 16 September 2026.