Privacy Policy

What we collect

• Account details. Your name, email address and password when you sign up with email. We store the password as a one-way hash, never in plain text.
• Google sign-in. If you continue with Google, Google shares your name, email address, profile picture and Google account ID with us. We request only the basic openid, email and profile scopes. We don't get your Google password and can't see your Gmail, Drive, contacts or any other Google data.
• Payments. Payments are handled by Stripe. We receive the plan you bought, the amount, your billing email and Stripe's customer and payment IDs. Your card details go to Stripe and never reach our servers.
• Your sites and listings. The URLs you add, the listing details you review or edit, and information we read from the public pages of your site (title, descriptions, logos, social links and contact addresses published there).
• Directory accounts. For each directory we create an email alias, a username and a password so the listing is yours. Passwords are encrypted at rest. Emails directories send to those aliases (such as confirmations and approvals) are received and read to update your listing's status.
• Session and security data. When you log in we record your IP address and browser user agent against the session, to keep you signed in and to spot misuse.

How we use it

• To create and secure your account and keep you logged in.
• To submit your app to directories, keep those listings up to date, and show you their status and logins.
• To take payment, manage subscriptions and handle refunds.
• To contact you about your account, orders and listings.
• To prevent fraud and abuse and to meet legal obligations.

We don't sell your personal information, and we don't use it for advertising.

Information from Google

We use the name, email address and profile picture from Google only to create your 8ake account, sign you in and identify you in your dashboard. If an 8ake account already uses the same email, the two are linked so you can log in either way. We don't share Google user data with anyone except as needed to run the service described here, and we don't use it for advertising or to train AI models.

8ake's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

You can remove 8ake's access at any time from your Google account settings. That stops future Google sign-ins; to delete the data we already hold, see "Your choices" below.

Who we share it with

• Directories. Submitting your app means sending your listing details, the directory account's email alias and username, and any contact details you chose to include. Once published, those listings are public and governed by each directory's own terms and privacy policy.
• Service providers who process data for us: Stripe (payments), Google (sign-in), our hosting and database providers, the AI model and browser providers our agents run on, and, when a directory blocks automated access, captcha-solving and proxy services. They only get what they need for that task.
• When required. If the law requires it, to protect our rights or users, or as part of a sale or merger of the business (in which case this policy continues to apply).

Some of these providers are outside your country, so your information may be processed overseas.

Cookies

We use only the cookies needed to keep you signed in and to secure sign-in. We don't use analytics or advertising cookies.

How long we keep it

We keep your account, sites and listing logins while your account is open, so you can always get to them. When you delete your account we remove this data within 30 days, except payment records we have to keep for tax and accounting, and backups that are overwritten on their normal cycle.

Your choices

You can see and edit your listing details in your dashboard and download your logins as CSV at any time. To get a copy of your data, correct it, or delete your account, email [email protected]. We reply within 30 days. Deleting your 8ake account doesn't delete listings already published on directories; you keep their logins so you can remove or manage them yourself.

Depending on where you live (for example under the GDPR, the UK GDPR, the Australian Privacy Act or US state laws) you may also have the right to object to or restrict processing, to data portability, and to complain to your local privacy regulator.

Security

Traffic is encrypted in transit, account passwords are hashed, and directory passwords are encrypted at rest. No system is perfectly secure, so use a strong, unique password for your 8ake account.

Children

8ake is for businesses and is not meant for anyone under 18. We don't knowingly collect data from children.

Changes

If we change this policy we'll update the date at the top, and tell you by email or in the app before a significant change takes effect.

Contact

Questions or requests: [email protected].