Privacy Policy

1. Introduction

This Privacy Policy explains how 8pt collects, uses, stores and protects your information when you use the 8pt.dev website, asset library, 8pt MCP, the 8pt command-line tool and related services (together, the Service), and the rights you have.

We collect only the information needed to provide the Service, and we do not sell your personal information.

2. Information we collect

2.1 Information you give us

• Account information: email, display name, avatar, and the account identifier and basic profile provided by Google or another third party when you sign in with it.
• Billing information: when you buy a paid plan, payment details are collected and processed directly by Stripe. We do not store card numbers in our own systems.
• Content you submit: components, templates and descriptions you submit, the lists and themes you save, and feedback you send us.

2.2 Information generated when you use the Service

• Usage records: actions such as copying, installing and saving, and the number, time and tool name of MCP and command-line calls, used for usage limits and abuse prevention.
• Device and connection information: browser type, operating system, IP address and login session records (you can view and sign out of other sessions in settings).
• Visit statistics: we use our own anonymous statistics to understand site traffic, recording pages visited, referring sites, device and browser type, screen width, language, the country or region determined from your IP address, and time on page (only the country or region code is stored). We use no third-party analytics service and do not store raw IP addresses; visitor identifiers change daily and cannot identify you. Raw records are kept for 90 days, after which only daily totals remain. Nothing is recorded when your browser sends Do Not Track.
• Local storage: we use necessary cookies to keep you signed in, and store settings such as theme and interface preferences locally in your browser.
• Interface language: on your first visit we choose the Chinese or English interface from the country or region of your IP address and remember the result in a cookie; the IP address is used only for that request and is never stored. Once you switch languages yourself, we always show the language you picked. Country and region data comes from DB-IP (IP Geolocation by DB-IP, CC BY 4.0).

2.3 Information from third parties

To provide the Service, we receive necessary information from sign-in providers (Google, GitHub) and our payment processor (Stripe), such as account identifiers, email and subscription status. We do not buy personal information from data brokers.

3. How we use information

We use this information to:

• Providing, operating, maintaining and improving the Service;
• Verifying identity, managing sessions and API keys, and preventing fraud, abuse and unauthorized access;
• Processing payments, managing subscriptions and issuing invoices;
• Sending service messages such as login links, billing and security notices, and submission review results;
• Sending the weekly update email after you subscribe, and recording subscription, confirmation and unsubscribe status;
• Responding to your feedback and support requests;
• Complying with legal obligations and enforcingTerms of Service.

We will not use content you submit or your input in 8pt AI to train our own models without your explicit consent.

4. Service providers and third parties

We rely on a small number of service providers to run the Service. They process information only on our instructions and are bound by confidentiality and security obligations:

• Website hosting and database: Spaceship;
• Log in: Google, GitHub;
• Payments and subscriptions: Stripe;
• Email delivery: Spacemail.

Apart from the cases above and where required by law or necessary to protect the lawful rights of 8pt and its users, we do not share your personal information with third parties. If our service providers change significantly, we will update this policy.

5. How long we keep information

• Account information: kept while your account exists; deleted or anonymized within a reasonable time after you delete your account, unless the law requires otherwise.
• Login links and verification tokens: short-lived, and invalid once used or expired.
• Usage records and logs: generally kept no longer than twelve months, unless security or legal reasons require longer.
• Billing records: kept for as long as tax and accounting rules require.

6. Your rights

Depending on the laws where you live, you may have the right to access, correct, export or delete your personal information, withdraw consent, or restrict or object to certain processing. You can edit your profile, manage sessions and API keys, and delete your account in settings; for other requests, write to us and we will reply within the time the law requires.

We send a weekly email (newly added templates, components and Skills) only to people who subscribe: subscribing from the site footer requires clicking the link in a confirmation email, and signing up or subscribing in settings requires you to tick the box or turn on the switch yourself. Every newsletter has a one-click unsubscribe link at the bottom, and you can turn it off in your account settings at any time; we stop sending once you unsubscribe. Service messages about sign-in, billing and security can’t be unsubscribed from while your account exists.

7. Security

We take reasonable technical and organizational measures to protect your information, including:

• HTTPS encryption across the whole site;
• API keys are shown in full only once, when created, and the server stores only a hash;
• Access to the admin console is limited to authorized staff, and key actions are logged.

No system is perfectly secure. If you find a security issue, please tell us promptly; if a security incident affects you, we will notify you as the law requires.

8. International transfers

Our service providers may process data in different countries or regions. Your information may be transferred to and processed outside the place where you live, and we require recipients to provide protection comparable to this policy.

9. Children

The Service is not directed to children under 16, and we do not knowingly collect personal information from children. If you believe a child has given us personal information, contact us and we will delete it promptly.

10. Changes to this policy

We may update this policy from time to time and will change the Last updated date at the top of the page; significant changes will be announced prominently on the site or by email. Continuing to use the Service after an update takes effect means you accept the updated policy.

11. Contact us

For privacy questions, requests or complaints, contact:

Privacy and data requests:legal@8pt.dev
General questions:support@8pt.dev