Privacy policy.
Last updated: April 19, 2026
1. Who we are
8Raise ("we", "us") is an AI-powered investor discovery service operated as a Model Context Protocol (MCP) connector for Claude. Our service helps founders, real estate operators, and fund managers find investors matching their criteria.
Contact for any privacy question: hi@8raise.com.
2. What we collect
When you create an account, we collect:
- Email address (required for account identification and security)
- Hashed password (we never store passwords in plaintext)
- Phone number (only if you opt in to phone verification, used solely for SMS one-time codes)
- LinkedIn profile basics (name, email, profile picture) if you sign in via LinkedIn
- API key hash (we never store the full key itself once shown to you)
While you use the service, we also collect:
- Search queries you submit through Claude
- Lead lists you save or export
- Usage counters (lead count, search count, timestamps)
- Billing information (handled directly by Stripe, we never see your card number)
3. What we don't collect
- We do not collect or store your Claude conversations beyond the specific tool calls you make to 8Raise
- We do not store your credit card or bank details. Stripe handles all payment data
- We do not sell or share your search queries, saved leads, or any other personal data with third parties
- We do not use your data to train AI models, ours or anyone else's
4. Third-party services
We rely on these vendors to operate the service. Each handles some of your data under their own privacy terms:
- Supabase (database + auth). Stores your account, hashed key, and usage records
- Anthropic (Claude API). We send batches of scraped LinkedIn snippets for AI verification
- Apify (data sources). Runs the third-party scrapers that source investor profiles
- Stripe. Payment processing
- Twilio / SendPulse. SMS one-time codes and email delivery
- Vercel + Railway. Hosting providers
5. How we use your data
- To operate the service (run searches, generate leads)
- To enforce per-user trial limits and plan caps
- To process payments and send receipts
- To send essential service emails (password resets, billing notices)
- To respond to your support requests sent to hi@8raise.com
- To improve our matching and scoring algorithms (using aggregated, anonymized usage patterns only)
We do not use your data for behavioral advertising. We do not send marketing emails unless you explicitly opt in.
6. Data about investors we surface
The investor profiles 8Raise returns are sourced from publicly available business data (LinkedIn, SEC filings, UK Companies House, public fund databases). We do not collect or process non-public personal data about investors.
If you are an investor and want to be removed from our searchable index, contact hi@8raise.com with your name and LinkedIn URL. We'll exclude you within 30 days.
7. Your rights
You can at any time:
- Access your data via the dashboard or by emailing us
- Export your saved leads and search history
- Delete your account by emailing hi@8raise.com. We'll permanently remove your data within 30 days
- Object to specific processing or request data correction
If you're in the EU/UK, you have additional rights under GDPR including the right to lodge a complaint with your local data protection authority.
8. Security
We use industry-standard practices: HTTPS everywhere, hashed passwords (bcrypt via Supabase Auth), hashed API keys (SHA-256), row-level security on the database, and least-privilege service roles. We do not store payment card details.
If you suspect a security issue, please email hi@8raise.com , and we treat security reports seriously and respond within 48 hours.
9. Cookies
We use only essential cookies: a session cookie for keeping you logged in, and Supabase's auth cookie. We do not use analytics, advertising, or third-party tracking cookies.
10. Data retention
Active accounts: data retained for as long as the account is active.
Cancelled accounts: API key hashes and usage data retained for 90 days for billing reconciliation, then deleted. Your account row, saved leads, and search history are deleted within 30 days of account deletion request.
Webhook idempotency log: 30 days, then auto-purged.
11. Children
8Raise is not intended for users under 18. We do not knowingly collect data from minors.
12. Changes to this policy
We may update this policy as the service evolves. Material changes will be communicated via email and a notice on the dashboard. The “Last updated” date at the top of this page reflects the most recent change.
13. Contact
Privacy questions, deletion requests, or anything else: hi@8raise.com.