Privacy policy.

8Raise ("we", "us") is an AI-powered investor discovery service operated as a Model Context Protocol (MCP) connector for Claude. Our service helps founders, real estate operators, and fund managers find investors matching their criteria.

Contact for any privacy question: hi@8raise.com.

When you create an account, we collect:

• Email address (required for account identification and security)
• Hashed password (we never store passwords in plaintext)
• Phone number (only if you opt in to phone verification, used solely for SMS one-time codes)
• LinkedIn profile basics (name, email, profile picture) if you sign in via LinkedIn
• API key hash (we never store the full key itself once shown to you)

While you use the service, we also collect:

• Search queries you submit through Claude
• Lead lists you save or export
• Usage counters (lead count, search count, timestamps)
• Billing information (handled directly by Stripe, we never see your card number)

• We do not collect or store your Claude conversations beyond the specific tool calls you make to 8Raise
• We do not store your credit card or bank details. Stripe handles all payment data
• We do not sell or share your search queries, saved leads, or any other personal data with third parties
• We do not use your data to train AI models, ours or anyone else's

We rely on these vendors to operate the service. Each handles some of your data under their own privacy terms:

• Supabase (database + auth). Stores your account, hashed key, and usage records
• Anthropic (Claude API). We send batches of scraped LinkedIn snippets for AI verification
• Apify (data sources). Runs the third-party scrapers that source investor profiles
• Stripe. Payment processing
• Twilio / SendPulse. SMS one-time codes and email delivery
• Vercel + Railway. Hosting providers

• To operate the service (run searches, generate leads)
• To enforce per-user trial limits and plan caps
• To process payments and send receipts
• To send essential service emails (password resets, billing notices)
• To respond to your support requests sent to hi@8raise.com
• To improve our matching and scoring algorithms (using aggregated, anonymized usage patterns only)

We do not use your data for behavioral advertising. We do not send marketing emails unless you explicitly opt in.

The investor profiles 8Raise returns are sourced from publicly available business data (LinkedIn, SEC filings, UK Companies House, public fund databases). We do not collect or process non-public personal data about investors.

If you are an investor and want to be removed from our searchable index, contact hi@8raise.com with your name and LinkedIn URL. We'll exclude you within 30 days.

You can at any time:

• Access your data via the dashboard or by emailing us
• Export your saved leads and search history
• Delete your account by emailing hi@8raise.com. We'll permanently remove your data within 30 days
• Object to specific processing or request data correction

If you're in the EU/UK, you have additional rights under GDPR including the right to lodge a complaint with your local data protection authority.

We use industry-standard practices: HTTPS everywhere, hashed passwords (bcrypt via Supabase Auth), hashed API keys (SHA-256), row-level security on the database, and least-privilege service roles. We do not store payment card details.

If you suspect a security issue, please email hi@8raise.com , and we treat security reports seriously and respond within 48 hours.

We use only essential cookies: a session cookie for keeping you logged in, and Supabase's auth cookie. We do not run analytics or advertising cookies, and there are no third-party tracking scripts on this site. Nothing about your visit is sent to an advertising platform by your browser.

We do advertise, and we measure whether those ads work. If you arrive from an ad, the platform adds an identifier to the link (for example LinkedIn's li_fat_id). We keep that identifier, plus any campaign tags on the URL, in your browser's session storage for the length of your visit, and we store it against your account if you sign up. It is first-party: it is never read by, or sent to, anyone else while you browse.

When you create an account, run your first search, or your first subscription payment succeeds, our server tells the advertising platform that a conversion happened. We send only the SHA-256 hash of your email address, that click identifier, and, for a purchase, the amount. We never send your name, your searches, your leads, or anything about how you use 8raise, and we never send your email address in plain text.

The legal basis is our legitimate interest in knowing which of our ads produce customers, and we have kept the data to the minimum that achieves it. To object to this processing, email hi@8raise.com and we will exclude your account from conversion reporting.

Active accounts: data retained for as long as the account is active.

Cancelled accounts: API key hashes and usage data retained for 90 days for billing reconciliation, then deleted. Your account row, saved leads, and search history are deleted within 30 days of account deletion request.

Webhook idempotency log: 30 days, then auto-purged.

8Raise is not intended for users under 18. We do not knowingly collect data from minors.

We may update this policy as the service evolves. Material changes will be communicated via email and a notice on the dashboard. The “Last updated” date at the top of this page reflects the most recent change.

Privacy questions, deletion requests, or anything else: hi@8raise.com.