Legal

Privacy policy.

Last updated: 14 October 2026

1. Who we are

8Raise ("we", "us") is an AI-powered investor discovery service operated as a Model Context Protocol (MCP) connector for Claude. Our service helps founders, real estate operators, and fund managers find investors matching their criteria.

Contact for any privacy question: hi@8raise.com.

2. What we collect

When you create an account, we collect:

Email address (required for account identification and security)
Hashed password (we never store passwords in plaintext)
Phone number (only if you opt in to phone verification, used solely for SMS one-time codes)
LinkedIn profile basics (name, email, profile picture) if you sign in via LinkedIn
API key hash (we never store the full key itself once shown to you)

While you use the service, we also collect:

Search queries you submit through Claude
Lead lists you save or export
Usage counters (lead count, search count, timestamps)
Billing information (handled directly by Stripe, we never see your card number)

When you register for one of our free webinars, we collect your first name, email address, country, time zone and what you are raising for, and, only if you choose to give them, your phone number and how much you are raising and when.

3. What we don't collect

We do not collect or store your Claude conversations beyond the specific tool calls you make to 8Raise
We do not store your credit card or bank details. Stripe handles all payment data
We do not sell or share your search queries, saved leads, or any other personal data with third parties
We do not use your data to train AI models, ours or anyone else's

4. Third-party services

We rely on these vendors to operate the service. Each handles some of your data under their own privacy terms:

Supabase (database + auth). Stores your account, hashed key, and usage records
Anthropic (Claude API). We send batches of scraped LinkedIn snippets for AI verification
Apify (data sources). Runs the third-party scrapers that source investor profiles
Stripe. Payment processing
Twilio / SendPulse. SMS one-time codes and email delivery
Vercel + Railway. Hosting providers
Google Analytics. Counts visits and which pages are used, only if you click Accept on our cookie banner

5. How we use your data

To operate the service (run searches, generate leads)
To enforce per-user trial limits and plan caps
To process payments and send receipts
To send essential service emails (password resets, billing notices)
To send your webinar seat, calendar invite and reminders, and, only if you tick the box for it, news about future sessions (you can unsubscribe any time)
To respond to your support requests sent to hi@8raise.com
To improve our matching and scoring algorithms (using aggregated, anonymized usage patterns only)

We do not use your data for behavioral advertising. We do not send marketing emails unless you explicitly opt in.

6. Data about investors we surface

The investor profiles 8Raise returns are sourced from publicly available business data (LinkedIn, SEC filings, UK Companies House, public fund databases). We do not collect or process non-public personal data about investors.

If you are an investor and want to be removed from our searchable index, contact hi@8raise.com with your name and LinkedIn URL. We'll exclude you within 30 days.

7. Your rights

You can at any time:

Access your data via the dashboard or by emailing us
Export your saved leads and search history
Delete your account by emailing hi@8raise.com. We'll permanently remove your data within 30 days
Object to specific processing or request data correction

If you're in the EU/UK, you have additional rights under GDPR including the right to lodge a complaint with your local data protection authority.

8. Security

We use industry-standard practices: HTTPS everywhere, hashed passwords (bcrypt via Supabase Auth), hashed API keys (SHA-256), row-level security on the database, and least-privilege service roles. We do not store payment card details.

If you suspect a security issue, please email hi@8raise.com , and we treat security reports seriously and respond within 48 hours.

9. Cookies, analytics and advertising measurement

We use essential cookies: a session cookie for keeping you logged in, Supabase's auth cookie, and 8r_consent, which remembers your cookie choice.

Google Analytics, only if you say yes. We use Google Analytics to count visits and see which pages people use, so we can make 8Raise better. It loads only after you click Accept on our cookie banner. It then sets two cookies, _ga and _ga_8D8QXC0ZWN, which hold a random ID for your browser and last up to 2 years. If you click Decline, Google Analytics does not load and these cookies are not set. You can change your choice at any time: .

If you accepted, our server also tells Google Analytics when you create an account, run your first search, or make your first payment, using that same random browser ID. For a payment it sends the amount and the plan. We never send your name, your email address, your searches or your leads to Google Analytics, and we do not use it for advertising. The legal basis is your consent.

There are no advertising cookies or advertising scripts on this site. Nothing about your visit is sent to an advertising platform by your browser.

We do advertise, and we measure whether those ads work. If you arrive from an ad, the platform adds an identifier to the link (for example LinkedIn's li_fat_id). We keep that identifier, plus any campaign tags on the URL, in your browser's session storage for the length of your visit, and we store it against your account if you sign up. It is first-party: it is never read by, or sent to, anyone else while you browse.

When you create an account, run your first search, or your first subscription payment succeeds, our server tells the advertising platform that a conversion happened. We send only the SHA-256 hash of your email address, that click identifier, and, for a purchase, the amount. We never send your name, your searches, your leads, or anything about how you use 8raise, and we never send your email address in plain text.

The legal basis is our legitimate interest in knowing which of our ads produce customers, and we have kept the data to the minimum that achieves it. To object to this processing, email hi@8raise.com and we will exclude your account from conversion reporting.

10. Data retention

Active accounts: data retained for as long as the account is active.

Cancelled accounts: API key hashes and usage data retained for 90 days for billing reconciliation, then deleted. Your account row, saved leads, and search history are deleted within 30 days of account deletion request.

Webhook idempotency log: 30 days, then auto-purged.

11. Children

8Raise is not intended for users under 18. We do not knowingly collect data from minors.

12. Changes to this policy

We may update this policy as the service evolves. Material changes will be communicated via email and a notice on the dashboard. The “Last updated” date at the top of this page reflects the most recent change.

13. Contact

Privacy questions, deletion requests, or anything else: hi@8raise.com.