Section 1
Scope and roles
This Privacy Policy applies to the My 8bit account, Workspace Wizard, workspace-generation and revision tools, subscriptions, publishing tools, hosted websites, deployment credentials, related APIs, support, and the 8bitcompany.com website, collectively called the "Service."
8bit acts as a controller or business for personal information used to create and administer customer accounts, provide billing and support, secure and improve the Service, and operate our own website and business. When personal information flows through a customer-hosted website, 8bit generally acts as the customer's service provider or processor and follows the customer's lawful instructions, our agreement, and applicable law.
Each customer controls its website, determines why and how visitor information is collected, and is responsible for providing its own accurate privacy notice and obtaining any required consent. This policy does not replace a customer's privacy notice. Visitors should contact the customer that operates the site about that customer's practices or requests involving site data.
Section 2
Personal information we collect
The categories below describe information we may collect, where it comes from, and why we use it. The information we receive depends on the features you use and what you or a customer website choose to provide.
| Category | Sources | Purposes |
|---|---|---|
| Account identifiers and contact information | You, your organization, and account authentication and administration activity. | Create and secure accounts, provide the Service, communicate with you, provide support, and enforce our Terms. |
| Billing and subscription information | You and our payment processor. Payment-card details are submitted to and handled by Stripe, not stored directly by 8bit. | Process purchases, manage subscriptions, prevent fraud, maintain transaction records, and meet tax and accounting obligations. |
| Workspace, upload, and hosted-site content | Information you enter in Workspace Wizard and files, releases, settings, and other content you upload or publish. | Generate workspace files, provide downloads, publish and host sites, support revisions, enforce plan limits, and address security or abuse. We also review this content to diagnose failures and improve templates, prompts, generation quality, and Service features. We do not use it to train AI models or for advertising. |
| Deployment and access data | Deployment tokens, site slugs, access settings, viewer invitations, and records created when you configure or use publishing features. | Authenticate deployments, manage site access, deliver releases, investigate misuse, and protect accounts and hosted sites. |
| Network, device, and browser data | Your browser, device, network requests, server logs, cookies, and similar technologies. | Operate and secure the Service, diagnose errors, measure usage, prevent abuse, and maintain performance. This may include IP address, request time, requested URL, browser type, device type, and operating-system information. |
| Support and other correspondence | Messages, attachments, feedback, and other information you send to us. | Respond to requests, troubleshoot problems, improve the Service, maintain business records, and protect legal rights. |
| Analytics data | Google Analytics on public marketing and legal pages, including page views, referral information, interactions, and approximate device or location information. | Understand public-site use, evaluate content and campaigns, and improve the website. We do not send authenticated application identities to marketing analytics, and analytics is not loaded on designated account, admin, and authentication routes. |
How we use your workspace and site content
We use workspace, upload, and hosted-site content for the limited purposes of operating and improving the Service, not for advertising or building a competing product. We do not use this content to train or fine-tune AI models, and we do not send it to a third-party AI provider for that purpose. Access for improvement purposes is limited to personnel who need it, and that access is logged. We may retain aggregated or deidentified insights after the underlying content is deleted.
A customer-hosted site may collect additional information selected by that customer or collected by tools the customer adds. The customer, not 8bit, decides those categories and purposes unless we expressly agree otherwise.
Section 3
How we use information
We use personal information to:
- operate, maintain, deliver, and improve the Service and requested features;
- create accounts, workspaces, downloads, deployments, and hosted releases;
- process billing, subscriptions, renewals, cancellations, taxes, and related records;
- authenticate users, protect accounts and tokens, prevent fraud and abuse, and investigate security incidents;
- answer questions, provide support, send service messages, and resolve disputes;
- monitor performance, understand use, diagnose errors, and develop improvements, including by reviewing workspace and upload content to improve templates, prompts, and generation quality, but not to train AI models;
- comply with law, lawful process, and enforceable requests, and protect the rights, safety, and property of 8bit, customers, visitors, and others.
When we process visitor information for a customer-hosted site, we use it to provide and secure hosting, deliver the site and its configured access controls, follow the customer's instructions, and meet legal obligations.
Section 4
Disclosure to third parties
We disclose personal information only as reasonably needed for the purposes described in this policy, including to the following categories of recipients:
- Payment processors. Stripe handles payment details, checkout, billing, and subscription transactions.
- Hosting and infrastructure providers. Providers may store files and databases, deliver hosted sites, process network traffic, maintain backups, monitor reliability, and protect the Service.
- Analytics. Google Analytics processes public-site usage and device data to provide measurement and reporting.
- Email delivery and support providers. Providers may deliver account or service messages and help us respond to correspondence.
- AI tooling. Workspace Wizard generates a Markdown build prompt without sending your answers to an AI model. You choose and supply any external AI service used after download. If an 8bit feature later uses third-party AI to process customer content, we will identify that processing and update this policy before using it as required by law.
- Legal and safety recipients. We may disclose information when reasonably necessary to comply with law or lawful process, enforce agreements, investigate abuse, or protect rights, property, or safety.
- Business transaction recipients. Information may be reviewed or transferred in connection with a financing, merger, acquisition, reorganization, sale of assets, or similar transaction, subject to appropriate protections.
8bit does not sell personal information and does not share personal information for cross-context behavioral advertising. We do not use personal information collected as a service provider for a customer's hosted site for our own advertising.
Section 6
California privacy rights
To the extent the California Consumer Privacy Act, as amended by the California Privacy Rights Act, applies to 8bit or particular processing, a California consumer may have the right to know the categories and specific pieces of personal information collected; access that information; request deletion; request correction of inaccurate information; opt out of sale or sharing; limit certain use and disclosure of sensitive personal information; and receive equal service and pricing without unlawful discrimination for exercising a privacy right.
To submit a request, email info@8bitcompany.com with the subject "California Privacy Request." Describe the right you want to exercise and provide the account email or other information reasonably needed to locate your records. Do not send passwords, deployment tokens, payment-card numbers, or government identification unless we specifically request an appropriate verification method.
We verify requests by matching information you provide to account or transaction records and, when appropriate, confirming control of the relevant email or account. We use verification information only for verification, fraud prevention, and legal compliance. The level of verification depends on the request and the sensitivity of the information. If we cannot verify a request, we may deny it or provide a more limited response.
An authorized agent may submit a request on your behalf. We may require proof of signed permission, verification of the agent's identity and authority, and direct confirmation from you, unless the agent has a valid power of attorney or applicable law provides otherwise.
We will acknowledge and respond within the time required by law. Verified requests to know, access, delete, or correct are generally answered within 45 calendar days. We may take one additional 45-day period when reasonably necessary and will notify you of the extension. You may appeal or contact the appropriate regulator if you believe a request was handled improperly.
For visitor information processed for a customer-hosted site, please contact the customer that operates the site. We will assist the customer with requests as required by our agreement and applicable law.
Section 7
Data retention
We retain personal information only as long as reasonably necessary for the purposes described in this policy. The period depends on the type of information, account and subscription status, customer instructions, operational and security needs, backup cycles, dispute and enforcement needs, and tax, accounting, contractual, and legal requirements.
When paid hosting access ends, hosted sites are suspended and currently retained for 30 days before permanent deletion. Deletion may occur sooner for a Terms violation, security event, legal requirement, your request, or when continued retention creates risk. Recovery is not guaranteed during that period. Workspace downloads may remain available after cancellation, but are not stored indefinitely.
Deleted information may remain for a limited time in backups, security records, fraud-prevention records, and logs until those records are overwritten or no longer needed. We may retain information longer when required by law, lawful process, a litigation hold, or the need to establish, exercise, or defend legal claims. We may retain aggregated or deidentified information that cannot reasonably identify a person.
Section 8
Security
We use reasonable administrative, technical, and physical measures designed to protect personal information based on its nature and the risks involved. These measures include access controls, credential and token protections, secure transmission, logging, monitoring, and procedures for responding to suspected incidents where appropriate.
No transmission or storage system is completely secure, and we do not guarantee that unauthorized access, loss, misuse, or corruption will never occur. You are responsible for protecting your account, deployment tokens, local workspace files, and independent backups, and for promptly telling us about suspected compromise.
Section 9
International visitors and transfers
The Service is directed to customers in the United States. 8bit is based in California, and personal information is processed in the United States. If you access the Service from another country, your information may be transferred to, stored in, and processed in the United States, where privacy laws may differ from those in your location.
A customer-hosted public website may be accessible outside the United States. The customer that operates the site is responsible for deciding whether to serve international visitors, identifying applicable legal bases, providing required notices and rights, and arranging any required transfer safeguards. Contact that customer about its international processing.
Section 10
Children
Accounts are for adults. Our Terms of Service require every account holder to be at least 18 years old and legally able to enter a contract, so we do not intend to collect personal information from anyone under 18 through account signup, billing, or the Workspace Wizard. We do not have actual knowledge that we sell or share the personal information of consumers under 16 years of age.
8bit's own Service is not directed to children under 13, and we do not knowingly collect personal information from a child under 13 through 8bit's own accounts or marketing site. If you are a parent or guardian and believe a child provided personal information to 8bit, email info@8bitcompany.com so we can investigate and delete it as appropriate.
A customer may not operate a hosted site directed to children under 13 or knowingly collect their personal information through that site without 8bit's prior written approval and all legally required notices, consent, and safeguards. The customer remains responsible for its site, its audience, and any child-directed processing.
Section 11
Changes to this policy
We may revise this Privacy Policy to reflect changes in the Service, our practices, or legal requirements. We will post the revised version, update the effective and last-updated dates, and provide additional notice of material changes when required by law. Changes apply prospectively on the stated effective date.
Section 12
Contact
Questions, privacy requests, or concerns about this policy may be sent to info@8bitcompany.com. Include enough detail for us to identify the issue and the relevant account, transaction, or hosted site without sending credentials or other unnecessary sensitive information.
8bit Company, LLC · Salinas, California, United States
Read our Terms of Service.
