Privacy
Privacy notice. Plain language, no small print.
What we collect when you visit eighthagent.com, use AI Studio or send us a form; why we collect it; who processes it; how long we keep it; and how to reach us. Last updated: 7 November 2026.
Who we are
The Eighth Agent.
- Who is responsible
The Eighth Agent, an AI engineering consultancy, runs eighthagent.com and decides how the data described here is used.
- How to reach us
Email [email protected] about anything on this page. We reply within 30 days, usually much sooner.
What we collect
What we collect, and when.
- When you use AI Studio
The website you scan, the score and results the tool shows you, the questions you type in the chat (the first 300 characters) and the answers, your language, the page or campaign that sent you, your approximate country and city, and your device type. We do not store your IP address.
- When you send a form
Your email and anything you choose to add, such as your name, company, website and what you need. This covers reports, blueprints, quotes, templates and partner calls.
- When you use a LinkedIn lead form
The details LinkedIn shares with us when you submit a form inside one of our ads, such as your name, email, job title, company and country.
- When you visit a page
Which page, the referring site or campaign tag, approximate country and city, and device type. Unique visitors are counted with a code that changes every day and cannot identify you. Cloudflare Web Analytics also counts visits, without cookies.
- Cookies and browser storage
Two functional cookies: lang remembers the language you chose (1 year) and geo picks the language on your first visit (1 day). Your browser also keeps a few settings on your device, such as a prompt you closed or a report you unlocked. We use no advertising or tracking cookies.
- Website reports we prepare
Sometimes we scan a company's public website ourselves and send someone there a private link to the report. It uses only public pages. We count how many times the link is opened, not who opened it.
Why
Why we use it.
- To give you what you asked for
To run the scan, show your results and send the report, blueprint, quote or template you requested.
- To follow up about your request
We may contact you about what you asked for. Tell us to stop at any time and we will.
- To improve our tools
To see which pages and features help people, and to fix what doesn't work.
- What we never do
We don't sell your data, share it for advertising, or use it to train AI models.
Who processes it
The services we use.
| Provider | What it does for us | Where |
|---|---|---|
| Cloudflare | Hosts the site; stores Studio results, page-view counts and form requests; runs Web Analytics; reads and indexes the websites you scan | Global network; may be outside your country |
| Anthropic | Writes the AI Studio answers, scores and reports. Under its commercial terms, inputs are not used to train its models | United States |
| Google Workspace | Our email, where requests and follow-ups arrive | Google data centres |
| Collects the lead forms in our LinkedIn ads | LinkedIn data centres | |
| Web3Forms, FormSubmit | Deliver the contact form on our event page to our email | Their own servers |
Each provider processes data only to provide its service to us.
How long
How long we keep it.
- AI Studio results and page views
90 days, then deleted automatically.
- A website's cached text
7 days, so the same website can be scanned again quickly.
- Your requests and emails
Until you ask us to delete them, and never more than 24 months.
- Website reports we share
90 days, then the link stops working.
Your rights
What you can ask us to do.
- See your data
Ask for a copy of what we hold about you.
- Correct or delete it
Ask us to fix what is wrong or delete what we hold.
- Stop follow-ups
Ask us to stop contacting you. One email is enough.
- How to ask
Email [email protected] from the address you used, or say which website you scanned. We reply within 30 days. You can also complain to the data protection authority in your country.
GCC laws
Data protection laws we follow.
| Country | Law |
|---|---|
| UAE | Federal Decree-Law No. 45 of 2021 on Personal Data Protection; in DIFC, the DIFC Data Protection Law 2020; in ADGM, the Data Protection Regulations 2021 |
| Saudi Arabia | Personal Data Protection Law (PDPL), overseen by SDAIA |
| Qatar | Law No. 13 of 2016 on Personal Data Privacy Protection; in QFC, its Data Protection Regulations |
| Bahrain | Law No. 30 of 2018 on Personal Data Protection |
| Oman | Personal Data Protection Law, Royal Decree No. 6 of 2022 |
| Kuwait | CITRA Data Privacy Protection Regulation |
A practical summary, not legal advice.
Questions about your data?
Email [email protected]. We reply within 30 days.