Legal
Privacy Policy
Last updated: August 2, 2026
This Privacy Policy explains how Eightleads (“Eightleads,” “we,” “us,” or “our”) collects, uses, stores, and shares information when you use eightleads.com and related services (the “Service”).
1. Who we are
Eightleads is an AI-assisted reactivation and research product that helps SaaS teams email dormant signups, review drafts before sending, track replies, and generate insight reports. Our website is eightleads.com.
2. Information we collect
We may collect:
- Account information — name, email address, and profile details from your Google sign-in.
- Mailbox connection data — OAuth tokens and related metadata needed to send and read Gmail messages you authorize for outreach and reply tracking. Tokens are stored encrypted at rest.
- Contact and list data — information you upload (for example CSV signup or customer lists), including names, emails, company fields, and lifecycle attributes you provide.
- Campaign and message content — campaign settings, email drafts, approved sends, replies, classifications, and insight reports generated in your workspace.
- Brand and workspace settings — product URLs, brand context, sending mode preferences, suppressions, and similar configuration.
- Usage and technical data — logs, device/browser information, and diagnostic events needed to operate and secure the Service.
3. How we use information
We use information to:
- Provide, operate, and improve the Service
- Authenticate users and connect authorized Gmail mailboxes
- Reconcile signup and customer lists so paying customers can be excluded from outreach
- Draft, queue, send, and track emails you approve or configure
- Analyze replies with AI models to classify intent and produce insight reports
- Respond to support requests and enforce safety controls (including pause / kill-switch features)
- Comply with legal obligations and protect against abuse
4. AI processing
Eightleads uses third-party AI providers to draft emails, classify replies, and generate reports. Content from your workspace (such as brand context, contact fields relevant to a draft, and reply text) may be sent to those providers solely to perform the requested feature. We do not sell your contact lists.
5. Gmail / Google user data
If you connect Gmail, Eightleads accesses only the Google account scopes you grant (typically send and read scopes needed for outreach and reply detection). We use that access to:
- Send emails you draft or approve through the Service
- Detect and import replies related to those outreach threads
- Maintain deliverability and conversation state in your workspace
We do not use Gmail content to build advertising profiles, and we do not sell Google user data. You can disconnect Google access from account settings or via your Google Account permissions.
6. How we share information
We may share information with:
- Service providers — hosting, database, email infrastructure (Google), AI providers, analytics, and similar vendors that process data on our behalf
- Legal and safety — when required by law, or to protect rights, security, and integrity of the Service
- Business transfers — in connection with a merger, acquisition, or asset sale, subject to appropriate safeguards
We do not sell personal information.
7. Data retention
We retain account, contact, campaign, and message data for as long as your workspace remains active or as needed to provide the Service, resolve disputes, and meet legal requirements. You may request deletion of your account and associated workspace data by contacting us.
8. Security
We use industry-standard safeguards, including encryption of sensitive tokens at rest and access controls around workspace data. No method of transmission or storage is 100% secure, so we cannot guarantee absolute security.
9. Your choices
- Review emails before send when review-first mode is enabled
- Pause sending from Settings
- Upload suppressions / honor unsubscribe requests
- Disconnect Google / Gmail access
- Request access, correction, or deletion of personal data we hold
10. Children’s privacy
The Service is not directed to children under 16, and we do not knowingly collect personal information from children.
11. International users
If you access the Service from outside the country where our infrastructure operates, your information may be processed in other countries that may have different data-protection laws.
12. Changes to this policy
We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the “Last updated” date above.
13. Contact
For privacy questions or data requests, contact us via eightleads.com or see our About page.