8gentHub Privacy Policy

1. Information We Collect

Depending on how you use the service, we may collect:

• account data such as email address, username, password hash, verification state, and account status
• authentication and security data such as login activity, session identifiers, CSRF-related data, password reset artifacts, email verification state, API key metadata, and abuse-prevention records
• platform activity such as published agents, skills, uploads, comments, ratings, discussions, rewards, wallet activity, benchmark data, install runs, and sync logs
• integration data such as linked repository metadata, GitHub App installation identifiers, repository owner/name, and related sync state
• payment and commerce data such as token pack purchases, Stripe checkout session references, webhook-related purchase records, wallet balances, creator reward data, and transaction history
• technical and usage data such as IP address, device/browser information, request metadata, error logs, rate-limit data, and security scan results
• communications data such as feedback submissions, transactional emails, support or policy inquiries, and notification preferences

2. How We Use Information

We use personal data to:

• operate, maintain, secure, and improve the platform
• authenticate users and protect accounts
• host, display, distribute, export, and validate user-published content
• process purchases, wallet activity, creator rewards, and related accounting records
• operate integrations such as GitHub linking and repository sync
• prevent abuse, spam, fraud, malware, scraping, and other harmful activity
• analyze platform usage and performance
• comply with legal obligations and enforce platform policies

3. Cookies and Similar Technologies

8gentHub uses cookies and similar browser storage for essential platform functionality and security, including authentication session cookies and CSRF protection cookies.

For more detail, see the Cookies Policy.

4. Data Sharing

We do not sell personal data for money.

We may share data with service providers and processors that help us operate the platform, such as:

• cloud hosting and storage providers
• payment processors and payment-related vendors
• email delivery providers
• security, logging, and abuse-prevention providers
• source-control and developer tooling integrations that you choose to connect

We may also disclose information when reasonably necessary to comply with law, protect users, enforce policies, investigate abuse, or respond to legal process.

5. Data Retention

We retain personal data only for as long as reasonably necessary for service operation, security, legal compliance, dispute handling, and legitimate business recordkeeping.

The platform may apply retention windows to some operational data sets such as sync runs, download records, and stale uploads. Some records may be retained longer where needed for fraud prevention, accounting, legal compliance, audit integrity, or abuse investigations.

6. Account Deletion, Export, and User Rights

Users may request or use available product features for:

• account deletion
• data export
• correction of inaccurate account information

The product currently provides account export and deletion functionality. When an account is deleted through the product flow, some authentication and private-account state may be removed while certain audit, community, financial, abuse-prevention, or legal-compliance records may be retained or de-identified.

Requests or questions may be sent to privacy@8genthub.com.

7. Security

We implement reasonable administrative, technical, and organizational safeguards designed to protect personal data.

This includes measures such as secure cookies in non-local environments, CSRF protections for state-changing requests, credential hashing, rate limiting, security scanning for some uploads, and controlled access to sensitive configuration or secret material.

No system is perfectly secure, and we cannot guarantee absolute security.

8. International and Regional Rights

Depending on where you live, you may have legal rights relating to access, deletion, correction, objection, restriction, portability, or withdrawal of consent where consent is the basis for processing.

Where required by law, we will handle such requests in accordance with applicable privacy law.

9. Children

8gentHub is not directed to children under 13, and we do not intend to knowingly collect personal data from children under 13. If you believe a child has provided personal data to the platform without appropriate authorization, contact privacy@8genthub.com so we can review and take appropriate action.

10. Changes to This Policy

We may update this policy periodically. Continued use of the platform after an updated policy becomes effective means the revised policy will apply going forward.