Privacy Policy

1. Scope

This policy explains how Node8 collects, uses, stores, and discloses personal information when you visit our website, contact us, or use related services.

2. Information We Collect

We collect information you provide directly, information generated during website interactions, and information we obtain about you from third-party providers.

• Contact details such as name, work email, company, and message content.
• Technical and usage data such as IP address, device/browser type, pages visited, time spent on each page, and referral source.
• Communication preferences, including subscription and marketing opt-in choices.
• Business context you choose to share during consultation or project discovery.
• Identity and company information inferred from your visit, as described in Section 3.

3. Website Visitor Identification

You should read this section even if you skip the rest. Our website uses third-party visitor identification services that attempt to work out who you are from your visit, without you filling in any form.

These services match signals from your visit — primarily your IP address, together with device and browser characteristics — against commercial databases. Where a match is found, we may learn:

• Your name and job title.
• Your business email address and, in some cases, a phone number.
• Your employer, and that company's size, industry, revenue band and location.
• Your LinkedIn profile.
• Which pages you viewed, in what order, and for how long.

The providers we use for this are:

• Warmly (privacy policy) — person-level visitor identification.
• RB2B (privacy policy) — person-level visitor identification.
• Leadsy (privacy policy) — visitor identification.

What we do with it. Identified visitors are recorded in our customer relationship management system. Where an identified business contact meets our criteria, we may send them an email about our services — meaning a visit to this website can result in us contacting you even though you never gave us your details. Any such email identifies us clearly and contains a way to stop receiving them.

This information is inferred, not verified. It is sometimes wrong: matches can attribute the wrong person, the wrong employer, or the wrong job title to a visit. If we have your details wrong, or you would rather we held nothing at all, tell us at team@node8.ai and we will correct or delete the record.

4. How We Use Information

• Respond to inquiries and provide requested services.
• Operate, monitor, troubleshoot, and improve website performance.
• Identify business visitors and contact them about our services, as described in Section 3.
• Send operational updates and, where allowed, relevant marketing communications.
• Protect systems and prevent fraud, abuse, or unauthorized access.
• Meet legal, accounting, and compliance obligations.

5. Legal Bases (Where Applicable)

Depending on jurisdiction, processing may be based on consent, contractual necessity, legal obligations, or legitimate interests.

For the visitor identification described in Section 3, and for business-to-business outreach that follows from it, we rely on our legitimate interest in identifying and reaching potential business customers. We recognise that you have not asked us to do this.

You can object, and we will stop. Where data protection law gives you a right to object to direct marketing, that right is absolute: we do not weigh it against our own interests. Email team@node8.ai and we will stop processing your data for marketing and remove you from any outreach.

6. Sharing and Disclosure

We do not sell personal data. We share information with the service providers that operate parts of our business on our behalf, under confidentiality and data protection obligations:

• Warmly, RB2B and Leadsy — website visitor identification (Section 3).
• Clarify — customer relationship management, where contact and company records are stored.
• Smartlead — sending and managing business email outreach.
• Reacher — checking whether an email address is deliverable before we send to it.
• Neon — database hosting for the records described above.
• PostHog and Google Tag Manager — website analytics and tag management.

7. Data Retention

We retain personal data only for as long as necessary for the purposes in this policy, to resolve disputes, enforce agreements, and satisfy legal or regulatory requirements.

Website visitor records created through Section 3 are retained for up to 24 months from your last visit, unless you ask us to delete them sooner or you become a customer, in which case ordinary customer record retention applies.

8. International Data Transfers

Node8 operates from the United States, and the providers listed in Section 6 process data in the United States. If you are located elsewhere, your information will be transferred to and processed in the United States. Where required, we rely on appropriate safeguards such as the European Commission's standard contractual clauses.

9. Your Privacy Rights

Depending on your location, you may have rights to access, correct, delete, or restrict processing of your data, to receive a copy of it in a portable format, and to object to certain uses including direct marketing. You may also withdraw consent where processing is consent-based.

To exercise any of these, email team@node8.ai. We do not require you to hold an account with us, and we will not charge you or ask why.

10. Children's Privacy

Our services are not directed to children under 13, and we do not knowingly collect personal information from children under 13.

11. Updates to This Policy

We may revise this Privacy Policy from time to time. Material changes will be reflected by the updated date on this page.

12. Contact Us

If you have questions about this Privacy Policy or data handling practices, contact us at:

team@node8.ai