Effective date: March 19, 2026
Engine8 AI (“Engine8,” “we,” “us”) provides a natural-language analytics platform that connects to your business services and helps you understand your data. This policy explains what information we collect, how we use it, and the choices you have.
When you sign up, we collect your name, email address, and company name. This is used to create your account and identify your organization.
When you connect a service (such as Google Analytics, Shopify, Stripe, QuickBooks, Klaviyo, or Google Search Console), we access data from that service on your behalf to answer your questions. We retrieve this data in real time. We do not copy or permanently store the raw contents of your connected services.
We store the questions you ask and the responses you receive so you can review past conversations. This includes metadata such as timestamps, token counts, and which services were queried.
We collect information about how you interact with the platform, including query volume, feature usage, and session activity. This helps us improve the product and monitor system health.
We store hashed passwords, session tokens, and login event logs (email, IP address, country, user agent) for security and fraud prevention.
We rely on a limited set of third-party providers to operate the platform:
| Provider | Purpose |
|---|---|
| Supabase | Database and authentication |
| Vercel | Website hosting |
| OpenRouter | LLM inference (query processing) |
| Resend | Transactional email delivery |
| Cloudflare | DNS, DDoS protection, and traffic routing |
Each provider is selected for its security practices and processes data only as necessary to deliver its function. We do not share your data with any provider beyond what is required for the service to operate.
When you connect a third-party service, you authorize Engine8 to access that service through an OAuth token. These tokens are:
We never request write access to your connected services unless a specific feature requires it, and we will clearly disclose this before authorization.
You may, at any time:
We will respond to all data requests within 30 days.
Our infrastructure is hosted in the United States. If you are accessing Engine8 from outside the U.S., your information will be transferred to and processed in the U.S. We apply the same security and privacy protections regardless of where you are located.
Engine8 is a business tool and is not intended for use by individuals under 18. We do not knowingly collect information from minors.
We may update this policy from time to time. If we make material changes, we will notify you by email or through the platform. The effective date at the top of this page will always reflect the latest revision.
For questions about this policy or your data: