Privacy Policy

1. Who we are

G8 IT ("G8", "we", "us") is an IT and AI automation firm based in Draper, Utah. We were founded by Adam Gleason, who has 30+ years of enterprise IT experience, and Ammon Gleason, a graduate student in artificial intelligence and machine learning at the University of Utah. We provide managed IT services and AI automation to small and mid-sized businesses across the United States.

2. What information we collect

We collect only the information we need to operate the site, respond to you, and deliver our services. Specifically:

• From visitors browsing the site. IP address, browser type and version, pages viewed, referrer URL, and standard server log fields. If Plausible analytics is enabled, anonymized page view and session counts are collected without cookies.
• From forms. When you submit our contact, lead, quote, careers, ticket, newsletter, ROI calculator, AI receptionist demo, or IT health-check forms we collect your name, email address, phone number, company, the message details you provide, and (for careers) any optional resume upload.
• From admin users. Name, email, role, a bcrypt-hashed password, and session tokens used to maintain authenticated sessions.
• From AI tooling. Prompt content you send to the public AI Receptionist demo is sent to Anthropic for inference and is logged by us in truncated form with an IP-hash (never the raw IP) for abuse prevention and rate limiting.

3. How we use information

• To fulfill the request or service you asked us for.
• To reply to inquiries and to communicate about engagements.
• To provide, secure, and improve our services and tooling.
• For internal, aggregate analytics about how the site is used.
• To detect, prevent, and respond to abuse, fraud, and security incidents.
• To meet legal, accounting, and contractual obligations.

4. Who we share it with

We engage the following subprocessors. Each is bound by their own terms and, where applicable, a data processing agreement. We do not sell personal data. Period.

• Anthropic, PBC. Powers the AI Receptionist demo and other AI features. Prompts are sent to the Anthropic API for inference. Per Anthropic's API terms, inputs are not used to train their foundation models.
• Cloudflare, Inc.. DNS, CDN, DDoS mitigation, and the Turnstile bot challenge embedded on public forms. Cloudflare may evaluate IP address and TLS fingerprint to score and challenge bot traffic.
• DigitalOcean, LLC. Hosting infrastructure for the website and database. Standard server logs (IP, User-Agent, path, timestamp) are processed for security and reliability.
• Resend (or equivalent SMTP provider). Transactional email delivery for contact replies, quote confirmations, ticket notifications, and admin alerts. Recipient address, subject, and body are processed in transit.
• Plausible Analytics (optional). Privacy-respecting, cookieless aggregate web analytics. Enabled only when PUBLIC_PLAUSIBLE_DOMAIN is configured. No cross-site tracking and no personal identifiers.
• Sentry-compatible error logging (optional). Structured application error monitoring. Stack traces and request metadata are forwarded only when an unhandled error occurs. Enabled only when SENTRY_DSN is configured.

We may also share information when required by law, when responding to a valid legal request, or to protect the rights, property, or safety of G8, our users, or the public.

5. How long we keep it

• Lead and inquiry data: retained for seven (7) years as part of our business records, then deleted or anonymized.
• Newsletter subscribers: retained until you unsubscribe, plus thirty (30) days to honor and confirm the unsubscribe.
• Anonymous analytics: retained for up to twenty-four (24) months.
• AI demo prompt logs: retained in truncated form for ninety (90) days, then aggregated into anonymous counters and deleted.
• Admin user data: retained for the duration of employment plus one (1) year for legitimate business and security purposes.

6. Your rights (GDPR and CCPA / CPRA)

Depending on where you live, you may have some or all of the following rights. To exercise any of them, email privacy@g8support.com or contact@G8support.com. We will respond within the timeframe required by applicable law.

• Access. Request a copy of the personal information we hold about you.
• Deletion. Request that we erase your personal information where no overriding legal basis applies.
• Portability. Receive a structured, machine-readable copy of the information you provided to us.
• Correction. Ask us to correct inaccurate or incomplete information.
• Opt-out of sale or sharing. We do not sell personal information and do not share it for cross-context behavioral advertising. You may still confirm this preference in writing.
• Withdraw consent. Withdraw consent for marketing communications at any time. Every marketing email includes an unsubscribe link.

California residents may also designate an authorized agent and may appeal denials of rights requests. EEA and UK residents may lodge a complaint with their local supervisory authority.

7. Security

All traffic to and from the site is encrypted with HTTPS / TLS 1.2 or higher. The production database is encrypted at rest. Administrative access is gated by role-based access control and multi-factor authentication, and is audit-logged. We review our subprocessor list quarterly. If we confirm a security incident affecting your data, we will follow our documented incident response process and notify you and applicable regulators within seventy-two (72) hours of confirmation, as required by law.

8. Cookies and tracking

We use cookies minimally. A session cookie is used to keep authenticated admins signed in. Cloudflare Turnstile may set a short-lived challenge token to verify you are not a bot. We do not use third-party tracking pixels and we do not use cross-site tracking. If Plausible analytics is enabled, it operates without cookies and without collecting personal identifiers.

9. Children

Our services are intended for businesses and adults. We do not knowingly collect personal information from anyone under thirteen (13). If you believe a child has provided personal information to us, contact us and we will delete it.

10. Changes to this policy

We may update this policy as our practices evolve. When we do, we will revise the "Last reviewed" date above and post material changes on this page. For active customers, we will also notify by email when changes materially affect how their data is handled.

11. Contact

Questions or rights requests? Email privacy@g8support.com or contact@G8support.com, call +1 (801) 712-3241, or write to: G8 IT, Draper, Utah, 84020.