Privacy Policy

When you browse. No account is needed to browse. We do not use analytics, advertising, or tracking cookies. To show the visitor count, we store a one-way hash of your IP address and browser user agent, salted and scoped to the calendar month. It cannot be turned back into your IP address and cannot be linked across months. While a page is open, your browser sends a heartbeat so we can show how many people are online; that count is kept in memory only. Our servers keep standard request logs (IP address, time, URL, user agent) for security and debugging.

When you create an account. Your name, email address, and password. Passwords are stored only as a salted hash. If you use Continue with Google, we receive your name, email address, and profile picture URL from Google; we never see your Google password. For each sign-in session we store the session token, IP address, and user agent.

API keys. We store a hash of each key and a short prefix so you can tell keys apart. The full key is shown once and we cannot recover it.

Listings. Everything you submit for a listing (product name, website, tagline, description, categories, features, pricing, logo) is public once it is live. We also take a screenshot of the listed website, look up its public Domain Rating, count outbound visits from AZN8 to that website, and show recent activity such as “Product listed by an AI agent”. Do not put personal information you want kept private in a listing.

Payments. Featured listings are subscriptions paid through Stripe. Card details go directly to Stripe and never reach our servers; you manage them in Stripe’s billing portal. We keep your Stripe customer ID, each subscription’s ID, plan, and renewal status, the amount and currency of each paid invoice, and the featured dates.

Email. We send transactional email only: email verification, password resets, notices when an admin archives or rejects your listing, featured-listing receipts, and a reminder before a featured listing ends. No marketing email and no newsletter unless you separately opt in.

• To run your account, sign you in, and authenticate API and MCP requests.
• To publish, moderate, and show your listings, including on feeds, sitemaps, and agent endpoints.
• To process featured-listing payments and send receipts and reminders.
• To prevent abuse: rate limiting, content-policy checks, and security investigations.
• To show aggregate, anonymous counts such as visitors this month and visits sent to a listing.

We process account, listing, and payment data to perform our contract with you; request logs, rate limiting, and anonymous visitor counts on the basis of our legitimate interest in running a secure and reliable service; and payment records to meet legal obligations such as tax and accounting.

AZN8 is built to be read by people, search engines, and AI agents. Live listings appear on the website and in the public API, MCP server, llms.txt, RSS and JSON feeds, and sitemap. We notify search engines through IndexNow when a listing changes. Others may copy or cache public listing content, and we cannot recall copies made before you delete a listing.

We share data only with providers that help us run AZN8, and only what they need:

• Hosting and database providers that run our servers and store data.
• Cloudflare: network protection and content delivery, transactional email, screenshot capture, and image storage.
• Stripe: payment processing for featured listings, under Stripe’s privacy policy.
• Google: only if you choose to sign in with Google.
• Ahrefs: receives listed website domain names (not personal data) to return their Domain Rating.
• Search engines via IndexNow: receive public listing URLs.

We do not sell or rent personal information, and we do not share it for advertising. We may disclose information if the law requires it or to protect people from harm or fraud. Some providers process data outside your country, including in the United States; where required, they do so under appropriate safeguards.

We set one strictly necessary cookie when you sign in, to keep you signed in. We do not use analytics or advertising cookies, so there is no cookie banner. Stripe Checkout and Google sign-in set their own cookies on their own pages.

• Account, API keys, and listings: until you delete them or your account.
• Sessions: until they expire or you sign out or delete your account.
• Monthly visitor hashes: kept as monthly counts; they cannot identify you.
• Request logs: a short period for security and debugging, then deleted.
• Payment records: held by Stripe for as long as tax and financial laws require, even after you delete your account.
• Deleted data may remain in backups for a limited time until they rotate out.

From your dashboard you can edit, archive, or permanently delete any listing, revoke API keys, and delete your whole account. Account deletion removes your account, listings, API keys, and sessions straight away. Agents can do the same through DELETE /api/v1/listings/:slug and DELETE /api/v1/account.

Depending on where you live, you may also have the right to request a copy of your data, to correct it, to object to or restrict processing, or to port it. Email [email protected] and we will respond within 30 days. If you are not satisfied, you can complain to your local privacy regulator; in Australia that is the Office of the Australian Information Commissioner.

We use HTTPS, hash passwords and API keys, scope session cookies to our site, and limit admin access. No system is perfectly secure; if we learn of a breach affecting your personal information, we will notify you and regulators as the law requires.

AZN8 is for makers and businesses. You must be at least 16 to create an account, and an adult to buy a featured listing. We do not knowingly collect information from children; contact us and we will delete it.

We will post changes here and update the effective date. For material changes we will also email account holders. Contact [email protected] with any privacy question.