Privacy Policy

8 Arms App Development Privacy Policy

Last updated: April 15, 2026

 8 Arms App Development ("we", "us", "our") builds and operates applications available through the GoHighLevel marketplace and other platforms. This policy applies to all apps developed and published by 8 Arms App Development.

 What data we collect                                                                                                         

 Depending on the app, we may collect:

 - Platform identifiers such as company IDs, location IDs, and user IDs from connected platforms (e.g. GoHighLevel)

 - Contact and user data from your connected accounts, as required to perform the service (e.g. names, email addresses, phone numbers, roles)

- OAuth access tokens and refresh tokens, encrypted at rest

- Configuration and settings you provide within the app     

- Usage and sync logs for troubleshooting purposes   

 We only collect data necessary to operate the specific app you have installed.

What we do with it

Data collected by our apps is used solely to provide the service you have configured. We do not sell, rent, or share your data with third parties for marketing or any purpose unrelated to operating the service.

Data storage
Data is stored in secure cloud infrastructure. Sensitive credentials such as API keys and OAuth tokens are encrypted at rest.

We retain operational logs for a limited period for troubleshooting purposes.

Data Retention

We retain your data for as long as your app installation is active. When you uninstall an app, your data is deleted within 30 days. OAuth tokens are deleted immediately upon disconnection where technically possible.

Third-Party Platforms

Our apps connect to third-party platforms including GoHighLevel and Zoom. When you connect a Zoom account, we store encrypted  

  OAuth tokens to make API calls on your behalf. We do not share your data with Zoom or any other third party beyond what is   

  necessary to operate the service. Zoom's privacy policy is available at zoom.us/privacy.  

Our apps use infrastructure providers including Vercel (hosting) and Neon (database). These providers are bound by their own privacy policies. No personal data is shared with other third parties.

Data Subject Rights

If you are located in the European Economic Area, UK, or California, you have the following rights regarding your personal data:

- Right to Access — Request a copy of the personal data we hold about you.

- Right to Rectification — Request correction of inaccurate or incomplete data.

- Right to Erasure — Request deletion of your personal data where we have no legitimate basis to retain it.

- Right to Portability — Request your data in a structured, machine-readable format.

- Right to Object — Object to processing of your data for direct marketing or where processing is based on legitimate interests.

- Right to Restrict Processing — Request that we limit how we use your data while a dispute is resolved.  

To exercise any of these rights, contact us by email at [email protected]. We will respond to all requests within 30 days. We may need to verify your identity before processing a request.

Data deletion

You may request deletion of your data at any time by uninstalling the relevant app or contacting us at [email protected]. We will delete your data within 30 days of a verified request.

Children's Privacy

Our apps are not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us at [email protected] and we will delete it promptly.

Changes to this policy

We may update this policy from time to time. Continued use of our apps after changes constitutes acceptance of the updated policy.

Contact

8 Arms App Development: [email protected]