legal
Privacy Policy
Last reviewed: 2026-09-18
1. Who we are
G8 IT (“G8”, “we”, “us”) is an IT and AI automation firm based in Draper, Utah. We were founded by Adam Gleason, who has 27+ years of enterprise IT experience, and Ammon Gleason, a graduate student in artificial intelligence and machine learning at the University of Utah. We provide managed IT services and AI automation to small and mid-sized businesses across the United States.
2. What information we collect
We collect only the information we need to operate the site, respond to you, and deliver our services. Specifically:
- From visitors browsing the site. IP address, browser type and version, pages viewed, referrer URL, and standard server log fields. If Plausible analytics is enabled, anonymized page view and session counts are collected without cookies.
- From forms. When you submit our contact, lead, quote, careers, ticket, newsletter, ROI calculator, AI receptionist demo, or IT health-check forms we collect your name, email address, phone number, company, the message details you provide, and (for careers) any optional resume upload.
- From admin users. Name, email, role, a bcrypt-hashed password, and session tokens used to maintain authenticated sessions.
- From AI tooling. Prompt content you send to the public AI Receptionist demo is sent to Anthropic for inference and is logged by us in truncated form with an IP-hash (never the raw IP) for abuse prevention and rate limiting.
3. How we use information
- To fulfill the request or service you asked us for.
- To reply to inquiries and to communicate about engagements.
- To provide, secure, and improve our services and tooling.
- For internal, aggregate analytics about how the site is used.
- To detect, prevent, and respond to abuse, fraud, and security incidents.
- To meet legal, accounting, and contractual obligations.
5. How long we keep it
- Lead and inquiry data: retained for seven (7) years as part of our business records, then deleted or anonymized.
- Newsletter subscribers: retained until you unsubscribe, plus thirty (30) days to honor and confirm the unsubscribe.
- Anonymous analytics: retained for up to twenty-four (24) months.
- AI demo prompt logs: retained in truncated form for ninety (90) days, then aggregated into anonymous counters and deleted.
- Admin user data: retained for the duration of employment plus one (1) year for legitimate business and security purposes.
6. Your rights (GDPR and CCPA / CPRA)
Depending on where you live, you may have some or all of the following rights. To exercise any of them, email privacy@g8support.com or contact@g8support.com. We will respond within the timeframe required by applicable law.
- Access. Request a copy of the personal information we hold about you.
- Deletion. Request that we erase your personal information where no overriding legal basis applies.
- Portability. Receive a structured, machine-readable copy of the information you provided to us.
- Correction. Ask us to correct inaccurate or incomplete information.
- Opt-out of sale or sharing. We do not sell personal information and do not share it for cross-context behavioral advertising. You may still confirm this preference in writing.
- Withdraw consent. Withdraw consent for marketing communications at any time. Every marketing email includes an unsubscribe link.
California residents may also designate an authorized agent and may appeal denials of rights requests. EEA and UK residents may lodge a complaint with their local supervisory authority.
7. Security
All traffic to and from the site is encrypted with HTTPS / TLS 1.2 or higher. The production database is encrypted at rest. Administrative access is gated by role-based access control and multi-factor authentication, and is audit-logged. We review our subprocessor list quarterly. If we confirm a security incident affecting your data, we will follow our documented incident response process and notify you and applicable regulators within seventy-two (72) hours of confirmation, as required by law.
9. Children
Our services are intended for businesses and adults. We do not knowingly collect personal information from anyone under thirteen (13). If you believe a child has provided personal information to us, contact us and we will delete it.
10. Changes to this policy
We may update this policy as our practices evolve. When we do, we will revise the “Last reviewed” date above and post material changes on this page. For active customers, we will also notify by email when changes materially affect how their data is handled.
11. Contact
Questions or rights requests? Email privacy@g8support.com or contact@g8support.com, call +1 (801) 712-3241, or write to: G8 IT, Draper, Utah, 84020.
12. The G8way remote support product
G8way is our remote support tool. It is separate from this website and stores different things.
In your browser. G8way sets no cookies. It loads no third-party scripts and no analytics or advertising code of any kind. What it keeps is stored locally in your own browser, and it stays on your device rather than being sent to us:
- Your sign-in token and your profile name, so you stay signed in.
- Your address book, your groups, and the list of machines you connected to recently.
- Access passwords you asked us to remember for specific machines. These are stored in your browser without encryption. Do not use “remember” on a shared computer, and sign out when you are finished, which erases them.
- Your per-machine consent choices for clipboard sharing and file transfer.
- The host key fingerprints your device has already trusted, so we can warn you if a machine’s identity changes.
- Interface preferences such as theme, sidebar state, toolbar layout and touch sensitivity.
Signing out erases everything in that list that is tied to your account. The trusted host key fingerprints and your interface preferences are deliberately kept, because they belong to the device rather than to your account.
All of this is either strictly necessary to deliver the session you asked for or a preference you set yourself, which is why G8way does not show a cookie consent banner. There is nothing there to consent to.
On our servers. For each support session we keep who connected, which machine they connected to, when it started and ended, and why it ended. We keep an audit record of account and session actions that includes the source IP address. We keep the machines registered to your organization, with the label, tags and notes your technicians give them.
We do not record your sessions. Session video and screen content are not stored on our servers.
Your G8way account password is never stored in a readable form. It is hashed with Argon2id.
13. Phone calls to G8keeper
G8keeper is our phone answering product. When you call a G8keeper line, the call is answered by a virtual assistant, not a person. The virtual assistant tells you this at the start of the call, and if you ask it directly whether it is a real person, it will answer that question honestly.
The transcript. We create a text transcript of the call so your request can be turned into a support ticket and worked by our team. The transcript is kept for ninety (90) days, then it is deleted.
Audio recording. Recording the audio of a call is off by default. If audio recording is turned on for an account, the audio file itself is held by our telephony provider, not by us. What we store on our side is a reference to that recording, not the recording itself.
Who processes the call. Two outside companies carry and process call content on our behalf. Twilio carries the phone call itself. OpenAI performs the speech and language processing that lets the virtual assistant understand you and respond. The contents of your call pass through both of them in order to do this. We do not use call audio, transcripts, or any other call content to train AI models, ours or anyone else’s.
Opting out during a call. You can ask to opt out at any point during the call by telling the virtual assistant you want to opt out. Opting out turns off both audio recording and transcript creation for that call, and deletes anything already captured for that call up to that point.
Requesting deletion. To ask us to delete the record of a call, email privacy@g8support.com or contact@g8support.com. Under the CCPA, California residents are entitled to a response within forty-five (45) days, and we aim to meet that same window for every deletion request, regardless of where you call from.
G8keeper is not intended for companionship or mental health support, and it is not intended for healthcare use or any use involving protected health information.
Reviewed 2026-09-18. We engage qualified legal counsel for substantive updates, particularly for clients with industry-specific compliance obligations such as HIPAA, GLBA, or PCI DSS.