Privacy Policy

Effective date: October 7, 2026

This Privacy Policy explains how in8development, Inc. (“in8development,” “we,” “us,” or “our”) collects, uses, and discloses personal information. It covers:

• the website at in8development.com and the other pages we operate (the “Site”);
• inquiries, trials, subscriptions, billing, and support for CITE software;
• investigative and other professional services; and
• email, phone, and other communications with us.

If a signed order form, engagement agreement, or data processing addendum conflicts with this policy on the same subject, the signed document controls.

Notice at collection

• What we collect from you: name, email address, phone number, organization, role, the contents of your message, student-status information if you request a student license, and billing details if you subscribe.
• What we collect automatically: IP address, browser and device data, pages viewed, referring URLs, and approximate location derived from your IP address, including through Google Tag Manager.
• What we do with it: respond to you, provide CITE and our services, secure the Site, keep billing and tax records, and understand how the Site is used.
• CITE work product: source files, reports, citation data, and in-application audit history in the installed CITE workspace stay on systems you or your organization control. We do not receive that content unless you send it to us or use a feature that expressly transmits it.
• Sale and advertising: we do not sell personal information, and we do not share it for cross-context behavioral advertising.
• Your choices: email contact@in8development.com with the subject “Privacy request.”

1. Who we are

in8development, Inc. is a Washington corporation. For personal information we collect through the Site, accounts, billing, and our own marketing, we decide why and how that information is used.

You can reach us at:

in8development, Inc.
Newman Lake, Washington, United States
Email: contact@in8development.com
Phone: +1 (503) 878-7923

CITE software inquiries: cite@in8development.com
Investigative services inquiries: investigations@in8development.com

2. Information we collect

We collect personal information in three ways: you provide it, your organization provides it, or it is collected automatically when you use the Site.

Information you or your organization provide

• Identifiers and contact details: name, email address, phone number, organization, and title or role.
• Inquiry and support content: information in contact forms, emails, demos, and support requests, including files you choose to attach.
• Account and subscription records: trial requests, plan selection, user counts, and related correspondence.
• Billing information: billing contact, billing address, and transaction records from our online store (Easy Digital Downloads). If you pay online, our payment processor collects payment-card details. We do not store full payment-card numbers on our systems. We may receive limited confirmation such as card brand, last four digits, expiration month and year, and whether the charge succeeded.
• License records: license keys, activation and deactivation events, machine identifiers used for license binding, and related Cryptolens licensing records needed to issue and validate a CITE license.
• Student eligibility: information you send so we can confirm student status, such as a school name or a student identifier.
• Engagement materials: records, instructions, and correspondence you provide after an investigative or professional engagement is confirmed in writing.

Information collected automatically

• IP address, date and time, browser type, device type, operating system, referring and exit pages, and pages or files requested.
• Approximate location derived from an IP address. We do not collect precise GPS location through the Site.
• Cookie and similar-technology data described in Cookies and analytics.

Information we do not seek through the Site

Do not send Social Security numbers, government identification numbers, financial account numbers, payment-card numbers, health information, or other sensitive information through the contact form or general email. Our contact page also asks you not to send confidential, privileged, or sensitive matter information until an engagement is confirmed.

3. Customer Content in CITE

CITE is installed software used to organize source material and prepare cited reports. In ordinary use, your source library, reports, document hashes, permissions, and in-application audit history remain in the CITE workspace on systems you or your organization control. We do not receive that Customer Content merely because you use the application.

We receive Customer Content only if:

• you or your organization send it to us, for example with a support request or under a signed engagement;
• you use a feature that tells you it will transmit information, including a third-party AI tool you choose to connect; or
• a written agreement says we will host a workspace for you. Hosting, if offered, is limited to that agreement.

You are responsible for the personal information in your workspace, including information about other people such as witnesses, subjects, employees, or counterparties. You need a lawful basis to collect and use that information. When we process personal information from Customer Content on your instructions, we do so to provide CITE, support, or the signed engagement, and not for our own advertising or independent commercial purposes. A data processing addendum is available on request. When one is signed, it controls over this policy for that processing.

4. How we use personal information

We use personal information to:

• operate the Site and respond to inquiries;
• provide demonstrations, trials, CITE licenses, support, and professional services;
• verify student eligibility and administer organizational accounts;
• bill, collect payment, and keep accounting and tax records;
• secure our systems, prevent fraud and abuse, and enforce our Terms of Service;
• measure Site performance and improve content and navigation;
• send service and transactional messages about an account, trial, subscription, or engagement; and
• comply with law and respond to lawful requests.

We send marketing email only where permitted. Marketing email includes an unsubscribe link. You may also opt out by emailing contact@in8development.com. Transactional messages about an active trial, subscription, security issue, or engagement are not marketing, and opting out of marketing does not stop those messages.

We do not use Customer Content to train generalized artificial-intelligence models.

5. Legal bases for the EEA, UK, and Switzerland

If the GDPR, UK GDPR, or Swiss data-protection law applies, we rely on these bases:

• Contract: to provide a trial, subscription, support, or services you or your organization request.
• Legitimate interests: to secure the Site, understand aggregate Site use, answer inquiries, and operate our business, where those interests are not overridden by your rights.
• Consent: where we ask for it, including for optional marketing where consent is required. You may withdraw consent at any time.
• Legal obligation: to keep records and respond to lawful demands.

6. Cookies and analytics

We use cookies and similar technologies as follows:

• Essential. These remember a login, protect forms, and keep the Site working. The Site does not function properly without them.
• Analytics. We use Google Tag Manager, which may load analytics tags. Those tags may collect pages viewed, referring pages, browser and device data, and general location derived from your IP address, and may set a cookie or use similar storage. Google’s practices are described in Google’s Privacy Policy and Google’s partner-site information.

We use analytics to understand how the Site is used and to improve it. We do not authorize advertising tags that share personal information for cross-context behavioral advertising. You can control cookies in your browser, including by blocking or deleting them. Blocking essential cookies may affect Site functions. You can also use Google’s tools and your device settings to limit Google analytics.

7. When we disclose personal information

We disclose personal information to:

• Service providers that host the Site (including WP Engine), deliver email, process payments, manage CITE license keys (Cryptolens), provide customer-relationship tools (including HubSpot), provide analytics through Google Tag Manager, or support our operations, and only for those purposes;
• Your organization, when an administrator manages your subscription or a colleague is included on a request;
• AI providers you select, when you connect an AI tool inside CITE and choose to send content to it;
• Professional advisors, such as lawyers and accountants, under confidentiality duties;
• Authorities and other parties, when we believe in good faith that disclosure is required by law, legal process, or to protect the rights, safety, and security of in8development, our customers, or others; and
• A successor, if we are involved in a merger, financing, or sale of all or part of the business, in which case we will require the recipient to protect personal information consistently with this policy.

We do not disclose Customer Content to the public. We do not allow service providers to use personal information we give them for their own marketing.

8. Sale, sharing, and targeted advertising

We do not sell personal information for money. We do not “share” personal information for cross-context behavioral advertising, and we do not use it for targeted advertising, as those terms are used in U.S. state privacy laws. We do not use or disclose sensitive personal information for purposes that give you a right to limit that use, other than providing the service you request and securing our systems.

If this practice changes, we will update this policy before the change and provide any opt-out the law requires.

9. AI tools you choose to connect

CITE can connect to AI tools you already use, such as tools from OpenAI, Microsoft, Google, or Anthropic. Those providers are independent of in8development. If you connect one, content you choose to send is governed by that provider’s terms and privacy policy. Review those terms before you send source material, especially confidential, privileged, or regulated information. You can use CITE without connecting an AI tool.

10. How long we keep information

We keep personal information only as long as we need it for the purposes above, and then delete or de-identify it unless a longer period is required by law or a dispute.

• Inquiries that do not become a customer relationship: up to 24 months after the last communication.
• Account, subscription, and billing records: for the life of the account, then for up to 7 years for accounting, tax, and dispute resolution.
• Support requests and files you attach: for the life of the request and up to 24 months after it closes, unless we need them longer to document a dispute or a security incident.
• Server and security logs: up to 12 months.
• Marketing opt-out records: for as long as needed to honor the opt-out.
• CITE workspace content on your systems: you control how long it is kept. Ordinary use of the installed application does not place a copy with us.
• Engagement records: for the period stated in the engagement agreement, or if the agreement is silent, for up to 7 years after the engagement ends.

11. Security

We maintain administrative, technical, and organizational measures appropriate to the personal information we hold. No method of transmission or storage is perfectly secure. Our public description of those measures is on the Security page.

12. Your privacy rights

Depending on where you live, including California and other U.S. states with consumer privacy laws, and the EEA, United Kingdom, and Switzerland, you may have the right to:

• know and access the personal information we hold about you;
• correct inaccurate personal information;
• delete personal information;
• receive a portable copy of personal information you provided;
• opt out of sale, sharing, and targeted advertising;
• limit certain uses of sensitive personal information;
• withdraw consent;
• object to or restrict processing based on legitimate interests;
• appeal a denial; and
• lodge a complaint with a data-protection authority. We ask that you contact us first so we can address the concern.

We will not discriminate against you for exercising these rights. Because we do not sell or share personal information for cross-context behavioral advertising, an opt-out request does not change the way the Site currently operates. You may still submit one, and we will record it.

These rights apply to personal information we hold. They do not require us to delete records we must keep for tax, security, or legal reasons, or information on systems you control inside CITE.

13. How to submit a request and how to appeal

Email contact@in8development.com with the subject “Privacy request.” Tell us your name, the email address you use with us, the right you want to exercise, and the state or country where you live. We may need to verify your identity and, if you write on behalf of an organization, your authority. We will use the information in the request only to verify and respond.

We will respond within 45 days, or within any shorter period required by law. If the law allows an extension, we will tell you why before the first period ends.

If we deny your request, you may appeal by replying to our decision or by emailing contact@in8development.com with the subject “Privacy appeal.” We will respond to the appeal within 45 days, or within the period your state’s law requires. If an appeal is denied and your state provides a further remedy, our appeal response will explain how to contact your state attorney general.

14. Authorized agents

An authorized agent may submit a request for you if the agent provides proof of written permission and we can verify your identity, or if the agent holds a power of attorney that meets applicable law. We may still contact you to confirm the request.

15. Browser privacy signals

We treat a valid Global Privacy Control signal as a request to opt out of sale and sharing of personal information. We do not sell or share personal information for cross-context behavioral advertising. There is no consistent industry response to the older “Do Not Track” signal, and the Site does not change its behavior based on that signal alone.

16. Children

The Site and our services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe we have, email contact@in8development.com and we will delete it.

A student license for anyone under 18 must be accepted by a parent or guardian, or by a school or other organization with authority to agree to the Terms of Service.

17. International transfers

We are located in the United States. If you contact us or use the Site from another country, your personal information will be processed in the United States, where privacy laws may differ from those where you live. Where the law requires a transfer mechanism, we use appropriate safeguards, such as standard contractual clauses.

18. Consumer health data

We do not collect consumer health data through the Site, and we do not use the Site to track health conditions, diagnoses, or treatments. Do not include health information in a contact form or general email.

Health information that happens to be inside a CITE workspace on your systems, or inside records you provide under a signed engagement, is not collected by us as consumer health data for our own products or marketing. CITE and our investigative services are not offered as a HIPAA-covered service. If your use requires a business associate agreement or another regulated-data addendum, we must sign that addendum before you send regulated data to us.

19. Changes to this policy

We may update this policy as our practices or the law change. We will post the new version on this page and change the effective date. If a change materially reduces your rights, we will provide additional notice the law requires, such as a notice on the Site or an email to the address we have for you.

20. Contact us

Privacy questions and requests:

in8development, Inc.
Newman Lake, Washington, United States
contact@in8development.com
+1 (503) 878-7923

Related pages: Terms of Service · Security