Privacy Policy
Our commitment to your privacy. Learn what data we collect, how we use it, your privacy rights under GDPR and CCPA, and how we protect your information.
- ✓ We never sell your data
- ✓ We collect only what's necessary for analytics
- ✓ You control your data and can export or delete it anytime
- ✓ GDPR and CCPA compliant
- ✓ Transparent about data usage
Account Information
- • Email address (for authentication and notifications)
- • Connected source provider usernames and profile information
- • Organization and team memberships
- • Account preferences and settings
Repository Data
- • Commit history and metadata (author, date, message)
- • Pull request information and reviews
- • Issue data and comments
- • Repository statistics and metrics
- Note: We do NOT store your actual source code
Usage Data
- • Features you use and how you use them
- • Pages visited and time spent
- • Device and browser information
- • IP address (for security and analytics)
- • Provide Service - Generate analytics and insights from your repositories
- • Improve Product - Understand how features are used to make improvements
- • Communication - Send important updates, security alerts, and notifications
- • Security - Detect and prevent fraud, abuse, and security incidents
- • Compliance - Meet legal obligations and enforce our terms
We do NOT sell your data. Period.
Your analytics data belongs to you and is never sold to third parties.
Limited Sharing:
- • Service Providers - Hetzner, Stripe (only as needed to operate service)
- • Legal Requirements - If required by law or valid legal process
- • Team Members - Within your organization based on permissions you set
Access & Portability
Request a copy of all data we have about you in machine-readable format
Correction
Update or correct inaccurate personal information
Deletion
Request permanent deletion of your data (right to be forgotten)
Opt-Out
Unsubscribe from marketing emails and non-essential notifications
Exercise Your Rights: Email [email protected] or use Settings → Privacy
- • Active Accounts - Data retained while account is active
- • Inactive Accounts - Deleted after 2 years of inactivity
- • Deleted Accounts - 30-day grace period, then permanent deletion
- • Backups - Purged within 90 days after deletion request
- • Legal Hold - May retain data if required by law
Essential Cookies
Required for authentication and core functionality (cannot be disabled)
Analytics Cookies
Help us understand how you use the product (PostHog, can be opted out)
Preference Cookies
Remember your settings like theme, language, and dashboard layout
Service Providers We Use:
- • Hetzner - VPS hosting in Europe (GDPR compliant, ISO 27001)
- • Hetzner - Infrastructure provider
- • Stripe - Payment processing (PCI DSS compliant)
- • Resend - Transactional emails
- • PostHog - Analytics (GDPR compliant, self-hosted option)
Questions about privacy or data protection? Contact us:
- • Email: [email protected]
- • Response Time: Within 5 business days
- • Data Protection Officer: Available upon request