Privacy Policy

Last updated: February 2026

1. Information We Collect

Account Information

When you sign up, we collect your GitHub username, email address, and profile information provided by GitHub OAuth.

Repository Data

We access your GitHub repositories (with your permission) to read commits, pull requests, and releases for generating release notes.

Usage Data

We collect information about how you use the Service, including pages visited, features used, and actions taken.

2. How We Use Information

  • To provide and maintain the Service
  • To generate AI-powered release notes from your repositories
  • To process payments and manage subscriptions
  • To send important service updates and notifications
  • To improve and optimize the Service
  • To respond to support requests

3. Data Sharing

We do not sell your data. We only share data with:

  • Service Providers: Payment processors (Stripe), hosting (Vercel, Railway), and AI providers (OpenAI) necessary to operate the Service.
  • Legal Requirements: When required by law or to protect our rights.
  • With Your Consent: When you explicitly authorize sharing.

4. Data Retention

We retain your data for as long as your account is active. When you delete your account, we delete your data within 30 days, except where we are required to retain it for legal or regulatory purposes.

5. Security

We implement industry-standard security measures to protect your data, including:

  • Encryption in transit (HTTPS/TLS)
  • Encryption at rest for sensitive data
  • Regular security audits
  • Access controls and authentication

6. Your Rights

You have the right to:

  • Access: Request a copy of your data.
  • Correction: Request correction of inaccurate data.
  • Deletion: Request deletion of your data.
  • Portability: Request your data in a machine-readable format.
  • Objection: Object to certain processing of your data.

7. Cookies

We use essential cookies to maintain your session and preferences. We do not use tracking cookies for advertising purposes.

8. Children's Privacy

The Service is not intended for children under 18. We do not knowingly collect information from children under 18.

9. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes via email or through the Service.

10. Contact

Questions about privacy? Contact us at privacy@shiplog.io