Privacy Policy

1. Information We Collect

When you sign in with GitHub, we collect:

• Account information: Your GitHub username, email address, and avatar URL.
• Repository data: Read-only access to repository names, commit history, file diffs, and contributor information for repositories you explicitly connect via the GitHub App.
• Usage data: Pages visited, features used, and changelog generation activity to improve our service.

2. How We Use Your Information

• To authenticate your account and provide access to the service.
• To generate changelogs by analyzing commit diffs from your connected repositories.
• To display public changelog pages with contributor information.
• To send important account and service updates via email.
• To process payments and manage subscriptions through Stripe.
• To improve and optimize the service through anonymous usage analytics.

3. Data Sharing

We do not sell your personal information. We share data only with:

• GitHub: To authenticate and fetch repository data via OAuth and the GitHub App.
• Stripe: To process payments securely. Stripe handles all payment data.
• AI providers: Code diffs are sent to AI services (e.g., OpenAI) to generate changelog content. Diffs are processed transiently and are not stored by these providers for training purposes.
• Analytics: Anonymous usage data to understand how the service is used.

4. Data Security

We implement industry-standard security measures to protect your data, including encrypted connections (HTTPS), secure token storage, and access controls. Sensitive files (e.g., .env, credentials) are automatically excluded from changelog analysis.

5. Data Retention

Your account data is retained as long as your account is active. Generated changelogs are stored until you delete them or your account. You can request deletion of your account and all associated data at any time by contacting us.

6. Your Rights

You have the right to:

• Access and export your data.
• Correct inaccurate information.
• Delete your account and associated data.
• Revoke GitHub access at any time through your GitHub settings.

7. Cookies

We use essential cookies for authentication (session tokens) and preference storage (theme). We use analytics cookies to understand usage patterns. No third-party advertising cookies are used.

8. Changes to This Policy

We may update this privacy policy from time to time. We will notify users of significant changes via email or in-app notification.

9. Contact

For questions about this privacy policy or your data, contact us at support@shipchanges.com.