Privacy Policy

1. Introduction

CommitCatalog ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered changelog generation platform.

2. Information We Collect

2.1 Information You Provide

• Account information (name, email address via GitHub OAuth)
• GitHub repository access and commit data
• Project settings and preferences
• Payment information (processed securely through Stripe)
• Communications with our support team

2.2 Automatically Collected Information

• Usage data (features used, time spent, interactions)
• Device information (browser type, operating system, IP address)
• Cookies and similar tracking technologies
• Log data (access times, pages viewed, errors)

3. How We Use Your Information

We use the collected information for the following purposes:

• Provide, maintain, and improve our services
• Generate AI-powered changelog summaries from your commits
• Process payments and manage subscriptions
• Send service updates, security alerts, and administrative messages
• Respond to your comments, questions, and support requests
• Analyze usage patterns to improve user experience
• Detect, prevent, and address technical issues and fraud
• Comply with legal obligations

4. AI and Third-Party Services

We use OpenAI's GPT models to analyze commits and generate changelog summaries. Your commit messages and diffs may be processed by OpenAI in accordance with their privacy policy. We do not use your data to train AI models.

We also use the following third-party services:

• Stripe: Payment processing
• Supabase: Database and authentication
• Vercel: Hosting and deployment
• GitHub: Repository integration and OAuth

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

• With your consent: When you explicitly authorize us to share information
• Service providers: Third parties who perform services on our behalf
• Legal requirements: When required by law or to protect our rights
• Business transfers: In connection with a merger, acquisition, or sale of assets

6. Data Security

We implement appropriate technical and organizational measures to protect your information, including:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication requirements
• Secure data centers and infrastructure

However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

7. Data Retention

We retain your information for as long as necessary to provide our services and comply with legal obligations. When you delete your account, we will delete or anonymize your personal information within 90 days, except where we are required to retain it by law.

8. Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal information
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your information
• Portability: Request transfer of your data
• Objection: Object to processing of your information
• Restriction: Request restriction of processing

To exercise these rights, please contact us at privacy@commitcatalog.com.

9. Cookies and Tracking

We use cookies and similar technologies to:

• Keep you signed in
• Remember your preferences
• Analyze how you use our services
• Improve our platform

You can control cookies through your browser settings. See our Cookie Policy for more details.

10. Children's Privacy

Our services are not intended for children under 13 years of age. We do not knowingly collect information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last Updated" date. Your continued use of our services after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us: