Privacy Policy

1. Overview

ShipLog ("we", "us") helps developers turn GitHub activity into changelog content. This policy explains what we collect, why we collect it, and the choices you have.

2. Information we collect

Account information

When you sign in with GitHub, we receive basic profile information from GitHub such as your user ID, username, email (if available), and avatar.

Repository data

For repositories you connect, we access commits, pull requests, and related metadata needed to generate and sync changelog entries. We do not access repositories you have not connected.

Project and changelog data

We store project settings, changelog entries, hosted page configuration, widget settings, and publish status you configure in the dashboard.

Usage data

We collect widget view events (such as timestamp, hashed IP, and user agent) to provide analytics. We also collect standard server logs for security and debugging.

3. How we use information

• Provide authentication and account access
• Sync GitHub activity and generate changelog entries
• Host public changelog pages and serve embed widgets
• Improve reliability, security, and product features
• Respond to support requests

4. AI processing

Commit and pull request text may be sent to AI providers (such as Google Vertex AI / Gemini) to generate user-facing changelog copy. We use this processing only to provide the Service.

5. What we share

We do not sell your personal information. We share data only with:

• Service providers — hosting, database, authentication, and AI infrastructure needed to run ShipLog
• GitHub — when you connect your account or receive webhooks
• Legal requirements — if required by law or to protect rights and safety

Published changelog entries and hosted pages are public by design when you publish them.

6. Data retention

We retain account and project data while your account is active. You may delete projects and entries from the dashboard. If you delete your account, we will delete or anonymize associated data within a reasonable period, except where retention is required by law.

7. Security

We use industry-standard measures including encrypted connections, access controls, and row-level security in our database. No system is perfectly secure; please use a strong GitHub account and report issues to us promptly.

8. Cookies

We use cookies and similar technologies for authentication sessions. The embed widget may use local storage to track whether a user has seen recent updates.

9. Your choices

• Disconnect GitHub access from your GitHub settings
• Delete projects and unpublished entries from the dashboard
• Keep entries as drafts instead of publishing them publicly

10. International users

ShipLog may process data in countries where our infrastructure providers operate. By using the Service, you consent to this processing.

11. Children

ShipLog is not intended for users under 13. We do not knowingly collect data from children.

12. Changes

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the latest version.

13. Contact

Privacy questions? Email sanyi@getshiplog.site.