Privacy policy.

Effective: [DATE] · Controller: [LEGAL ENTITY, ADDRESS, CONTACT]

Data collected

Account email, organization and installation identifiers, repository metadata selected for evidence, subscription state, operational logs, and support correspondence. RepoEvidence is not designed to collect source code.

Purpose and retention

We use data to authenticate users, produce requested reports, operate subscriptions, secure the service, and meet legal obligations. Production retention periods must be entered in the customer-facing schedule before launch.

Processors and transfers

The planned production processors are GitHub, Vercel, Supabase, Stripe, and Resend. The owner must publish the applicable subprocessors, regions, and transfer mechanism.

Your choices

Contact [PRIVACY EMAIL] to request access, correction, export, or deletion where applicable. Removing the GitHub App stops new collection.