Privacy Policy
Last updated: April 9, 2026
1. What we collect
commitplain collects only the data strictly necessary to provide the service:
- Account data: email address and name, provided via sign-up through Clerk.
- GitHub OAuth token: obtained server-side to read commits from your repositories. The token never passes through your browser and is stored encrypted.
- Commit metadata: commit message, author name, and timestamp. We do not access source code, file diffs, branches, pull requests, or issues.
- Generated reports: the executive reports commitplain produces on your behalf, stored in your account.
- Usage data: basic product analytics (page views, feature usage) to improve the service.
2. How we use it
- To generate executive reports from your commit history.
- To authenticate you and maintain your account.
- To send reports to recipients you explicitly choose.
- To improve commitplain based on aggregated usage patterns.
We do not sell your data, share it with third parties for advertising, or use it to train AI models.
3. Data storage and retention
All data is stored in infrastructure within the European Union (eu-west-1 region). We retain your data for as long as your account is active. If you cancel, your data is retained for 30 days to allow reactivation, then deleted. You may request immediate deletion at any time by contacting us.
4. GitHub access
commitplain requests the repo scope via GitHub OAuth to read commits from private repositories. You can revoke this access at any time from your GitHub account settings under Authorized OAuth Apps. Revoking access will disable report generation until you reconnect.
5. Third-party services
- Clerk: authentication and user management.
- Convex: database and real-time backend.
- Vercel: hosting and edge delivery.
- Stripe: payment processing. commitplain never sees or stores card data.
6. Your rights
Under GDPR and applicable law, you have the right to access, correct, export, or delete your data. To exercise any of these rights, contact us at the email below. We will respond within 30 days.
7. Contact
For privacy questions or data requests, contact us at privacy@commitplain.com.