CodeIssuesDiscussionsWikiPull RequestsProjectsCommitsActionsReleasesContributorsPulse● GatesSecuritySettingsDeploymentsPipelineInsightsAgents✨ Explain✨ Ask AI✨ Workspace✨ Spec✨ Tests▓ Debt Map✨ NL Search🏛 Archaeology
Blame · Line-by-line history
PRIVACY.md
Each line is annotated with the commit that last touched it. Click any SHA to jump to that commit and see the surrounding change.
| 36b4cbd | 1 | # Gluecron Privacy Policy |
| 2 | ||
| 3 | **Last updated: April 12, 2026** | |
| 4 | ||
| 5 | ## 1. Introduction | |
| 6 | ||
| 7 | This Privacy Policy describes how [YOUR LEGAL ENTITY NAME] ("Company," "we," | |
| 8 | "us") collects, uses, and shares information when you use Gluecron ("Service"). | |
| 9 | ||
| 10 | ## 2. Information We Collect | |
| 11 | ||
| 12 | ### 2.1 Information You Provide | |
| 13 | - **Account information:** username, email address, display name, bio | |
| 14 | - **Repository content:** code, files, issues, pull requests, comments | |
| 15 | - **SSH keys:** public keys for authentication | |
| 16 | - **Payment information:** processed by Stripe (we never store card numbers) | |
| 17 | ||
| 18 | ### 2.2 Information Collected Automatically | |
| 19 | - **Log data:** IP address, browser type, operating system, referring URL, | |
| 20 | pages visited, timestamps | |
| 21 | - **Git operations:** push/pull/clone metadata (timestamps, refs, not content) | |
| 22 | - **Usage data:** features used, repository interactions, search queries | |
| 23 | - **Device information:** device type, screen resolution, time zone | |
| 24 | ||
| 25 | ### 2.3 Information from Intelligence Features | |
| 26 | - **Code analysis results:** health scores, security scan results, dependency | |
| 27 | graphs (computed on your code, stored as metadata) | |
| 28 | - **Auto-repair logs:** which repairs were applied and when | |
| 29 | - **Push analysis:** risk scores, breaking change detection results | |
| 30 | ||
| 31 | ## 3. How We Use Your Information | |
| 32 | ||
| 33 | We use your information to: | |
| 34 | - Provide, maintain, and improve the Service | |
| 35 | - Process transactions and send related information | |
| 36 | - Send technical notices, updates, and support messages | |
| 37 | - Respond to your comments and questions | |
| 38 | - Provide and improve Intelligence Features (code analysis, auto-repair) | |
| 39 | - Monitor and analyze usage patterns and trends | |
| 40 | - Detect, prevent, and address fraud, abuse, and technical issues | |
| 41 | - Comply with legal obligations | |
| 42 | ||
| 43 | ## 4. How We Share Your Information | |
| 44 | ||
| 45 | We do NOT sell your personal information. We may share information: | |
| 46 | ||
| 47 | - **With your consent:** when you explicitly authorize it | |
| 48 | - **Public repositories:** content in public repos is visible to anyone | |
| fc0785e | 49 | - **Service providers:** hosting (Crontech infrastructure), database (Neon), payment |
| 36b4cbd | 50 | (Stripe), email (for transactional emails only) |
| 51 | - **Integration partners:** GateTest (code scanning), Crontech (deployment) | |
| 52 | — only repository metadata, not source code content, unless you enable | |
| 53 | the integration | |
| 54 | - **Legal requirements:** when required by law, subpoena, or court order | |
| 55 | - **Business transfers:** in connection with a merger, acquisition, or sale | |
| 56 | of assets (with notice to users) | |
| 57 | ||
| 58 | ## 5. Data Security | |
| 59 | ||
| 60 | - Passwords are hashed using bcrypt (never stored in plain text) | |
| 61 | - API tokens are hashed using SHA-256 | |
| 62 | - Sessions use cryptographically random tokens | |
| 63 | - All connections use HTTPS/TLS encryption | |
| 64 | - Database connections use SSL | |
| 65 | - Webhook payloads use HMAC-SHA256 signatures | |
| 66 | ||
| 67 | ## 6. Data Retention | |
| 68 | ||
| 69 | - **Account data:** retained until you delete your account | |
| 70 | - **Repository data:** retained until you delete the repository | |
| 71 | - **Log data:** retained for 90 days | |
| 72 | - **Deleted accounts:** data is purged within 30 days of account deletion | |
| 73 | - **Backups:** may contain deleted data for up to 90 days | |
| 74 | ||
| 75 | ## 7. Your Rights | |
| 76 | ||
| 77 | You have the right to: | |
| 78 | - **Access:** request a copy of your personal data | |
| 79 | - **Correction:** update inaccurate information via account settings | |
| 80 | - **Deletion:** delete your account and all associated data | |
| 81 | - **Export:** export your repositories using standard git tools at any time | |
| 82 | - **Objection:** object to processing of your data for specific purposes | |
| 83 | - **Restriction:** request restriction of processing in certain circumstances | |
| 84 | ||
| 85 | ### For EU/EEA Users (GDPR) | |
| 86 | - Legal basis for processing: contract performance, legitimate interests, | |
| 87 | and consent where applicable | |
| 88 | - You may lodge a complaint with your local supervisory authority | |
| 89 | - Data transfers outside the EU are protected by Standard Contractual Clauses | |
| 90 | ||
| 91 | ### For California Users (CCPA) | |
| 92 | - You have the right to know what personal information we collect | |
| 93 | - You have the right to request deletion | |
| 94 | - You have the right to opt out of the "sale" of personal information | |
| 95 | (we do not sell personal information) | |
| 96 | - We will not discriminate against you for exercising your rights | |
| 97 | ||
| 98 | ## 8. Cookies | |
| 99 | ||
| 100 | We use minimal cookies: | |
| 101 | - **Session cookie:** required for authentication (httpOnly, secure) | |
| 102 | - We do NOT use tracking cookies, advertising cookies, or third-party | |
| 103 | analytics cookies | |
| 104 | ||
| 105 | ## 9. Children's Privacy | |
| 106 | ||
| 107 | The Service is not intended for children under 13 (or 16 in the EU). | |
| 108 | We do not knowingly collect information from children under these ages. | |
| 109 | ||
| 110 | ## 10. International Data Transfers | |
| 111 | ||
| 112 | Your data may be processed in the United States and other countries where | |
| 113 | our service providers operate. We ensure appropriate safeguards are in | |
| 114 | place for international transfers. | |
| 115 | ||
| 116 | ## 11. Changes to This Policy | |
| 117 | ||
| 118 | We may update this Privacy Policy from time to time. We will notify you | |
| 119 | of material changes via email or in-app notification at least 30 days | |
| 120 | before they take effect. | |
| 121 | ||
| 122 | ## 12. Contact Us | |
| 123 | ||
| 124 | For privacy inquiries: | |
| 125 | - Email: [PRIVACY EMAIL] | |
| 126 | - Address: [COMPANY ADDRESS] | |
| 127 | ||
| 128 | For GDPR inquiries, our Data Protection Contact can be reached at: | |
| 129 | [DPO EMAIL] |