Privacy Policy

1. Overview

Gitvisor ("we", "our", "us") is committed to protecting your privacy. This policy explains what data we collect when you use Gitvisor, how we use it, and the choices you have. Gitvisor is a GitHub Actions dashboard — we access your GitHub data on your behalf to display it within the Service.

2. Data We Collect

We collect only the data necessary to operate the Service:

From GitHub OAuth

• GitHub username, display name, and email address (if public)
• GitHub user ID and avatar URL
• GitHub App installation ID linking your account to your organisations or personal repos

From GitHub via the App Installation

• Repository metadata (names, IDs, visibility)
• Workflow run records (status, conclusion, timestamps, duration)
• Secret metadata (names and last-updated timestamps — raw values are never retrieved or stored)
• GitHub Package metadata (names, versions, ecosystems, download counts)

Usage Data

• Session tokens stored in HTTP-only cookies for authentication
• Basic server logs (IP address, timestamp, request path) retained for up to 30 days for security purposes

3. How We Use Your Data

• To authenticate your GitHub identity and maintain your session
• To display your GitHub workflow runs, secrets, and package data within the dashboard
• To process subscription billing (billing is handled by a third-party processor)
• To send transactional emails (e.g. billing receipts, account alerts) — no marketing without explicit opt-in
• To detect and prevent abuse, fraud, and security incidents

4. Third-Party Services

• GitHub — All repository, workflow, secret, and package data is sourced via the GitHub API. Your use of Gitvisor is subject to GitHub's Privacy Statement.
• Infrastructure — The Service runs on cloud infrastructure. Data is stored in SQLite databases per-user and in a shared metadata registry. Storage is encrypted at rest.
• Billing — Paid plan billing is processed by a third-party payment provider. We do not store full payment card details.

5. Data Retention

• Workflow run history is retained according to your plan tier (7 days Free, 90 days Pro, 365 days Team).
• Your account data is retained for as long as your account is active.
• Upon account deletion, your personal data and repository data are deleted within 30 days.
• Anonymised, aggregated usage statistics may be retained indefinitely.

6. Your Rights

Depending on your jurisdiction you may have the right to access, correct, or delete your personal data. To exercise these rights, delete your account from account settings or contact us via GitHub. We will respond to verifiable requests within 30 days.

7. Security

We implement industry-standard security measures including HTTPS-only transport, encrypted storage, and least-privilege access controls. GitHub OAuth tokens are stored securely and used only to serve your dashboard. We conduct periodic security reviews and will notify you of any material data breach as required by applicable law.

8. Cookies

Gitvisor uses a single HTTP-only, secure session cookie to maintain your login state. We do not use third-party advertising or tracking cookies.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting a notice in the Service or via email. Continued use after changes take effect constitutes acceptance of the revised policy.

10. Contact

For privacy-related questions or data requests, please open an issue or discussion on GitHub.