shipd

Privacy Policy

Last updated: [date]

This policy explains how [Company legal name] ("Shipd") handles personal data for customers worldwide, including under India's Digital Personal Data Protection Act, 2023 and, for customers in the EU, UK and similar regions, the GDPR.

1. What we collect

• Account data: name, work email, and a hashed password (we never store your password itself).
• GitHub data: your GitHub App installation, repository names, issues and the repository contents needed to do your tasks.
• Task data: task titles, the code changes we produced (the diff), AI review notes, test results and usage numbers.
• Billing data: plan, status and renewal dates. Card and bank details are handled by Paddle. We do not see or store them.
• Technical data: a login cookie and basic server logs such as IP address and time.
• Consent record: the date and time you accepted our Terms and policies.

2. Why we use it

To provide and secure the service, run your tasks, bill you, give support, prevent abuse, and meet legal obligations. We rely on your consent and on the contract with you. We do not use your data for advertising.

3. Who we share it with

• GitHub (to read and write your repositories)
• Our AI model provider ([name]), which receives the code and issue text needed for each task
• Paddle (payments)
• Hosting and email providers ([names])

We do not sell personal data. We may disclose data if the law requires it.

4. AI training

We do not use your code or issues to train models. [Confirm and link your AI provider's data terms.]

5. International transfers

Our servers are in [country/region] and our providers may process data in other countries. Where required, we use contractual safeguards such as standard contractual clauses.

6. How long we keep it

• Cloned repositories are deleted from our servers when each task finishes.
• Task records (title, diff, review notes, usage) are kept so you can review them, and are deleted when you delete your account.
• Billing records are kept by our payment processors as long as tax and accounting law requires.

7. Security

Tasks run in isolated containers with no network access, access tokens are never written to disk, connections use HTTPS, and passwords are hashed. No system is perfectly secure. We will notify you and the authorities of a personal data breach as the law requires.

8. Your rights

You can ask to access, correct or delete your data, withdraw consent, nominate someone to act for you, and complain about how we handle your data. You can delete your account yourself in Settings, which erases your task records and cancels any active plan. If you are in the EU or UK you can also ask us to restrict processing, to move your data, or to stop certain processing, and you can complain to your local data protection authority. Write to us at the address below and we will reply within [30] days.

9. Children

Shipd is for businesses and people aged 18 or over. We do not knowingly collect data from children.

10. Grievance officer and contact

Name: [Grievance Officer name] Email: [email, for example privacy@shipd.space] Address: [registered address] We acknowledge complaints within [48 hours] and aim to resolve them within [15 days].

11. Changes

We will post changes here and tell you about important ones by email or in the app.