Privacy Policy

Information We Collect

• Account details such as name, email address, avatar, and authentication provider identifiers.
• Repository and scan metadata needed to show dashboards, history, findings, scores, and reports.
• Billing and subscription information handled by our payment provider.
• Usage, device, log, and diagnostic data used to operate and secure the service.

How We Use Information

We use information to provide scans and reports, authenticate users, manage subscriptions, prevent abuse, debug issues, improve product quality, and communicate about important service updates.

Connected Providers

If you connect GitHub, Google, or another provider, we receive the information needed for sign-in and the permissions you approve. You can revoke provider access through that provider or through Ship Safe settings when available.

Code and Scan Data

Local CLI scans can run without sending repository content to Ship Safe. Provider-backed AI modes send bounded context directly to the provider selected by the user, while hosted workflows process repository metadata, findings, and reports as needed to provide those services. The current technical boundaries are documented on the Security and Data Flow page.

Sharing

We do not sell personal information. We may share information with vendors that help operate the service, comply with legal obligations, protect users, or complete transactions you request.

Retention and Security

We keep information for as long as needed to provide the service, meet legal obligations, resolve disputes, and maintain security. We use technical and organizational safeguards, but no system is perfectly secure.

Your Choices

You may request access, correction, deletion, or export of personal information, subject to legal and security requirements. You can also manage provider permissions and billing settings through the connected services.

Contact

Privacy questions can be sent to hello@shipsafecli.com.