Privacy Policy

Last updated: December 22, 2025

This Privacy Policy explains how Repovate collects, uses, and protects your personal data when you use our platform and services.

1. Information We Collect

We collect the following categories of information:

  • Email address and encrypted password
  • Full name (optional)
  • IP address and technical logs
  • OAuth tokens for GitHub and GitLab (encrypted)
  • Repository metadata required for analysis

2. Repository & Code Handling

When you request an analysis or automated fix, the selected repository branch is temporarily cloned. Source code is processed only for the requested operation and is automatically deleted within a maximum of 30 minutes after completion.

3. AI Processing

Repovate uses OpenAI models to perform repository analysis and generate code fixes. User code is not used to train AI models, is not reused, and is not reviewed by humans.

4. Payments

Payments are processed securely via Stripe. Repovate does not store or process credit card information on its own servers.

5. Logs & Analytics

We collect backend logs and use self-hosted analytics to improve performance, reliability, and security. Analytics data is not shared with third parties.

6. Data Retention

Temporary repositories are deleted within 30 minutes. Account data is retained until you request account deletion or as required by law.

7. Your Rights

You have the right to access, correct, delete, or restrict the processing of your personal data in accordance with GDPR. You may request account deletion at any time.

8. Data Security

We apply technical and organizational security measures to protect your data. However, no system can be guaranteed to be completely secure.

9. Contact

If you have any questions about this Privacy Policy, please contact us:

  • By email: admin@repovate.com