Information We Collect
Transparency in how we handle your data
Last Updated: January 15, 20251. Information You Provide Directly
When you create an account, configure projects, or interact with our support team, we collect the information you explicitly share with us.
- Account Details: Email address, username, profile name, and optional avatar.
- Billing Information: Payment method details, billing address, and transaction history. We do not store full credit card numbers; payments are processed securely by our PCI-compliant providers.
- Team & Organization Settings: Role assignments, access controls, invitation emails, and workspace preferences.
- Support Communications: Content of emails, chat logs, and ticket submissions when you contact our support team.
2. Automatically Collected Data
As you interact with our platform, we automatically collect certain technical and usage information to maintain, secure, and improve our services.
- Server Logs: IP address, timestamp, request type, HTTP status codes, and referrer URLs.
- Device & Browser Info: Operating system, browser type/version, screen resolution, and timezone.
- Usage Analytics: Pages visited, feature interactions, session duration, and error occurrences (aggregated and anonymized).
- Cookies & Local Storage: We use essential cookies for authentication, session management, and security. We do not use third-party tracking cookies for advertising.
💡 You can manage cookie preferences through your browser settings. Disabling essential cookies may limit platform functionality.
3. Repository & Code Data
.git is designed to respect the privacy of your source code. We process repository data strictly to provide deployment, CI/CD, and collaboration features.
- Metadata Only: We index commit history, branch names, file types, and dependency trees to power features like dependency scanning and build optimization.
- Build Artifacts: Temporary build outputs are stored in isolated, encrypted environments and automatically purged after deployment or after 30 days.
- No Code Mining: We do not sell, share, or use your source code for AI training, advertising, or third-party analytics.
4. How We Use Your Information
We use collected data solely to deliver, maintain, and improve our developer platform:
- Provisioning and managing your account, teams, and projects
- Processing payments and issuing invoices/receipts
- Running automated builds, tests, and deployments
- Monitoring platform performance and diagnosing technical issues
- Providing customer support and responding to inquiries
- Sending service announcements, security alerts, and product updates
- Improving platform features based on aggregated, anonymized usage patterns
5. Data Security & Retention
We implement industry-standard technical and organizational measures to protect your data:
- Encryption: AES-256 at rest and TLS 1.3 in transit for all sensitive data.
- Access Controls: Role-based access, MFA enforcement for admin accounts, and strict audit logging.
- Infrastructure: Hosted on ISO 27001 & SOC 2 Type II certified cloud providers with regional data residency options.
We retain data only as long as necessary to provide our services, comply with legal obligations, resolve disputes, and enforce agreements. Account data is permanently deleted within 30 days of account closure.
6. Your Rights & Controls
Depending on your jurisdiction, you may have the right to:
- Access, export, or update your personal information
- Request deletion of your account and associated data
- Opt out of non-essential communications
- Object to or restrict certain data processing activities
You can manage most of these settings directly in your Dashboard → Settings → Privacy. For requests not available through the UI, please contact us using the information below.
7. Contact Information
If you have questions about this policy or wish to exercise your data rights, please reach out:
📧 Privacy Team: privacy@.git.dev
🏢 Legal Address: .git Technologies Inc., 123 Cloud District, San Francisco, CA 94105
🌐 Support Portal: support.git.dev
We aim to respond to all legitimate data requests within 30 days.