Privacy Policy

This Privacy Policy explains how ShipNap collects, uses, shares, and protects personal information when you use our waitlist, website, application, GitHub integration, billing flows, support channels, and related services.

ShipNap is designed for developers and teams that connect GitHub repositories and use AI providers to generate code changes. Because repository data can contain personal information, secrets, confidential business information, or customer data, you should only connect repositories you are authorized to process through ShipNap.

Waitlist and account information: email address, GitHub account ID, username, name, avatar, session data, workspace membership, and authentication metadata.

Repository information: repository owner, name, default branch, GitHub repository ID, installation metadata, connected repository status, and repository content needed to perform requested tasks.

Task information: task descriptions, selected AI provider and model, task status, logs, tool activity, generated branches, commits, pull request metadata, diffs, and diagnostic information.

Credentials and tokens: GitHub OAuth tokens, GitHub App installation tokens, AI provider API keys you provide, and related encrypted secrets needed to operate the service.

Billing information: subscription tier, checkout status, customer portal status, payment and invoice metadata received from our payment provider. Full payment card details are processed by the payment provider and are not stored by ShipNap.

Usage and device information: IP address, browser, device, pages viewed, events, approximate location derived from IP address, errors, performance data, and product usage analytics.

Communications: messages you send to support, waitlist emails, invitation emails, workspace member invitations, and related metadata.

We collect information directly from you when you join the waitlist, sign in, connect repositories, create tasks, enter API keys, manage billing, invite members, or contact support.

We receive information from GitHub when you authenticate, install the GitHub App, grant repository access, or use repository automation.

We receive billing and subscription information from our payment provider. We may receive analytics, monitoring, and error information from service providers used to operate ShipNap.

We use information to manage the waitlist, authenticate users, create and manage workspaces, connect repositories, run AI coding tasks, stream logs, create branches and pull requests, enforce plan limits, process billing, provide support, prevent abuse, secure the service, debug failures, improve product quality, and comply with legal obligations.

We use AI provider API keys only to perform actions you request, such as validating available models, profiling a repository, running an agent, generating code changes, or generating pull request metadata.

When you start a task, ShipNap may send task descriptions, selected repository context, file contents, diffs, logs, and related prompts to the AI provider and model you select. The provider may process that information according to its own terms, privacy policy, and data controls.

Do not connect repositories or submit tasks containing personal information, regulated data, trade secrets, credentials, or confidential material unless you have authority to do so and your selected AI provider settings are appropriate for that data.

We share information with service providers that help operate ShipNap, including hosting, database, queueing, sandbox execution, GitHub integration, AI providers selected by you, payment processing, email delivery, analytics, error monitoring, logging, and security providers.

We may share information when required by law, legal process, or to protect ShipNap, users, third parties, or the public. We may share information in connection with a merger, acquisition, financing, reorganization, or sale of assets.

We do not sell personal information. We do not use your private repository contents to train ShipNap-owned foundation models.

ShipNap uses cookies and similar technologies for authentication, session management, security, preferences, product analytics, and error monitoring.

We may use analytics and session insight tools if enabled. Where required, we will request consent before using non-essential analytics or session recording technologies.

We use safeguards intended to protect information, including encrypted storage for API keys and GitHub OAuth tokens, HTTPS, access controls, rate limiting, secret redaction, sandboxed task execution, and monitoring.

No system is perfectly secure. You are responsible for maintaining secure GitHub and AI provider accounts, using appropriate repository permissions, reviewing generated code, and rotating credentials if you suspect exposure.

We keep waitlist, account, workspace, repository, task, billing, and log information for as long as needed to provide the service, comply with legal obligations, resolve disputes, enforce agreements, maintain security, and support users.

You can delete tasks, disconnect repositories, revoke GitHub App access, revoke sessions, unsubscribe from waitlist emails, and request account deletion. Some information may remain in backups, audit logs, billing records, security logs, or third-party systems for a limited period where needed for legitimate business or legal purposes.

ShipNap and its service providers may process information in countries other than where you live or where your organization is located. These countries may have different data protection laws.

If applicable law requires a transfer mechanism, we will use appropriate safeguards for international transfers, such as contractual protections with service providers.

Depending on your location, you may have rights to access, correct, delete, export, restrict, or object to certain processing of your personal information. You may also have rights to opt out of certain analytics or marketing uses.

You can exercise many controls directly through GitHub, your ShipNap account, workspace settings, repository connection settings, billing portal, unsubscribe links, or browser cookie settings. You may contact privacy@shipnap.dev for privacy requests.

If California privacy laws apply to your use of ShipNap, this section provides additional information. We collect identifiers, internet or network activity, commercial information, professional or employment-related information if included in your account or repository context, and inferences from product usage analytics.

We use these categories for the purposes described in this Privacy Policy. We do not sell personal information. We do not knowingly share personal information for cross-context behavioral advertising. You may contact privacy@shipnap.dev to exercise applicable California privacy rights.

ShipNap is not intended for children under 13, and we do not knowingly collect personal information from children. If you believe a child has provided personal information to ShipNap, contact privacy@shipnap.dev.

We may update this Privacy Policy from time to time. If changes are material, we will take reasonable steps to notify users, such as posting an updated date or providing in-product notice.

For privacy questions or requests, contact privacy@shipnap.dev. For support questions, contact support@shipnap.dev.