Privacy Policy

1. Overview

This Privacy Policy explains how ShipCheck collects, uses, and handles information when you use the service.

ShipCheck is designed to analyze software repositories and pull requests while limiting access to the information necessary to provide the service.

2. Information we collect

Account information

When you sign in using GitHub or another supported authentication provider, we may receive information associated with your account, such as:

• Your GitHub username.
• Your display name.
• Your profile image.
• Your email address, when available.
• Authentication identifiers needed to maintain your ShipCheck account.

Repository information

When you connect a repository, ShipCheck may process information necessary to perform code reviews, including:

• Repository names and identifiers.
• Branches and commit information.
• Pull request metadata.
• Changed files and code.
• Repository context required to understand and analyze a change.

Scan information

We may store information generated by ShipCheck scans, including scan status, scores, findings, categories, severity levels, timestamps, and related repository or pull request identifiers.

Technical information

We may automatically receive limited technical information necessary to operate and secure the service, such as request information, browser or device details, error logs, and security events.

3. How we use information

We use information collected through ShipCheck to:

• Authenticate users.
• Connect and manage authorized repositories.
• Analyze pull requests and code changes.
• Generate scan findings, reports, and scores.
• Maintain scan history and repository settings.
• Operate, troubleshoot, secure, and improve ShipCheck.
• Prevent abuse, fraud, unauthorized access, and security incidents.

4. Repository access

ShipCheck accesses repositories through permissions you grant to the ShipCheck GitHub App or another supported integration.

You control which repositories ShipCheck can access through your GitHub installation settings. Removing repository access may prevent ShipCheck from performing future scans on that repository.

5. How we share information

We do not sell your personal information.

We may share or process information with service providers that help operate ShipCheck, such as hosting, authentication, database, infrastructure, monitoring, and code-analysis providers.

These providers may process information only as necessary to provide services to ShipCheck, subject to their applicable agreements and policies.

We may also disclose information when required by law or when reasonably necessary to protect the rights, safety, security, or integrity of ShipCheck, its users, or others.

6. Data retention

We retain information for as long as reasonably necessary to provide ShipCheck, maintain security and reliability, satisfy legal obligations, and resolve disputes.

Different types of information may be retained for different periods depending on their purpose.

7. Data security

We use reasonable administrative, technical, and organizational measures designed to protect information processed by ShipCheck.

No online service can guarantee absolute security, and you should also protect your GitHub account and other credentials from unauthorized access.

8. Your choices

Depending on the functionality available in ShipCheck, you may be able to:

• Remove repository access through GitHub.
• Sign out of your ShipCheck account.
• Change GitHub App repository permissions.
• Request information about or deletion of information associated with your account.

9. Third-party services

ShipCheck integrates with third-party services such as GitHub. Those services operate under their own privacy policies and terms.

This Privacy Policy applies to ShipCheck's handling of information and does not control the practices of third-party services.

10. Children's privacy

ShipCheck is a developer tool and is not intended for children under 13. We do not knowingly collect personal information from children under 13.

11. Changes to this policy

We may update this Privacy Policy as ShipCheck changes. When we make updates, we will revise the "Last updated" date at the top of this page and may provide additional notice where appropriate.

12. Contact

If you have questions or requests related to this Privacy Policy, contact us through the contact information provided on the ShipCheck website.