Privacy

Last updated 2026-06-18 · Draft — describes how GitSpider actually handles data, but not yet reviewed by a lawyer.

GitSpider reads your GitHub Actions data to show CI analytics, recommendations, and alerts. This explains what we store and why.

What we collect

• Account — your GitHub login, user ID, and email (if your GitHub OAuth grant includes it), to identify your account.
• Installation + repos — installation IDs and the repositories you grant access to (name, ID, public/private flag).
• Workflow run data — workflow names, branch names, event types, statuses, conclusions, durations, and timestamps. Free-text fields (workflow + branch names) are scrubbed for secret-like patterns before storage.
• Workflow files — your workflow YAML is fetched to detect waste patterns; only a redacted copy is stored.
• Billing — handled by Stripe. We store your Stripe customer/subscription IDs and plan status; we never see or store card numbers.
• Alert delivery — if you configure alerts, the destination (a Slack incoming-webhook URL or an email address).

How we use it

Only to operate the product: compute analytics, generate config recommendations, and send the alerts you set up. We also compute anonymized, aggregated benchmarks across all monitored repos (e.g. typical CI failure rates and durations) so you can see how your CI compares — these are pure aggregate numbers, contain no repo names or identifiers, and are only published over a large enough group that no individual repo is identifiable. We do not sell your data or use it for advertising.

Who we share it with

Sub-processors strictly to run the service: GitHub (source of the data; we read CI + workflow files and post comments on your pull requests, but never modify your code or access secrets), Stripe (billing), and — only if you enable them — Slack and Resend (alert delivery). Hosting/database are on Fly.io and Neon.

Retention

Individual workflow runs are kept ~30 days; aggregated daily rollups longer. Login sessions expire after 30 days. Uninstalling the GitHub App stops all further collection.

Your choices

Uninstall the GitSpider GitHub App at any time to revoke access and halt collection. Email us to request deletion of your stored data.

Questions: privacy@gitspider.com