Legal

Privacy Policy

Last updated: July 13, 2026

This policy describes how Alethi LLC ("Alethi", "we") collects and uses personal data when you use the GitStack service at gitstack.sh and the gs command-line tool (together, "GitStack").

1. Data we collect

• Account data. You sign in with GitHub. We receive and store your GitHub ID, username, display name, email address, and avatar from your GitHub profile.
• Content you host. The repositories, reviews, and comments you push to GitStack are stored on our servers so we can provide the service. Your code remains your content; see the Terms of Service.
• Usage and log data. Standard server logs (IP address, user agent, requested endpoints, timestamps), session identifiers, and rate-limit counters, kept for security and operations.
• Diagnostics and product events. We record errors and product usage events (e.g. that a review was created) with our analytics processor to diagnose failures and understand feature use. These events reference accounts and actions, not repository contents.
• Billing data. If you buy a paid plan, payment is handled by a payment processor; we receive plan and transaction status, not full card details.

2. How we use data

• to operate GitStack: authentication, hosting your repositories, rendering reviews, and mirroring to GitHub where you configure it;
• to secure the service: abuse prevention, rate limiting, and incident investigation;
• to run billing for paid plans;
• to fix bugs and improve the product using error reports and usage events;
• to contact you about your account, security, and material changes to the service or these terms.

We do not sell personal data, and we do not use your repository contents to train machine-learning models.

3. Cookies

GitStack uses cookies only to keep you signed in and to protect against cross-site request forgery. There are no third-party advertising or tracking cookies.

4. Sharing

We share personal data only with:

• Service providers that run our infrastructure (hosting, analytics and error reporting, payment processing), under contracts limiting their use of the data to providing those services;
• GitHub, when you connect a repository or account. Mirroring and issue/CI integration transmit the data you asked us to sync, governed by GitHub's own terms;
• authorities, when required by law or to protect the rights, safety, or property of Alethi and its users;
• a successor entity, if Alethi is involved in a merger, acquisition, or asset sale (with notice to you).

5. Retention and deletion

We keep your data while your account exists. When you delete your account, or ask us to at [email protected], we delete your personal data and hosted content within a reasonable period, except for residual copies in backups (which expire on their normal schedule) and records we must keep for legal or accounting reasons.

6. Security

We protect data in transit with TLS and restrict and audit access to production systems. If you find a suspected vulnerability, report it to [email protected].

7. International transfers

GitStack is operated from the United States, and data is processed there. If you use GitStack from elsewhere, you consent to your data being transferred to and processed in the United States.

8. Your rights

Depending on where you live (for example under the GDPR or CCPA), you may have rights to access, correct, export, or delete your personal data, and to object to or restrict certain processing. You can export your repositories with git at any time; for anything else, email [email protected]. We do not discriminate against you for exercising these rights.

9. Children

GitStack is not directed at children under 13, and we do not knowingly collect their data. If you believe a child has provided us personal data, contact us and we will delete it.

10. Changes

We may update this policy. For material changes we will give notice on the service or by email before they take effect. The date at the top reflects the latest revision.

11. Contact

Privacy questions and requests: [email protected].