Privacy Policy

Last updated: August 2026

1. Information We Collect

When you use KittyLog, we collect:

  • GitHub Account Information: Your GitHub username, email address, and profile information provided through OAuth authentication
  • Repository Data: Commit messages, pull request titles and descriptions, release notes, and repository metadata for connected repositories
  • Code Diffs (Pro/Business only):If you enable the "Include code diffs" feature, we access file changes for more detailed changelog generation. This data is sent to AI providers but not stored by KittyLog.
  • Webhook Events: We receive notifications from GitHub when releases are published, tags are created, or commits are pushed to connected repositories
  • Usage Data: Information about how you use the Service, including features used and changelog generations
  • Payment Information: Billing details processed securely through Stripe (we do not store credit card numbers)

2. How We Use Your Information

We use your information to:

  • Provide and improve the KittyLog service
  • Generate changelog entries based on your repository activity
  • Process payments and manage subscriptions
  • Send important service updates and notifications
  • Respond to support requests

3. Data Access Levels

KittyLog requests minimal GitHub permissions:

  • Default: We access commit messages, PR titles, and release notes - not your source code files
  • With "Include code diffs" enabled: Pro and Business plans can opt-in to send file changes to AI providers for richer changelogs. This code is processed but not stored by KittyLog.
  • Hosted changelogs: Generated changelogs are hosted on KittyLog. If you enable auto-commit, changelogs will also be committed to your repository.

4. Data Sharing

We do not sell your personal information. We may share data with:

  • AI Providers: Commit messages (and code diffs if enabled) are sent to AI providers to generate changelog entries. We exclusively use United States-based inference providers (currently Cerebras and Groq) that operate under API agreements prohibiting the use of your data for model training. Your data is processed transiently and is not retained by AI providers beyond the API request. We may add or change providers over time but will maintain our commitment to US-based providers with no-training agreements.
  • Payment Processors: Stripe processes payment information securely.
  • Service Providers: We use hosting (Fly.io, Cloudflare) and infrastructure providers to operate the Service.

5. Data Security

We implement industry-standard security measures to protect your data, including encryption in transit (HTTPS) and at rest. GitHub access tokens are encrypted and stored securely. However, no method of transmission over the internet is 100% secure.

6. Data Retention

We retain your data for as long as your account is active. Generated changelogs are stored on our servers and remain accessible at your hosted changelog URL. You can delete your account at any time, which will remove your data from our systems within 30 days.

7. Your Rights

You have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data
  • Disconnect repositories and revoke GitHub access
  • Export your data

For users in the European Economic Area (EEA), you have additional rights under GDPR including the right to data portability and the right to object to processing. Our lawful basis for processing is contract performance (providing the Service) and legitimate interests (improving the Service).

8. International Data Transfers

Your data is processed in the United States where our servers and AI providers are located. We exclusively use US-based AI inference providers and US-based hosting infrastructure. By using the Service, you consent to this transfer. We ensure appropriate safeguards are in place for international transfers.

Referral Program Data

When you visit a valid referral link, we store an essential, first-touch referral cookie for up to 30 days. If GitHub OAuth creates a new KittyLog account in that browser, we record the referring account, program version, qualification state, and reward history. Referral dashboards show aggregate counts only and do not identify referred people.

Cash-pilot participants may provide their country, age attestation, terms acceptance, and preference for a business check. The referral system does not ask for or store a legal payee name or mailing address. An authorized administrator obtains those details directly from the participant outside KittyLog only when a check is ready. We do not put referred-person information in checks, referral analytics, tickets, or internal payout notes.

Your account export includes your referral attribution, reward ledger, terms acceptance, and payout history. Deleting your account removes the payout preference and anonymizes retained referral records. We may retain only the minimal paid payout records—including amount, status, dates, and payment reference (a check number, or a legacy Venmo transaction reference)—needed for accounting, tax, fraud, and legal obligations. To enforce one-time referral eligibility and the annual cash ceiling after deletion, we retain a keyed, one-way fingerprint of the numeric GitHub account ID; it is not displayed or used to recreate the deleted account profile.

9. Cookies and Analytics

We use essential cookies to maintain your session and authentication state. We do not use tracking cookies or third-party analytics that track you across websites.

We use Sentry only for error monitoring. We do not enable Sentry performance tracing or Session Replay. Error reports may include technical diagnostics and your internal KittyLog user ID so we can investigate failures. Sentry does not track you across other websites.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through the Service.

11. Contact Us

For questions about this Privacy Policy or to exercise your data rights, please contact us at [email protected].