Privacy Notice

Data We Store

ContributionPulse stores only day-level aggregate metrics used for verification and reporting.

• Commits per day
• Merge requests and pull requests per day
• Pipeline activity counts per day
• Manual highlights that you explicitly add

Data We Never Store

• Source code
• Diffs or patches
• Commit messages
• Repository names
• Raw provider payloads after aggregation

Security Controls

• Integration tokens are encrypted at rest using AES-256-GCM.
• Server-side secrets are never exposed to client code.
• Logs sanitize token-like values.

Retention, Deletion, and Control

You can disconnect providers at any time. You can also delete your account and related data from the settings page. Public report links can be revoked immediately and may be configured with expiration.

Contact

Questions about privacy practices should be sent to your support contact email. Replace this placeholder with your production legal contact.