Privacy Policy

1. Information We Collect

When you use BIP OS, we collect and process several categories of information to provide the services described:

• Account Identity Information: Managed through our authentication provider, Better Auth. When registering via GitHub OAuth, we access your email address, profile name, username, and profile avatar.
• Repository Connection Metadata: We store identifiers for GitHub installations and repositories you choose to track. This includes repository names, owners, and repository IDs.
• Git Commit Statistics & Logs: We ingest commit hashes, messages, author details, commit timestamps, and lists of changed file names/paths (e.g., `src/main.ts` modified) alongside line-change tallies. We exclude actual code changes (diff contents/patches) from this collection.
• Billing Information: For premium tiers, checkout details and billing info are handled exclusively by third-party processors (such as Stripe). We do not collect or store your full credit card number.

2. How We Use Information

We process your details exclusively to power the content generation engine and account tracking features:

• To filter daily repository activity and exclude lockfiles, media, or dependency commits.
• To compile commit logs into daily summaries and submit them to LLM APIs to draft draft social media threads (X), long-form narrative drafts (LinkedIn), and markdown changelogs.
• To monitor daily streak metrics based on your designated timezone and update dashboard contribution calendars.
• To calculate aggregate monthly retrospectives and generate static monthly review cards.

3. Data Sharing & APIs

We do not sell, rent, or lease customer data. Your data is shared only with services necessary to perform backend operations:

• AI Providers: Filtered commit packages (messages and file list logs) are shared with AI providers (OpenAI, Anthropic, or Google Gemini) to generate drafts. We use APIs governed by terms that explicitly prohibit training models on customer API requests.
• Hosting & Databases: Our database is securely stored with reliable cloud hosting partners.
• Payment Processors: Transaction management is handled by secure third-party payment gateways.

4. Data Retention Windows

To maintain database efficiency and uphold security principles, BIP OS enforces strict tier-gated data retention schedules:

• Free Plan: Raw daily activity logs, raw ingestion records, and generated draft variations are permanently deleted via an automated cron pipeline after 30 days.
• Pro Plan: Raw daily logs and content variations are retained indefinitely for active accounts.
• Monthly Summaries: Static aggregate summaries (monthly totals, tech focus logs) are preserved indefinitely across all plans to provide long-term retrospectives unless you request account deletion.

5. Security Measures

We implement technical and organizational measures to safeguard your information. Our security protocols include:

• Encryption of sensitive authorization scopes and keys in transit and at rest using industry-standard protocols.
• Restricted internal access to production database systems.
• Continuous dependency auditing and repository linting to secure libraries.

6. Your Rights & Choices (GDPR/CCPA)

Depending on your location, you may have rights under regional privacy laws (including GDPR and CCPA) to access, correct, delete, or limit the processing of your personal data.

You can trigger a complete removal of your records at any time:

1. Revoke the BIP OS application access via your GitHub Account Settings.
2. Click "Delete Account" within the settings panel of the BIP OS Dashboard to purge all database records immediately.
3. Alternatively, contact us at support@bip-os.com to request complete profile deletion.