At GitShout, we build tools that help developers share their progress in public. We believe in complete transparency, zero dark patterns, and honest data disclosures. Below is a detailed, plain-English explanation of exactly how we handle your information.
1. Information We Collect
To run the auto-drafting and publishing pipelines, we only collect the minimum amount of data required:
GitHub Account Metadata: When you connect via GitHub OAuth, we retrieve your profile identifier, email address, username, avatar logo, and an access token to read repository metadata. We do not clone or download your full source code.
Repository Metadata & Commit Messages: We scan branch commits and pull requests (specifically changesets, filenames, and commit messages) to construct copy drafts.
Voice Recordings & Transcripts: If you use the Telegram Voice Note feature, we temporarily upload the audio file to transcribe it. Voice notes are permanently purged from our database and Supabase storage within 30 days.
Telegram Chat ID: If you choose to link Telegram, we store your chat identifier to deliver review and approval notifications.
Social Media Auth Tokens: When you connect X/Twitter or LinkedIn, we store authorization tokens and usernames in secure tables to allow automatic publishing of approved drafts.
Billing Data: Payment processing is handled entirely by Stripe. We do not store or process your credit card numbers directly.
2. How We Use Your Data
We process your data for the sole purpose of providing GitShout services:
Generating AI-written social media copywriting drafts from your commits.
Rendering marketing slides and PDF carousels.
Sending approval alerts via our Telegram bot.
Publishing copy directly to your connected social channels when you click "Approve".
3. Data Sharing & Third-Party Processors
We share text segments and metadata with AI models for post generation and verification. We do not sell your personal data to anyone. Data is shared with:
Google (Gemini AI API): Used to generate social posts, marketing plans, and analyze rendered graphics via OCR.
Anthropic (Claude AI API): Used as a structured generation fallback.
OpenAI (DALL-E API): Used as a fallback image generator.
Supabase: For cloud hosting, Postgres database storage, and file storage.
Telegram: To route notifications and buttons via bot API.
Stripe: To handle subscription transactions and checkout sessions.
4. Data Retention
We keep your profile data and access tokens as long as you maintain an active account. In keeping with our data-minimization philosophy:
Temporary assets like voice recordings and PDF carousels are deleted after 30 days.
If you delete your GitShout account, all Supabase records, tokens, and storage objects associated with your profile are immediately and permanently erased.
5. User Rights & Choices
You maintain complete control over your accounts:
You can disconnect GitHub, Telegram, X, or LinkedIn integrations at any time from your settings panel.
You can initiate full account deletion from the Account Settings screen.
You may request complete data removal or export by contacting us directly.
6. Contact Information
For privacy requests, audit inquiries, or general support, email us at: privacy@gitshout.com