Your code is sensitive.We treat it that way.

This Privacy Policy explains how ShipCheck collects, processes, uses, retains, and protects information when you use the service.

ShipCheck is a developer tool designed to review software changes, pull requests, and related repository context. Because source code may contain confidential or proprietary information, we aim to limit access and processing to what is necessary to provide ShipCheck's functionality.

Account information

When you create an account or sign in through GitHub or another supported authentication provider, ShipCheck may receive:

• Your GitHub username.
• Your display name.
• Your profile image.
• Your email address, when available.
• Authentication identifiers required to maintain your ShipCheck account.

Repository information

When you connect a repository, ShipCheck may process repository information required to perform scans and provide repository-related functionality, including:

• Repository names and identifiers.
• Repository owner and installation information.
• Default branches and branch names.
• Commit identifiers.
• Pull request metadata.
• Changed file names.
• Pull request patches and changed code.
• Selected repository context relevant to understanding a change.

Scan information

ShipCheck may retain information generated during or after scans, including:

• Scan status and progress.
• Scores and verdicts.
• Findings and severity levels.
• Finding evidence and file locations.
• Suggested fixes.
• Generated regression tests.
• Scan timestamps.
• Repository and pull request identifiers.
• Settings used for a particular scan.
• AI usage metadata when AI Review is used.

Technical information

We may receive technical information necessary to operate, troubleshoot, and protect ShipCheck, such as browser information, request metadata, application errors, security events, and limited diagnostic logs.

ShipCheck uses GitHub App authentication to interact with connected repositories. ShipCheck creates installation access tokens when repository access is required.

ShipCheck does not require you to manually provide a GitHub personal access token for normal GitHub App repository access.

Removing a repository from the ShipCheck GitHub App installation prevents future ShipCheck access to that repository through that installation.

ShipCheck retrieves repository content from GitHub when necessary to perform a scan or an action you request.

A scan may process pull request patches, changed files, metadata, and selected repository context that helps ShipCheck understand contracts, authorization, validation, data access, callers, or surrounding behavior.

ShipCheck is not designed to create a permanent mirror of your entire GitHub repository. However, portions of code may appear in retained scan data where necessary to provide findings, evidence, generated fixes, regression tests, or scan history.

You should not connect repositories that you are not authorized to provide to ShipCheck.

When AI Review is enabled, ShipCheck uses OpenAI's API to analyze selected information associated with a code change.

Information sent for AI-assisted analysis may include:

• Repository name.
• Pull request title and description.
• Changed file information.
• Relevant portions of code changes.
• Selected supporting repository context.
• Findings produced by ShipCheck's deterministic checks.

ShipCheck applies limits to the amount of repository content included in AI analysis and does not automatically send every file in a repository to the AI model.

OpenAI states that data submitted through its API is not used to train or improve its models by default unless the API customer explicitly opts in to data sharing.

OpenAI's current API data controls may include limited retention for abuse monitoring and other operational purposes. OpenAI's policies and retention practices are governed by OpenAI's own terms and policies.

Certain ShipCheck functionality can make changes to a GitHub repository when you explicitly request that action.

Examples may include applying a ShipCheck suggested fix or applying a generated regression test to a pull request branch.

GitHub App permissions may therefore include permissions required to support these optional write features.

ShipCheck uses collected and processed information to:

• Authenticate users.
• Verify and manage GitHub App installations.
• Connect repositories selected by users.
• Analyze pull requests and code changes.
• Run deterministic checks.
• Perform AI Review when it is enabled.
• Generate findings, scores, reports, suggested fixes, and regression tests.
• Maintain scan history and repository settings.
• Enforce account and plan limits.
• Operate, troubleshoot, secure, and improve ShipCheck.
• Prevent abuse, fraud, unauthorized access, and security incidents.

ShipCheck does not sell your personal information or source code.

ShipCheck may use service providers that are necessary to operate the service, including providers for:

• Cloud hosting and infrastructure.
• Authentication.
• Database services.
• Payment processing.
• Monitoring and error reporting.
• GitHub integration.
• AI-assisted code analysis.

These providers may process information necessary to provide their services to ShipCheck and are subject to their own agreements, security practices, and privacy policies.

We may also disclose information where required by law or where reasonably necessary to protect ShipCheck, our users, or others from fraud, abuse, security threats, or unlawful activity.

We retain information for as long as reasonably necessary to provide ShipCheck, maintain security and reliability, satisfy legal obligations, enforce agreements, and resolve disputes.

Different categories of information may have different retention periods. For example, repository metadata and scan history may be retained while your account or repository connection remains active.

Certain source-code excerpts may remain as part of stored findings, evidence, fixes, generated tests, or other scan artifacts.

Information processed by third-party providers may be subject to those providers' own retention policies.

ShipCheck uses administrative, technical, and organizational measures designed to protect information processed by the service.

Current safeguards include GitHub App-based repository authorization, validation of GitHub installation ownership, verification of GitHub webhook signatures, authorization checks around ShipCheck resources, and server-side credentials for privileged operations.

No online service can guarantee absolute security. You are also responsible for protecting your GitHub account, authentication credentials, and access to your ShipCheck account.

For a more readable overview of how ShipCheck approaches repository security, see our Security & Privacy page.

Depending on available ShipCheck functionality, you may:

• Choose which repositories are available to ShipCheck when configuring the GitHub App installation.
• Remove a repository from the ShipCheck GitHub App installation.
• Uninstall the ShipCheck GitHub App.
• Disable AI Review for individual repositories.
• Configure which ShipCheck checks are enabled for a repository.
• Sign out of your ShipCheck account.
• Request access to or deletion of information associated with your ShipCheck account, subject to applicable legal and operational requirements.

ShipCheck integrates with third-party services, including GitHub and OpenAI. ShipCheck may also rely on infrastructure, authentication, database, payment, and monitoring providers.

These services operate under their own terms, security practices, and privacy policies. This Privacy Policy applies to ShipCheck's handling of information and does not replace the policies of those third-party services.

ShipCheck is a developer tool and is not directed to children under 13. We do not knowingly collect personal information from children under 13.

ShipCheck may update this Privacy Policy as the product, integrations, or legal requirements change.

When the policy changes, we will update the "Last updated" date shown on this page and may provide additional notice where appropriate.