Privacy Policy

Updateberry helps users turn repository activity into customer-facing release communications. This Privacy Policy explains what information we collect, how we use it, when we share it, and what choices you have when using Updateberry's accounts, repository-connected workflows, hosted changelogs, waitlist, and free tools.

1. Scope of This Policy

This policy applies to information we collect from:

• account holders using the authenticated Updateberry application
• users who connect repositories or generate AI-assisted content
• visitors who join our waitlist
• users who unlock or use our free tools
• people who subscribe to changelog digests or receive announcements distributed through the product
• visitors interacting with our public changelog pages, embeds, and related distribution surfaces

2. Information We Collect

Account and Authentication Data

• Account details such as name, email address, and login credentials if you register directly
• GitHub OAuth data such as your GitHub name, email, user ID, and related account metadata if you sign in with GitHub
• Session and authentication data needed to keep you signed in and secure your account

Repository-Connected Product Data

• Repository connection data such as provider, repository name, repository ID, default branch, sync status, and encrypted access tokens
• Imported commit metadata such as commit SHA, message, description, author name, author email, commit timestamp, file counts, additions/deletions, and related commit summary fields
• Brand profile data such as audience, channels, business stage, voice preferences, custom instructions, and positioning information you provide
• Campaign data such as selected commit SHAs, requested asset types, AI summaries, filtering metadata, and progress/error states
• Generated content such as draft release notes, changelog entries, emails, social posts, ads, edited outputs, and publication status

Hosted Changelog and Distribution Data

• Hosted changelog data such as title, slug, brand fields, selected entries, published snapshots, and custom domain verification state
• Widget and embed configuration such as display mode, target selectors, labels, colors, positioning, and announcement settings
• Subscriber list data such as subscriber name, email address, unsubscribe token, and unsubscribe status for changelog digest recipients

Waitlist and Free Tool Data

• Waitlist data such as email address, optional role or pricing-fit responses, landing-page source, referrer, and UTM attribution data
• Free-tool lead data such as email address, optional company name, tool-specific inputs, questionnaire responses, and generated analysis results
• Marketing and drip-email state such as whether follow-up emails were scheduled, sent, opened, unsubscribed, or later linked to a user account

Automatically Collected Data

• Usage and analytics data such as page views, events, session IDs, referring URLs, and UTM parameters
• Device and browser data such as browser type, operating system, and general technical environment information
• IP address and security signals used for abuse prevention, rate limiting, troubleshooting, and service protection

3. How We Use Your Information

We use information we collect to:

• authenticate users and operate user accounts
• connect to repositories and sync repository and commit metadata
• classify commits, generate draft content, and power AI-assisted product workflows
• let you publish and distribute hosted changelogs, widgets, RSS feeds, announcements, and digest emails
• send waitlist emails, free-tool follow-ups, product updates, and related marketing communications unless you unsubscribe
• measure performance, understand product usage, improve the service, and develop new features
• protect the service, detect abuse, debug issues, and enforce our terms and limits

4. AI Processing

Updateberry uses AI service providers to classify commits, summarize repository activity, and generate draft content. Depending on the workflow, this may include repository-derived metadata, commit messages, selected commit context, brand instructions, free-tool inputs, questionnaire answers, release notes, feature descriptions, and similar user-submitted content.

Do not submit confidential, regulated, or personal data you are not authorized to share or process through these workflows.

5. Public Content and Distribution

If you publish a hosted changelog or distribute content through RSS, widgets, announcement endpoints, embeds, or digest emails, the content you choose to publish may become publicly accessible or accessible to recipients you choose.

Publicly distributed content may be cached, indexed, copied, forwarded, archived, or retained by third parties, even after you update or unpublish it on Updateberry.

6. Email Communications

Emails We Send to You

If you join our waitlist or unlock results from a free tool, we may send you follow-up emails, product updates, educational content, and related marketing emails until you unsubscribe.

Emails You Send Through the Product

If you upload or maintain subscriber lists in Updateberry, you are responsible for making sure you have the necessary consent and legal basis to send to those recipients. Updateberry does not independently verify subscriber consent.

7. Third-Party Services and Processors

We use third-party providers to help operate Updateberry, including:

• OpenAI for AI classification, summarization, and content generation
• GitHub for authentication and repository access workflows
• Kit / ConvertKit for waitlist and marketing email syncing
• Datafa.st for website analytics
• Google Ads and Meta Pixel for advertising and attribution, when enabled
• Sentry for error monitoring and operational troubleshooting

These providers process data according to their own terms and privacy practices. We may add or replace providers as the service evolves.

8. How We Share Information

We may share information:

• with service providers and infrastructure partners who help us operate the service
• with AI and integration providers when needed to perform the workflows you request
• with recipients and public audiences when you choose to publish, embed, syndicate, or send content through the product
• when required by law, legal process, or to protect rights, safety, security, or the integrity of the service
• in connection with a merger, acquisition, financing, or sale of all or part of the business

We do not sell your personal information for money.

9. Security

We use reasonable administrative, technical, and organizational measures to protect information we hold, including:

• encrypted storage for repository access tokens
• HTTPS for data transmitted to and from the service
• parameter filtering for sensitive fields in application logs
• security controls such as rate limiting, abuse protection, and operational monitoring

No method of storage or transmission is completely secure, so we cannot guarantee absolute security.

10. Data Retention

We retain information for as long as reasonably necessary to provide the service, operate accounts, support published content, maintain analytics, comply with legal obligations, resolve disputes, enforce our agreements, and protect the service.

Some information may remain in backups, logs, cached systems, archived public feeds, or third-party systems for a period of time after deletion or unpublishing.

11. Your Choices and Rights

Depending on your situation, you may be able to:

• unsubscribe from marketing emails using the link in those emails
• request access to or deletion of your information
• disconnect repositories or stop using particular workflows
• request account deletion by contacting us

If you request deletion, we will process the request within a reasonable time, subject to legal, security, fraud-prevention, backup, and operational retention needs.

12. Children's Privacy

Updateberry is not intended for children under 18, and we do not knowingly collect personal information from anyone under 18.

13. International Use

Updateberry may process and store information in countries other than the one where you live. By using the service, you understand that information may be transferred to and processed in those locations.

14. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we may provide notice through the service, by email, or by updating the date at the top of this page.

15. Contact Us

For questions about this Privacy Policy or to request help with your data, contact us at:

[email protected]