Privacy Policy
Last updated: February 2026
What we collect
- GitHub account data — your username, email address, and avatar when you sign in via GitHub OAuth.
- Repository names — the names of repos you choose to connect. We never access repos you don't explicitly connect.
- Commit messages — the commit messages from pushes to connected repos, used to generate changelog drafts. We do not store your source code.
- Generated changelog text — the AI-drafted and published changelog entries you create.
- Email address — if you subscribe to a changelog or create an account, we store your email to send updates you've opted into.
What we do not collect
- Your source code or file contents — only commit messages.
- Data from repos you have not connected.
- Any data sold to or shared with third-party advertisers.
How we use your data
- To generate changelog drafts from your commit messages using the Anthropic API (Claude).
- To display your published changelogs publicly at your ShipLog URL.
- To send changelog update emails to subscribers who have opted in.
- To manage your account, billing, and plan limits.
🔒 A note on AI processing
ShipLog uses the Anthropic API to generate changelog drafts from your commit messages. Anthropic's Commercial Terms of Service explicitly state:
“Anthropic may not train models on Customer Content from Services.”
Your commit messages are sent to Anthropic solely to generate the changelog draft and are not used to train AI models. You can review Anthropic's commercial terms at anthropic.com/legal/commercial-terms.
Third-party services
- GitHub — OAuth sign-in and webhook delivery.
- Anthropic — AI changelog generation (no model training on your data).
- Neon — Database hosting (your data is stored encrypted at rest).
- Lemon Squeezy — Payment processing. We do not store payment card data.
- Vercel — Hosting and infrastructure.
Data retention
Your data is retained as long as your account is active. You can delete your account and all associated data at any time from Settings. Published changelogs will be removed from public URLs within 24 hours of account deletion.
Contact
Questions about this policy? Email us at hello@tryshiplog.com.