Privacy Policy

When you use AutomaDocs, we collect information necessary to provide our documentation generation services:

• GitHub Account Information: Your GitHub username, email, and profile information via OAuth authentication.
• Repository Data: Source code and repository metadata for repositories you connect to our service.
• Usage Data: Information about how you interact with our service, including features used and pages viewed (with your consent).
• Support Communications: Chat messages and support requests if you use our live chat feature (with your consent).

We use the collected information to:

• Generate automated reference pages for your repositories
• Provide semantic search and AI chat functionality
• Improve our service quality and reliability
• Communicate important updates about the service
• Provide customer support (with your consent)
• Analyze usage patterns to improve the product (with your consent)

Your data is stored securely using industry-standard encryption. Repository data is processed by Claude AI (Anthropic) for documentation generation. If Claude AI is temporarily unavailable, code submitted through the public demo or repository documentation generation may be processed by OpenAI to provide the service. We use Pinecone for vector storage to enable semantic search capabilities. Your code and documentation content is not used to train AI models by any of our subprocessors. It is processed solely to provide the service.

We do not sell your data to third parties. Your source code is only used to generate reference content and is not shared with other users.

Security measures include:

• TLS for traffic between you and our services
• Encryption at rest where our providers and database support it (see hosting and DB vendor docs)
• Automated CI security scans on our public repository (Semgrep, TruffleHog)
• Application-level access control; optional audit logs where the feature is enabled

We integrate with the following third-party services:

• GitHub: For authentication and repository access
• Anthropic (Claude AI): For automated documentation generation
• Pinecone: For vector database and semantic search
• OpenAI: For text embeddings and, when Claude AI is unavailable, contingency documentation generation
• PostHog: For product analytics (requires your consent)
• Crisp: For live chat support (requires your consent)
• Vercel: For hosting and performance monitoring
• Sentry: For essential error tracking and diagnostics. We send an internal account identifier when available, not your name or email, and do not record browser sessions through Sentry.
• Stripe: For payment processing (PCI DSS compliant)

Each service has its own privacy policy and data handling practices. We only share the minimum data necessary for each service to function.

We retain your data according to the following schedule:

• User account data: Retained until you delete your account
• Repository documentation: Retained until you remove the repository or delete your account
• Analytics data: Retained for 90 days, then automatically deleted
• Chat history: Retained until you delete your account
• Audit logs: Retained for 1 year for security purposes

When you delete a repository from AutomaDocs, we remove the associated documentation and embeddings within 24 hours. Account deletion removes all your data immediately.

We use the following types of cookies and tracking technologies:

• Essential cookies: Required for authentication, security, and core functionality. These cannot be disabled.
• Analytics cookies (optional): Used by PostHog to understand how you use our service. Requires your consent.
• Support chat (optional): Crisp live chat functionality. Requires your consent.

You can manage your cookie preferences at any time in Settings > Privacy.

We use Vercel Analytics for privacy-focused performance monitoring that does not use cookies or track personal information.

Under GDPR (for EU/UK users) and CCPA (for California users), you have the following rights:

• Right to access: Download all data we hold about you via Settings > Download My Data
• Right to deletion: Permanently delete your account and all associated data via Settings > Delete Account
• Right to withdraw consent: Disable optional data collection at any time in Settings > Privacy
• Right to data portability: Export your data in JSON format
• Right to object: Opt out of analytics and marketing communications
• Disconnect repositories: Remove any repository from our service at any time

To exercise any of these rights, visit your Settings page or contact us at privacy@automadocs.com.

Your data may be processed in the United States and other countries where our service providers operate. We ensure appropriate safeguards are in place for international transfers, including Standard Contractual Clauses where required.

AutomaDocs is not intended for use by children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us.

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. For significant changes, we will also send an email notification.

If you have any questions about this Privacy Policy, please contact us at:

• Email: privacy@automadocs.com
• General inquiries: hello@automadocs.com

For GDPR-related requests, our Data Protection Officer can be reached at dpo@automadocs.com.