Last Updated: September 27, 2024

We take your privacy seriously. This Privacy Policy explains how we collect, use, and share information related to your use of Package-V, a GitHub App designed to simplify the versioning and publishing of NPM packages to the GitHub Registry. By using our app, you agree to the terms outlined in this policy.

1. Information We Collect

We collect minimal data required to operate the Package-V GitHub App and provide its functionality. This data is used solely for the purpose of delivering the service and is not shared with third parties except as described below.

a. Information Provided by GitHub

When you install Package-V, we receive the following information from GitHub:

• GitHub Repository Access: We collect information about your repositories, including access to your repository’s package.json file, branches, pull requests, and releases to manage package versions.
• User or Organization Information: We may collect information about the user or organization that installs the app, including GitHub username, organization name, and associated repositories.

b. Automatically Collected Information

During the use of the app, we may collect additional technical information to help monitor the app's performance and ensure its functionality, such as:

• Pull request details: Information about pull requests merged in your repositories, including branch names and commit metadata.
• Log Data: Error reports and usage logs in case the app encounters an issue or failure during the versioning or publishing process.

2. How We Use the Information

The information collected is used strictly for the operation of the Package-V GitHub App. Specifically, we use your data to:

• Manage Package Versions: Automatically update and manage your NPM package versions based on your pull request merges.
• Publish Packages: Publish your NPM packages to the GitHub Registry on your behalf.
• Improve Service: Analyze logs and error data to improve app performance, reliability, and functionality.

We do not use your data for any marketing purposes or sell your data to third parties.

3. Sharing Your Information

We may share information under the following circumstances:

• With GitHub: The app interacts with GitHub's API to perform its core functionality, such as accessing repositories, pull requests, and package metadata.
• Legal Compliance: We may disclose information if required to do so by law or if we believe such action is necessary to comply with legal processes or to protect the rights and safety of our users or the public.

4. Data Security

We implement industry-standard security measures to protect your data. All communication between Package-V and GitHub’s API is encrypted using TLS/SSL. Access tokens and other sensitive information are securely stored and handled. However, please note that no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

5. Your Rights and Choices

• Access: You can view and manage the data Package-V has access to through your GitHub account's settings.
• Revoke Access or Uninstall: You can revoke the app’s access or uninstall it at any time by navigating to your GitHub account’s Settings > Applications.
• Data Retention: We only retain data as long as it is necessary to fulfill the purposes for which it was collected or as required by law.

6. Third-Party Services

Package-V relies on GitHub’s API for its core functionality. Please review GitHub's Privacy Policy to understand how they handle your data.

7. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. When we make significant changes, we will notify you either through email (if provided) or by posting an update on the app’s homepage.

8. Contact Us

If you have any questions or concerns about this Privacy Policy or your data, please contact us at info@package-v.com.