Privacy policy

Who we are

BuildBoost ("we", "us", "our") provides a tool that reads your GitHub commits and drafts social posts so you can share what you build. This policy covers the BuildBoost website and app.

Information we collect

We only collect what we need to provide the service:

• Account details. When you connect GitHub, we receive your username, email address, and avatar through GitHub OAuth.
• Repository data. For the repositories you choose to track, we read commit history and metadata to generate drafts. Read only, never write.
• Content you create. The drafts you generate, edit, and choose to mark as posted or share to the public feed.
• Usage data. Basic logs and analytics that help us keep the service reliable.
• Payment data. When paid plans launch, payments are processed by our reseller Paddle. We do not see or store your full card details.

How we use your information

• To generate post drafts from your selected repositories.
• To operate, maintain, and improve the service.
• To show your shared updates on the public feed, if you opt in.
• To communicate with you about your account and support.
• To process payments and prevent fraud through Paddle.

We only post to an account you've connected, and only when you press the button. We do not sell your personal data.

Connected accounts

You can connect a LinkedIn account so BuildBoost can post a draft for you when you press "Post to LinkedIn". For that we store your LinkedIn member id, your name on LinkedIn, and the access token LinkedIn gives us. The token is encrypted before it is stored and is never shown in the app. We keep a record of each post you send this way: the text, when, and whether LinkedIn accepted it.

Disconnect from Settings at any time: we ask LinkedIn to revoke the token and delete it. You can also remove BuildBoost from your LinkedIn settings.

Service providers we share with

We share data only with the providers that power BuildBoost, and only as needed to run the service:

• GitHub for authentication and reading your commits.
• Supabase for database and authentication hosting.
• LinkedIn, only if you connect it, to post the drafts you choose to post there.
• AI model providers to turn your commit messages into drafts.
• Paddle as our Merchant of Record for billing, taxes, and payment processing.
• Hosting and infrastructure partners that serve the app.

Payments and Paddle

Our order process is conducted by our online reseller Paddle.com. Paddle.com is the Merchant of Record for all our orders. When paid plans are available, Paddle handles payment, billing, invoices, and related taxes, and their privacy policy applies to that processing.

Cookies

We use essential cookies to keep you signed in and to keep the app secure. Payment and analytics partners may set their own cookies as described in their policies.

Data retention

We keep your account data while your account is active. You can disconnect GitHub or delete your account at any time, and we will remove your personal data except where we must keep records for legal or accounting reasons.

Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to certain processing. To exercise these rights, email us at privacy@buildboost.app.

Security

We use industry-standard measures to protect your data, including encryption in transit and access controls. No system is perfectly secure, but we work hard to keep yours safe.

Changes to this policy

We may update this policy from time to time. When we do, we will revise the date above and, for material changes, let you know in the app or by email.

Contact

Questions about privacy? Email privacy@buildboost.app.