Skip to main content
CLAHubCLAHub

Privacy Policy

We collect only what we need to run CLAHub and never sell your data.

Last updated: February 2026

1. Information We Collect

GitHub OAuth Data

  • GitHub username and display name
  • Email address (if publicly available)
  • Profile avatar URL
  • GitHub user ID

Repository Data

  • Repository name and metadata
  • Pull request information (author, status)

CLA Signatures

  • GitHub username of the signer
  • Timestamp of signing
  • The agreement version signed

2. How We Use Your Information

  • Authenticate you and provide the Service
  • Track CLA signatures for your repositories
  • Report CLA status via GitHub Checks on pull requests
  • Send service-related notifications (if enabled)

3. Cookies

CLAHub uses essential cookies for session management and authentication. We do not use third-party tracking cookies or analytics services.

4. Data Retention

We retain your data for as long as your account is active. CLA signature records are retained for the lifetime of the agreement, as they serve as a legal record of consent. You may request deletion of your account and associated data by contacting us.

5. Data Sharing

We do not sell your personal information. We may share data only with repository owners to verify CLA signatures on their projects, or when required by law or legal process.

6. Security

We implement reasonable security measures to protect your data, including encrypted connections (HTTPS), secure session management, and limited access to production systems.

7. Your Rights

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data
  • Revoke the GitHub App installation at any time

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of significant changes through the Service.