01Who is responsible
Cédric Tournier, trading as Avalonia (50 rue Saint-André des Arts, 75006 Paris, France), is the data controller for changelog.plus. Contact: hello@changelog.plus.
02What we process
- Account: your GitHub name, email address and avatar, session identifiers, and the workspaces you belong to.
- Repositories: for the repositories you select, commit messages, authors, dates, pull requests and issues; the changed files only where you enabled it. Secrets detected in commit messages are redacted before any AI call.
- Releases: the drafts, your edits, approvals and the published releases, with the commits behind them.
- Billing: plan, subscription status and the Stripe customer and subscription identifiers. Card details are held by Stripe only.
- Operations: technical logs, email delivery events and an audit trail of changes made in a workspace, without the content of your repositories.
- Public pages: visits are measured with Plausible, without cookies and without storing IP addresses.
03Why and on what basis
- Providing the service you signed up for (performance of the contract).
- Billing and accounting (legal obligation).
- Security, abuse prevention and service improvement (legitimate interest).
- Emails about your drafts and releases; marketing emails only with your consent.
04Who else sees data
We use processors bound by contract, each only for its task:
- OVH SAS for hosting, databases and queues, in the European Union.
- GitHub for sign-in and repository access, under the permissions you grant.
- AI providers to read commits and write drafts: Anthropic, OpenAI, or models we host ourselves, depending on the configuration. Only the commit lines and context needed for the task are sent, after secret redaction; provider terms exclude training on API data.
- Stripe for payments. useSend for transactional email. Cloudflare for custom domains.
We do not sell personal data and do not share it for advertising.
05How long we keep it
- Account and workspace data: for the life of the account, then deleted within 30 days.
- Repository data: as long as the repository is connected; the raw content read for a draft is not kept beyond what the published release needs.
- Billing records: as long as the law requires for accounting (ten years in France).
- Technical logs: 30 days. Backups: 30 days, then overwritten.
06Your rights
You may access, correct, export or delete your data, object to or restrict processing, and withdraw consent, by writing to hello@changelog.plus. You may also complain to the CNIL (cnil.fr) or your local authority. Most data can be exported or deleted directly from the app.
08Changes
We will post changes to this policy here and, for material changes, tell you by email. The date at the top is the date of the current version.