1. Information We Collect
When you use RewindGit, we collect:
- GitHub profile data: username, email, avatar URL, and GitHub user ID — obtained via GitHub OAuth.
- GitHub access token: encrypted and stored securely. Used only to create repositories and push code you request.
- Project configurations: your selected skills, project ideas, commit styles, and date ranges.
- Payment information: payment IDs from Razorpay/Stripe. We do not store card numbers or bank details.
- Usage data: pages visited, features used, and generation history.
2. How We Use Your Data
- To authenticate you via GitHub and manage your account.
- To generate AI-powered projects and push them to your GitHub repositories.
- To process payments and manage your credit balance.
- To send transactional emails (project completion, payment receipts, referral bonuses).
- To improve our service through anonymized usage analytics.
3. Third-Party Services
We share data with the following services to operate RewindGit:
- Supabase: database, authentication, and file storage.
- GitHub: repository creation and code pushing (using your authorized token).
- OpenRouter: AI model access for code and commit message generation (project prompts only, no personal data).
- E2B / Daytona / Freestyle / Modal: sandbox environments for code generation (temporary, destroyed after use).
- Razorpay & Stripe: payment processing.
- Resend: transactional email delivery.
Each third party has its own privacy policy. We only share the minimum data necessary for each service to function.
4. Data Security
Your GitHub access token is encrypted at rest using AES-256-GCM. All data is transmitted over HTTPS. We follow industry-standard security practices to protect your information.
5. Data Retention
- Account data is retained while your account is active.
- Generated project records are kept for your reference until you delete your account.
- Sandbox environments are destroyed immediately after generation completes.
- Payment processors may retain transaction records where required for accounting and legal compliance.
6. Your Rights
Under GDPR and similar regulations, you have the right to:
- Access: request a copy of all data we hold about you.
- Rectification: correct inaccurate personal data.
- Erasure: delete your account and associated RewindGit data directly from Settings.
- Portability: receive your data in a machine-readable format.
- Objection: object to processing of your personal data.
You can disconnect GitHub or permanently delete your account from Settings. For other requests, contact us at privacy@rewindgit.com.
7. Cookies
We use essential cookies for authentication (session tokens). We do not use tracking cookies or advertising cookies.
8. Children's Privacy
RewindGit is not intended for users under 16. We do not knowingly collect data from children.
9. Changes to This Policy
We may update this policy from time to time. We will notify you of material changes via email or a notice on the service.