Privacy

How Shiplet handles your information.

Last updated: September 8, 2026

Shiplet uses account, repository, and application information to provide deployment, access, and operational services. This page explains the categories of information involved and the choices available to you.

Information we process

AccountName, GitHub identity, email when shared, sessions

SourceRepository URL, branch, commit, inspection findings, approved installation

RuntimeApplication configuration, deployment events, logs, usage measurements

SupportMessages and details you choose to include in a support request

How we use information

We use this information to operate Shiplet, protect applications, diagnose releases, prevent abuse, and respond to support requests. Repository content is accessed only through the connection and repositories you authorize. Secret values are used to run your application and are not shown in the console or launch passport.

Sharing and retention

Shiplet shares information with service providers needed to host, inspect, and operate the service. App-only links share access to the application according to their audience and expiry; they do not grant workspace or repository access. We retain information while it is needed to provide the service, meet legal obligations, resolve disputes, and enforce our agreements.

Your choices

You can revoke agent keys, remove GitHub repository access, manage app links, and contact us about privacy questions or a request concerning your information. We may need to verify the request before acting.

Contact

For privacy questions, email hello@shiplet.dev.