Privacy Policy

This Privacy Policy explains what RepoSync ("RepoSync", "we", "us") collects, why, and what choices you have. RepoSync is operated by Christopher Radtke, operating as Acid Alchamy (Las Vegas, Nevada, USA) and provides a service for automatically synchronizing your GitHub repositories across your devices, available at reposync.online and via the RepoSync desktop application.

1. Information we collect

• Account information — your email address, first and last name, and a securely hashed password. If you sign in with Google, we receive your email, name, and profile image from Google.
• Authentication & security — two-factor authentication settings, session data, and one-time tokens used for email verification and password resets.
• Device & instance metadata — a machine identifier, machine name, operating system, online/offline status, last-seen and last-sync times, and approximate location (derived from IP) for the devices you connect.
• Project metadata — repository names, local folder paths, repository URLs, branch names, commit hashes/messages, and sync status that the desktop client reports for the repositories you choose to monitor.
• Billing information — if you subscribe to Pro, your subscription status and a Stripe customer identifier. We never see or store your full card details; payments are processed by Stripe.

2. What we do NOT collect

RepoSync does not read, copy, store, or transmit the contents of your source files or repositories to our servers. Repository contents are pushed by your own machine directly to GitHub under your own credentials. We only store the metadata listed above.

3. How we use information

• To provide the service: authenticate you, display your devices and projects, and enforce plan limits (Free = 1 device, Pro = unlimited).
• To process subscriptions and prevent abuse.
• To send transactional email (email verification, password resets, and important account notices). We do not send marketing email without your consent.
• To secure the service and diagnose problems.

4. Service providers

We share the minimum necessary data with providers that help us operate:

• Stripe — payment processing and subscription management.
• Brevo — delivery of transactional email.
• Cloudflare — network delivery and protection for reposync.online.
• GitHub — your repositories are synced to GitHub using credentials you provide; their use is governed by GitHub's own terms and privacy policy.

We do not sell your personal information.

5. Data retention

We retain your account and associated metadata for as long as your account is active. You may delete your account at any time, after which we delete or anonymize your personal data within 30 days, except where we must retain limited records for legal, tax, or fraud-prevention purposes.

6. Your rights

You can access, correct, export, or delete your personal data by contacting us. Depending on where you live (for example, the EEA/UK under GDPR, or California under the CCPA), you may have additional rights, including the right to object to or restrict certain processing.

7. Security

Passwords are hashed with bcrypt, traffic is encrypted in transit (HTTPS), optional two-factor authentication is available, and access to credential endpoints is rate-limited. No system is perfectly secure, but we take reasonable measures to protect your data.

8. Children

RepoSync is not directed to children under 13 (or the minimum age in your jurisdiction), and we do not knowingly collect their data.

9. Changes

We may update this policy from time to time. Material changes will be reflected by the "Last updated" date above and, where appropriate, by notice in the app.

10. Contact

Questions or requests: [email protected].

---

This document is a starting template adapted for RepoSync and is not legal advice. Please review it (and the bracketed placeholders) with a qualified professional before relying on it.