DRAFT PRIVACY POLICY -- NOT LEGAL ADVICE. This is a starting-point draft, not a reviewed legal document. Have it reviewed (and the [PLACEHOLDER] fields filled in) by a licensed attorney before relying on it for any real public release.

Privacy Policy

1. Information We Collect

When you submit the beta application form on this site, we collect the information you provide: your name, email address, and optionally your company name and any message you include. We also log standard server request metadata for any visit to this site, including your IP address and user agent string.

Separately, self-hosted instances of the GitUltra software (git-processor, pr-processor, eng-reports) send this site a periodic anonymous usage heartbeat: an installation identifier, which component sent it, the software version, and a broad, bucketed count of tracked repositories (e.g. "6-25"). This never includes repository names, code, commit content, or any personal data, and can be disabled by the self-hoster by setting `TELEMETRY_DISABLED=1`.

2. Cookies & Analytics

This site uses Google Analytics to understand how visitors use it -- pages viewed, referring site, approximate location (derived from IP address, not stored precisely), and device/browser type. Google Analytics is only loaded if you click "Accept" on the cookie-consent banner shown on your first visit; declining, or not making a choice, means no Google Analytics script loads and no data is sent to Google for your visit. Your choice is remembered in your browser's local storage, not a server-side record tied to your identity.

Google LLC processes this data as a third-party processor on our behalf -- see Google's Privacy Policy for how Google itself handles it.

3. How We Use It

We use the information you submit via the beta application form to evaluate applications and to contact you about beta access to GitUltra. We use the anonymous usage heartbeat described above only in aggregate, to understand roughly how many instances of the software are running and how actively. Google Analytics data (see Section 2) is used in aggregate to understand site traffic and content performance. None of this is used for any other purpose.

4. Data Sharing

[PLACEHOLDER: Google Analytics (see Section 2) is the only third-party processor used on this site as of this draft; no third-party processors are used to handle beta application data. Update this section if that changes.]

5. Data Retention

[PLACEHOLDER: specify how long beta application data is retained. Also specify/confirm Google Analytics' own data-retention window (configurable in the GA4 property's Data Settings) once decided.]

6. Your Rights

[PLACEHOLDER: this draft does not address jurisdiction-specific data rights, such as GDPR or CCPA. Add applicable rights and request procedures before relying on this policy.]

7. Contact

Questions about this policy can be sent to [PLACEHOLDER: contact email].

8. Changes to This Policy

We may update this policy from time to time. Material changes will be reflected by updating the date below.

Last updated: [PLACEHOLDER: date]