What's stored, and how to remove it

What's stored

• Your email address, and whether you signed up with Google, GitHub or by typing it.
• A record of your signup: the time, your IP address and the wording of the form you used. It shows who signed up an address if that's ever questioned.
• The name of the GitHub repo you added, and the GitHub App install if you connected a private repo.
• A profile of your product: a plain-language description of what it does, written by reading the repo. It doesn't contain your code.
• The briefings sent to you, so the next one doesn't repeat them.

Your code

Your repo is read in a temporary environment that's deleted when the profile is written. The code is never stored. Private repos are read through a GitHub App with read-only access, and only for the repo you added.

Who handles it

• Vercel hosts the site and runs the profiling.
• Supabase stores the data. Profiles and briefings are encrypted before they're stored.
• Resend sends the emails.
• Anthropic's API reads the repo to write the profile, and matches it against the month's AI news. Under Anthropic's commercial terms, this data isn't used to train its models.
• GitHub and Google, if you sign in with them. Your email address is read from either, and GitHub sign-in also lists your public repos so you can pick one.

Nothing is sold or shared with anyone else, and there's no advertising or tracking.

How long it's kept

• The record of each signup attempt (address, IP address, form version, public repo list): 7 days.
• Everything else: until you remove it.
• Records of profiling runs (times and outcomes, no content): 12 months at most.

Stopping and removing

Every briefing has two links at the bottom. Stop these ends the emails. Remove my data deletes your email address, profile, past briefings and signup record, and uninstalls the GitHub App if nothing else uses it. Deleted data isn't kept anywhere.

For anything else, or if you can't use those links, email aman@[domain].

Back to the start