Back to site Log in
Legal

Privacy policy.

What we collect, why we collect it, and the control you have over it.

Last updated · 11 Oct 2026

01Who we are

Before you publish: this is a draft written for the design. Fill in the highlighted placeholders and have it reviewed by your legal counsel.

gitroots is operated by Gitroots LLC, Wyoming, United States (“gitroots”, “we”, “us”). This policy explains what personal information we collect when you visit our website, request access, or use the gitroots service, and how we use it.

For any privacy question, write to [email protected].

02Information we collect

Information you give us.

  • Your work email when you request access or contact us.
  • Account details such as your name, work email, organization and role.
  • Messages you send to our team.

Information created when you use gitroots. To enforce the access rules your organization defines, we process governance metadata, including:

  • Repository, branch and environment names.
  • Developer identifiers from your connected Git provider.
  • The actions developers attempt (for example a push, merge or deploy), the decision gitroots made, and when.
  • Approvals, access requests and policy changes made by your administrators.

Technical information such as IP address, browser type and basic usage data, used to keep the service secure and working.

03Your source code

gitroots is a governance layer. Your Git provider continues to store your code. [CONFIRM WHETHER GITROOTS READS, PROCESSES OR STORES ANY FILE CONTENTS, AND FOR WHICH FEATURES]

04How we use information

  • To provide gitroots: evaluate and enforce your access policies, run approvals and keep your audit trail.
  • To create and manage your account and respond to your requests.
  • To secure the service, detect abuse and investigate incidents.
  • To improve the product, using aggregated or de-identified usage data where possible.
  • To send service and security notices. Marketing emails only with your consent, and you can unsubscribe at any time.

05Sharing

We do not sell personal information. We share it only:

  • With service providers who help us run gitroots (for example hosting and email), under contracts that limit their use of the data: [LIST OF SUBPROCESSORS].
  • With your connected Git providers, as needed to enforce your policies.
  • When required by law, or to protect the rights and safety of our users and gitroots.
  • As part of a merger or acquisition, with notice to you.

06Retention

We keep account information for as long as your organization uses gitroots. Audit trail records are kept for [RETENTION PERIOD] so your administrators can review past decisions, unless your organization sets a different period. When data is no longer needed, we delete or anonymize it.

07Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal information, and to object to or restrict certain processing. If your organization manages your gitroots account, we may refer your request to your administrator. To make a request, contact [email protected]. We reply within 2 working days.

08International transfers

[DESCRIBE WHERE DATA IS HOSTED AND THE SAFEGUARDS USED FOR CROSS-BORDER TRANSFERS, IF ANY]

09Changes to this policy

We will post any changes on this page and update the date above. If a change is significant, we will notify account owners by email before it takes effect.