Privacy Policy
Last updated: March 2026 · Effective immediately
This Privacy Policy explains how MY OWL collects, uses, and safeguards information when you connect your repositories to our breaking change intelligence service.
1. Core Philosophy: Zero Source Code Retention
MY OWL is designed specifically for security-conscious development teams. We process your TypeScript and JavaScript source code strictly in-memory during AST analysis passes. We do not persistently store, archive, or duplicate your source code on our servers, and we never use customer code to train machine learning models.
2. Information We Collect
When you authorize the MY OWL GitHub App, we collect: (a) GitHub profile information including your GitHub user ID, username, and verified email address; (b) repository metadata including repository IDs, names, and default branch configurations for the repositories you select; and (c) package manifest files (such as package.json) to detect upstream dependencies and SDK versions.
3. How We Use Your Data
Collected metadata is used solely to: (a) identify when monitored vendor APIs release breaking changes affecting your installed packages; (b) trace whether your repository invokes deprecated or modified call sites; (c) generate 4-gate verified migration proposals and push isolated draft pull requests to your repositories; and (d) manage your subscription tier.
4. GitHub Permissions & Access Scopes
Our GitHub App requests read-only access to repository contents and issues for AST inspection, and write access restricted to opening Draft Pull Requests on isolated branches (apiproof/*). You maintain complete control over which repositories MY OWL can access, and permissions can be revoked at any time through your GitHub Settings.
5. Data Retention & Deletion
If you disconnect a repository or uninstall the MY OWL GitHub App, all associated repository metadata, scan records, and finding summaries are permanently removed from our active databases within 30 days. You may request immediate deletion of all account data by contacting privacy@myowl.dev.
6. Security & Encryption
All communication between your browser, our servers, and GitHub APIs is encrypted in transit using TLS 1.3. Any persisted metadata, authentication tokens, and audit logs are encrypted at rest using industry-standard AES-256 encryption.
7. Your Rights Under GDPR & CCPA
Depending on your jurisdiction, you may have the right to access, correct, port, or erase personal data held about you. Because we retain only minimal account metadata and no customer source code, fulfilling data export or erasure requests is straightforward and honored promptly.
8. Contact Us
If you have questions regarding this Privacy Policy or our security practices, contact us at privacy@myowl.dev or security@myowl.dev.