Privacy Policy
How we collect, use, and protect your repository and developer data on the OSSIntel platform.
1. Information Collected
OSSIntel is an open-source intelligence platform. We collect data to provide codebase audits and developer profile insights.
Public Data Sources
We query public APIs (GitHub REST/GraphQL, npm Registry, and StackExchange) to retrieve public metrics. This includes repository description, star counts, fork counts, dependency structure, public release history, and developer contribution profiles.
2. GitHub App Permissions
When you install the OSSIntel GitHub App, it requests specific, read-only permissions to audit your code structures.
We only access the metadata and pull requests required to compute developer scoring metrics. For a detailed breakdown of our permissions, see our dedicated GitHub App Permissions Guide.
3. GitHub OAuth (Future-Ready)
We are designing OSSIntel to be future-ready. In a future update, we may introduce sign-in via GitHub OAuth to provide personalized user dashboards.
If introduced, OAuth will only collect basic profile information (such as your name, email address, and avatar image) to customize your user experience. We will never ask for credentials or request permissions to commit or write to your repositories.
5. Analytics & Monitoring
We may use privacy-first, self-hosted, or anonymous analytics to collect aggregated data about page usage and performance.
This analytics data does not contain personally identifiable information (PII) and is used solely to improve our platform’s user experience, optimize API querying routines, and monitor server health.
6. AI Providers (Future-Ready)
OSSIntel is built to integrate with modern AI providers (like Google Gemini) to generate rich codebase summaries and developer insights.
All AI-generated summaries are computed using strictly public codebase metadata. Your private source code is never transmitted to, stored by, or used to train third-party AI models. All API integrations enforce data confidentiality.
7. Data Retention & Caching
To respect API rate limits, OSSIntel caches retrieved repository and user metadata.
Caching Architecture
Metadata and score calculations are stored in local browser cache (IndexedDB) and secure server-side caches. We retain cached data temporarily (typically 24 hours), after which it is invalidated and refreshed upon a new request.
8. Security Standards
We take data security seriously and employ industry-standard protocols to protect all operational variables:
- SSL/TLS encryption for all client-to-server and server-to-API network traffic.
- Encryption of application credentials and private keys using secure server environments.
- Frequent security audits of scoring packages and dependencies.
9. Your Rights & Data Control
You maintain full control over the visibility of your metrics on OSSIntel:
- App Uninstallation: You can uninstall the OSSIntel GitHub App from your account or organization settings at any time, which immediately revokes our access.
- Cache Deletion: You can clear your browser storage (IndexedDB) to remove locally cached reports.
- Opt-out: If you wish to exclude your public repository or profile from being searchable on our platform, you can file a request via our Contact page.
10. Contact Us
If you have questions about this Privacy Policy, our data practices, or wish to make an access request, please visit our Contact page or contact us at privacy@ossintel.org.