Repo Wrapped
Wrap a repo

Privacy Policy

Last updated: July 6, 2026

Repo Wrapped (“we”, “us”) turns public GitHub repositories into shareable pages and offers optional paid features. This policy explains what personal data we collect, why, and the choices you have. We collect the minimum needed to run the product.

Information we collect

  • Account & identity. When you sign in with GitHub or Google we receive your name, email address, and profile picture. GitHub sign-in uses read-only, identity-only scopes (read:user user:email read:org) — we never request write access to your repositories.
  • Repository access. If you install our read-only GitHub App on specific repositories, we receive read access to the metadata and content of only those repositories, to render your pages and reports.
  • Payment data. Paid purchases are processed by Stripe. We store a Stripe customer/subscription identifier and status; we never see or store your full card number.
  • API keys (BYOK). If you supply your own AI provider or GitHub token, it is encrypted at rest (AES-256-GCM) and used only to run your own jobs.
  • Analytics. With your consent, we use Google Analytics 4 to understand aggregate usage. Our first-party product analytics record only public repository names and event types — no personal content.

How we use it

To provide and secure the service, process payments, run the AI features you request, send transactional and (if subscribed) digest emails, and improve the product in aggregate. We do not sell your personal data.

Cookies & consent

Essential cookies keep you signed in. Analytics cookies (Google Analytics) load only after you accept them via our cookie banner; you can decline and the site works fully without them.

Sharing

We share data only with the processors that run the service: GitHub (identity & repo reads), Google (sign-in & analytics), Stripe (payments), Resend (email), our hosting and database providers, and the AI provider used for a given job. Public repository pages you create are, by design, public.

Retention & your rights

You can delete your account at any time from Settings; this cancels any active subscriptions and erases your claims, subscriptions, stored tokens, and webhooks. Depending on your location you may have rights to access, correct, export, or delete your personal data — contact us to exercise them.

Contact

Questions about this policy? Email feedback@repowrapped.com. See also our Terms of Service.