Privacy Policy
Effective Date: November 6, 2026
1. Core Philosophy: Zero Code Telemetry
Gitora is engineered for engineers. Your source code, Git repositories, commit messages, and branch names never leave your local machine unless you explicitly push them to your configured remote Git remotes (such as GitHub, GitLab, or Bitbucket).
2. Local OS Keyring Protection
Authentication credentials such as Personal Access Tokens and SSH keys are stored exclusively in your operating system's secure credential vault (macOS Keychain, Windows Credential Manager, or Linux Secret Service). Gitora never sends or logs your credentials to external servers.
3. Optional AI Features
If you opt in to use AI commit message generation or diff explanation features, only the sanitized diff of your staged changes is transmitted directly to the API endpoint you configure (e.g. Google Gemini API) using your own personal API key. We do not store or intermediate this traffic.
4. Updates and Releases
When Gitora checks for updates, it queries the public release metadata endpoint (latest.json) hosted on Cloudflare R2 edge CDN. No personal identifiers or usage analytics are collected.