Privacy Policy for ChangeDog

Last Updated: November 24, 2025

Thank you for using ChangeDog ("we," "us," or "our"). This Privacy Policy outlines how we collect, use, and protect your personal and non-personal information when you use our platform located at https://changedog.top (the "Platform") and our embeddable widget service.

By accessing or using the Platform, you agree to the terms of this Privacy Policy. If you do not agree with the practices described in this policy, please do not use the Platform.

1. Information We Collect

1.1 Personal Data

We collect the following personal information from you:

Name and Email: We collect your name and email address through OAuth authentication (GitHub, GitLab, Google) or direct sign-up to create and manage your account.

OAuth Provider Information: When you authenticate using GitHub, GitLab, or Google, we receive and store basic profile information from these providers, including your provider ID and email address. We only request read-only access to your repositories.

Payment Information: We collect payment details through Stripe to process your subscription payments. We do not store your full payment information on our servers. All payment processing is handled securely by Stripe, our trusted payment processor.

Project and Content Data: We collect and store information about your projects, including repository URLs, commit data, changelogs, feedback submissions, and user-generated content.

Usage Data: We track widget views, subscription usage, and platform interactions to enforce quota limits and provide analytics.

1.2 Non-Personal Data

We use web cookies and similar technologies to collect non-personal information such as your IP address, browser type, device information, and browsing patterns. This helps us enhance your experience, maintain sessions, analyze trends, and improve our services.

We also collect anonymized widget interaction data to provide usage analytics to project owners.

2. Purpose of Data Collection

We collect and use your personal data for the following purposes:

Service Delivery: To provide our AI-powered changelog generation, feedback collection, and widget embedding services.

Authentication and Account Management: To create and manage your account, authenticate your identity, and provide access to your projects.

AI Processing: To generate changelog summaries, detect duplicate feedback, and provide AI-powered features using OpenAI's GPT-4 service.

Billing and Quota Management: To process payments, track usage against your plan limits, and send quota alerts.

Communication: To send you service-related emails, including weekly digest emails (if subscribed), quota warnings, and important platform updates.

Analytics and Improvement: To analyze how our platform is used and improve our services.

3. Data Sharing and Third-Party Services

We share your data with the following trusted third-party services to provide our platform:

OpenAI: We send commit messages and feedback content to OpenAI's GPT-4 API for AI-powered summarization and analysis. Your data is processed according to OpenAI's data usage policies.

Stripe: Payment information is processed and stored by Stripe for billing purposes.

Resend: Email addresses are used through Resend to send transactional emails, weekly digests, and notifications.

MongoDB Atlas: All platform data is stored in MongoDB Atlas databases, which can be configured for EU data residency.

Vercel: Our platform is hosted on Vercel's infrastructure.

We do not sell, trade, or rent your personal information to third parties. We only share data as necessary to provide our services or as required by law.

4. Data Storage and Security

Your data is stored in MongoDB Atlas databases with multi-zone redundancy. We implement industry-standard security measures to protect your information, including:

- HTTPS encryption for all data in transit
- Secure authentication using NextAuth.js with JWT session strategy
- OAuth scopes limited to read-only access where possible
- HMAC SHA-256 webhook signature verification
- Environment variable protection for all secrets
- Rate limiting on AI endpoints to prevent abuse

5. Your Rights and Data Control

You have the following rights regarding your data:

Access and Export: You can access and export your project data, changelogs, and feedback through our dashboard.

Deletion: You can request deletion of your account and all associated data through the GDPR data-delete request feature in your account settings.

Email Preferences: You can unsubscribe from weekly digest emails at any time using the one-click unsubscribe link in any email.

Data Portability: You can export your data in CSV format from the dashboard.

6. Children's Privacy

ChangeDog is not intended for children under the age of 13. We do not knowingly collect personal information from children. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us at the email address provided below, and we will delete such information.

7. Cookies and Tracking

We use cookies to maintain user sessions, remember your preferences, and analyze platform usage. You can control cookie settings through your browser, but disabling cookies may limit platform functionality.

We do not use third-party tracking scripts on public changelog pages to respect end-user privacy.

8. International Data Transfers

Our platform uses MongoDB Atlas, which can be configured for EU data residency to comply with GDPR requirements. Data may be processed by our third-party service providers (OpenAI, Stripe, Resend, Vercel) which may be located outside your country of residence.

9. Updates to the Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. Any updates will be posted on this page with an updated "Last Updated" date. We will notify you via email about significant changes that affect your rights.

10. Contact Information

If you have any questions, concerns, or requests related to this Privacy Policy, including GDPR data deletion requests, you can contact us at:

Email: support@changedog.top

For general inquiries, please visit our website at https://changedog.top

By using ChangeDog, you consent to the terms of this Privacy Policy.