1. Information we collect
1.1 Account data
When you sign in via GitHub OAuth, we collect your GitHub user ID, username, and an OAuth token. The token is used solely to verify organization membership.
1.2 Service data
When you use Lap, we store the content you create: project names (repository owner and name), lap titles, goals, bodies, status, priority, and labels.
1.3 Git activity data
When you push commits to repositories where the GitHub App is installed, we receive push event notifications. We store commit SHA hashes and timestamps for commits whose messages reference a lap (e.g. #001 or LAP-001). We do not store commit diffs, file contents, or branch contents.
1.4 Session data
We generate session tokens for API authentication. Sessions expire after 30 days.
2. How we use your data
Your data is used solely to provide and operate the Lap service. We do not sell your data, use it for advertising, share it outside the service, or train AI models on your content.
GitHub tokens are used only to verify organization membership at login. Repository contents permission is used solely to receive push event notifications for commit tracking. We do not read file contents, pull requests, or branch data beyond what is included in push event payloads.
3. Data storage
All data is stored in a Supabase-hosted PostgreSQL database on AWS infrastructure. Data is encrypted at rest and in transit.
4. Third-party services
| Service | Purpose |
|---|---|
| GitHub | OAuth authentication, org membership verification, push event webhooks |
| Supabase | Database hosting (AWS) |
| Railway | Application hosting |
| Cloudflare | DNS and edge network |
5. Data retention
Your data is retained as long as your account exists. Project and lap data persists until explicitly removed via the API. Sessions expire after 30 days of inactivity.
6. Data deletion
You may delete your projects at any time via the API, which permanently removes all associated laps. To request full account deletion, contact us at the address below.
7. Contact
For privacy questions: hello@wildreason.com