Privacy.

Account and sign-in

We store your name, email address and account identifiers to authenticate you, keep your projects together and provide support. Email passwords are stored as salted hashes. Verification and recovery links expire and can be used only once. Essential session cookies keep you signed in.

If you choose Google, we receive your basic profile, email address and unique Google account identifier. We use these to create or sign in to your Shipvela account, or connect Google when you request it in Settings. We do not store Google access or refresh tokens, read your Gmail or access your Drive. Google account information is not used for advertising or sold.

Repositories and hosted projects

If you connect GitHub, we use your authorized connection to list repositories, inspect project configuration and deploy repositories you select. We retain encrypted GitHub credentials needed for this connection. Project files, build settings, environment variables, domains and deployment records are processed to publish and operate your sites. Published website content is accessible at its public URL.

Service providers

Amazon Web Services provides application infrastructure, project hosting, backups and email delivery. Repository hosting may require sharing the authorized GitHub connection with AWS Amplify. Stripe processes checkout, subscription management and payment information; Shipvela stores billing identifiers and subscription status, not full payment card details. Google and GitHub process sign-in requests when you choose those providers.

Email preferences

We send essential verification and password recovery messages through Amazon SES. Setup tips and product updates require your opt-in. You can unsubscribe through a message or Settings. We retain consent, delivery, bounce, complaint and suppression records to honor your preferences and prevent unwanted delivery. Shipvela onboarding emails do not use open-tracking pixels or tracked click redirects.

Retention and requests

Account and project information is retained while needed to operate the service, provide support and maintain security. Expired authentication records are removed during regular account operations. Backups rotate according to the service retention schedule; billing or security records may need to remain after an account is closed.

To request access, correction or deletion of your account information, contact stefan@automateed.com. We may ask you to verify ownership before processing a request. You can also revoke Shipvela access from your Google or GitHub account settings.