Security & privacy
Your data, our posture
Changelog AI processes the commits or notes you submit to draft release notes. This page states, plainly, what we handle and what we do not claim.
What we handle
git commits, rough release notes, format/tone choices used to generate a draft changelog.
Data handling commitments
- Submissions run the product pipeline and are retained only as long as needed for your saved history (paid tiers) or until you delete the run.
- We apply access controls consistent with GDPR Art. 32 (security of processing) where personal data is processed.
- BYOK keys (Enterprise), when offered, are stored server-side only and never exposed to the browser.
Honesty rule: Changelog AI turns commits into draft notes. We do not guarantee perfect grouping, 100% coverage of every commit, or that customer-facing wording is ready without review.
Our honesty posture
- Changelog AI is decision-support for release notes — not a marketing agency or legal reviewer.
- For public launch copy, have a human edit before customers see it.
Subprocessors & payments
- Payments are processed by Waffo Pancake (merchant of record).
- See Privacy and Terms for full terms.
refs: Keep a Changelog · Conventional Commits · GitHub Releases docs