Privacy Policy

Last updated: April 5, 2026

This Privacy Policy describes how KMF Ventures LLC (“we,” “us,” or “our”) collects, uses, and shares information in connection with GTM Commit (the “Service”), accessible at gtmcommit.com.

1. Information We Collect

a. Account Information

When you sign in via GitHub OAuth, we receive your GitHub username, display name, email address, and avatar URL. We do not collect passwords.

b. GitHub Data

With your authorization, we access your GitHub repositories (including private repositories if you grant the repo scope) to analyze commit metadata. Specifically, we collect:

  • Commit SHA, timestamp, and diff statistics (additions, deletions, files changed)
  • Commit message (first line only; redacted entirely for private repositories)
  • AI tool detection results (e.g., Claude Code, Copilot, Cursor signatures)

We never store source code, file contents, or diffs. For private repositories, we never display the repository name or commit messages publicly — only aggregate statistics (e.g., “47 AI commits across 3 private repos”).

c. Profile Information

You may voluntarily provide additional information such as a bio, role, company, website URL, LinkedIn URL, Twitter handle, and portfolio items.

d. Usage Data

We use PostHog to collect anonymized product analytics, including page views, feature usage, and funnel events. This data is used to improve the Service and is not sold to third parties.

2. How We Use Your Information

  • To create and maintain your GTM Commit profile
  • To calculate your ShipCred Score based on verified AI-assisted commits
  • To display your public profile at gtmcommit.com/username
  • To generate dynamic Open Graph images for social sharing
  • To power the community leaderboard
  • To send transactional emails (e.g., welcome messages, sync notifications)
  • To improve and maintain the Service

3. Information Sharing

We do not sell your personal information. We may share information with:

  • Service providers: Supabase (database and authentication), Vercel (hosting), PostHog (analytics), and Resend (email) — each bound by their own privacy policies
  • Public profile: Information you add to your profile (display name, bio, role, portfolio items, ShipCred Score, and tool badges) is publicly visible by design
  • Legal requirements: If required by law, regulation, or legal process

4. GitHub Token Security

Your GitHub access token is encrypted at rest and is never exposed via any API endpoint. The token is used solely to sync commit metadata on your behalf. You can revoke access at any time from your GitHub settings.

5. Data Retention & Deletion

  • You can disconnect GitHub at any time — all stored commit data is deleted immediately
  • You can delete your account at any time — all profile data, commits, portfolio items, and vouches are permanently removed
  • We retain anonymized, aggregated analytics data that cannot be linked back to you

6. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access the personal information we hold about you
  • Request correction of inaccurate information
  • Request deletion of your data
  • Object to or restrict processing of your data
  • Data portability

To exercise any of these rights, contact us at contact@gtmcommit.com.

7. Cookies

We use essential cookies for authentication and session management. PostHog may set analytics cookies. We do not use advertising or tracking cookies from third parties.

8. Children's Privacy

The Service is not directed to individuals under the age of 13. We do not knowingly collect personal information from children.

9. Transparency

We are committed to transparency about what data we collect and how it is processed. This privacy policy describes our practices in full. If you have questions, contact us at the email below.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the “Last updated” date at the top of this page.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

KMF Ventures LLC
Email: contact@gtmcommit.com