What we store
| Data | Why |
|---|---|
| Your provider profile: id, login, display name, avatar URL | To sign you in and show who you are. |
| Your provider access token (GitHub, and GitLab/Bitbucket if you connect them) — encrypted with AES-GCM | To list your repositories, create repositories from templates, register webhooks and clone private repos for builds. It is never sent to your browser. |
| Sessions (a hashed identifier and expiry) | To keep you signed in for up to 30 days. |
| Projects: name, repository, branch, build settings, webhook status | To run and show your deployments. |
| Environment variables — encrypted; only names are ever shown back | To pass them to your builds. |
| Deployments: status, step, commit, URL and build log | To show progress and history. |
| Uploaded files, in R2, only if uploads are enabled | To hand them to the build pipeline. |
| Rate-limit counters keyed by your IP address, auto-pruned after about a day | To limit abuse of sign-in, upload and deploy endpoints. |
Cookies and local storage
Only functional ones: a session cookie (aq_session, HttpOnly, Secure, SameSite=Lax), a short-lived cookie used during OAuth sign-in to prevent forgery, and a theme preference in your browser’s local storage. There are no advertising or analytics cookies. Pages load fonts from Google Fonts, which sees your IP address when it serves them.
Who we share data with
- Your Git provider (GitHub, GitLab or Bitbucket) — we call its API on your behalf, with your token.
- The build pipeline that runs your deployments — it receives the repository location, project settings, your environment variables and, for private repositories, a token to clone them.
- Our hosting provider, Cloudflare, which runs the site, database and storage.
We don’t sell your data.
Your choices
- Revoke Aibotq’s access at any time in GitHub → Settings → Applications (or the equivalent on GitLab/Bitbucket).
- Log out from the account menu; this deletes the session.
- To have your account, projects, variables, deployments and uploads deleted, open an issue at github.com/thanabartbb/aibotq-site/issues. Please don’t post secrets in it.
Changes
If this policy changes materially, the date above changes with it.