Privacy policy
What we collect, why we collect it, who helps us process it, and what you can ask us to do with it.
Last updated
This policy covers the DevRelay app (app.devrelay.so), its API (api.devrelay.so), this website (devrelay.so) and the free tools on it. DevRelay is operated by X Automate, a company registered in India (“DevRelay”, “we”, “us”). Questions: support@devrelay.so.
What we collect
When you use the app
- Account details: your name, email address, profile image and organization membership, through our sign-in provider.
- Billing details: your plan and billing status. Card details are handled by our billing providers; we never see or store full card numbers.
- Content from sources you connect: pull requests, releases, issues, commit messages and diffs from the GitHub repositories you select; pages from the website, docs and blog you give us; and anything you type in, such as brand guidance.
- What DevRelay produces and what you do with it: drafts, evaluations, your edits, approvals, schedules and publishing results, and preferences learned from your edits.
- Connection tokens for the services you connect (GitHub, X, LinkedIn, Slack), used only to do what you asked, such as posting an approved draft or downloading repositories for a launch video (see below).
- Technical logs: IP address, request times and errors, kept for security and troubleshooting.
When you use the free tools
Free tools that run “in your browser” send nothing to us. Tools that call our API send your input (a URL, a pull request link, commits, a diff or a description) to our server, which processes it and returns the result. We don't store tool inputs or outputs. We use your IP address, in memory and for a short time, to apply rate limits, and we record that a model call happened (its duration and cost), not its content.
On this website
This website doesn't use analytics or advertising cookies, and it doesn't track you across other sites. We count page views with Cloudflare Web Analytics, which sets no cookies. When you click a Sign up link, the link carries the site that sent you here (its domain only), the first page you visited, the page with the link and any campaign tags in the address; if you create an account, we store those with it so we know which pages bring people in. Your browser keeps them for the current tab only.
How we use it
- To run the service: watch your sources, draft and check content, show it for approval, and publish what you approve.
- To make the launch videos you ask for, including using the repositories behind the change as described below.
- To learn your preferences from your edits, within your organization only.
- To bill you, keep the service secure, prevent abuse, and fix problems.
- To contact you about your account, and about important changes to the service.
We don't sell your data, and we don't use your content to train AI models. Your content is used to serve your organization; one customer's content is never used to write another customer's drafts.
AI processing
Drafting and checking send parts of your content to AI model providers. Before any model call we redact common secret formats (API keys, tokens, private keys). Model providers process the content to return a result, under their API terms.
Launch videos
Launch videos are made by DevRelay staff, not only by software. When a launch video script passes our checks, or you request one, we email the brief (your company and brand details, the script and the names of the repositories behind the change) to the DevRelay staff who make videos.
To show your product accurately, staff may download the GitHub repositories behind that change through the GitHub App you installed. The download link is made on our server for one repository at a time and expires within minutes. The GitHub installation token stays on our server and is never given to anyone. This access is covered by this privacy policy, with these limits:
- only the repositories named on that request can be downloaded, and only while the video is in production;
- every download is recorded in your workspace's activity, naming the repository and the DevRelay video team;
- the code is used only to make that video: staff may work on it with an AI coding assistant (Anthropic's Claude), under Anthropic's commercial terms, and it is never used to train AI models or shared with anyone else;
- copies are deleted when the video is delivered or closed.
If you don't want staff to use your code, you can skip launch videos or email support@devrelay.so and we will make the video without your code.
Who processes data for us
- Clerk: sign-in and organizations.
- Dodo Payments: subscription billing. Dodo Payments is the merchant of record: it takes the payment, charges applicable tax and issues invoices. We receive your plan and subscription status, never your card details.
- Cloudflare: hosting for this website and the app, and storage for rendered images.
- Hetzner: the server that runs our API.
- Amazon Web Services: our database.
- OpenAI: AI models for classification, drafting and checks.
- kie.ai: image generation for launch images.
- Anthropic: the AI assistant our staff use to make launch videos and clips.
- HeyGen: the AI avatar and voice in your clips, made from the photo you upload and the voice you pick.
- GitHub, X, LinkedIn and Slack: only when you connect them, to read what you allowed or post and notify where you asked.
These providers may process data outside India. We may update this list as the service changes, and will update this page when we do.
How long we keep it
We keep account and organization data while your account is active. If you ask us to delete your account or organization, we delete its data within 30 days, except records we must keep by law, such as invoices. Free tool inputs are not kept at all.
Your rights
You can ask to access, correct or delete your personal data, or withdraw consent, by writing to support@devrelay.so. Depending on where you live, laws such as India's Digital Personal Data Protection Act, 2023 or the EU GDPR may give you further rights, including the right to complain to a data protection authority. We'll answer requests within 30 days. For grievances about personal data under Indian law, write to the same address.
Children
DevRelay is a business service and is not meant for anyone under 18.
Changes
If we change this policy, we update the date at the top. For significant changes, we tell account owners by email before they take effect.
Your next release deserves more than a merge commit.
Connect GitHub and your website. The next time you ship, the post, the changelog entry and the docs update will be waiting for your yes.
No credit card · Nothing posts without your approval