comdraft

Privacy Policy

Effective

comdraft (the "Service") values your privacy and processes only the minimum information needed to provide the Service. This policy explains what information we process, why, who we share it with, and how we protect it.

1. Information we process

The Service processes the following information.

  • GitHub sign-in: GitHub account ID number, GitHub username, name, email address, profile image URL, and GitHub authentication tokens (stored encrypted)
  • Repository connection: GitHub App installation details and the name, owner, visibility, and branch of connected repositories
  • Content you create: draft requests, selected commit identifiers (SHAs), reference links, draft and post bodies and technology tags, uploaded images, and AI usage records
  • Automatically generated information: IP address and browser information (User-Agent) of sign-in sessions, post view records (a signed-in user identifier or a random visitor identifier), and cookies

2. Information we do not store

  • We never receive your GitHub password. Sign-in happens only through GitHub authentication.
  • We do not store the source code of your repositories. It is fetched from GitHub only when an AI draft is written and passed to the AI.
  • However, code snippets included in drafts or posts you write or publish are stored as part of that content.

3. How we use information

  • Identifying members and keeping you signed in
  • Connecting repositories and looking up commit history
  • Writing tech blog drafts with AI and managing usage
  • Publishing posts and showing their author (name, profile image, GitHub profile link)
  • Operating and improving the Service, including view counts, and preventing abuse

4. Transfer to a third-party AI service (international transfer)

To write AI drafts, the Service sends information to an AI service provider outside Korea as described below. It is sent over the network each time you request a draft.

  • Recipient: Anthropic, PBC (United States) — Claude API
  • Items sent: your draft request, the messages and code changes of the selected commits, the body of reference links, and your answers for blanks together with the draft being written
  • Purpose: writing and refining AI drafts
  • Retention: according to Anthropic's data processing policy
  • Account information such as your name or email is not sent to the AI.
  • If you do not use draft writing, no information is sent to the AI.

5. Processors

The Service runs on the following providers, each of which processes information only as needed to provide the Service.

  • Vercel Inc. (United States): web hosting (servers in the Seoul region), cookieless visit analytics and performance monitoring
  • Supabase Inc. (United States, data in the Seoul region): database and uploaded image storage
  • Amazon Web Services, Inc. (United States, Seoul region): running the AI draft server
  • GitHub, Inc. (United States): sign-in authentication and repository and commit lookups

6. Retention

  • We keep personal information until you leave the Service and delete it without delay when you leave or ask us to delete it.
  • You can leave the Service yourself from Delete account in the profile menu while signed in, or ask by email to the contact below. Leaving immediately deletes your account, drafts and posts, uploaded images, and view records, and revokes the Service’s sign-in authorization on GitHub.
  • Deleting a draft or unpublishing a post deletes that content and the post’s view records, and unused uploaded images are cleaned up.
  • Sign-in sessions expire 7 days after your last activity.

7. Deletion

Personal information whose retention period has ended or whose purpose has been fulfilled is deleted so that it cannot be recovered.

8. Your rights

  • You may ask at any time to access, correct, delete, or stop the processing of your personal information, and we will act on it without delay.
  • Send requests by email to the contact below.
  • You can revoke the Service's GitHub App access at any time from the Applications menu in your GitHub settings.

9. Cookies

The Service uses only the cookies below and no advertising cookies. You can refuse cookies in your browser settings, but some features such as sign-in will not work.

  • Session cookie: keeps you signed in
  • Language cookie: remembers the language you last visited
  • Visitor cookie: a random value used to count post views without duplicates (kept for 1 year, contains no personally identifying information)
  • GitHub connection cookie: prevents forged requests while connecting a repository (deleted when the connection finishes)

10. Security measures

  • All traffic is encrypted with HTTPS.
  • GitHub authentication tokens are stored encrypted.
  • Access to the database and servers is limited to what is needed.

11. Changes to this policy

If this policy changes, we will post it on this page with its effective date.

12. Contact

For questions about how your information is handled, requests to access, correct, or delete it, or to leave the Service, email the operator.

Email: a8456452@gmail.com