What we collect, and what we never do.

What GateBolt collects

Account

Your name and email. If you sign in with GitHub, the profile GitHub returns.

Sessions

An IP address and browser user-agent string, stored against the session.

Agent runs

Per run: the repository and branch, the task the agent was given, the agent's vendor, name, model and version, who launched it, and an API key reference.

File metadata

Paths, the action taken on each (added, modified, deleted, renamed), line counts, and the reconciliation verdict.

What it never collects

• ✓File contents. The CLI derives everything from git locally and posts only metadata.
• ✓Analytics, tracking pixels or third-party scripts. There are none in the product.
• ✓Your data sold or shared for advertising.

Why we hold it

To show you what your agents changed, to score declared scope against the real diff, and to keep a tamper-evident record you can hand to someone else. The record is the product; there is no secondary use.

How long we keep it

On the Free plan, ledger events and change records are kept for 30 days. Enterprise retention is set by your agreement. Deleting your organisation deletes its records outright, and you can export them as JSON or CSV from the audit page at any time.

Records that outlive an account

A tamper-evident record has to survive the credential that wrote it, so revoking an API key or deleting a user does not remove the change records they produced. Those records retain the launching user's identifier. If you need that personal data erased rather than the whole organisation deleted, email us and we will handle it directly.

Sub-processors

GateBolt runs on third-party hosting and database infrastructure, and uses GitHub for optional sign-in. A current list is available on request.

Your rights

You can request a copy of your data, ask for it to be corrected, or ask for it to be deleted. Email hello@gatebolt.com and a person — not a ticketing system — will answer.

Changes

If this policy changes in a way that affects what we collect, we will say so here and update the date at the top.