Privacy Policy

Data we process

For developers, we process information GitHub already makes public: username, display name, profile bio, company, location, public links, and (where a user has made it discoverable) an email address. We may derive a reachable email from public commit metadata and public profile signals. We do not access private repositories, private emails, or anything behind authentication.

For customers, we process your account email, GitHub identity, billing details, and basic usage so we can run and bill the Service.

Lawful basis

We rely on legitimate interest to process public developer data for business-to-business outreach: connecting maintainers and developer-tool teams with people who have already signalled relevant interest by starring a repository. We balance that interest against the rights of the people involved, only process public data, and make opt-out simple and immediate. For account and billing data we rely on contract and legal obligation.

We do not sell your data

WarmStars does not sell personal data and does not share it with third-party data brokers. Contact records are surfaced to the customer who ran the scan; we do not build a shared, resellable contact database.

How to opt out or request deletion

Anyone can suppress their email or GitHub login from all future scans (no account needed) via our opt-out page. Once suppressed, we will not emit that contact again at index or scan time. Customers can permanently delete their own account and data from Settings, on the Compliance tab. To exercise any other right (access, correction), email us below.

Retention and security

We retain resolved contact records only as long as needed to provide the Service, and suppression records for as long as needed to keep honouring an opt-out. Data is encrypted in transit and access is limited to what operating the Service requires.

Contact

For any privacy request, reach us at privacy@warmstars.com. We respond to verified requests within 30 days.