Bb56

BreakingBad

Privacy Policy

Effective date: June 24, 2026

This Privacy Policy explains what information BreakingBad (the "Service") collects, how we use and share it, and the choices you have. It applies to anyone who signs in to the Service, anyone whose organization subscribes to the Service, and visitors to our marketing pages.

1. What we collect

  • Authentication identifiers. From GitHub or Google when you sign in: account ID, email, display name, and avatar URL.
  • GitHub App installation metadata. The organization, installation ID, and the list of repositories you authorize for monitoring.
  • Repository and API data. API definitions, repository contents, and pull request metadata that the Service reads in order to detect breaking changes.
  • Billing identifiers. Customer ID and subscription state from Stripe. Payment card data is collected and stored by Stripe and never touches our servers.
  • Operational logs. Request logs, error traces, and basic device/browser metadata used to operate and secure the Service.

2. How we use it

We use the information above to operate the Service: comparing API definitions over time, generating pull requests on dependent repositories, sending account and product notifications, providing the dashboard, billing and invoicing, customer support, and detecting and preventing abuse. We do not sell your personal information and we do not use Your Content to train machine-learning models.

3. Subprocessors & sharing

We share data only with the subprocessors required to run the Service:

  • Amazon Web Services — hosting, database, secret storage (AWS SSM Parameter Store), and transactional email.
  • Stripe — payment processing and subscription management. Stripe's privacy notice is at stripe.com/privacy.
  • GitHub — authentication and repository access via the GitHub App.
  • Google — authentication when you sign in with Google.

We do not share your repository contents with any third party that is not a subprocessor listed above. We may disclose information when required by law, to enforce our Terms, or to protect the rights, property, or safety of users.

4. Cookies and similar technologies

We use first-party cookies and equivalent local storage strictly to keep you signed in, remember your active organization, and protect sessions against CSRF. We do not use third-party advertising or cross-site tracking cookies.

5. Storage, retention & deletion

Account, organization, and discovery data is stored in our PostgreSQL database hosted on AWS. Secrets (GitHub tokens, webhook secrets, and user-supplied source credentials) are stored encrypted in AWS SSM Parameter Store. We retain data while your subscription is active and for a reasonable period afterward to satisfy legal, accounting, and dispute-resolution obligations. You can request export or deletion of your data at any time by emailing privacy@liblab.com; we respond within 30 days.

6. Security

All connections to the Service use HTTPS/TLS. Secrets are encrypted at rest using AWS-managed keys. We follow the principle of least privilege for internal access and apply security patches on a regular cadence. No system is perfectly secure; please report suspected vulnerabilities to security@liblab.com.

7. International data transfers

The Service is operated from the United States. If you access the Service from outside the United States, your data will be transferred to and processed in the United States, where data-protection laws may differ from those of your country.

8. Your rights

Depending on where you live, you may have the right to access, correct, export, restrict the processing of, or delete your personal information, and to withdraw consent. EU/UK users have these rights under the GDPR; California users have additional rights under the CCPA/CPRA, including the right not to be discriminated against for exercising them. Submit requests to privacy@liblab.com.

9. Children's privacy

The Service is not directed to children under 16 and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact privacy@liblab.com and we will delete it.

10. Changes to this policy

We may update this policy from time to time. If we make material changes we will notify you by email or in-product notification before the changes take effect.

11. Contact

Reach us at privacy@liblab.com for any privacy-related questions or to exercise the rights described above.