Octoboard
Start free

Privacy Policy

Last updated: March 23, 2026

Introduction

Octoboard ("we", "our", "us") operates the octoboard.io website and the app.octoboard.io application. This Privacy Policy explains how we collect, use, and protect your information when you use our services.

Information We Collect

Account Information

When you sign in with GitHub OAuth, we receive your GitHub username, email address, and avatar URL. We do not store your GitHub password.

Repository Metadata

We sync metadata from your selected GitHub repositories: issue titles, PR titles, statuses, assignees, labels, milestones, and workflow run statuses. This metadata is stored in our database.

Two kinds of content are fetched but never stored. Pull request bodies are read on every sync so we can detect which issues a PR closes; the body is discarded once those links are extracted. Issue bodies are fetched from GitHub on demand when you open an issue in Octoboard and are returned straight to your browser. Neither is written to our database.

We do not clone your repositories and we do not read file contents or commit diffs. Issue and PR bodies can contain code snippets and stack traces that you or your team wrote there, so we describe what we handle rather than claiming we never see any code at all.

Usage Data

We use PostHog for product analytics. This collects anonymized usage data such as pages visited, features used, and session duration. We do not sell this data to third parties.

How We Use Your Information

  • To provide and maintain the Octoboard service
  • To display dashboard analytics based on your GitHub data
  • To generate AI summaries using the AI provider configured on the server
  • To improve our product based on usage patterns
  • To communicate with you about service updates

AI Processing

When you use AI features, metadata (issue and PR titles, statuses, assignees, labels, dates, and counts) is sent to the AI provider configured on the server. Issue and PR bodies, file contents, and commit diffs are not sent. On the hosted service the provider is Groq, OpenAI, Anthropic, or a self-hosted Ollama instance, selected in that order depending on which credentials the server is configured with.

We do not store an AI API key on your behalf. AI credentials live in the server environment. The one credential we do store for you is your GitHub access token, which is encrypted at rest with AES-256-GCM and used only to read the repositories you have connected.

Data Storage

All data is stored securely in our managed infrastructure using PostgreSQL on encrypted servers.

Data Sharing

We do not sell, rent, or share your personal information with third parties except as required by law or as necessary to provide the service (e.g., AI providers when you initiate AI features).

Your Rights

You can request deletion of your account and associated data at any time by contacting us at [email protected].

Cookies

We use essential cookies for authentication (session tokens). PostHog may use cookies for analytics. No third-party advertising cookies are used.

Changes

We may update this policy from time to time. We will notify users of material changes via the application or email.

Contact

For privacy-related questions, contact us at [email protected].