Privacy Policy

Last updated: March 2026

1. Data Controller

VersionTap (“we”, “us”, “our”) is the data controller for personal data processed through our service at versiontap.com. Contact: privacy@versiontap.com

2. Data We Collect

  • Account data: Email address, name, password hash (managed by Supabase Auth)
  • Usage data: Pages visited, features used (via PostHog analytics, only if you consent to cookies)
  • Payment data: Handled entirely by Stripe. We never see or store your full card number.
  • Content data: Changelog entries, project settings, and other content you create in VersionTap

3. Legal Basis for Processing (GDPR)

  • Account data: Contractual necessity (providing the service you signed up for)
  • Usage analytics: Consent (you choose to accept or reject analytics cookies)
  • Payment processing: Contractual necessity
  • Marketing emails: Consent (opt-in only)

4. Third-Party Processors

  • Supabase (database, authentication) — US, SOC 2 certified
  • Stripe (payments) — US, PCI DSS Level 1
  • Resend (email delivery) — US
  • PostHog (analytics, only if consented) — US, SOC 2 certified
  • Vercel (hosting) — US

5. Data Retention

  • Account data: retained while your account is active, plus 30 days after deletion
  • Usage analytics: retained per PostHog settings (default 1 year)
  • Payment records: retained per legal/tax requirements (typically 7 years, managed by Stripe)

6. Your Rights

You have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Delete your account and all associated data
  • Export your data (data portability)
  • Withdraw consent for analytics tracking
  • Opt out of data sales (CCPA — note: we do not sell your data)

To exercise any of these rights, email privacy@versiontap.com.

7. Cookies

We use only essential cookies (authentication) and optional analytics cookies (PostHog). You can manage your cookie preferences via the banner shown on first visit or the “Manage cookie preferences” link in our footer. See our Cookie Policy for details.

8. International Data Transfers

Your data is processed in the United States. By using our service, you consent to this transfer.

9. Children’s Privacy

VersionTap is not intended for users under 16 years of age. We do not knowingly collect data from children.

10. Changes to This Policy

We will notify users of material changes via email or an in-app notification at least 30 days before they take effect.

11. Contact

For privacy inquiries: privacy@versiontap.com