Privacy Policy

Ritmus Metrics ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

By using Ritmus Metrics, you agree to the collection and use of information in accordance with this policy.

We collect information in the following ways:

GitHub Account Information

When you sign in with GitHub, we receive:

• Your GitHub user ID and username
• Your email address associated with your GitHub account
• Your profile information (name, avatar)

Repository Data

When you install the Ritmus Metrics GitHub App on your repositories, we collect metrics data including:

• Deployment events and timestamps
• Pull request metadata (titles, timestamps, authors)
• Commit information (SHA, timestamps, authors)
• Release information

We do not access or store your source code. We only collect metadata necessary to calculate DORA metrics.

We use the collected information to:

• Calculate and display your DORA metrics (Deployment Frequency, Lead Time, Change Failure Rate, Mean Time to Recovery)
• Provide historical trends and analytics
• Authenticate your access to the service
• Send important service-related communications
• Improve and optimize our service

We do not sell, trade, or rent your personal information to third parties.

We may share data with:

• Service providers who assist in operating our service (hosting, analytics)
• Legal authorities when required by law or to protect our rights

We retain your metrics data for as long as your account is active and the GitHub App remains installed on your repositories. You can request deletion of your data at any time.

• Account data: Retained until account deletion
• Metrics data: Retained for 2 years of historical analysis
• Webhook events: Processed in real-time, raw events retained for 90 days

You have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request deletion of your data
• Export your metrics data
• Withdraw consent and disconnect your repositories

To exercise these rights, contact us at privacy@ritmus.digital.

We implement appropriate technical and organizational measures to protect your data. See our Security Practices page for more details.

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

If you have questions about this Privacy Policy, please contact us:

• Email: privacy@ritmus.digital
• Website: https://ritmus.digital