During the installation of Mergetastic (the "App"), users grant access to the app to write to repositories, administer repositories and read pull requests. This access is needed for the proper functioning of the app. More specifically,
Mergetastic only stores the UUIDs of various resources (accounts, repositories etc.) on its servers. It resolves the data associated with these resources through the Bitbucket API only when needed.
Mergetastic stores the contents of your repository on its servers. These servers are hosted in Google Cloud Platform ("GCP"). All the resources related to Mergetastic in GCP are in a private VPC and HTTPS requests through the load balancer is the only way in. Even within the private VPC, communication happens over SSL whenever possible.
Mergetastic uses Google Analytics in order to better understand how users use the App and how their experience can be enhanced. Learn more about how Google Analytics collects and processes data see this page and this page.
The App uses Google Cloud Platform ("GCP") to provide the necessary hardware, software, networking, storage and related services to run the App. You retain all the right to your data. If you uninstall Mergetastic, all your data will be deleted.
When you install the App, we do not automatically start cloning your repositories. Only repositories where you enable the App will be cloned.
The information we collect is used to improve the quality of the service. It is not shared with or sold to other organizations for commercial purposes, except to provide products and services you've requested.
This policy may be updated periodically.