Privacy notice

Effective as of May 25, 2021

Key changes: We have updated the information in this policy to comply with the California Consumer Privacy Act.

What personal data do we store and why?
For people who have logged in via Github on our website, we store these things in our database:
For people who have interacted with Merge Freeze via the Slack integration, we store these things in our database:
Other things:
How we share information we collect

We do not sell your personal information, irrespective of where you are located.

We do use certain third-party providers to deliver and perform services for us and we may share certain information with these service providers:

From time to time as the business and the app evolves, there may be additional service providers or a service provider may be removed or replaced. We will periodically update our privacy policy to reflect any changes.

Security and storage

The following security measures are in place:

How do you get all of your personal data deleted from our system?

Your email address, Github username and avatar are deleted from our system when you delete your user in the user settings panel of the web UI.

Your Slack display name and avatar are deleted from our system when your Slack user no longer belongs to any Slack accounts that are linked to a Merge Freeze project. To delete this information at an earlier time please send a request via email to [email protected].

Your Github account name, repository names and branch names are deleted from our system when the Merge Freeze app is uninstalled from your Github account.

We retain an encrypted copy of the app’s log files for up to 12 months. At the end of this period, we will delete all information except that which we are obligated to retain by law.

Your data rights

You may have the right to:

by emailing us at [email protected]. If you are a California resident you may also contact us toll-free at +1 833 660 0046.

You will not be discriminated against for exercising any of your privacy rights.

That said, where our customer is an organisation we receive and process information under the direction of our customer. In such circumstances:

In order to protect your information, upon receiving a request to exercise your privacy rights we will verify your identity by a method appropriate to the type of request you are making.

Data processing agreement

In accordance with data processing regulation compliance we have a pre-signed Data Processing Agreement available to download from https://www.mergefreeze.com/mergefreeze-DPA.pdf. Once signed please email us a copy at [email protected] for our records.

Changes to this policy

Occasionally we may make changes to this policy. If we do we'll communicate the change by either displaying a notice in the UI of the Merge Freeze web app or by direct communication to the app manager (including by email).

Who should you contact if you have a complaint?