Privacy Policy

Last updated: March 17, 2026

OpenPull connects developers with open source projects. This policy explains what data we collect, why, and what control you have over it. We wrote this in plain language on purpose.

What we collect

When you sign in with GitHub

  • Your GitHub user ID, username, display name, avatar, and email
  • A GitHub access token (stored encrypted) so we can sync your public repos
  • Your public repository list: name, description, language, stars, and fork status

What you tell us directly

  • Your interests (free-form text you enter on your profile or during onboarding)
  • Your profile type preference (contributor or maintainer)

How you use the platform

  • Queue signals: which repos you marked “interested” or “skipped”
  • Interest signals: when you express interest in a project
  • Queue state: when your discovery queue was generated and completed
  • Notification preferences (web, Discord, email)

Data we compute

  • An embedding vector generated from your interests text. This is a numerical representation used to match you with relevant projects. It cannot be reversed back into your original text.

If you link Discord

  • Your Discord user ID and display name
  • Your Discord interest profile (from the /profile command)

Why we collect it

Everything we collect serves one purpose: matching you with open source projects that fit your skills and interests. Specifically:

  • GitHub data lets us understand what you work on
  • Your interests text and signals train your personal recommendations
  • Embeddings power the similarity matching between you and projects
  • Notification preferences control how and when we reach you

Third-party services

We use a few external services to make OpenPull work:

  • OpenRouter - Your interests text is sent to generate embedding vectors. OpenRouter processes this data but does not store it per their policy.
  • Anthropic (Claude) - Repo analysis summaries are sent for similarity comparison. Not stored per Anthropic's API policy.
  • Resend - Your email address is used to send transactional emails (queue ready notifications, interest alerts, etc.).
  • GitHub API - We fetch public repo metadata for our analysis pipeline. This data is already publicly available on GitHub.
  • Vercel - Hosts the web application. Basic analytics (page views, web vitals) are collected through Vercel Analytics.

What we do not do

  • We do not sell your data or share it with advertisers
  • We do not track you across other websites
  • We do not use your data for advertising purposes
  • We do not access your private repositories. Only public repo metadata is synced.

Data retention

We keep your data for as long as your account is active. If you delete your account, all associated data is removed, including your profile, signals, embeddings, and notification history.

Your rights

You can:

  • Clear your profile at any time using the self-service option in your account settings
  • Delete your account and all associated data through your account settings
  • Request a full data export by contacting us at the email below
  • Request manual deletion if you prefer not to use the self-service options

We respond to all data requests within 30 days.

Contact

For privacy questions or data removal requests, email us at privacy@openpull.ai.