main
erb 140 lines 5.42 KB
Raw
1 <% content_for :title, "Privacy Policy" %>
2 <% content_for :description, "How siGit collects, uses, and protects your data. Read the siGit privacy policy." %>
3
4 <div class="max-w-3xl mx-auto px-4 sm:px-6 py-16 sm:py-20">
5 <div class="text-center mb-12">
6 <img src="/icon.png" alt="siGit Code &amp; Deploy" class="mx-auto h-20 w-auto rounded-2xl border border-surface-600 shadow-lg">
7 </div>
8
9 <div class="prose-readme">
10 <h1>Privacy Policy</h1>
11 <p class="text-gray-500"><em>Last updated: June 17, 2026</em></p>
12
13 <p>
14 siGit Code &amp; Deploy is a Git hosting platform for code and open-weights
15 models, run by Splitfire AB in Sweden. This policy explains what we collect
16 when you use the website at sigit.si, the desktop and mobile apps, and the
17 Git and API endpoints, and what we do with it.
18 </p>
19
20 <h2>What we collect</h2>
21
22 <h3>Account information</h3>
23 <p>
24 When you create an account we collect your email address, username, and a
25 password. Accounts are handled through smbCloud Auth, our authentication
26 provider. Passwords are stored hashed by smbCloud and are never visible to
27 us in plain text.
28 </p>
29
30 <h3>Content you publish</h3>
31 <p>
32 When you push code, publish a model, or interact with the platform, we store
33 what you send us so we can host it. That includes:
34 </p>
35 <ul>
36 <li>Repositories, commits, branches, and the files in them</li>
37 <li>Model repositories, model cards, and Git LFS objects such as GGUF or safetensors weights</li>
38 <li>Stars and other actions you take on public content</li>
39 <li>Profile details you choose to add</li>
40 </ul>
41
42 <h3>Technical data</h3>
43 <p>We automatically record some data when you connect:</p>
44 <ul>
45 <li>IP address and approximate region</li>
46 <li>Browser or client type and version</li>
47 <li>Request logs for the website, the JSON API, and Git over HTTPS</li>
48 <li>Error and crash reports</li>
49 </ul>
50
51 <h2>Public and private content</h2>
52 <p>
53 Anything you mark public, including public repositories and model
54 repositories, is visible to anyone on the internet, along with your username
55 and the content of those repositories. Private content is visible only to you
56 and the people you grant access. Treat the public or private setting as the
57 control over who can see your work.
58 </p>
59
60 <h2>How we use your information</h2>
61 <ul>
62 <li>Run and maintain the platform and host your repositories and models</li>
63 <li>Authenticate you and keep your account secure</li>
64 <li>Serve clones, fetches, and pushes over Git, and requests through the API</li>
65 <li>Send account email such as verification and password resets</li>
66 <li>Diagnose problems and improve performance and reliability</li>
67 <li>Detect and prevent abuse and fraud</li>
68 </ul>
69
70 <h2>Third-party services</h2>
71 <p>
72 We rely on the smbCloud platform for authentication, transactional email,
73 and deployment. These services process the data needed to do their job under
74 their own terms. We do not sell your personal information.
75 </p>
76
77 <h2>Storage and security</h2>
78 <p>
79 Traffic to the website, the API, and Git over HTTPS is encrypted in transit.
80 We use access controls and keep our systems patched. No system is perfectly
81 secure, but we work to protect what you store with us.
82 </p>
83 <p>
84 We keep your account data and content while your account is active. When you
85 remove your account, we delete your account and its associated content,
86 subject to any legal retention obligations and short-lived backups that age
87 out on their own.
88 </p>
89
90 <h2>Your rights</h2>
91 <p>You can:</p>
92 <ul>
93 <li>Access and correct your account information</li>
94 <li>Export your code and models, since they are stored as standard Git repositories</li>
95 <li>Delete your account and its content from the account settings</li>
96 <li>Ask us anything about your data at the address below</li>
97 </ul>
98 <p>
99 If you are in the EU, you also have rights under the GDPR, including data
100 portability, the right to object to processing, and the right to lodge a
101 complaint with a supervisory authority.
102 </p>
103
104 <h2>Cookies</h2>
105 <p>
106 The website uses cookies to keep you signed in and to remember basic
107 preferences. We do not use them to track you across other sites.
108 </p>
109
110 <h2>Children</h2>
111 <p>
112 siGit Code &amp; Deploy is not directed at children. You must be at least 13
113 years old, or 16 in the EU, to create an account. We do not knowingly collect
114 data from children below that age.
115 </p>
116
117 <h2>International transfers</h2>
118 <p>
119 Your data may be processed in countries other than where you live. When that
120 happens we rely on appropriate safeguards in line with applicable data
121 protection law.
122 </p>
123
124 <h2>Changes to this policy</h2>
125 <p>
126 We may update this policy as the platform changes. When we make a significant
127 change we will update this page and, where it matters, let you know by email
128 or in the app.
129 </p>
130
131 <h2>Contact</h2>
132 <p>
133 Questions or requests about your data go to
134 <a href="mailto:splitfire@setoelkahfi.se">splitfire@setoelkahfi.se</a>.
135 </p>
136 <p>
137 Splitfire AB, Sweden. See also our <%= link_to "Terms of Use", terms_path %>.
138 </p>
139 </div>
140 </div>