Privacy policy
What we collect, and what we do with it.
Last updated 7 November 2026. ReleaseGreen is run by Partech Systems Limited ("we", "us"). This policy covers the ReleaseGreen website (releasegreen.com) and the app (app.releasegreen.com).
The short version
- We hold your email address, the apps and release targets you add, and your notes. We do not ask for store passwords, signing keys or build files, and the app rejects pasted private keys.
- We do not sell personal data and we do not show ads.
- The app sets one sign-in cookie and nothing for tracking. The website sets no cookies.
- Card details go to Stripe. They never reach our servers.
What we collect
Account. Your email address and name (if you give one), your passkey public key (if you add a passkey), and the organization you create or join, with your role in it.
Your apps. App names, versions, website, privacy-policy, terms and support URLs, the platforms and store identifiers you enter (for example a bundle ID or package name), the state of each check, your attestations and your notes. Free-text notes are encrypted with a key unique to your organization.
Connected accounts. If you install the ReleaseGreen GitHub App, we receive the installation and repository names you choose and read the contents of those repositories to run checks. Access is read-only. Access tokens are created per check and are not stored.
Billing. Stripe holds your payment details. We keep Stripe's customer and subscription identifiers, your plan, the number of apps billed and your subscription status.
Security and operations. Sign-in sessions (including the IP address and browser string they were created from), rate-limit counters, and an audit log of sign-ins, membership changes and billing events. The audit log stores a keyed hash of the IP address, not the address.
Email. We send you sign-in codes, invitations you or a teammate trigger, and, if you are a member of an organization, notification digests about its checks. We do not send marketing email.
Why we use it, and our legal basis
- To provide the service you signed up for: running checks, showing results, sending the emails above, and billing (performance of a contract).
- To keep the service secure and prevent abuse: sessions, rate limiting, the audit log (our legitimate interest in running a secure service).
- To meet legal and tax obligations, such as keeping invoices (legal obligation).
Who handles it for us
These providers process data on our behalf. We use no analytics or advertising services in the app.
- Google Cloud, europe-west1 (Belgium): hosting, database, encryption keys and backups.
- Stripe: payments and subscription billing.
- Resend: delivery of the emails listed above.
- GitHub: only if you connect the GitHub App, and for public release information.
- GitHub Pages hosts this website.
Some of these providers may process data outside the UK and EEA, under standard contractual clauses or an equivalent approved transfer mechanism.
How long we keep it
- Sign-in sessions last up to 14 days, and a sign-in code expires after 5 minutes.
- Your organization's data is kept while your account is active. When an owner deletes the organization, its apps and notes are removed and the notes become unreadable straight away, because its encryption keys are deleted.
- Database backups are kept for a short, fixed window (seven daily backups, plus three days of point-in-time recovery). Deleted data ages out of backups within that window.
- Invoices and payment records are kept as long as tax law requires, mostly by Stripe.
Your rights
Under UK and EU data protection law you can ask us to access, correct, export or delete your personal data, to restrict or object to its use, and to complain to your data protection authority (in the UK, the Information Commissioner's Office). Email privacy@partechsystems.com and we will reply within a month. An organization owner can delete the organization, and with it your apps and notes, at any time from the app.
Cookies
The app sets one session cookie when you sign in. It is HttpOnly, Secure and SameSite, and is needed for sign-in to work. The website, including the demo video, sets no cookies and loads no third-party scripts or fonts.
Children
ReleaseGreen is for people building software professionally. It is not directed at children.
Changes and contact
If we change this policy in a way that matters, we will update the date above and, for existing customers, email them. Questions go to privacy@partechsystems.com. For security reports see our security page.