Last updated: June 2025
Privacy & Security

Privacy Policy

How we collect, use, and protect your information

Privacy at a Glance

Your data is encrypted
Minimal data collection
No data selling

This Privacy Policy describes how Makkara Chat (we, us, or our), an AI assistant for understanding GitHub repositories, collects, uses, and shares your information when you use our website and services (the "Service").

1

Who We Are

We are Pöhinä Group, people behind the Makkara Chat, dedicated to helping you explore and understand GitHub repositories.

2

Information We Collect

Information You Provide Directly:

  • Account Information: When you sign in using GitHub, we collect your GitHub User ID, email address, and potentially your IP address. This information is used to create and manage your Makkara Chat account.
  • Chat Content: The questions you ask about repositories and the AI-generated responses are collected and stored as your chat history.
  • Repository Information: When you specify a GitHub repository (e.g., owner/repo), this information is collected.
  • Favorite Repositories: If you use the "favorite" feature, we store the GitHub repository URL, owner, and name associated with your user ID.
  • Payment Information: If you subscribe to a paid plan, we collect information necessary to process your subscription, including your user ID, and interact with our payment processor (Stripe) to manage your subscription status and IDs (e.g., Stripe Customer ID, Stripe Subscription ID). We do not directly store your credit card details.

Information Collected Automatically:

  • Usage Data: We collect information about how you interact with the Service, such as the pages you visit, the features you use, and the time and date of your interactions.
  • Rate Limit Data: We track your message count and last reset time to enforce rate limits.
  • Device and Connection Information: We may collect information about the device and network you use to access the Service, including IP address, browser type, and operating system.

Information from Third Parties:

  • GitHub: When you provide a repository URL, we use the GitHub API to fetch public information about that repository (e.g., name, description, language, stars, forks, URL, owner details, topics, creation/update dates, issues, visibility, default branch, size). This information is used to provide context to the AI and display repository details.
  • Stripe: Our payment processor, Stripe, provides us with information regarding your subscription status (e.g., active, deleted) and associated IDs (e.g., customer ID, subscription ID) to manage your access to premium features.
3

How We Use Your Information

We use the collected information for the following purposes:

  • To Provide and Maintain the Service:This includes enabling AI chat functionality, fetching repository data, managing your account, and storing your chat history and favorite repositories.
  • To Process Subscriptions: To manage your paid subscriptions, enforce rate limits, and provide access to premium features.
  • To Improve and Personalize the Service:We analyze usage patterns to understand how our Service is used, identify areas for improvement, and enhance the user experience.
  • For Security and Fraud Prevention: To protect the integrity and security of our Service and to detect and prevent fraudulent activities.
  • To Communicate with You: To send you service-related notifications, updates, or support messages.
  • For Legal Compliance: To comply with applicable laws, regulations, and legal processes.
4

How We Share Your Information

We may share your information with the following categories of third parties:

Service Providers:

We engage third-party companies and individuals to facilitate our Service, provide the Service on our behalf, perform Service-related services, or assist us in analyzing how our Service is used. These include:

  • GitHub: To retrieve public repository information based on your input.
  • Google AI (Gemini): Your chat messages (excluding your personal identity) are sent to Google"s AI models to generate responses.
  • Stripe: For processing payments and managing subscriptions.
  • Database Provider (Postgres): For storing user data, chat history, and other application data.

Legal Requirements:

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court order or government agency).

Business Transfers:

In the event of a merger, acquisition, or asset sale, your personal data may be transferred. We will provide notice before your personal data is transferred and becomes subject to a different Privacy Policy.

5

Data Retention

We retain your personal information for as long as necessary to provide the Service, fulfill the purposes outlined in this Privacy Policy, or comply with our legal obligations. Chat history and favorite repository data are retained as long as your account is active, unless you request deletion.

6

Data Security

We implement reasonable technical and organizational measures designed to protect your personal information from unauthorized access, use, alteration, or destruction. However, no method of transmission over the Internet or method of electronic storage is 100% secure.

7

Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

  • Access: Request a copy of the personal data we hold about you.
  • Correction: Request that we correct any inaccurate or incomplete personal data.
  • Deletion: Request that we delete your personal data, subject to certain legal obligations.
  • Objection/Restriction: Object to or request restriction of the processing of your personal data.
  • Data Portability: Request to receive your personal data in a structured, commonly used, and machine-readable format.

To exercise these rights, please contact us using the information below.

8

Children"s Privacy

Our Service is not intended for use by individuals under the age of 13. We do not knowingly collect personally identifiable information from children under 13. If you are a parent or guardian and you are aware that your child has provided us with personal data, please contact us. If we become aware that we have collected personal data from a child under 13 without verification of parental consent, we take steps to remove that information from our servers.

9

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

10

Contact Us

If you have any questions about this Privacy Policy, please contact us.

Exercise Your Data Rights

You have control over your personal data. Contact us to access, correct, or delete your information.