Last updated: September 16, 2026
Short version: RepoHop stores metadata about your account, devices, and agent activity — never the contents of your repositories. This page explains exactly what that means.
RepoHop ("we", "us") is the controller of your personal data. Contact: [email protected].
Account data. Email address, display name, password hash or sign-in codes, role, and account status. Needed to run your account.
Device metadata. Device name, platform, app version, public key, online presence, and last-seen time. Needed to route agent operations to the right machine. We never receive your device's private keys.
Workspace metadata. Repository alias, branch, remote name, and permission flags (read/write/execute/commit/push). The actual folder path on your computer stays local. Needed to show your repos and enforce grants.
Activity metadata. Which tool ran, on which workspace, through which connection, when, and whether it succeeded — plus how long it took. Needed for your activity history, rate limits, and abuse prevention.
Payment data. Plan, subscription status, and billing history. Card numbers are processed by our payment provider and never touch our servers.
Support data. Messages you send us and basic diagnostic information needed to help you.
.env contents.File text and command output pass through RepoHop Cloud only while answering an active, authorized request, and are not retained afterwards. Our audit records prove what happened, never what was in your files.
Only to: operate and secure the service; authenticate you and authorize connections; bill paid plans; enforce rate limits and prevent abuse; provide support; and comply with the law. We do not sell personal data, and we do not use your data to train models.
When you connect an agent (such as Grok Bot, Muse.ai, Vellum, Gemini Spark, or Letta), your authorized requests and their responses flow to that agent's provider so it can do its work. Those providers are independent companies with their own privacy policies — RepoHop's policy does not cover them, and we are not affiliated with or responsible for them. Connect only agents whose data practices you accept, and grant minimum permissions.
No other sharing. No advertising trackers on the product.
We use strictly necessary cookies for sign-in sessions, security (CSRF protection), and remembering basic preferences such as locale and theme. No third-party advertising cookies.
Activity history retention depends on your plan (7-day history on Solo, 30-day history on Pro); older records are pruned automatically. Account, device, and workspace records live until you delete them. Deleting your account revokes all connections and deletes your data, except for records we must keep for tax, fraud-prevention, or legal-hold reasons, and except for short-lived encrypted backups that age out on their own schedule.
Transport is encrypted with TLS. Access tokens are short-lived and scoped. Device credentials are never stored cloud-side in usable form. That said, no system is perfectly secure, and RepoHop Cloud can technically observe request payloads while routing them — we do not currently offer end-to-end encryption, and we say so plainly instead of implying otherwise.
Depending on where you live (including GDPR and CCPA rights where they apply), you may request access to, correction of, export of, or deletion of your personal data, and you may object to or restrict certain processing. Write to [email protected] and we will respond within a reasonable time. You may also lodge a complaint with your local data-protection authority.
RepoHop is not directed at children under 13 (or the higher minimum age where you live), and we do not knowingly collect their data. If you believe a child gave us data, contact us and we will delete it.
We will announce material changes here and, where appropriate, by email or in the product, before they take effect. Continued use after the effective date means you accept the update.
This English version governs. Translated versions are provided for convenience; if they conflict with this text, this text controls.