What we collect
To run your jobs and show them in your dashboard, we store:
- Your GitHub organization, the repositories that run jobs on Overline, and the installation of our GitHub App.
- Job metadata from GitHub: workflow and job names, status, step names and timings, commit SHA, branch and the user who triggered the run.
- Job logs, after GitHub's runner has masked your secrets.
- Per-second CPU and memory usage of each job's virtual machine.
- Usage records (job start and end times) for billing.
What we don't collect
- Your source code. Our GitHub App has no permission to read repository contents; your code is checked out inside the job's own virtual machine and deleted with it.
- Your secrets. GitHub sends them directly to the runner inside the job's virtual machine; they never pass through or get stored on our servers.
- Anything written to the job's disk. The disk is deleted when the job ends.
How we use it
- To start, run and clean up your jobs.
- To show runs, logs, steps and resource usage in your dashboard.
- To bill for usage and to investigate failures and abuse.
- To improve performance, using aggregate measurements such as job durations.
Retention
Job logs and CPU/memory measurements are kept for 30 days, then deleted. Usage records are kept as long as needed for billing and accounting. When you uninstall the GitHub App, we delete the data tied to your organization within 30 days, except records we must keep by law.
Where it's stored
Your jobs run, and their data is stored, on dedicated servers we operate in a third-party data center. We don't share your data with third parties except providers that help us operate the service, and only for that purpose, or when the law requires it.
Your choices
You can uninstall the GitHub App at any time from your GitHub organization's settings. To access, export or delete your data, email legal@overline.dev.
Changes
If we change this policy in a way that matters, we'll update the date above and tell you before the change takes effect.