Privacy Policy

Last updated: 22 October 2026

Note: This page is being reviewed by a lawyer. If anything here is unclear, write to us.

Who we are

ShipItFam is run by Yanko Ivanov. In this policy, "we" and "us" mean ShipItFam (operated by Yanko Ivanov). We decide why and how your personal data is used, so under European data protection law (GDPR) we are the "controller".

Questions about your data: privacy@shipitfam.com, or use the contact page and pick "Security or privacy".

The short version

  • We collect what we need to run your account and your crew. Nothing more.
  • We do not sell your data. We do not train any AI model on your code.
  • Your prompts and code go to Anthropic through your own Claude login, under Anthropic's terms.
  • You can ask for a copy of your data, or for it to be deleted, at any time.
  • This website sets no tracking cookies and runs no analytics.

What we collect

Your account

  • Your email address and a hashed (scrambled, one-way) password, or the sign-in details of the login method you chose.
  • Sign-in sessions, so you stay signed in.

Your projects and your code

  • Project names, settings and team members.
  • The things you ask the crew to do (missions), plans, questions and your answers, approvals, and comments.
  • Your code. On the Free plan the crew works on your own computer, and your code stays there. On Builder and Fleet the crew works on a copy of your code in a private workspace on our servers.
  • The address of your git repository and, if you choose to add one, a git access token or SSH key so the crew can push. It is write-only: once saved, nobody can read it back in the app. You can remove it at any time.

What the crew did

  • Step summaries, the changes made, and the live log of each job, so you can review it from your phone.
  • Notes the crew saves about your project (the "treasure map") and the results of security scans. Scans send out only package names and versions, to check for known holes. Your source code is not sent.

Your Claude login

  • On Builder and Fleet, a copy of your Claude login is kept on our servers, outside the database, so the crew can work as you. It is never logged and never resold. Remove it in the app and we delete our copy.
  • On Free it never leaves your computer.

Billing (paid plans)

  • Your plan, invoices, billing country and VAT number if you give one, and how many hours your cloud workspace was awake.
  • Your card details are taken and kept by Stripe. We never see or store your full card number.

Connected apps and integrations

  • If you connect a tool such as an issue tracker, we store the access it gave us, encrypted, so the crew can read and update it for you. You can disconnect it at any time.
  • If you connect Claude or ChatGPT to ShipItFam, we store which app connected (its name and return addresses), when, and a hashed access token. More in Connected AI apps.

Forms

  • Waitlist: your email, and your name, role and what you want to build if you fill those in.
  • Contact form: your name, email, topic and message.

Technical logs

  • Our servers keep standard logs (IP address, time, what was requested, errors) so we can keep the service running and block abuse.

Why we use it

European law asks us to name a legal reason for each use of your data. Ours are:

  • To give you the service you asked for (a contract): your account, projects, crew, previews, billing and support.
  • To follow the law: keeping invoices and tax records.
  • Our legitimate interest: keeping the service secure, stopping abuse, finding bugs, and answering you when you write to us.
  • Your consent: waitlist emails. You can withdraw it at any time.

We do not use your data for advertising. We do not make decisions about you by automated profiling.

Who handles your data

We use a small number of other companies to run ShipItFam. Each gets only what it needs for its job.

  • Supabase: handles sign-in. It holds your email, hashed password and sign-in sessions.
  • Hetzner (data centres in Germany): hosts our servers, our database and the private workspaces where the crew runs on Builder and Fleet. It holds everything described above that is kept on our side.
  • Stripe: takes payments and handles tax on paid plans. It gets your email, billing details and card details.
  • Anthropic: runs Claude. The crew uses Claude Code signed in with your own Claude account, so your prompts and the parts of your code Claude reads go to Anthropic under your agreement with them, not ours. See Anthropic's privacy policy.
  • Nango: connects third-party apps you choose. We run Nango ourselves on our own servers, so connection details do not go to a further company.
  • An email service: sends invoices and account emails. It gets the recipient's email address and the message.
  • Your git host (GitHub, GitLab, or your own): receives the code the crew pushes, only after you approve "Ship it". Its own terms apply.
  • Google Fonts: this website loads its fonts from Google, which means your browser sends Google your IP address when you open a page.

We may also share data if the law requires it, or to protect people from harm. We do not sell your data and we do not share it for advertising.

Where it is kept

Our servers are in the European Union (Hetzner, Germany). Some of the companies above, such as Anthropic and Stripe, may process data outside the EU. Where they do, they rely on the legal safeguards European law allows, such as standard contractual clauses.

How long we keep it

  • Account and project data: while your account is open.
  • When you delete a project: we remove its records from our database, shut down and delete its cloud workspace, remove its published builds, and remove its connected-app connections.
  • When you delete your account: we delete your account and the data tied to it within 30 days. See Your rights.
  • Invoices and tax records: as long as the law requires us to keep them.
  • Waitlist and contact messages: until you ask us to remove them, or until we no longer need them to reply to you.
  • Server logs: kept for a short time, then removed.
  • Backups: deleted data can stay in backups for a short time before it is overwritten.

Connected AI apps (Claude and ChatGPT)

You can connect ShipItFam to Claude or ChatGPT, so you can steer your crew by chatting. This is how it works.

What the connection gives the app

  • When you connect, you sign in to ShipItFam and approve the app. The app then gets an access token. It acts as you, with the same access you have in ShipItFam.
  • It can see your projects, missions, requests waiting for you, step summaries, changes and logs.
  • It can do what you ask it to: queue a mission, comment, answer a question, approve or send back a plan, and approve "Ship it", which can push code to your git remote. It can also change project settings and delete a project if you ask it to.

What we store about the connection

  • The app's name and return addresses, which user approved it, and when.
  • Only a hash of the one-time code and refresh token (we cannot read the originals). The access token expires after 24 hours and the app renews it quietly while the connection is active.

What the AI company sees

Anything ShipItFam sends back to Claude or ChatGPT, such as a mission summary or part of a log, becomes part of your chat with them. Anthropic (Claude) or OpenAI (ChatGPT) handles that conversation under its own privacy policy and your own account settings. We do not control that, and we do not receive your chat.

How to disconnect

Open "MCP access" in the ShipItFam app and revoke the connection. The app stops working at once. You can also disconnect from inside Claude or ChatGPT.

Cookies and tracking

  • This website sets no tracking or advertising cookies, and runs no analytics.
  • The home page remembers which "made for" tab you picked, in your browser only. It is never sent to us.
  • When you sign in, your browser keeps your sign-in session in its storage so you stay signed in. It is needed for the app to work. Signing out removes it.

Your rights

If you are in the European Economic Area, the UK or a similar place, you have the right to:

  • ask for a copy of your data (access and export),
  • fix data that is wrong,
  • ask us to delete your data,
  • ask us to limit how we use it, or object to a use based on our legitimate interest,
  • take back your consent, such as for waitlist emails.

To use any of these, email privacy@shipitfam.com. There is no self-service button for deleting an account yet. Write to us and we delete your account and data within 30 days. We may ask you to confirm it is really you first.

If you are unhappy with how we handled your data, you can complain to your local data protection authority. We would rather fix it first, so please write to us.

How we protect it

Connections are encrypted. Git tokens and Claude logins are kept out of the database and are never shown back to you. The crew asks before risky commands, and it never pushes your code without your approval. Our security page has the details. No system is perfectly safe. If we find a breach that affects you, we will tell you and the authorities as the law requires.

Previews and published sites

The crew can run a preview of your app at an address under shipitfam.com. Anyone who has the link may be able to open it. Do not put secrets or private data in a preview. Sites you publish are public by design.

Children

ShipItFam is not for anyone under 16. We do not knowingly collect data from children. If you think a child has given us data, write to us and we will delete it.

Changes to this policy

If we change this policy in a way that matters, we will update the date at the top and tell you by email or in the app before the change takes effect.

Contact

Email privacy@shipitfam.com or use the contact page.

We keep it tidy.

Join the waitlist. We only use your email to tell you when you are in.

Join waitlist What are the rules? Terms