← Back to Notify CLI

Privacy Policy & Data Security

Last updated: September 24, 2026. This Privacy Policy details the data handling, storage practices, and network communications of the Notify CLI executable and documentation website.

1. Zero Telemetry & Local Execution

The Notify CLI binary contains zero tracking code, zero analytics SDKs, and zero telemetry beacons. We believe developer tools must respect privacy. The application does not collect usage metrics, IP addresses, execution timestamps, or error reports back to any SpaceCorps server. The only network requests made by the tool are outbound HTTPS requests initiated explicitly by the user to external endpoints (such as Slack incoming webhooks or Google Gmail REST APIs).

2. Cryptographic Credential Protection

Webhook URLs, API keys, and OAuth tokens are sensitive credentials. Notify CLI refuses to save secret tokens in plain-text configuration files by default. Instead, secrets are stored in the secure credential store provided by the host operating system: macOS Keychain Services via the native security subsystem, Windows Data Protection API (DPAPI) encrypted under user-specific credentials, or the freedesktop.org Secret Service daemon via libsecret on Linux.

3. Local Configuration Metadata

Non-sensitive configuration metadata—such as profile alias names, default channels, bot usernames, and sender email addresses—is stored locally in an owner-restricted YAML file (chmod 0600 on POSIX platforms) located within your standard system configuration directory. This file can be inspected, backed up, or deleted at any time.

4. Website Privacy

This documentation website is hosted as a static site on GitHub Pages. It contains no tracking scripts, no third-party cookies, and no personal data collection mechanisms. Standard web server access logs are handled directly by GitHub in accordance with GitHub's standard Privacy Statement.