Privacy Policy

Welcome to OSBridge. This Privacy Policy describes how we collect, use, process, and disclose your personal information, in conjunction with your access to and use of the OSBridge platform.

We are committed to complying with applicable data protection laws, including the Digital Personal Data Protection Act, 2023 (DPDP Act) of India.

We collect information to provide and improve our semantic matching services. The categories of personal data we collect include:

• Account Information: When you sign in using GitHub OAuth, we collect your GitHub ID, username, and public avatar URL.
• Skill Profiles: If you connect your LeetCode profile, we collect and cache your public LeetCode statistics and tags to understand your competitive programming skills.
• Usage Analytics: We collect non-personally identifiable information regarding how you interact with the platform (e.g., page views and key actions like saving issues or opening PRs) using PostHog. We explicitly disable session recordings, heatmaps, and automatic keystroke capturing to protect your privacy. This data is used solely to improve our recommendation algorithms and platform experience.

We process your personal information for the following purposes:

• To authenticate you and maintain your user session.
• To generate semantic embeddings of your skill profile using pgvector for matching you with relevant open-source GitHub issues.
• To cache external API responses (e.g., LeetCode data via Upstash Redis) to improve platform performance and respect rate limits.

We do not sell your personal data. We share your information only with the following trusted service providers necessary to operate OSBridge:

• Supabase: Our primary database and authentication provider where user profiles and vector embeddings are securely stored.
• Upstash: Used for Redis caching to temporarily store public LeetCode statistics and handle rate-limiting.
• GitHub: We interact with the GitHub API to fetch open-source issues and facilitate authentication.
• PostHog: Used for minimal, privacy-focused product analytics to track platform usage (e.g., successful issue matches). We do not record user sessions or track keystrokes.

We retain your personal information for as long as your account is active or as needed to provide you with the services.

Cached data, such as LeetCode statistics, is stored in Upstash Redis and automatically expires after 24 hours (TTL = 86400).

You may request the deletion of your account and associated data at any time by contacting us.

OSBridge uses standard session cookies and secure local storage mechanisms required by NextAuth.js to maintain your authenticated state. We do not use third-party tracking cookies for advertising purposes.

Under the Digital Personal Data Protection Act, 2023, Indian users have specific rights regarding their personal data:

• The right to access information about your personal data being processed.
• The right to correction and erasure of your personal data.
• The right to withdraw consent for data processing.
• The right to grievance redressal.

If you have questions about this Privacy Policy or wish to exercise your rights, please contact the platform maintainer: