Privacy Policy

Last updated: February 5, 2025

Oakspace Inc. ("we", "us", "our") operates the Oak version control service including the hosted platform at oak.space and the Oak CLI. This policy describes what data we collect, how we use it, and your rights regarding that data.

1. Data We Collect

Your Code and Content

When you push repositories to Oak, we store your code, commit history, branch metadata, and associated content (blobs, manifests). This data is stored on our servers to provide the version control service.

Usage Data

We collect basic usage information including:

  • IP addresses and request metadata (timestamps, endpoints accessed)
  • CLI version and platform information sent with API requests
  • Repository names, branch names, and operation types (push, pull, etc.)
  • Error logs and crash reports

Server Logs

Our servers automatically log HTTP requests, including IP addresses, user agents, request paths, and response codes. These logs are used for debugging, security monitoring, and service improvement.

2. How We Use Your Data

We use collected data to:

  • Provide and operate the Oak service (storing and syncing your code)
  • Maintain and improve service reliability and performance
  • Debug issues and respond to support requests
  • Detect and prevent abuse, fraud, and security threats
  • Generate aggregate, anonymized usage statistics

We do not sell your personal data or code to third parties. We do not use your code to train machine learning models. We do not share your code with third parties except as required to operate the service (e.g., cloud infrastructure providers).

3. Data Storage and Security

Your data is stored on servers hosted by third-party cloud infrastructure providers. We use industry-standard security practices including encrypted connections (TLS) for data in transit. However, as an experimental service, we cannot guarantee the same level of security as established production platforms.

Important: Because Oak is experimental, we strongly recommend maintaining independent backups of any code you store with us. We are not responsible for data loss.

4. Data Retention

We retain your code and repository data for as long as your repositories exist on the service. Server logs and usage data are retained for up to 90 days for operational purposes.

If you stop using the service, we may delete inactive repositories and associated data after a reasonable period of inactivity. We will make reasonable efforts to notify users before deleting data, but cannot guarantee advance notice during the experimental phase.

5. The CLI

The Oak CLI runs locally on your machine. It:

  • Reads and writes files only within Oak-initialized repository directories
  • Stores local repository data in a .oak directory within your project
  • Sends your code to Oak servers only when you explicitly run oak push
  • Sends your CLI version and platform with API requests for compatibility purposes
  • Does not collect telemetry or analytics beyond what is described above

6. Cookies and Tracking

The Oak website uses Plausible Analytics, a privacy-friendly analytics tool. Plausible does not use cookies, does not collect personal data, and is fully compliant with GDPR, CCPA, and PECR. All data is aggregated and no individual visitors can be identified. No other third-party tracking scripts are used.

7. Third-Party Services

We use third-party services to operate Oak, including cloud hosting providers and content delivery networks. These providers may process your data as part of delivering the service, subject to their own privacy policies.

8. Your Rights

You have the right to:

  • Access your data — your code is always accessible via oak pull
  • Delete your data — contact us to request deletion of your repositories and account data
  • Export your data — pull your repositories locally at any time

To exercise these rights or ask questions, reach out on Discord or email privacy@oak.space.

9. Children's Privacy

Oak is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us so we can delete it.

10. Changes to This Policy

We may update this privacy policy from time to time. We will update the "Last updated" date at the top of this page. Continued use of the service after changes constitutes acceptance of the updated policy.

11. Contact

Questions about this policy? Reach us on Discord or email root@oak.space.