Privacy policy

Sunset stores account identity, connected provider metadata, listings, acquisition records, and trust and safety events needed to operate the marketplace.

OAuth access tokens remain server-side. Repository access is requested only when a developer explicitly starts a GitHub import. Buyers are not asked for repository access.

You can export your account data or request deletion from Account settings. Transaction, fraud-prevention, and audit records may be retained where required to protect marketplace participants or meet legal obligations.