Privacy Policy
Last updated 2 November 2026
Push200 is run by Brazaustra Pty Ltd in Australia ("we"). This policy explains what personal information we collect, why, and your choices. We handle it in line with the Australian Privacy Principles.
What we collect
- Your account: your name, company, email, mobile number and a protected form of your password. We never see your actual password after you set it.
- Your GitHub connection: your GitHub username and access token. The token is encrypted before it's stored.
- Your apps and builds: repository names, app settings, build results and the dates you added keys.
- Billing details: your plan, subscription status and Stripe customer ID. Stripe handles card details, so we never receive or store your card number.
- Technical information: a session cookie that keeps you signed in, plus the logs our hosting provider keeps to run the service securely.
What we don't keep
Your Apple and Google store keys pass through our server once, are sealed for GitHub and go into your repository's encrypted secrets. We keep only the date you added them, not the keys.
Why we use it
- To create your account and confirm your mobile number
- To start your builds and show their status
- To charge for paid plans
- To keep the service secure and prevent abuse
- To contact you about your account or important changes
We don't sell your personal information.
Who we share it with
We share only what each provider needs to do its job:
- Google Firebase: our database, and sending PIN text messages. Google reCAPTCHA also checks sign-ups for abuse.
- Vercel: hosts this website.
- GitHub: runs your builds on your own account.
- Stripe: takes payments for paid plans.
- Apple and Google: receive the apps you choose to send them.
These providers may store information outside Australia, including in the United States. We may also share information if the law requires it.
How long we keep it
We keep your information while your account is open. After you ask us to delete your account, we delete your personal information unless we need to keep some of it by law, such as payment records.
Your choices
You can disconnect GitHub and remove apps in your portal at any time. To see, correct or delete your personal information, or to close your account, email contact@push200.com.
Removing an app from Push200 doesn't remove anything from your own GitHub repository, including the secrets and the separate build branch.
Security
We encrypt your GitHub token, protect passwords with a one-way hash and use HTTPS throughout. No online service can guarantee complete security, so please use a unique password. We'll notify you and the regulator if a data breach requires it.
Complaints
If you have a privacy concern, email contact@push200.com first. If you're not satisfied with our response, you can complain to the Office of the Australian Information Commissioner.
Changes
If we make important changes to this policy, we'll update this page and tell you by email.