Security
Data kept and deleted
What Skipbox records about your account and jobs, what it never keeps, and when each record is deleted.
The full list is in the privacy policy. In short:
Never kept
Your code, the secrets your workflow passes, and the job's GitHub token reach only the job's VM, and are deleted with it when the job ends. Skipbox doesn't record job logs: GitHub keeps them.
Kept, and until when
| What | Kept until |
|---|---|
| Each job's record: repository, job name, labels, size, times, how it ended | 14 days after your plans end |
| A summary of your last 30 days of Actions runs, read for the plan recommendation | The app is uninstalled or suspended, or you ask |
| Your GitHub account, email address and the accounts you connected | You ask us to delete your account |
| Which accounts and people have had a trial | After your account is deleted, so each gets one trial |
| Payment, refund and invoice records | As Japanese tax law requires |
The usage read keeps counts and durations by job, and drops each run's branch, commit and author without storing them. Skipbox never reads your code, logs, secrets or artifacts.
Delete your data
Email hello@skipbox.dev from the address Skipbox holds, and we delete your account within a week, except the records above that are kept after it. Cancel your plans first: deleting the account doesn't cancel them. See Cancel and uninstall.
Your code and job logs stay on GitHub, so there is nothing to export from Skipbox.
Updated November 9, 2026