Connecting Your GitHub Account
AutoChangelog uses GitHub OAuth to authenticate users and a GitHub App to access your repository data. When you sign in for the first time, you'll authenticate with your GitHub account, then be prompted to install our GitHub App on your personal account or organization. This installation grants us the permissions we need to read your commits, diffs, and pull requests when generating changelogs.
Permissions We Request
Our GitHub App requests read-only access to your repositories. We can read repository metadata like names and descriptions. We can read commits and their messages. We can read pull request titles, descriptions, and merge status. And we can read file change summaries to understand the scope of changes. We never write to your repositories. We don't create commits, issues, comments, or webhooks in your repos. The access is strictly read-only.
What We Store
We store the minimum data needed to operate AutoChangelog. This includes your GitHub username and email for your account, repository names and IDs to show in your dashboard, and the SHA of your last documented commit so we know where to start fetching from next time. We do not store your source code, commit history, pull request content, or file contents. When generating a changelog, we fetch data directly from GitHub's API in real-time. Once the AI generates your entry, the raw GitHub data is discarded.
How Changelog Generation Works
When you trigger a changelog through the webhook or manually, AutoChangelog uses your GitHub App installation to authenticate with GitHub's API. We fetch the commits and pull requests since your last documented commit, send that data to our AI for processing, save the generated entry, and then discard the raw GitHub data. We never store your code on our servers.
Private Repositories
AutoChangelog works with both public and private repositories. We can only access repos where the GitHub App is installed and granted permission. For private repos, your changelog page can be password-protected so only authorized users can view it. Enable password protection from your repository settings in the dashboard.
Installing on Organizations
To use AutoChangelog with organization repositories, install the GitHub App on your organization. During installation, you can choose whether to grant access to all repositories or only specific ones. Organization admins can manage which repos are accessible from GitHub's installed apps settings. You can update repository access at any time without reinstalling.
Revoking Access
You can revoke AutoChangelog's access at any time from GitHub. Go to Settings → Applications → Installed GitHub Apps, find AutoChangelog, and click "Configure" then "Uninstall". This disconnects all your repositories immediately. To use AutoChangelog again after uninstalling, you'll need to reinstall the GitHub App.
Troubleshooting
If you don't see a repository in AutoChangelog, check that the GitHub App is installed for that repo. For organization repos, ensure the app has access to that specific repository. Try refreshing your repository list from the dashboard. Make sure the repo isn't archived, as we don't support archived repositories.
If you see permission errors when fetching updates, check that the GitHub App still has access to the repository. For organization repos, an admin may have revoked access. Try reinstalling the GitHub App if the issue persists.
If you see "Installation not found" errors, this usually means the GitHub App was uninstalled from GitHub. Reinstall it from your GitHub settings to restore access to AutoChangelog.