Buoylog connects to GitHub through a GitHub App, not a classic OAuth integration. That distinction matters: a GitHub App is scoped per-installation to exactly the repositories you pick, and to exactly the permissions it declares — read-only access to pull requests and repository metadata. It cannot push commits, open PRs, change settings, or read anything outside that scope.
Many changelog tools instead rely on a classic OAuth flow that requests GitHub's broad repo scope to read private repositories — which technically grants write access to your entire codebase, even if the tool only ever reads PR titles and descriptions. That's a limitation of the OAuth model itself, not a choice those tools necessarily wanted to make.
Uninstalling the GitHub App from your GitHub account's Applications settings immediately revokes all access. Deleting your Buoylog account removes your projects, releases, subscribers, and integrations from our database, but does not uninstall the GitHub App on GitHub's side — do that separately if you'd like.