01What this policy covers
This policy explains what we collect when you use our website and our AI code review service, including AI PR Reviewer, Test Writer, Bug Radar, Code Health, Repo Insights and Team Rules, and how that information is used, stored and protected.
02Source code
Source code is the most sensitive thing you share with us, so it gets the strictest rules:
- Your code is never used to train AI models, for your account or for any other customer.
- Code is processed only to produce reviews, drafted tests and code metrics you asked for.
- Code is not stored longer than needed to complete that processing. Derived results such as review comments, metrics and findings are kept so you can see them in your dashboard.
- Access is limited to the repositories you select when installing the app on your git platform. You can remove access at any time from that platform.
- On self-hosted deployments, code is processed inside your own network or private cloud and does not reach our infrastructure.
03Account and contact data
When you sign up or contact us we collect the details you enter, such as your name, work email, company, role, team size, git platform and languages. We use them to create your account, send your login details, answer your questions and send service notices.
From your git platform we receive the usernames, avatars and pull request events needed to post reviews and calculate Repo Insights.
04Team metrics
Repo Insights is built from pull request events such as opened, reviewed, approved, merged and reverted. It reports at team and repository level and is not designed for ranking or judging individual developers. We do not collect IDE activity, keystrokes or screen data.
05Website and product usage
We collect basic technical data such as IP address, browser type and pages visited to keep the service secure and working. The website uses only the cookies needed to run forms and sessions. We do not sell personal data and do not use it for third-party advertising.
06Who we share data with
We share data only with service providers that help us run the service, such as cloud hosting, email delivery and AI model providers, under contracts that limit use to providing the service. AI model providers we use are bound not to train on your code or retain it beyond processing.
We may disclose information if required by law or to protect the security of the service and its users.
07Security
Data is encrypted in transit and at rest. Access to production systems is restricted, logged and reviewed. Enterprise customers can use single sign-on and audit logs to control and track access within their own organization.
08Retention and deletion
Account data is kept while your account is active. If you close your account, we delete your account data, review history and metrics within 30 days, except where we must keep billing records by law. You can ask for deletion earlier through the contact page.
09Your rights
You can ask to access, correct, export or delete your personal data, or object to how it is used. Send requests through the contact page and we will respond within 30 days.
10Changes to this policy
If we make material changes, we will notify account owners by email before they take effect. Continued use of the service after that means you accept the updated policy.