Privacy policy

Information we collect

GitApprove collects account information from GitHub, including your name, email address, profile, organization membership, and repository permissions.

When you connect a repository, we process source code, diffs, pull requests, review comments, and related metadata. We also collect uploads, prompts, AI responses, service activity, device information, and diagnostic logs.

Our payment provider processes payment details. GitApprove keeps subscription records and payment references, but does not store full card numbers.

How we use your information

We use information to provide and improve GitApprove, manage accounts and billing, protect the service, resolve problems, and communicate with you.

We use proprietary or confidential information, including source code, only to provide and improve the service. We do not use this information to train AI or machine learning models. We do not authorize our service providers to use this information for model training.

We can store source code and related content for these purposes. GitApprove is not a zero-retention service.

Service providers and analytics

We share information with providers that operate GitApprove, including hosting, storage, AI, analytics, email, and payment providers. They receive information necessary for their services.

When enabled, PostHog analytics and session replay can capture source code, comments, prompts, and other content visible in GitApprove. We use this information to understand usage, investigate problems, and improve the service.

If your organization connects its own AI provider, that provider also receives your requests. Your organization controls that connection and its provider agreement.

We can disclose information when law requires it, to protect rights and security, or as part of a business transfer. We do not sell your source code.

Access, sharing, and security

Your organization administrators control membership and repository access. Content that you submit to GitHub is also subject to GitHub permissions and policies.

Attachment links contain access tokens. Links displayed in GitApprove expire. Links in GitHub comments do not expire automatically. Anyone with a valid link can access the attachment while GitApprove retains the file and permits access.

We use access controls, encrypted connections, and other safeguards to protect information. No service can guarantee absolute security.

Retention and your choices

We retain information while necessary to provide the service, meet legal and billing obligations, protect security, and resolve disputes.

We remove unreferenced uploads after 24 hours. Attachment cleanup begins 30 days after a subscription ends. Backup copies can remain until their retention period ends.

You can disconnect integrations in GitHub. Organization administrators can cancel a subscription from billing settings. Cancellation takes effect at the end of the paid period.

For access, correction, deletion, or privacy requests, email privacy@gitapprove.com.

Policy updates

We publish changes on this page and update the effective date. We will notify account administrators of material changes through the service or email.