Last updated: July 2026

1. Information We Store

We keep only the information needed to operate your account, provide reviews, and protect the service:

Account profile: Email address, username, and sign-in records needed to run your account
Review records: Review status, settings, and the findings or summaries returned to you
Payment records: Processed securely by Stripe; we do not store your card details
Operational data: Product usage, security events, and diagnostic logs needed for reliability and abuse prevention

2. How We Use Your Information

We use your information to:

Provide and improve the code review Service
Process payments and manage subscriptions
Send important account and service notifications
Ensure security and prevent fraud

3. Code Privacy

For GitHub App reviews, repository checkout and context extraction run in GitHub Actions. For CLI reviews, the `rmcode` command runs in your local repository. In both cases, RMCode uses the minimum review inputs needed for the requested analysis, such as a pull request diff, repository structure, and condensed source context, and sends those inputs to our AI/model service providers to generate findings. These code and repository inputs are transient for the review request and are not stored by RMCode after analysis completes.

We store the review results shown to you, such as findings, summaries, status, and billing or usage records needed to operate the service. We do not sell your code or use code content to train AI models.

4. Data Sharing

We do not sell your personal information. We share data only with service providers essential to operating the platform (e.g., Stripe for payments and Google Cloud for infrastructure). AI/model providers receive transient review inputs only to generate the review you requested.

5. Data Security

We implement industry-standard security measures including encrypted data transmission (TLS), encrypted storage for sensitive credentials, and regular security audits.

6. Your Rights

You have the right to:

Access your personal data
Request correction of inaccurate data
Request deletion of your account and data
Export your review history

7. Data Retention

We retain account, billing, configuration, review result, and usage records while your account is active. Code and repository inputs used for analysis are transient and are not retained after the review request completes. When you delete your account, we cancel active Stripe subscriptions, delete account-linked API keys, installation and configuration records, saved review results, findings, SSO/OAuth sessions, webhooks, and GitHub App review records tied to your account, and unlink or anonymize related usage and marketing records. Some limited records may be retained when required for security, fraud prevention, tax, accounting, or legal obligations.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or in-app notification.

9. Contact

For privacy-related questions, please contact us at privacy@review-my-code.com.