Privacy
Draft for the beta. Last updated 12 October 2026.
Data we process
- From GitHub when the App is installed: the installation, the repositories it covers, and pull request metadata (number, title, branches, commits).
- From your repository during a scan: the architecture model described on the security page. File contents are processed in memory and not stored.
- When you sign in to view a private report: your GitHub user ID and login, and a GitHub token kept server-side for up to eight hours.
- Operational logs (request IDs, repository names, timings, errors), kept for 30 days.
Why
To produce the architecture diff you asked for by installing the App, to show it only to people allowed to see it, to enforce fair-use limits and to keep the service running.
Where and how long
AWS in the EU (eu-north-1, Stockholm). Reports: 90 days. Sessions: 8 hours. Logs: 30 days. Uninstalling the App stops all processing; reports expire on their schedule, or write to us to delete them now.
Sharing
We do not sell data and do not share it, except with our infrastructure provider (AWS) as a processor and GitHub as the platform the service runs on.