How GitReviewed handles your code
GitReviewed does not store your source code or your diffs. Pull request data is processed in memory only and discarded once the review comments have been generated. Your code is never used to train machine learning models.
This page summarizes how the data flows. The privacy policy is the authoritative version.
What gets sent to the model
The diff of the pull request or merge request you submit. GitReviewed reads the changed files for that request to draft comments on them. It does not clone the repository or read files outside the diff.
The diff is passed to OpenRouter, which routes the request to the language model that drafts the comments. OpenRouter passes each request to a third-party model provider, and the model changes as better ones become available.
What is kept after a review
Not the code. What persists is your account record, your billing record, and a count of how many reviews you have run, which is what enforces the monthly limit on the free plan.
Those usage metrics are keyed to your account identifier, not your name or email. That makes them pseudonymous rather than anonymous, because they can still be linked back to your account.
Which providers are involved
- Clerk, for authentication and account management
- Stripe, for payments and subscriptions, which is also why we never store your card details
- OpenRouter, for routing diffs to the language model
- Upstash, for storing your monthly review count in Redis
- PostHog, for product analytics
- Vercel, for hosting and delivery
How access tokens are stored
If you supply a GitHub personal access token so that comments can be posted without organization admin approval, it is stored with AES-256 encryption under strict access controls and is reachable only by our core systems. You can revoke it at any time from your GitHub settings.
Supplying a token is optional. Without one, posting comments to an organization repository requires a repository admin to approve the app, or that you own the repository.
Who the data controller is
MIRIO Technologies Limited, a company registered in Hong Kong under Business Registration No. 76928444. We operate from Hong Kong, and the providers listed above may process data in the United States and the European Union. Where a transfer involves personal data protected by EU or UK law, we rely on the transfer mechanisms those providers make available, such as Standard Contractual Clauses.
To ask a privacy question or request deletion of your account, email support@gitreviewed.com.