Privacy Policy
Last updated: [date]
This policy explains what personal data [Company legal name] ("we") collects when you use PRNeuron, why, and the choices you have. For Customer Content processed on an organisation's behalf, the organisation decides what is shared with us, and we act on its instructions.
What we collect
| Data | Why |
|---|---|
| Name, email address, password (stored only as an Argon2 hash), or your GitHub identity if you sign in with GitHub | To create and secure your account |
| Organisation name, members and their roles | To run your organisation's workspace |
| IP address and browser user agent at sign-in | To keep sessions secure and detect abuse |
| GitHub installation, repository names and pull request metadata (titles, authors, branches) | To decide what to review and show your history |
| Pull request diffs and surrounding code | To produce a review — processed when the review runs, not stored |
| Reviews, comments, verdicts and saved explanations | To show them in the dashboard and avoid regenerating them |
| Jira ticket content, when you connect Jira, and coding-standard documents you index | To check changes against tickets and your standards |
| Integration credentials (e.g. a Jira API token), encrypted with AWS KMS | To call the integration on your behalf |
| Usage records: tokens, model and cost per review | Usage dashboard, quotas and billing |
| Billing details and GSTIN, if you buy a paid plan | To charge you and issue tax invoices — card details are handled by our payment provider, not stored by us |
Pull requests and tickets can contain other people's names and email addresses (for example, authors and assignees). We process these only as part of the Customer Content above.
Cookies
The PRNeuron app uses one strictly necessary, HTTP-only cookie to keep you signed in. We do not use advertising or cross-site tracking cookies. This website stores your currency preference in your browser and sets no cookies.
How we use it
Only to provide, secure, support and bill for the Service, to communicate with you about it, and to meet legal obligations. We do not sell personal data, and we do not use Customer Content to train AI models.
Who we share it with
We share data only with service providers that help run PRNeuron, under contracts that restrict their use of it:
| Provider | Purpose | Location |
|---|---|---|
| Amazon Web Services | Hosting, database, encryption keys | United States |
| Anthropic | AI model that writes reviews and explanations | United States |
| Voyage AI | Text embeddings for coding standards and tickets | United States |
| [Email provider] | Account and invitation emails | [location] |
| [Payment provider] | Payments and invoices | [location] |
GitHub and Atlassian (Jira) receive requests from us only when you connect them; their own privacy policies apply. We may disclose data if required by law.
International transfers
PRNeuron is hosted in the United States, so your data is processed there. Where the law requires it, we rely on appropriate safeguards for these transfers.
How long we keep it
- Account and organisation data: for as long as the account exists.
- Reviews, saved explanations and usage records: [for as long as the organisation exists].
- Sign-in records: [90 days].
- Backups: up to [90 days] after deletion.
- Billing records: as long as tax law requires (in India, generally [8 years]).
When an organisation owner deletes the organisation, its data is permanently removed from our live systems straight away, and from backups as they expire.
Security
See our Security page for how data is isolated, encrypted and protected.
Your rights
Depending on where you live — including under India's Digital Personal Data Protection Act, 2023 and the EU/UK GDPR — you may have the right to access, correct, delete or export your personal data, to withdraw consent, and to nominate someone to exercise these rights for you. Organisation owners can export or delete all organisation data. For anything else, email [privacy@your-domain]; we respond within [30 days]. You may also complain to your data protection authority.
Grievance officer
[Name], [Company legal name], [Registered address] — [grievance@your-domain].
Children
PRNeuron is a business tool and is not intended for anyone under 18.
Changes
We will post updates here and email account owners about material changes before they take effect.