Privacy Policy

Last updated: January 24, 2025

Reviewww, operated by Antech Software Pty Ltd, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our AI-powered code review service through GitHub.

1. Information We Collect

1.1 Information from GitHub

When you install Reviewww as a GitHub App, we collect:

• Repository Data: Source code, pull requests, commits, file changes, and repository metadata
• User Information: GitHub username, email address (if public), and organization membership
• Installation Data: Repository names, installation settings, and permissions granted
• Webhook Events: Pull request events, push events, and installation events

1.2 Code and Content

• Source code from repositories where Reviewww is installed
• Pull request descriptions, comments, and metadata
• Commit messages and author information
• Code diff information

1.3 Usage Information

• Review requests and results
• Feature usage and interaction patterns
• Error logs and diagnostic data
• Performance metrics

1.4 Payment Information

If you purchase a paid plan through GitHub Marketplace, payment information is processed by GitHub. We only receive:

• Plan type and billing cycle
• Subscription status
• Purchase and cancellation events

We do not store credit card numbers or payment details.

2. How We Use Your Information

2.1 Service Provision

• Analyze code and provide AI-powered code reviews
• Generate code embeddings for semantic search
• Index repository content for context-aware reviews
• Post review comments on pull requests
• Track review history and patterns

2.2 AI Processing

3. Data Storage and Security

3.1 Storage Location

• Data is stored in AWS (Amazon Web Services) in the ap-southeast-2 (Sydney) region
• Code embeddings are stored in Neon (PostgreSQL database)
• Backup data may be stored in other AWS regions for redundancy

3.2 Security Measures

• Encryption in transit (TLS 1.2+)
• Encryption at rest for databases and storage
• Access controls and authentication
• Regular security audits and monitoring
• Secure credential management (AWS Secrets Manager)

3.3 Data Retention

• Active Installations: Data retained while app is installed
• After Uninstall: Data deleted within 30 days upon request
• Embeddings: Deleted within 30 days of uninstallation
• Logs: Retained for 14 days for debugging and compliance

4. Data Sharing

We Share Data With:

• Anthropic: AI code analysis (privacy policy)
• Voyage AI: Code embeddings (privacy policy)
• AWS: Infrastructure and hosting (privacy policy)
• Neon: Database hosting (privacy policy)

We Do NOT Share:

• Your code with other Reviewww users
• Your data for advertising purposes
• Your data with data brokers or third parties for marketing
• Repository data with unauthorized parties

5. Your Rights

You have the right to:

• Access: Request a copy of your data
• Correction: Update inaccurate information
• Deletion: Request deletion of your data
• Export: Request an export of your review history

To exercise these rights, contact us at privacy@reviewww.ai

6. International Data Transfers

Your data may be transferred to and processed in:

• Australia (primary data storage)
• United States (AI processing)

We ensure appropriate safeguards are in place for international transfers.

7. Children's Privacy

Reviewww is not intended for users under 13 years of age (or 16 in the EU). We do not knowingly collect personal information from children.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date.

9. Contact Us

If you have questions about this Privacy Policy, please contact us:

• Email: privacy@reviewww.ai
• Support: support@reviewww.ai

10. GDPR Compliance (EU Users)

If you are in the European Economic Area, you have additional rights under GDPR:

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restriction of processing
• Right to data portability
• Right to object to processing

To exercise these rights or lodge a complaint with a supervisory authority, contact privacy@reviewww.ai

11. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights:

• Right to Know: What personal information we collect and how we use it
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: We do not sell personal information
• Non-Discrimination: We will not discriminate against you for exercising your rights