Privacy Policy

1. Introduction

IgniteDX ("we", "our", or "us") provides AI-assisted code review for GitHub pull requests. This Privacy Policy explains what data we process when you visit our website, install the GitHub App, and use the IgniteDX service.

2. Data We Collect

Depending on how you use IgniteDX, we may process:

• Account information: GitHub username, email address, and profile metadata made available during authentication or app installation.
• Usage data: Basic product and website usage information, such as feature interactions and service activity.
• Code review data: Pull request diffs, related metadata (title, author, branch, status), repository context files, and any custom review instructions you configure in your project specs.
• Support or contact information: Information you send us when you contact us for support or updates.

3. Code Review Data

IgniteDX processes pull request content to generate review feedback. Here is how that works:

• When a review runs, we fetch the PR diff, PR description, and any context files you have configured in your project specs. Generated files, lock files, and vendor directories are automatically excluded.
• We do not clone or store your full repositories. Only the specific inputs needed for the review are processed.
• Review output — AI-generated comments, issue classifications, and review metadata — is stored in our database for as long as the project exists in IgniteDX.
• We do not execute your code. It is only analyzed to generate review feedback.

4. How We Use Your Data

We use data we process to:

• Provide and operate the IgniteDX service.
• Generate pull request review feedback.
• Support product functionality and troubleshooting.
• Improve reliability, security, and usability.
• Communicate important service or account updates.

5. Third-Party Processing

IgniteDX uses third-party infrastructure and model providers to process review-related data needed to generate feedback. Specifically, PR diffs and context are sent to Google Gemini (via OpenRouter) for AI analysis.

We do not use customer repository content to train our own models or any third-party models. Only the diff and context needed for each individual review are included in the request — we never send your full repository.

6. Retention

Review comments, issue classifications, and associated metadata are retained for as long as the project exists in IgniteDX. If you remove a repository from your project, associated pull request and review data is deleted.

Account information is retained for as long as your account is active. We retain data only as needed to operate the service, support users, maintain security, and meet legal obligations.

7. Security

We use reasonable technical and organizational safeguards to protect the data we process, including webhook signature verification, server-side-only credential handling, and row-level access controls. However, no system can guarantee absolute security.

8. Your Choices and Questions

If you have questions about privacy or data handling, contact us at ignitedx.com/support.