diffox

Legal

Privacy

A short account of how we handle your data.

Data we process

Your GitHub account and installation details, the pull request content we review, and your usage and payment records.

Why we process it

To provide the service, manage payments and meet our legal obligations. The basis is our contract with you and those legal obligations.

Who we share it with

With the providers we use to run the service:

  • Hosting: Hetzner. Your data is stored on servers in Germany.
  • AI: Anthropic.
  • Payments: Paddle.
  • Email: Google Workspace.

The AI and payment providers may also process data outside Germany, for example in the United States.

How long we keep it

We do not keep a copy of the code we review; the copy of the repository is deleted when the review ends. We delete the text of findings we did not publish, and the content of the event records GitHub sends us, after 30 days. We keep other data for as long as we need it to provide the service, and payment records for as long as the law requires.

Your rights

You have the right to access your data, ask for it to be corrected or deleted, object to its processing, and complain to a data protection authority. To make a request, write to hello@diffox.ai.

Cookies

We only use the cookies the site needs to work.

Contact

diffox · İstanbul, Türkiye · hello@diffox.ai