matrixreview.github.io/privacy.html at main · alexandersucala/matrixreview.github.io · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
<!DOCTYPE html>
<html lang="en">
<head>
  <meta charset="UTF-8">
  <title>MatrixReview — Privacy Policy</title>
  <meta name="viewport" content="width=device-width, initial-scale=1">
  <meta name="description" content="Privacy Policy for MatrixReview AI code review.">
  <link rel="icon" type="image/svg+xml" href="/favicon.svg">
  <link rel="preconnect" href="https://fonts.googleapis.com">
  <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
  <link href="https://fonts.googleapis.com/css2?family=Share+Tech+Mono&family=Outfit:wght@300;400;500;600;700&display=swap" rel="stylesheet">
  <style>
    *, *::before, *::after { margin: 0; padding: 0; box-sizing: border-box; }
    :root {
      --green-bright: #00ff41;
      --green-mid: #00cc33;
      --green-dim: #00991a;
      --border-green: rgba(0, 255, 65, 0.12);
      --bg-black: #000;
      --text-primary: #e0e0e0;
      --text-secondary: #999;
      --font-mono: 'Share Tech Mono', monospace;
      --font-body: 'Outfit', sans-serif;
    }
    html { scroll-behavior: smooth; }
    body {
      background: var(--bg-black);
      color: var(--text-primary);
      font-family: var(--font-body);
      line-height: 1.8;
    }
    .topnav {
      position: fixed; top: 0; left: 0; right: 0; z-index: 100;
      background: rgba(0,0,0,0.9); backdrop-filter: blur(12px);
      border-bottom: 1px solid var(--border-green); padding: 0 24px;
    }
    .topnav-inner {
      max-width: 1100px; margin: 0 auto; display: flex;
      align-items: center; justify-content: space-between; height: 64px;
    }
    .topnav-brand {
      font-family: var(--font-mono); font-size: 1.1rem; color: var(--green-bright);
      text-decoration: none; letter-spacing: 0.05em;
    }
    .topnav-links { display: flex; gap: 24px; }
    .topnav-links a {
      color: var(--text-secondary); text-decoration: none; font-size: 0.88rem;
      font-weight: 500; transition: color 0.2s;
    }
    .topnav-links a:hover { color: var(--green-bright); }

    main {
      max-width: 780px; margin: 0 auto; padding: 120px 24px 80px;
    }
    h1 {
      font-size: 2.2rem; font-weight: 800; color: #fff; margin-bottom: 8px;
    }
    .effective {
      font-family: var(--font-mono); font-size: 0.85rem; color: var(--green-mid);
      margin-bottom: 40px; display: block;
    }
    h2 {
      font-size: 1.2rem; font-weight: 700; color: #fff; margin-top: 40px; margin-bottom: 12px;
    }
    p { margin-bottom: 16px; }
    ul { margin: 0 0 16px 20px; }
    li { margin-bottom: 8px; }
    strong { color: #fff; }
    a { color: var(--green-bright); }

    footer {
      border-top: 1px solid var(--border-green); padding: 32px 24px; text-align: center;
    }
    .footer-links { display: flex; gap: 24px; justify-content: center; flex-wrap: wrap; }
    .footer-links a { color: var(--text-secondary); text-decoration: none; font-size: 0.85rem; }
    .footer-links a:hover { color: var(--green-bright); }
    .footer-copy {
      font-family: var(--font-mono); font-size: 0.8rem; color: rgba(0,255,65,0.3);
      margin-top: 12px;
    }
  </style>
</head>
<body>

  <nav class="topnav">
    <div class="topnav-inner">
      <a href="/" class="topnav-brand">MatrixReview</a>
      <div class="topnav-links">
        <a href="/">Home</a>
        <a href="/terms.html">Terms</a>
        <a href="/security.html">Security</a>
      </div>
    </div>
  </nav>

  <main>
    <h1>Privacy Policy</h1>
    <span class="effective">Effective: April 2026</span>

    <h2>What We Collect</h2>
    <p>When you install MatrixReview on a GitHub repository, we access:</p>
    <ul>
      <li><strong>Repository documentation files</strong> (.md, .rst, .txt) scanned during setup to build your review knowledge base.</li>
      <li><strong>Pull request diffs and metadata</strong> read when a PR is opened or updated, used solely to perform the code review.</li>
      <li><strong>GitHub installation identifiers</strong> used to associate your repository with your review configuration.</li>
    </ul>

    <h2>What We Store</h2>
    <ul>
      <li><strong>Documentation content</strong> ingested and stored in an encrypted database to power reviews. You can view, edit, and delete documents at any time from the dashboard.</li>
      <li><strong>Review results</strong> including findings, gate statuses, and traffic light outcomes stored for dashboard history and quality tracking.</li>
      <li><strong>Dependency graph metadata</strong> showing file relationships, import chains, and security tags. This is structural data (file paths, line counts), not code content.</li>
      <li><strong>Audit log entries</strong> recording data access and mutations for security monitoring.</li>
    </ul>

    <h2>What We Do Not Store</h2>
    <ul>
      <li>We do not permanently store your source code. Repository clones are created in temporary directories and deleted immediately after processing.</li>
      <li>We do not permanently store PR diffs. Diffs are retained for up to 30 days for fix generation, then automatically purged from both disk and database.</li>
      <li>We do not store GitHub tokens beyond their session lifetime. Installation tokens are short-lived (1 hour) and generated via JWT.</li>
    </ul>

    <h2>What We Do Not Do</h2>
    <ul>
      <li>We do not sell your data to third parties.</li>
      <li>We do not use your code to train AI models.</li>
      <li>We do not access files beyond documentation and PR diffs.</li>
    </ul>

    <h2>Third-Party Services (Subprocessors)</h2>
    <p>MatrixReview uses the following third-party services to operate. A complete subprocessor list is maintained on our <a href="/security.html">Security page</a>.</p>
    <ul>
      <li><strong>GitHub API</strong> to read repository contents and post review comments.</li>
      <li><strong>DeepSeek</strong> for AI-powered PR review analysis. PR diff excerpts are sent via HTTPS and not stored by the provider.</li>
      <li><strong>Anthropic Claude API</strong> for document classification and analysis during setup.</li>
      <li><strong>Railway</strong> for cloud hosting of the application backend (United States).</li>
    </ul>

    <h2>Data Retention</h2>
    <p>Documentation and review metadata are retained as long as the GitHub App is installed on your repository. PR diff data is automatically purged after 30 days. You may request full data deletion at any time by contacting us or using the data deletion endpoint. Uninstalling the app triggers deletion of all stored data associated with your repository.</p>

    <h2>Your Rights</h2>
    <p>Under GDPR and applicable privacy regulations, you have the right to:</p>
    <ul>
      <li><strong>Access and export</strong> all data we hold about your repository via the data export endpoint.</li>
      <li><strong>Delete</strong> all your data via the data deletion endpoint or by contacting us.</li>
      <li><strong>Portability</strong> of your data in a standard JSON format.</li>
      <li><strong>Object</strong> to processing or request restriction of processing by contacting us.</li>
    </ul>
    <p>A Data Processing Agreement (DPA) is available on request for customers requiring formal documentation of our processing relationship.</p>

    <h2>Security</h2>
    <p>All data is encrypted at rest (AES-256 via SQLCipher) and in transit (HTTPS/TLS). All data access is logged in an append-only audit trail. Infrastructure access is restricted to the founder. For full details, see our <a href="/security.html">Security page</a>.</p>

    <h2>Contact</h2>
    <p>For privacy questions, data deletion requests, or DPA inquiries: <a href="mailto:admin@matrixreview.io">admin@matrixreview.io</a></p>
  </main>

  <footer>
    <div class="footer-links">
      <a href="/">Home</a>
      <a href="/privacy.html">Privacy</a>
      <a href="/terms.html">Terms</a>
      <a href="/security.html">Security</a>
      <a href="mailto:admin@matrixreview.io">Contact</a>
    </div>
    <p class="footer-copy">© <script>document.write(new Date().getFullYear())</script> MatrixReview</p>
  </footer>

</body>
</html>