Privacy Policy
Last updated: March 8, 2026
1. What We Collect
When you sign up for CodeVitals, we collect:
- Account information — your name, email address, and authentication credentials (managed by Clerk).
- GitHub data — repository metadata, commit history, pull request activity, and contributor information from repositories you connect. We access this through the GitHub API using your authorised GitHub App installation.
- Usage data — page views, feature usage, and interaction patterns (collected via PostHog).
- Payment information — processed by Stripe. We do not store card details.
2. How We Use Your Data
We use the data we collect to:
- Generate engineering health scores, insights, and coaching recommendations for your team.
- Provide AI-powered analysis and chat responses about your team's performance.
- Send weekly digest emails summarising your team's activity.
- Improve our product and fix issues (via error reporting and analytics).
We do not sell your data to third parties. We do not read your source code — we only analyse commit metadata, PR activity, and contributor patterns.
3. Third-Party Services
We use the following services to operate CodeVitals:
- Clerk — authentication and user management.
- GitHub — repository data access via GitHub App.
- Anthropic (Claude) — AI analysis and chat responses.
- Stripe — payment processing and subscription management.
- PostHog — product analytics.
- Sentry — error monitoring.
- Loops — transactional and digest emails.
4. Data Retention
We retain your data for as long as your account is active. If you delete your account, we will delete your data within 30 days, except where we are required to retain it for legal or compliance purposes.
5. Your Rights
You can:
- Request a copy of your data.
- Request deletion of your account and data.
- Disconnect repositories at any time from Settings.
- Revoke the GitHub App installation from your GitHub settings.
To exercise these rights, contact us at support@codevitals.app.
6. Cookies
We use essential cookies for authentication and session management. PostHog may set analytics cookies to understand product usage. You can disable non-essential cookies in your browser settings.
7. Changes
We may update this policy from time to time. We'll notify you of material changes via email or an in-app notice.