Privacy Policy

What we store

• Your account. Your GitHub user id, username, display name, avatar URL and the email GitHub gives us, so we can sign you in and address you by name.
• Your workspace setup. Which GitHub installation and repositories you connected, and their names.
• Your tasks. The title, description and acceptance criteria you write, the agent and model you picked, the status, the resulting pull request number and URL, an activity timeline, the plain-English summary and risk flags we generate, and the estimated cost.
• Your context packs. The architecture notes, conventions and rules you choose to write down.
• Your credentials. The provider keys and tokens you connect, encrypted at rest (AES-256-GCM). They are decrypted only in memory, only to run a task you asked for, and are never shown back to you in full or logged.
• Billing state. Your plan, subscription status and renewal date, plus an identifier from our payment provider. We never see or store your card details.
• Messages you send us. If you use the contact form, we store your name, email address and message so we can reply.

What we never store

Your codebase. Repositories are cloned into a throwaway sandbox for the length of a task and torn down afterwards. We keep the metadata about a task, not your source. We also do not store your GitHub password, your card number, or any advertising or cross-site tracking profile.

Cookies

One cookie: a session cookie that keeps you signed in. It is httpOnly, same-site and holds an opaque identifier, not your details. There are no analytics, advertising or third-party cookies. Your light/dark preference is kept in your browser's local storage and never leaves your device.

Who else sees your data

Only the services required to make the product work, and only what each one needs:

• GitHub — to sign you in, read the repositories you selected and open pull requests.
• The agent providers you connect (such as Anthropic, OpenAI, GitHub Copilot, Moonshot or Z.ai) — they receive your task text, your context pack and your repository contents in order to do the work, under your own account and their terms.
• Our payment provider — to take payment and manage subscriptions.
• Our hosting provider — to run the application and its database.

We do not sell your data, and we do not share it for advertising.

How long we keep it

Account, task and context data is kept while your account is open. Delete your account and we delete it, along with your stored credentials. Contact-form messages are kept while we need them to answer you and for a reasonable period afterwards. Some records may be retained where the law requires it, for example billing records.

Your choices

• Revoke our GitHub App, or narrow which repositories it can see, from your GitHub settings at any time.
• Remove a stored provider credential from Settings at any time.
• Ask us for a copy of your data, a correction, or deletion. Depending on where you live you may also have the right to object to processing or to complain to a data protection authority.

Security

Credentials are encrypted at rest, sessions are opaque and stored hashed, traffic is served over HTTPS, and the app sets a strict content security policy. No system is perfect: if you find a security problem, please tell us before telling anyone else.

Contact

For anything in this policy, including data requests, use the contact form or write to hello@agentduck.dev.