Privacy Policy

Last updated: 2026-04-22

DevReview ("we", operated by Kentaro Hanawa) takes your privacy seriously. This policy explains what data we collect and how we use it.

1. Information We Collect

Account Information

• GitHub username and email (via OAuth)
• Organization membership (to scope access)
• Billing information (processed by Stripe — we do not store card numbers)

Usage Data

• PR metadata (repository name, commit SHA, timestamps)
• Review outcomes (number of findings, severity)
• IP address and browser information for security

Source Code

We temporarily access source code in pull requests solely to generate reviews. Code is processed in-memory and not stored after review completion. Code is never used to train AI models.

2. How We Use Your Data

• Provide and improve the Service
• Process payments and manage subscriptions
• Send transactional emails (receipts, security alerts)
• Comply with legal obligations

3. Third-Party Services

We share data with the following providers strictly for service operation:

• Stripe — payment processing
• GitHub — repository access via OAuth
• Anthropic / Cloud providers — AI inference infrastructure
• Vercel — hosting

None of these parties use your data for their own purposes beyond providing services to us.

4. Data Retention

• Source code: not retained after review generation
• Review comments: retained until account deletion
• Billing records: retained for 7 years (legal requirement)
• Account data: deleted within 30 days of account closure

5. Your Rights (GDPR / CCPA / APPI)

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Export your data in a portable format
• Object to or restrict processing

Contact support@stylejpn.com to exercise these rights.

6. Security

All data is encrypted in transit (TLS 1.3) and at rest (AES-256). Access to production systems is restricted and logged. We conduct regular security audits.

7. International Transfers

Your data may be processed in Japan, the United States, and other regions where our infrastructure providers operate. We rely on Standard Contractual Clauses (SCCs) where applicable.

8. Children's Privacy

The Service is not intended for users under 16. We do not knowingly collect data from minors.

9. Cookies

We use essential cookies for authentication and session management. We do not use third-party advertising cookies.

10. Changes to This Policy

We may update this policy. Material changes will be notified via email at least 30 days before taking effect.

11. Contact

Data protection inquiries: support@stylejpn.com