Privacy policy

RepoScribe ("we", "us") is operated by Soumyadip Sarkar, an individual based in India. This policy covers the RepoScribe website and app (the "Service") and explains what we collect, why, and the choices you have.

Your account

Your name, email address and profile picture, received from our sign-in provider when you create an account.

What you create

Projects, the repositories you add to them, questions and saved answers, code scans, team chat messages, notifications, and meeting recordings you upload with their transcripts and summaries.

Repository content

For public repositories we store the files we index and a short summary of each, so answers can cite them. For private repositories we store only the summaries and search data, never the code itself; code is read fresh with your permission each time.

Payments

A record of each credit purchase. Card and bank details are entered with Razorpay and never reach us.

• GitHub access tokens. Each token is used for one request, held in memory and discarded.
• Code from private repositories inside saved answers, reports or chat.
• Card or bank details.

Only to provide and secure the Service: answering your questions, running scans and pull requests you ask for, processing payments, preventing abuse, and replying to support requests. We do not sell personal information or use it for advertising.

We share information only with the providers that run RepoScribe for us, and only what each one needs:

• Clerk for sign-in and accounts.
• Neon for the database.
• Vercel for hosting and cookieless usage statistics.
• Sentry for error reports. Personal details, cookies and secrets are removed first, and IP addresses are not stored.
• Razorpay for payments.
• Our AI model provider to answer questions and summarise code and meetings. Secrets are masked before anything is sent.

Private project content is never shown to other users. We may disclose information if Indian law requires it.

We use only strictly necessary cookies: those that keep you signed in, and one that remembers whether the sidebar is open. We use no advertising or tracking cookies, and our usage statistics set no cookies, so we do not ask for cookie consent.

All traffic is encrypted with HTTPS. Access to every project is checked on each request, secrets are masked before any AI call, and code from repositories is never run. No system is perfectly secure; if you find a problem, please tell us at soumyadip.0202@gmail.com.

We keep your information while your account is open. Questions in private projects are deleted after seven days. Projects you move to the Bin are erased after 30 days.

You can delete your account at any time from your profile (your picture, then Manage account, then Delete account). This permanently removes your projects, questions, chat messages and recordings. Payment records are kept as long as Indian tax law requires.

You can ask to see, correct, export or delete your personal information, and you can withdraw from the Service at any time. Write to soumyadip.0202@gmail.com and we will respond within 30 days.

If we change this policy we will update the effective date above, and tell you in the app for significant changes. Questions or complaints can be sent to soumyadip.0202@gmail.com.