Privacy policy

Who we are

Forseti is an AI pull-request reviewer made by UnknwnAI (“we”, “us”), a company registered in the United Kingdom under number [company number], with its registered office at [registered address]. Our ICO registration number is [ICO registration number].

This policy covers the Forseti website, the dashboard and the Forseti GitHub App. Questions go to [privacy contact email] or through our contact page.

Controller and processor

We are the controller for account data, workspace and billing data, security logs and anything you send us through the website. We decide why and how that data is used.

We are a processor for the content of the repositories and pull requests we review on your behalf. Your organisation (the workspace owner) is the controller of that content, and our data processing agreement governs it. If you are a developer whose pull request we reviewed for your employer, your employer is the first place to exercise your rights over that content; we will help them.

What we collect

• Account data: your name, email address, GitHub username and user ID, and how you sign in (GitHub, an email link, or Google once it is available).
• Workspace data: members and roles, invitations, settings, review policies, spending caps and the audit log of changes.
• GitHub metadata: installations, repository names, pull-request numbers and titles, author usernames, commit SHAs, and the reviews, comments and check runs we post.
• Pull-request content, processed transiently: diffs and the files around them are fetched from GitHub when a review runs and held in memory. We do not store your repository or diffs. Findings keep a file path, line numbers, a message and, unless you switch it off, a short redacted snippet.
• Billing data: your credit balance and ledger, plan, and invoices. Card details are handled by our payment provider and never reach us.
• Security and usage data: IP addresses and request details used for rate limiting, abuse prevention and diagnosing faults.
• Messages you send us: through the contact form, email or support.

We use one session cookie to keep you signed in, and your browser stores your light or dark theme choice. We do not use advertising or analytics cookies today; if that changes, this policy will say so first.

Why we use it, and our lawful bases

• To provide Forseti (reviews, the dashboard, billing, support): performance of our contract with you or your organisation.
• To keep Forseti secure (rate limits, audit logs, fraud and abuse prevention): our legitimate interest in protecting the service and its users.
• To improve Forseti using service metrics such as review counts, timings, costs and whether findings were accepted or dismissed. Never by training models on your code. Our legitimate interest.
• To meet legal duties such as keeping tax and accounting records: legal obligation.
• To send product news, only if you opt in: consent, which you can withdraw at any time.

Your code and AI models

To write a review we send the content it needs (the diff, related files, and the pull request’s title and description) to our model provider, Anthropic. Keys, tokens, passwords and credential files are redacted before anything is sent.

We do not train models on your code. Anthropic’s commercial API terms exclude training its models on data sent through the API. We are arranging zero data retention with Anthropic; until it is in place, Anthropic’s standard API data handling applies.

Who we share it with

Our sub-processors act on our instructions under written contracts. Services you connect yourself, such as Slack, Microsoft Teams, Jira or Linear, receive what you configure them to receive, under their own terms. We may also disclose data where the law requires it, or to a buyer of our business, who would be bound by this policy.

We do not sell personal data.

International transfers

Some providers process data outside the UK and the EEA, for example our model provider in the United States. Where that happens we rely on an adequacy decision or appropriate safeguards, such as the UK International Data Transfer Agreement or the EU Standard Contractual Clauses with the UK Addendum. [Transfer mechanism per provider to be confirmed.]

How long we keep it

• Diffs and file contents: not stored. Held in memory while a review runs.
• The few lines of code a finding quotes (secrets redacted) and its suggested fix: kept with the finding unless an owner switches snippet storage off.
• Findings, Ask Forseti conversations and release notes: deleted after your workspace’s retention period, which owners set between 7 and 3,650 days (90 by default).
• Account and workspace data: while your workspace is active, then deleted within [period] of closure.
• Billing records: as long as tax law requires, currently six years in the UK.
• Security logs and the audit log: [period to be confirmed].

Your rights

Under UK GDPR and, where it applies, EU GDPR, you can ask to access, correct, delete, restrict or export your personal data, and object to processing based on legitimate interests. Where we rely on consent, you can withdraw it at any time.

Contact [privacy contact email]. We reply within one month. You can also complain to the Information Commissioner’s Office (ico.org.uk) or, in the EU, to your local data protection authority. Our EU representative is [EU representative, if required].

Security

Read-only access to your code, encrypted sign-in tokens, workspace isolation on every query, signed webhooks and an audit log. The details, and what we have not done yet, are on our security page.

Children

Forseti is a tool for software teams and is not meant for anyone under 16.

Changes to this policy

We will post any change here with a new date, and tell workspace owners by email before a material change takes effect.