Privacy policy

Diffbox (“Diffbox”, “we”) is a code review tool for GitHub pull requests. This policy explains what we collect when you use diffbox.app, why, who we share it with, and the choices you have. Questions go to privacy@diffbox.app.

What we collect

Your account

You sign in with GitHub. We receive your name, email address, profile picture and GitHub username. Your account, sessions and GitHub connection are managed by our authentication provider, Hexclave, which stores the GitHub access token Diffbox uses to read pull requests and post reviews on your behalf.

Your repositories and pull requests

Diffbox only works with repositories you choose, plus public pull requests you open by link. It reads pull requests, diffs, comments and checks from GitHub when it needs them. We don't keep copies of your code. We do store what Diffbox creates or you write while reviewing:

• change write-ups (titles, summaries, risk notes), which can mention file names and identifiers from the diff;
• your draft comments, review summaries, approvals and flags with their notes;
• which files you've viewed and where you left off;
• the list of repositories you've enabled.

Reviews you submit are posted to GitHub and are then governed by GitHub's terms and your repository's visibility.

How you use reviews

To improve Diffbox, we record how you use change reviews: approvals and flags with their notes, which diffs you open, how long reviews take, and your answers to “Is this write-up accurate?”. This never includes code. You can turn it off in Settings → Privacy, which also deletes what was recorded.

Billing

Plans are bought by teams. Payments are processed by Stripe through Hexclave; we see the plan, seats, invoices and the brand and last four digits of the card, never the full card number.

Usage analytics

We use Capless for page analytics and session replays, to see where Diffbox is confusing or broken. Replays hide the text of code, file names, repository names, comments and form inputs inside the app; page addresses are recorded.

On your device

Sign-in uses cookies set by Hexclave. Diffbox stores a few preferences in your browser, such as theme, sound and diff layout. We don't use advertising cookies or sell your data.

AI processing

To write up a pull request, Diffbox sends its title, description and changed lines to Anthropic's Claude API. Under Anthropic's commercial terms, that content isn't used to train their models. Write-ups are generated once per version of a pull request and shared with everyone who reviews it in Diffbox.

Who we share data with

Only these providers, each limited to what they need to run Diffbox:

Some of these providers process data outside your country, including in the United States, under the safeguards they offer, such as Standard Contractual Clauses. We may also disclose data when the law requires it.

How long we keep it

We keep your data while your account is active. When you delete your account or disconnect GitHub, we delete your repository selection, review progress and other data tied to you; write-ups shared with other reviewers of the same pull request may remain. Database backups are kept for 14 days.

Your choices and rights

• See and change your account details in Settings.
• Stop sharing review data in Settings → Privacy.
• Disconnect GitHub in Settings → GitHub, and revoke access on GitHub at any time.
• Delete your account in Settings, or ask us to.
• Depending on where you live, you can ask for a copy of your data, its correction or deletion, or object to how we use it. Email privacy@diffbox.app; we reply within 30 days. You can also complain to your data protection authority.

Security

Traffic is encrypted with HTTPS. Access to repositories is checked on every request against the repositories you enabled. GitHub tokens are held by Hexclave, not in Diffbox's database.

Children

Diffbox isn't meant for anyone under 16, and we don't knowingly collect their data.

Changes

If we change this policy, we'll update this page and its date, and tell you in the app or by email when the change is significant.