Privacy Policy

We receive your GitHub profile details when you sign in, including your name, email address, avatar, and GitHub account identifier. If you sign in with an emailed link instead, we receive only your email address. When you connect the GitHub App, we store installation and selected repository identifiers, not your GitHub password.

We store the product feedback and form submissions sent to your endpoints. Depending on your integration, this may include reporter contact details, message text, page URL, browser, platform, app version, IP address, and user agent.

Our billing provider supplies subscription, payment status, and customer identifiers. We do not store full card numbers.

We use this information to operate and secure the service, enforce plan limits, relay reports to GitHub, send transactional messages, provide support, prevent abuse, and improve reliability. We do not sell personal information or use customer feedback to advertise to reporters.

form-relay uses Vercel for application hosting and website analytics, Supabase for managed Postgres, GitHub for authentication and issue relay, Lemon Squeezy for billing, Resend for transactional email, and OpenRouter for AI triage on the Indie and Pro plans. These providers process only the information needed for their role and operate under their own privacy terms.

On the Indie and Pro plans, AI triage sends a report's text fields and page details (page URL, app version, browser, and operating system) to OpenRouter, together with the same fields from up to 50 recent reports in the same project so duplicates can be grouped. Each field is shortened, and email addresses and access tokens in it are replaced before it leaves form-relay.

OpenRouter passes the request to the AI model provider that answers it. That provider handles the text under its own terms, and some providers of free models may keep prompts or use them to improve their models.

We do not send reporter contact details, billing data, API key secrets, or GitHub credentials. The Free plan sorts reports with keyword rules and sends nothing to an AI model.

We use Vercel Web Analytics to count page views and a few conversion steps, such as starting sign-in or checkout, in aggregate. It sets no cookies. Each event records the page, referrer, approximate location, browser, operating system, and device type, and Vercel counts visitors with a request hash it discards after 24 hours. We never join analytics data to your email address or account.

We retain workspace data while your account is active and for a limited period afterward when needed for recovery, security, billing, or legal obligations. You may request workspace deletion or a data export by emailing support@devxgroup.io. GitHub issues and comments created in your repositories remain under your GitHub account.

We use access controls, encrypted connections, hashed API keys, and scoped GitHub App permissions. No system can guarantee absolute security. Contact support@devxgroup.io if you believe your account or data has been compromised.

You may request access, correction, export, or deletion of your personal information. Depending on where you live, additional rights may apply. Send privacy requests to support@devxgroup.io. DevX Group LLC may update this policy as the service changes and will post the revised effective date here.