Privacy Policy - PullPro

1. Introduction

At PullPro, we take your privacy seriously. This Privacy Policy explains how we collect, use, and protect your information when you use our service that integrates GitHub pull requests with Slack.

2. Information We Collect

PullPro operates on a privacy-by-design principle, collecting only the minimum data necessary to provide our service:

Data We Collect:

User Identifiers: GitHub user IDs and Slack user IDs (not personal information like names or emails)
Repository Metadata: Repository names, IDs, and basic settings for repositories you connect
Pull Request Metadata: Pull request IDs, titles, status, and basic metadata (no source code)
Team Information: Slack workspace IDs and channel IDs where notifications are sent
Configuration Data: Your preferences for notifications and integration settings
Usage Analytics: Basic usage patterns and feature usage via Mixpanel (anonymized where possible)
Error Information: Error logs and diagnostic data via Sentry to help us fix issues
Application Logs: General application logs for service operation and troubleshooting

Data We Do NOT Collect:

Your source code or file contents
Personal information beyond what's necessary for service functionality
Private messages or sensitive communication content
Financial or payment information (service is currently free)

3. How We Use Your Information

We use the collected information solely to:

Provide and operate the PullPro service
Send pull request notifications from GitHub to your Slack channels
Maintain and improve our service functionality
Provide customer support when needed
Ensure security and prevent abuse of our service
Analyze usage patterns to improve user experience (in aggregate)
Power optional AI features—personalized pull request digests and prioritized review reminders—when a workspace chooses to enable them (see Section 4)

4. AI-Powered Features (Optional)

PullPro offers optional AI-powered features—personalized pull request digests and prioritized review reminders—that are turned off by default. A member of your Slack workspace must explicitly enable them and supply an API key for an OpenAI-compatible large language model (LLM) provider (for example, OpenAI).

When these features are enabled:

PullPro sends limited pull request data—titles, descriptions, changed file paths, and short per-developer work profiles derived from recent pull request activity—to the LLM endpoint configured for your workspace, so it can rank and summarize the pull requests most relevant to each user. We never send your source code or file contents.
That data is processed by the third-party LLM provider your workspace chose, under that provider's own terms and privacy policy. PullPro does not control how that provider handles it, so review their policy (for example, the OpenAI Privacy Policy) before enabling these features.
The API key is stored write-only—it can never be viewed again once saved—and can be deleted at any time from the AI settings. Removing it immediately disables all AI features.
If these features are never enabled, no pull request content is ever sent to any LLM provider.

5. Data Sharing and Disclosure

We do not sell, trade, or rent your information to third parties. We may share information only in these limited circumstances:

With GitHub and Slack: As necessary to provide our integration service
AI/LLM Provider (optional): When a workspace enables AI features, with the OpenAI-compatible LLM provider configured for that workspace, as described in Section 4
Analytics and Error Tracking: With Mixpanel (for usage analytics) and Sentry (for error reporting) under their respective privacy policies
Legal Requirements: If required by law or to protect our rights and users
Service Providers: With trusted partners who help us operate our service (under strict confidentiality)

6. Data Storage and Security

Your data is stored securely in the United States using industry-standard security measures:

Encrypted data transmission and storage
Access controls and authentication for our systems
Regular security audits and monitoring
Limited access to data on a need-to-know basis

7. Data Retention

We retain your data only as long as necessary to provide our service:

Active integration data: Kept while your account is connected
Historical pull request metadata: May be retained for service continuity
Analytics data: Aggregated and anonymized for long-term insights
Application logs: Retained for 7 days for operational purposes
Error logs: Retained for 30 days to help diagnose and fix issues

8. Your Rights and Choices

You have several rights regarding your data:

Access: Request information about what data we have about you
Deletion: Request deletion of your data by disconnecting your accounts
Correction: Update your integration settings at any time
Portability: Request a copy of your configuration data
Revocation: Disconnect PullPro from GitHub and Slack at any time

9. Third-Party Services

PullPro integrates with GitHub and Slack. These services have their own privacy policies that govern their collection and use of your data:

10. Cookies and Tracking

We use minimal tracking technologies:

Essential cookies for authentication and service functionality
Analytics cookies to understand how our service is used (anonymized)
No advertising or marketing cookies

11. International Users

While our service is available globally, data is processed and stored in the United States. By using PullPro, you consent to the transfer of your data to the US. We implement appropriate safeguards for international data transfers.

12. Children's Privacy

PullPro is not intended for users under 13 years of age. We do not knowingly collect personal information from children under 13.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page with an updated “Last updated” date.

14. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us at [email protected].