Privacy Policy

Last updated: February 2026

What We Collect

When you use lgtm, we process the following data to provide our service:

• PR diffs — analyzed in real-time to generate validation reports. Diffs are processed in memory and never stored permanently.
• Screenshots — captured during browser-based validation. Stored in encrypted cloud storage and automatically deleted after 30 days.
• Account information — email address and GitHub username, collected via Clerk authentication.
• Usage metrics — run counts, timing data, and error rates for billing and service improvement.

What We Don't Do

• We never store your source code. Only diffs are analyzed, in memory.
• We never sell your data to third parties.
• We never train AI models on your code or diffs.
• We never access repositories beyond the permissions granted by the GitHub App installation.

Third-Party Services

We use the following services to operate lgtm:

• Anthropic (Claude) — AI analysis of PR diffs. Subject to Anthropic's privacy policy. Anthropic does not train on API inputs.
• Clerk — authentication and user management. Subject to Clerk's privacy policy.
• Stripe — payment processing. Subject to Stripe's privacy policy.
• Cloudflare R2 — encrypted artifact storage (screenshots, reports).
• Neon — PostgreSQL database hosting.

Data Retention

• Run reports — retained for 90 days, then automatically deleted.
• Screenshots and artifacts — automatically purged after 30 days.
• Account data — retained while your account is active. Deleted within 30 days of account closure.
• Billing records — retained as required by law (typically 7 years).

Data Security

• All data is encrypted in transit (TLS 1.2+) and at rest.
• Access to production systems is restricted and audited.
• Integration credentials (Jira, Trello tokens) are encrypted using AES-256-GCM before storage.

Your Rights

You can request:

• Data export — a copy of all data we hold about you.
• Data deletion — permanent removal of your account and all associated data.
• Data correction — updates to any inaccurate personal information.

Contact

Questions about this policy? Email us at privacy@looksgoodtome.ai.