Privacy policy

Last updated: November 7, 2026.

Your code is deleted after review

This is the core promise of DiffReview. When you submit a diff — pasted directly, or fetched from a public GitHub pull request — it is sent to the AI model once, the review is generated, and the diff is then deleted. It is never stored in our database, never written to disk, never written to logs, never used to train any model, and never viewed by a human.

What we do record for each review: the size of the diff (characters and lines), the detected programming language, how many findings were returned at each severity level, and a hashed IP address (for rate limiting and abuse prevention). None of this can reconstruct your code.

Accounts and email

If you sign in, we store your email address and your review balance. Email sign-in uses a one-time 6-digit code (valid 10 minutes, at most 5 attempts). Google sign-in stores your Google account ID and email; the same email is merged into one account regardless of sign-in method. We never see your Google password.

We send transactional email only: sign-in codes and, if you ask for them, payment receipts. No marketing email, no newsletter.

Payments

Payments are processed by Waffo (Pancake). We never see or store your card number. We record the order amount, the pack purchased, and the payment reference needed to credit your balance and handle refunds.

Analytics

We use a self-hosted, privacy-friendly analytics tool that counts page views by hostname. It does not track you across sites and does not store personal identifiers.

Data retention

Accounts, balances and order records are kept while your account exists, so your purchased reviews never expire and refunds can be processed. You can ask for your account to be deleted by emailing support — deletion removes your email, balance and login records. Review metadata (counts and sizes only) is kept in aggregate form and contains no code.

Contact

Questions about this policy: contact@clioos.com.