Privacy Policy

This Privacy Policy describes how Revset (“Revset”, “we”, “us”) collects, uses, and shares information when you visit our website, book a demo, or sign in and use the Revset service (together, the “Service”). We keep this simple on purpose: we aim to collect only what we need to run a code review tool.

We collect the following categories of information:

• Account information. When you sign in, we receive your name, email address, and profile details from your identity provider (such as GitHub).
• Repository data.When you install the Revset GitHub App, we access pull requests, commits, diffs, and review comments for the repositories you authorize — only what the app’s permissions allow.
• Demo bookings. If you book a demo through our scheduling link, we receive the contact details you provide, such as your name and email address.
• Usage data. We collect standard logs and product analytics — pages visited, features used, browser type — to understand how the Service is used and to improve it.

We use the information we collect to:

• Provide, maintain, and improve the Service;
• Compute and display review state — diffs between revisions, comments, and pull request status — to you and your teammates;
• Send you service-related messages, such as important account notices;
• Monitor, debug, and secure the Service; and
• Comply with legal obligations.

We may also create and use aggregated or de-identified information — usage data that can no longer reasonably be linked to you or your repositories, and that does not include your source code — for purposes such as understanding usage, improving the Service, and developing new features. We will not attempt to re-identify de-identified data except to test whether our de-identification is effective.

We do not sell your personal information.

Your code stays yours. We access repository data solely to provide the Service — for example, capturing revisions of a pull request so we can show what changed between reviews.

We do not use your code to train machine learning models, and we do not share it with other customers. Revset is designed so that access to your repositories mirrors the permissions your organization grants on GitHub.

We use cookies and similar technologies to keep you signed in and to remember your preferences. Essential cookies are required to sign in and cannot be disabled. We also use product analytics to measure aggregate usage of the Service. We do not use third-party advertising cookies or cross-site tracking for advertising purposes.

Some browsers transmit “Do Not Track” signals. Because there is no common standard for interpreting these signals, the Service does not currently respond to them.

We share information with the following categories of recipients:

• Service providers that help us operate the Service — hosting, authentication, email delivery, and analytics — and that are permitted to use it only to provide services to us;
• Your organization and teammates, who can see the review activity you create on shared repositories;
• Recipients you direct, when you ask us to share information with a third party or consent to the sharing;
• Professional advisors, such as lawyers, accountants, and insurers, under confidentiality obligations;
• Legal authorities, when required by law or to protect the rights, safety, or property of Revset or others; and
• A successor entity, in connection with a merger, acquisition, or sale of assets, subject to this policy.

The Service integrates with third-party platforms such as GitHub and your identity provider. Information you provide to those platforms is governed by their own privacy policies, which we encourage you to review. We are not responsible for the privacy practices of third parties.

We retain account and repository data for as long as your account is active or as needed to provide the Service. If you uninstall the Revset GitHub App or delete your account, we delete the associated repository data within a reasonable period, except where retention is required by law. Deleted data may persist in backups and logs for a limited period before being purged in the ordinary course of our backup rotation; those residual copies remain protected under this policy. Demo booking contact details are kept until you ask us to remove them.

We use commercially reasonable administrative, technical, and organizational safeguards designed to protect your information, such as encrypting data in transit and limiting access to production systems. No method of transmission or storage is completely secure, so we cannot guarantee absolute security — please report any concerns to us right away.

Revset is operated from the United States, and we process and store information on servers in the United States and in other countries where our service providers operate. If you access the Service from outside the United States, you understand that your information will be transferred to and processed in jurisdictions whose data protection laws may differ from those of your own. Where required by applicable law, we rely on appropriate safeguards for these transfers.

Depending on where you live, you may have rights to access, correct, export, or delete your personal information, or to object to or restrict certain processing. You can exercise these rights by contacting us at hello@revset.dev. We will respond within the timeframe required by applicable law.

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact us and we will delete it.

We may update this Privacy Policy from time to time. If we make material changes, we will provide notice — for example, by updating the “last updated” date on this page or by emailing account holders. Your continued use of the Service after changes take effect constitutes acceptance of the revised policy.

Questions about this policy or your data? Reach us at hello@revset.dev.