Scope and contact
This policy applies to patchflow.run, app.patchflow.run, the PatchFlow GitHub App, and private-pilot support. Questions and privacy requests can be sent to privacy@patchflow.run.
Information we collect
- GitHub account ID, login, avatar URL, and installation identifiers
- Business contact details you send when requesting or operating a pilot
- Repository identifiers, package versions, policies, Check names, commit SHAs, and pull-request outcomes
- Service logs, security events, IP-derived request metadata, and support correspondence
- Agent execution usage and cost records associated with a customer run
We do not intentionally collect sensitive personal information through the pilot. Customers must not use PatchFlow to process regulated personal datasets without a separate written agreement.
Why we use it
- Authenticate invited users and enforce repository grants
- Provide, secure, meter, troubleshoot, and improve the migration service
- Communicate about pilot requests, incidents, support, and contractual matters
- Prevent abuse and comply with applicable legal obligations
We do not sell personal information or use private repository content for advertising.
Disclosure and overseas processing
We disclose information only to service providers needed to deliver the pilot, professional advisers under confidentiality, or authorities when legally required. AWS regional application resources are primarily in Sydney. GitHub, Cursor, npm, and CloudFront are global services and may process information outside Australia. The current provider list and data categories are maintained on the subprocessor page.
Security and retention
We use scoped repository grants, encryption, private database networking, secret management, signed sessions, bounded logs, and commit-bound verification. No internet service is risk free. Retention periods are described on the subprocessor page; verified deletion requests remove active control-plane records and expire from backups within the backup retention period.
Access, correction, and complaints
You may request access to, correction of, or deletion of personal information we hold about you. We may need to verify your GitHub identity and authority over the relevant installation. We aim to acknowledge privacy requests within two business days and complete ordinary requests within 30 days. If you are dissatisfied, reply to the privacy contact so the matter can be reviewed; eligible complaints may also be made to the Office of the Australian Information Commissioner.
Changes
We publish material changes here and update the review date. A change that materially expands private-pilot data use will be notified to active pilot contacts before it takes effect.