Privacy Policy

1. Introduction

This Privacy Policy describes how Flexiana LLC ("Flexiana," "we," "us," or "our"), a limited liability company registered in the State of Wyoming, United States, collects, uses, stores, and protects your personal data when you use Gitrevio ("the Service"), accessible at gitrevio.com and app.gitrev.io.

By creating an account or using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.

2. Data Controller

Flexiana LLC is the data controller for all personal data processed through the Service. You can contact us regarding any privacy-related matters at info@gitrev.io.

3. Data We Collect

3.1 Account Information

When you create an account, we collect your name, email address, company name, and role. If you subscribe to a paid plan, our payment processor collects your billing information — we do not store credit card numbers on our servers.

3.2 Engineering Metadata

When you connect your engineering tools (such as GitHub, GitLab, Bitbucket, Jira, Linear, or time tracking systems), we collect metadata about your engineering activity. This includes commit statistics, pull request data, code review metrics, sprint and task data, and time tracking entries. We use this metadata to provide analytics, insights, and intelligence about your engineering organization.

3.3 Source Code — LocalGit

Gitrevio never accesses, transmits, or stores your source code on our servers. Our LocalGit agent runs on your own infrastructure and performs code analysis locally. Only aggregated metadata — such as cyclomatic complexity scores, lines of code counts, file names, directory structure, and language classification — is transmitted to Gitrevio. Source code, file contents, and repository credentials remain on your servers at all times.

3.4 Usage Data

We collect information about how you interact with the Service, including pages visited, features used, queries submitted to the AI chat, and general usage patterns. This data is used to improve the Service and is not shared with third parties for advertising purposes.

3.5 Cookies and Similar Technologies

We use cookies and similar technologies to maintain your session, remember your preferences, and understand how the Service is used. See Section 9 for details on the types of cookies we use and how to manage them.

4. How We Use Your Data

We use the data we collect to:

• — Provide, operate, and maintain the Service
• — Generate engineering analytics, insights, and intelligence reports
• — Power AI-driven features including the chat interface, MCP server, and automated alerts
• — Process payments and manage subscriptions
• — Send transactional emails (account verification, password resets, billing receipts)
• — Send product updates and service announcements (you may opt out at any time)
• — Monitor and improve the security, performance, and reliability of the Service
• — Comply with legal obligations

5. Legal Basis for Processing

For data subjects in the European Economic Area (EEA), the United Kingdom, and Switzerland, we process personal data on the following legal bases:

• — Contract performance: Processing necessary to provide the Service you have subscribed to.
• — Legitimate interest: Processing necessary for our legitimate business interests, such as improving the Service, ensuring security, and preventing fraud, where these interests are not overridden by your rights.
• — Consent: Where you have given explicit consent, such as for optional analytics cookies or marketing communications.
• — Legal obligation: Processing necessary to comply with applicable laws and regulations.

6. Data Sharing and Third Parties

We do not sell your personal data. We share data only with the following categories of service providers, each bound by data processing agreements:

• — Payment processor: To process subscription payments and manage billing.
• — Email service provider: To send transactional and product update emails.
• — Analytics provider: To understand how the Service is used and to improve it.
• — Infrastructure provider: To host and operate the Service.

We may also disclose personal data if required by law, regulation, legal process, or governmental request, or if we believe disclosure is necessary to protect the rights, property, or safety of Flexiana, our users, or the public.

7. International Data Transfers

Gitrevio's primary infrastructure is hosted in the European Union. Where data is transferred outside the EEA, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission or other legally recognized transfer mechanisms. Flexiana LLC is based in the United States, and certain administrative functions may involve data access from the US, subject to these same safeguards.

8. Data Retention

We retain your account data and engineering metadata for as long as your account remains active and as necessary to provide the Service. Upon account closure or cancellation, we will delete your personal data and engineering metadata within 30 days, except where retention is required by law or necessary to resolve disputes.

Usage data and anonymized analytics may be retained for up to 24 months for service improvement purposes.

9. Cookies

We use the following types of cookies:

• — Essential cookies: Required for authentication, session management, and security. These cannot be disabled without breaking core functionality.
• — Analytics cookies: Used to understand how visitors interact with the Service. These are optional and can be declined. We use privacy-respecting analytics that do not track users across websites.

You can manage cookie preferences through your browser settings. Disabling essential cookies may prevent you from using the Service.

10. Your Rights

If you are located in the European Economic Area, the United Kingdom, or Switzerland, you have the following rights under applicable data protection law:

• — Right of access: You may request a copy of the personal data we hold about you.
• — Right to rectification: You may request that we correct inaccurate or incomplete personal data.
• — Right to erasure: You may request that we delete your personal data, subject to legal retention requirements.
• — Right to data portability: You may request your data in a structured, commonly used, machine-readable format.
• — Right to restriction: You may request that we restrict the processing of your personal data under certain circumstances.
• — Right to object: You may object to processing based on legitimate interest or for direct marketing purposes.
• — Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time.

To exercise any of these rights, contact us at info@gitrev.io. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection supervisory authority.

11. Security

We implement technical and organizational measures to protect your data, including encryption in transit (TLS 1.3) and at rest (AES-256), strict access controls with the principle of least privilege, tenant-isolated databases, regular security audits, and automated vulnerability scanning. While no system is completely immune to risk, we are committed to maintaining industry-standard protections and continuously improving our security posture.

12. Children's Privacy

The Service is not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child under 16, we will take steps to delete that data promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email (sent to the address associated with your account) at least 14 days before the changes take effect. Your continued use of the Service after the effective date constitutes acceptance of the updated policy.

14. Contact

If you have questions about this Privacy Policy or our data practices, contact us at: