ReviewPR logo
ReviewPR
Back to reviewer

How ReviewPR handles your data

The short version
Your API keys and platform tokens are stored only in your browser's localStorage. ReviewPR collects no personal data, runs no analytics, and persists nothing on its servers. The only external calls made are to the platform (GitHub / GitLab / Bitbucket) and AI provider APIs you configured.
Last updated: June 2026

1. Information We Collect

ReviewPR does not collect, store, or process any personally identifiable information (PII). We do not require you to create an account, provide an email address, or share any personal details.

2. API Keys and Access Tokens

When you save a platform token (GitHub Personal Access Token, GitLab PAT, or Bitbucket credentials) or an AI provider key (Anthropic, OpenAI, Mistral, etc.), these values are written to your browser's localStorage using the key prefix reviewpilot_.

These tokens are transmitted to the ReviewPR backend only at the moment of a review or publish request — they are used to authenticate API calls to GitHub/GitLab/Bitbucket and to the AI provider on your behalf. They are never written to any database or log file on our servers.

You can remove any saved token at any time by clicking the Clear button in the token field, which deletes the value from localStorage immediately.

3. Code and Diff Data

When you trigger a review, ReviewPR fetches the pull / merge request diff from your code platform. This diff is then forwarded to the AI provider you selected for analysis. The data flow is:

1.Your browser → ReviewPR backend (diff request)
2.ReviewPR backend → Code platform API (fetch diff)
3.ReviewPR backend → AI provider API (analysis)
4.AI provider API → ReviewPR backend → Your browser (results)

The ReviewPR backend acts as a stateless proxy. No code, diffs, or AI responses are written to disk or retained beyond the lifecycle of a single HTTP request.

4. Third-Party AI Providers

Your code diffs are sent to the AI provider you choose. Each provider has its own privacy policy governing how submitted data is handled:

We recommend reviewing these policies before submitting sensitive or proprietary code.

5. Analytics and Tracking

ReviewPR does not use cookies, web beacons, analytics scripts (e.g. Google Analytics), or any form of user tracking. No data about your usage, navigation, or sessions is collected.

6. Theme Preference

Your chosen UI theme (dark or light) is saved to localStorage under the key reviewpilot_theme. This value never leaves your device.

7. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be reflected by the "Last updated" date above. Continued use of ReviewPR after any changes constitutes your acceptance of the updated policy.

8. Contact

If you have any questions about this Privacy Policy, please contact maulik.dadhaniya1995@gmail.com.