Privacy Policy

Last updated: June 16, 2026

Overview

codemagpie ("we", "us") is a GitHub App that generates code and reviews pull requests when mentioned in a repository you've installed it on. This page explains what data we collect, why we collect it, and how it's handled.

Data we collect

GitHub webhook data

When codemagpie is mentioned, GitHub sends us the relevant issue, pull request, comment, and repository metadata needed to process the request (e.g. title, body, diff, file contents).

Installation tokens

We mint short-lived GitHub installation tokens (expire in ~1 hour) to read your repository and open PRs or post comments on your behalf. Tokens are not persisted beyond the run that needs them.

Account & dashboard data

If you sign in to the dashboard with GitHub OAuth, we store your name, email, avatar URL, and GitHub username in our database to show your run history and connected repositories.

Usage analytics

We use PostHog to track product usage (e.g. sign-ins, install clicks) to understand how codemagpie is used and improve it. This is limited to the web dashboard, not your repository content.

How we use your data

  • To process @mentions and generate code or review comments via Claude (accessed through Google Vertex AI)
  • To open pull requests and post comments on your behalf via the GitHub API
  • To show you run history and connected repos on the dashboard
  • To detect and prevent abuse, such as automated bot-comment loops
  • To understand product usage and improve the service

Data retention

  • Webhook delivery IDs are stored for 24 hours to prevent duplicate processing, then expire automatically
  • Run records (status, repo, timestamps) are retained to populate your dashboard history
  • Installation tokens are never stored — a fresh token is requested for each run
  • You can request deletion of your account data at any time (see Contact below)

Third parties

We rely on the following subprocessors to operate codemagpie:

  • GitHub — webhook delivery, repository access, App authentication
  • Google Cloud Platform — hosting (Cloud Run), data storage (Firestore), authentication (Firebase), Claude access (Vertex AI)
  • PostHog — product usage analytics on the web dashboard

Your choices

You can uninstall the GitHub App at any time from your GitHub account's installed Apps settings, which immediately revokes our access to your repositories. Signing out of the dashboard clears your local session.

Contact

Questions about this policy or a data deletion request? Open an issue on our GitHub repository.