Privacy
Account data
Sign-in uses Supabase Auth. We store the account identifiers needed to authenticate you (such as email) and to associate your dashboard with connected repositories.
GitHub access
When you connect GitHub, you authorize a GitHub App. Depending on the installation, that App may read repository contents and open pull requests on repositories you select. Installation tokens are minted server-side for those operations; we do not ask you to paste a personal access token into the product UI.
Repository analysis
For repositories you connect, AutoCompound may analyze source and metadata to extract features, generate improvement proposals, and open pull requests. Analysis outputs and agent run status are stored so you can review them in the dashboard.
What we do not claim here
This MVP page does not assert at-rest encryption guarantees, formal retention SLAs, or compliance certifications. Contact us if you need a deeper security review before connecting sensitive repositories.
Contact
Questions about privacy or data handling: [email protected].