[Roritharr]

Where's the AI Running? Where are you sending the code? Are you keeping some of it?

I hate to be the compliance guy, but even from a startup perspective you'd at least want to mention what you promise to do here.

[ljm]

I would want answers to all of these questions before touching an integration like this.

The underlying library it depends on is open source, but this app isn't. Presumably it's holding the codebase in state.

No website to speak of, just boilerplate text to satisfy Github's marketplace submission process.

[Eugr]

Would be an instant no-go for any organization or individual that values their IP. Open Source - maybe.

[KolmogorovComp]

> Where are you sending the code? Are you keeping some of it?

It does not really matter for FOSS projects. For those fearing licence laundering, don’t worry it will be done anyway for any public code.

[neoecos]

The delay in answering this question makes me be more careful about this

[snovymgodym]

then who pays for the capacity it runs on?

[Jet_Xu]

Thanks for raising these important questions about data privacy and security. Let me clarify:

1. Code Processing: All code analysis happens in-memory during the PR review process. We don't permanently store any of your source code.

2. Data Retention: We only store the PR comments we generate, not the underlying code. This helps maintain a history of our suggestions while protecting your IP.

3. Privacy Focus: We take data privacy seriously and have successfully worked with both open-source and closed-source projects. We're always open to suggestions on how to further enhance our privacy measures.

If you have specific privacy requirements or suggestions, I'd be happy to discuss them.