Privacy Policy
Zero Train Guarantee
We never use your proprietary code, git diffs, or Slack messages to train, fine-tune, or calibrate public AI models.
Ephemeral Execution
PR diffs and commit payloads are processed in stateless volatile RAM pipelines and discarded immediately upon analysis.
Strict Non-Invasive
Zero background software, no laptop daemons, no screen recordings, and zero keystroke surveillance.
1. Overview & Our Core Philosophy
At DViBe ("DViBe," "we," "our," or "us"), we build an Autonomous AI Chief Technology Officer and Engineering Situation Room platform that helps software teams eliminate status meetings, diagnose launch blockers, and safeguard delivery velocity.
We recognize that your source code, architectural schemas, and engineering discussions represent your organization's most valuable intellectual property. Our privacy and engineering architecture are built on a foundational principle: minimal telemetry ingestion, ephemeral in-memory processing, and zero retention of full source code.
This Privacy Policy explains how we collect, process, protect, and handle data when you access our website (dvibe.dev), book strategy consultations, or connect our GitHub and Slack integrations.
2. Information We Collect
We only collect data strictly necessary to calculate delivery velocity, detect stalled PR reviews, and generate morning situation briefings:
A. Account & Contact Information
When you book an onboarding call or register a workspace, we collect your name, business email address, company name, and team size to coordinate sessions and deliver your daily executive briefings.
B. GitHub Telemetry & Metadata
Via our official GitHub App, we receive webhook event notifications containing PR numbers, commit timestamps, author handles, branch names, file diff line counts, and CI check run statuses (pass/fail). We request read-only permissions and do not clone your entire repository.
C. Slack Integration Telemetry
When you link our Slack App, we receive interaction payloads when team leads trigger slash commands or click 1-click blocker intervention cards. We only listen to channels you explicitly authorize.
D. Operational Logs & Audit Records
Standard technical access logs (client IP addresses, browser user-agent, request timestamps) used strictly for DDOS defense, rate limiting, and security compliance.
3. The Zero Train Guarantee
Under no circumstances is your proprietary source code, git diff text, PR discussion, or Slack message content ever fed into model training corpuses for foundational AI models (including OpenAI, Anthropic, Google, or open-source weights). Your code is processed strictly to extract transient signals (e.g., "migration file touched" or "test failed") and is never used to improve public LLMs.
4. Ephemeral RAM Pipeline & Storage Architecture
Unlike legacy static code analysis tools that download and index entire repositories into persistent relational databases, DViBe uses an ephemeral volatile memory model:
- Volatile Execution: When a PR webhook arrives, parsing and blocker heuristic analysis execute inside stateless Edge Workers (Cloudflare Workers).
- Immediate Diff Purging: Once the situation capsule is assembled (e.g., "PR #142 missing tests for Stripe webhook route"), the raw code diff is immediately purged from RAM.
- Abstract Signal Storage: We only persist numerical metrics and concise blocker summaries (e.g., author, review cycle time, risk category, and launch readiness score).
- Multi-Tenant Isolation: All persisted metadata is protected by PostgreSQL Row-Level Security (RLS) keys unique to your organization.
5. Subprocessors & Infrastructure Partners
We partner exclusively with SOC 2 Type II compliant infrastructure providers:
| Partner | Role / Service | Data Location |
|---|---|---|
| Cloudflare, Inc. | Edge Compute Workers & DNS / WAF | Global / United States |
| Supabase, Inc. | Encrypted PostgreSQL Database & Auth (RLS) | United States (AWS us-east-1) |
| Brevo (Sendinblue) | Transactional Email & SMTP Relay | European Union / United States |
| Cal.com, Inc. | Strategy Session Scheduling | United States / Global |
6. Data Retention & The Right to be Forgotten (GDPR / CCPA)
You retain complete ownership over your data. You may exercise the following rights at any time without penalty:
- Right to Deletion: If you disconnect the DViBe GitHub App or delete your workspace, all stored team metadata, blocker history, and metrics are permanently destroyed within 30 days.
- Right of Access & Portability: You may request an export of your team's velocity telemetry and situation archives by contacting our support team.
- No Sale of Data: We never sell, rent, lease, or monetize your company telemetry, developer records, or email addresses to advertisers, data brokers, or third parties.
7. Security Contacts & Data Protection Inquiries
If you have questions regarding this Privacy Policy, wish to execute a custom Data Processing Addendum (DPA), or require assistance with vendor security questionnaires, please contact our engineering team directly:
Looking for our technical security architecture?
Review our live telemetry pipeline, cryptographic tenant isolation, and read-only permission models.