Skip to content
Privacy

Your data, scoped and accounted for

We don't sell data. This page explains what we collect, why, which vendors process it, and how long we keep it.

Last updated . This policy describes how ChangeFabric handles your data today. We version it as the product evolves and note the effective date on each update.

Data we collect

We collect what is needed to run the service: account details (name, work email), workspace configuration, and the GitHub repositories you connect through the ChangeFabric GitHub App.

If you request access on this website, we collect what you enter in the form (work email, name, company, role and, if you add one, a note about the workflow you have in mind) so that a person on our team can reply.

How we use it

We use your data to operate the product: to run the work you configure, open the pull requests and checks it produces, and keep the record of each run.

We don't sell data, and we don't use your content to train models. Agent work is sent to third-party model providers to be processed; each provider's own terms govern how it handles those requests.

This website

This marketing site sets no cookies and runs no analytics scripts. Our hosting provider processes each request in order to serve the page.

Subprocessors

We rely on a small set of vendors to deliver the service. Today this includes:

  • Cloudflare — hosting for this website and the app's pages.
  • Railway — hosting for the application server.
  • Neon — the database.
  • Clerk — sign-in and accounts.
  • Resend — transactional email.
  • E2B — isolated sandboxes where agents run.
  • OpenRouter and the model providers it routes to — processing agent requests.
  • GitHub — the repositories, issues and pull requests you connect.

We update this list when a subprocessor changes.

Data retention

Agent-run records (what an agent sent, received and did) are kept in full, with secrets removed, as part of your record so that it can be read back later. Account and configuration data is kept for the life of your workspace. Request-access submissions are kept so that we can follow up.

Your rights

You can request access to, correction of, or deletion of your data. We'll honor verified requests within a reasonable period. Deleting a workspace removes its associated data, subject to any retention we're legally required to keep.

ChangeFabric is not SOC 2 certified.

Contact

Questions about privacy or a data request? Email privacy@changefabric.com.