Privacy Policy

CodeOrin (“we”, “us”) is an AI code review agent for GitLab merge requests, available at www.codeorin.si. This policy explains what personal data we collect when you use our website and service, why we collect it, and how you can control it.

• GitLab account details. When you sign in with GitLab we receive your GitLab user ID, username, name, email address and avatar URL, and we record when you last signed in.
• Repository data. For the repositories you connect, we store their name, path, URL, default branch and visibility. We add the CodeOrin bot user to each connected repository as a Developer member, and a webhook so we are told when merge requests change. Reviews run as the bot, not as you, and you can remove the bot or the webhook from your GitLab project settings at any time.
• Source code and merge requests. To review a change we read the repository’s code and the merge request diff. We split the code into functions and classes so reviews understand your whole codebase.
• Usage analytics. We use analytics to understand how visitors use our website, such as which pages are viewed. Analytics sets cookies and collects information like your device, browser and approximate location.

• To sign you in and show you your repositories.
• To index connected repositories and review their merge requests, posting comments and descriptions to GitLab.
• To contact you about the plan you joined the waitlist for.
• To keep the service secure, fix problems and improve it.

We share data only with the providers that help us run CodeOrin:

• GitLab: to sign you in, read your repositories and post review comments.
• OpenAI: which processes code and diffs through its API to generate reviews, descriptions and embeddings. Under OpenAI’s API terms, this data is not used to train its models.
• Hosting and infrastructure providers: which host our servers, database and search index.
• Analytics: for website usage statistics.

We do not sell your personal data or your code.

You can see, correct, export or delete your data, and you can stop CodeOrin’s access to your code at any time.

• Disconnect a project. Remove it in CodeOrin settings. We stop reviewing it and delete its index.
• Revoke access. Remove CodeOrin from your GitLab account’s authorised applications. This stops all access immediately.
• Delete your account. Ask us through our contact form, and we will delete your account data.
• Access and portability. Ask for a copy of the personal data we hold about you.
• Correction. Ask us to fix inaccurate data.
• Objection and restriction. Object to processing based on our legitimate interests, or ask us to limit it.
• Withdraw consent. Unsubscribe from marketing emails using the link in each email.
• Grievance and nomination (India). Raise a grievance with us, and nominate someone to exercise your rights on your behalf if you are unable to do so yourself.

To make any of these requests, send us a message through our contact form.

Questions about this policy or your data? Contact us and we’ll reply by email.