What we keep, what we don’t.

Who we are

Conclave AI is operated by 3SVS Co. (brand: 3Stripe), headquartered in Seoul, Republic of Korea. We provide an AI code review service that runs as a GitHub App and a CLI. Reach the maintainer at hi@conclave-ai.dev.

Data we collect

• Repository metadata — owner, repo name, PR number, head SHA, branch name. Used to address the review back to the right pull request.
• PR diff content — the lines changed in the pull request. Sent to the LLM provider you (or we, on managed plans) configured. Not retained beyond the review run.
• Council outcomes — per-agent verdicts, blocker counts, cost, latency, episodic memory ids. Stored to make the self-evolving substrate work.
• User identity — GitHub login, email, tier, and a hashed device-flow token. No password is ever stored.

Data we don’t collect

• Source code outside the changed lines of an open PR.
• The contents of files not referenced by the review.
• Your API keys’ actual values. In BYO mode they never reach our servers — they live on your CI runner.
• Commit messages, repository names, or user identities in federated sync. Only {kind, domain, category, severity, normalized tags, day bucket, sha256} leaves the machine.

Where data goes

Different categories travel to different processors. We list each; nothing else is brokered.

• Anthropic, OpenAI, Google — the LLM providers powering the council. PR diff content + your PRD (if provided) is sent to the providers whose keys are configured.
• Cloudflare D1 — our database (council outcomes, account data). Data residency follows Cloudflare’s policy.
• Resend — transactional email (welcome, payment receipts). Email address only.
• Lemon Squeezy — Merchant of Record for paid tiers. Payment details never touch our servers; Lemon Squeezy handles card data and VAT (KR / US / EU).
• Vercel — landing page hosting. Standard request logs (IP, user agent) retained for 30 days.

BYO mode is special

When you provide your own API keys (Anthropic / OpenAI / Google), the LLM call goes directly from your CI runner or local machine to the provider. Your code does not touch our servers in this path. We only receive the resulting verdict and the metadata listed above. This is the recommended mode for teams uncomfortable routing source code through any third party.

Retention

• Episodic memory — 90-day TTL, then auto-deleted.
• Answer-keys / failure-catalog — retained indefinitely. These are anonymized success / failure patterns; no raw code or PII.
• Federated sync — sha256 hashes plus normalized tags. Permanent.
• Account data — retained until you request deletion.
• Vercel request logs — 30 days.

Your rights

You can request access, export, or deletion of your account data at any time by emailing hi@conclave-ai.dev. Deletion is usually completed within 7 business days. We honor GDPR (EU), CCPA (California), and the Republic of Korea’s 개인정보 보호법.

Changes to this policy

We’ll post material changes on this page and update the effective date at the top. Account holders are notified by email of any change that materially expands the data we collect.

Contact

3SVS Co. (brand: 3Stripe) · Seoul, Republic of Korea · hi@conclave-ai.dev