Skip to main content

Privacy Policy

Last updated: October 20, 2026

Contents

1. Introduction

PRFactory ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered development workflow automation platform ("Service").

PRFactory (org.nr 556939-4777) is the data controller for account and billing data, and the processor for the workspace content you put into the Service, under our Data Processing Agreement.

By using the Service, you consent to the data practices described in this policy. If you do not agree with our policies, please do not use the Service.

2. Information We Collect

2.1 Information You Provide

  • Account Information: Name, email address, organization name, and password when you register
  • Payment Information: Billing address and payment details (processed by third-party payment processors)
  • Integration Credentials: OAuth tokens and API keys for connecting to Git platforms (GitHub, Bitbucket, Azure DevOps) and ticket systems (Jira)
  • Support Communications: Information you provide when contacting us for support

2.2 Information We Process on Your Behalf

  • Source Code: Repository code that you authorize us to access for generating implementation plans
  • Ticket Content: Issue descriptions, comments, and metadata from connected ticket systems
  • Generated Content: AI-generated plans, code, and pull requests created by the Service

2.3 Automatically Collected Information

  • Usage Data: Features used, workflow actions, and performance metrics
  • Device Information: Browser type, operating system, and device identifiers
  • Log Data: IP addresses, access times, and pages viewed
  • Cookies: Session identifiers and preferences (see Cookies section)

3. How We Use Your Information

We use the information we collect to:

  • Provide the Service: Process your repositories, generate plans, create code, and manage workflows
  • Authenticate and Authorize: Verify your identity and permissions
  • Process Payments: Handle subscription billing and invoicing
  • Communicate: Send service notifications, updates, and support responses
  • Improve the Service: Analyze usage patterns to enhance features and performance
  • Ensure Security: Detect and prevent fraud, abuse, and security threats
  • Comply with Legal Obligations: Meet regulatory requirements and respond to legal requests

4. Data Sharing and Disclosure

4.1 Third-Party Service Providers

We share data with trusted service providers who assist in operating the Service:

  • Cloud Infrastructure: Hosting and storage providers
  • Payment Processors: To process subscription payments
  • Analytics Services: To understand usage patterns (anonymized where possible)

4.2 Git and Ticket Platforms

The Service interacts with platforms you authorize (GitHub, Bitbucket, Azure DevOps, Jira, etc.) using credentials you provide. Data is exchanged with these platforms as necessary to perform requested operations (create pull requests, post comments).

4.3 Legal Requirements

We may disclose information if required to:

  • Comply with applicable laws, regulations, or legal processes
  • Respond to lawful requests from public authorities
  • Protect the rights, property, or safety of PRFactory, our users, or others

4.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity. We will notify you of any such change.

5. Data Security

We implement industry-standard security measures to protect your data:

  • Encryption: Every connection is HTTPS, with TLS 1.2 or later. Sensitive data at rest (credentials, API keys) is encrypted using AES-256-GCM
  • Multi-Tenant Isolation: Each organization's data is logically isolated from other tenants
  • Access Controls: Role-based access control limits data access to authorized users
  • Secure Credential Storage: Integration credentials are encrypted and never logged or exposed
  • Audit Logging: Security-relevant events are logged for monitoring and compliance

6. Data Retention

We retain your data as follows:

  • Account Data: Retained while your account is active and for a reasonable period after termination
  • Source Code: Your agents work on a checkout on your own machines. PRFactory stores the workflow artefacts your team reviews, including the diffs submitted for review
  • Backups: Daily backups, kept for up to 3 months.

You may request deletion of your data by contacting us. Some data may be retained as required by law or for legitimate business purposes.

7. Your Rights

Depending on your jurisdiction, you may have the following rights:

  • Access: Request a copy of the personal data we hold about you
  • Correction: Request correction of inaccurate or incomplete data
  • Deletion: Request deletion of your personal data (subject to legal retention requirements)
  • Portability: Request a copy of your data in a machine-readable format
  • Objection: Object to certain processing of your data
  • Restriction: Request restriction of processing in certain circumstances
  • Withdraw Consent: Withdraw consent where processing is based on consent

To exercise these rights, please contact us using the information in the Contact section. We will respond to your request within the timeframe required by applicable law.

8. Cookies and Tracking

We use cookies and similar technologies for:

  • Essential Cookies: Required for authentication and session management
  • Preference Cookies: Remember your settings and preferences
  • Analytics Cookies: Understand how users interact with the Service

You can control cookies through your browser settings. Disabling essential cookies may prevent you from using certain features of the Service.

9. Third-Party Services

The Service integrates with third-party platforms and services. These services have their own privacy policies that govern their use of your data:

  • Git Platforms: GitHub, Bitbucket, Azure DevOps
  • Ticket Systems: Jira

We encourage you to review the privacy policies of these services. We are not responsible for the privacy practices of third-party services.

10. International Data Transfers

The PRFactory server and its database are hosted in the EU, on Zerops in Prague. Other providers process data in these regions:

  • Logto (sign-in): EU, Netherlands
  • AhaSend (e-mail): EU, Netherlands
  • Stripe (payments): Ireland; may transfer to the US

Our list of sub-processors on the Security page names every provider and what it holds.

11. Children's Privacy

The Service is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If we learn that we have collected data from a child, we will take steps to delete that information.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on the Service and updating the "Last updated" date. Your continued use of the Service after changes become effective constitutes acceptance of the revised policy.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at:

Email: [email protected]
Website: https://prfactory.dev

For data protection inquiries in the European Union, you may also contact your local data protection authority.

Back to Top