Data Retention Policy

Effective as of November 15, 2024

Introduction

At Sourcery.AI Limited ("Sourcery"), we are committed to safeguarding your personal data and ensuring transparency in our data handling practices. This Data Retention Policy outlines the principles we follow to manage data responsibly, the types of data we collect, the duration for which we retain it, and the procedures for its secure deletion.

Scope

This policy applies to all data collected, processed, and stored by Sourcery, including personal data of customers, end-users, employees, and any other individuals whose data is collected through Sourcery’s services.

Retention Principles

We adhere to the following principles when managing data:

  • Minimization: We only collect and retain personal data necessary to provide our services effectively.
  • Transparency: Data retention periods are clearly defined and communicated where applicable.
  • Security: Data is stored securely using encryption and other safeguards.
  • Right to Erasure: Individuals may request the deletion of their data, subject to certain legal or contractual obligations.

Retention Periods

The following table summarizes the retention periods for different types of data collected and processed by Sourcery:

Data TypePurposeRetention PeriodDeletion Method
Customer InformationName, email, and GitHub/GitLab username for account management and authentication.Retained while the account is active.Deleted upon account termination or request.
Source CodeProcessed for code review and coding assistant services.Deleted immediately after processing.N/A (not stored).
Payment InformationHandled by Stripe for subscription payments.As per Stripe's regulatory compliance policies.Managed by Stripe.
Product Usage DataFeature usage analytics to improve services.Retained while the account is active.Deleted upon account termination or request.

Third-Party Services

Sourcery relies on third-party service providers for certain operations. Each provider has its own retention and deletion policies:

  • Auth0: User authentication and account management.
  • Langsmith: Processes LLM message data and analytics.
  • Sentry: Error handling and reporting.
  • Stripe: Payment processing.
  • Mixpanel: Product usage analytics.
  • Google Analytics: Website analytics.

User Rights

Users can exercise the following rights regarding their data:

  • Access: Request details of data held by Sourcery.
  • Rectification: Correct inaccuracies in stored data.
  • Erasure: Request deletion of personal data.
  • Restriction: Request limited processing of data.

Requests can be submitted to: privacy@sourcery.ai. Sourcery will respond within 30 days, subject to verification of identity.

Review and Updates

This policy will be reviewed annually or when significant changes occur in our services, legal requirements, or operations.

Contact Information

For any questions or concerns regarding this Data Retention Policy, please contact us at:

Sourcery.AI Limited
124 City Road
London, England, EC1V 2NX
Email: privacy@sourcery.ai