Privacy Policy
Reproit is built so that the interesting data never reaches us. This page describes what we do and do not collect when you use reproit.com and the hosted cloud, and where it lives.
What we collect
- Account data: your email address, a hashed password (or your Google / SSO identity), and workspace membership.
- Crash telemetry from your apps: derived crash signatures, normalized error messages, the structural action path that led to a crash, and PII-safe input fingerprints (length, character classes, script). This is what the SDKs send.
- Reproduction artifacts: the verdicts your CI posts back and, if your CI uploads them, recordings of the synthetic replays it produced.
- Billing data: handled by Stripe; we store your plan and Stripe customer id, never card numbers.
- Operational logs: standard server logs and a security audit trail (logins, key creation, admin actions).
What we deliberately do not collect
- Your source code, builds, or simulators. Reproduction runs execute in your own CI via repository_dispatch; the cloud only orchestrates and stores results.
- The values your users type. SDKs fingerprint inputs structurally and never transmit raw text.
- Session recordings, screenshots, or pixels of your users' sessions.
- Analytics trackers on this website. There is one cookie, the dashboard session, and it exists only after you sign in.
Where it lives
Each workspace gets its own isolated database. Evidence files live in storage scoped to your workspace. Integration tokens and credentials are encrypted at rest. Data is retained according to your plan's retention window and then deleted automatically; deleting your workspace deletes its database and stored evidence.
Service providers
We use a small number of infrastructure providers (hosting, storage, payment processing, email delivery, optional sign-in) to run the service. Each receives only what its role requires, and none of them receive your source code or your users' input values. A current list is available on request at agho@reproit.com.
Your rights
You can export your data or ask us to delete it at any time by emailing agho@reproit.com; workspace deletion removes your database, evidence, keys, and members. If you are in a jurisdiction with statutory data rights (GDPR, CCPA and similar), we honor access, correction, portability, and erasure requests through the same address.
Changes
If this policy changes materially, we will notify account holders by email before the change takes effect.