Privacy Policy

1. Information We Collect

Information you provide: Email address, GitHub PR URLs, context notes, payment information (processed by Stripe — we never see raw card details), and any content you include in messages or review submissions.

Information collected automatically: IP address, browser type, pages visited, and timestamps — used for security and analytics. We use cookies to maintain your session after you sign in via magic link.

Expert information: Name, email, years of experience, specialties, and GitHub handle provided during the application process. We do not publish Expert identities publicly.

2. How We Use Your Information

• To provide the code review service and route jobs to Experts
• To send transactional emails (job status updates, review delivery, payout notifications)
• To process payments through Stripe
• To prevent fraud and abuse
• To generate anonymized, aggregated benchmarks (e.g. AI model quality scores) — no raw code or PII is included
• To improve our platform and services

3. Code & Review Confidentiality

Your code is shared only with the Expert assigned to your job. Experts are contractually bound to keep your code and review findings confidential. We do not train AI models on your code. We do not share raw code with third parties. Aggregated, anonymized metrics (finding types, severity counts, quality scores) may be included in our AI benchmark product — no identifying information is ever included.

4. Expert Identity Protection

Expert identities are protected by design. We do not display Expert real names, employers, or profile photos publicly. Customers communicate with Experts through our platform only. We take commercially reasonable steps to prevent Expert identity disclosure, including restricting profile information to first name and last initial.

5. Information Sharing

We do not sell your personal information. We share information only with:

• Stripe: For payment processing. Subject to Stripe’s privacy policy.
• Resend: For transactional email delivery. Email content is necessary for service delivery.
• Law enforcement: When required by valid legal process.
• Business transfers: In the event of a merger or acquisition, with advance notice to you.

6. Data Retention

We retain your account information and review history as long as your account is active or as needed to provide the service. You may request deletion of your data by emailing privacy@fairy.dev. Note that some data may be retained for legal or fraud-prevention purposes.

7. Cookies & Tracking

We use essential session cookies to keep you signed in. We do not use third-party advertising cookies or tracking pixels. We may use privacy-preserving analytics (no personal data leaves our servers). You can disable cookies in your browser, but the platform will not function correctly without session cookies.

8. Security

We use industry-standard security practices: HTTPS everywhere, hashed API keys (we never store raw keys), httpOnly session cookies, and regular security reviews. Despite these measures, no system is perfectly secure. Notify us immediately at privacy@fairy.dev if you discover a security vulnerability.

9. Your Rights

Depending on your location you may have rights to access, correct, delete, or export your personal data. To exercise these rights, contact us at privacy@fairy.dev. We respond to all requests within 30 days.

10. Children

Fairy is not directed to children under 18. We do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us at privacy@fairy.dev.

11. Changes to This Policy

We may update this policy periodically. We’ll notify you of material changes via email. The date at the top of this page reflects the latest revision.

12. Contact

Privacy questions or requests: privacy@fairy.dev