Privacy Policy

Effective Date: September 24, 2026

This Privacy Policy describes how Squidcode collects, uses, and protects your information when you use CodeMouse.

Information We Collect

GitHub profile, encrypted API keys, usage data, and payment information (via Polar).

Code Access

Repositories are cloned into an isolated temporary workspace for the duration of a review and deleted immediately after — we never store your source code. The PR diff, its discussion, and files the reviewing model opens for context are sent to the AI providers you connect (Anthropic, OpenAI, Google, xAI, or OpenRouter) on your own API keys and are not retained by us. Generated files, lockfiles, and run artifacts are excluded automatically.

Data Security

API keys encrypted with AES-256-GCM. All connections use TLS/HTTPS. Webhooks verified via HMAC-SHA256.

Contact

hello@squidcode.com

CodeMouse is a Squidcode product.