Privacy Policy

Last updated: March 2026

This Privacy Policy describes what information PRVod collects, why we collect it, how we use and share it, and what rights you have over it. PRVod (“we,” “us,” or “our”) is the operator of prvod.dev and the PRVod GitHub App. By using the service you agree to the practices described here.

1. Information We Collect

Account information

When you sign up, we collect your email address. You may optionally provide your name and company or team name. We store this information in our database to identify your account and communicate with you.

GitHub data

PRVod works by reading pull request data from GitHub on your behalf through the GitHub App you install. Specifically, we access:

Pull request metadata (title, description, author, branch names, timestamps)
Diff content (file paths and code changes in the pull request)
Repository names and identifiers needed to post the generated video back as a PR comment

We do not read your full repository history, issues, secrets, or any content outside of the pull requests you process through PRVod. We request only the GitHub App permissions required to perform this work.

Usage and analytics data

We collect information about how you use PRVod: which pages you visit, which features you use, how many videos you generate, and general interaction patterns. This helps us improve the product. We may use first-party analytics or a third-party analytics tool for this purpose. Where third-party tools are used, they are listed in Section 6.

Communications

If you contact us through the contact form or by email, we collect the contents of your message and your email address so we can respond. The contact form is protected by Google reCAPTCHA Enterprise to prevent automated abuse.

Payment information

Payments are processed by Lemon Squeezy. We do not receive or store your full credit card number, CVC, or banking credentials. Lemon Squeezy shares with us your billing name, billing address, and a payment method token for subscription management purposes. Lemon Squeezy's handling of payment data is governed by Lemon Squeezy's Privacy Policy.

Technical and log data

Our servers automatically record certain information when you use the service: your IP address, browser type, referring URL, and timestamps. We use this data for security monitoring, debugging, and abuse prevention. Log data is retained for a limited period and then deleted.

2. How We Use Your Information

We use the data we collect to:

Provide the service: read PR diffs, generate narrated video walkthroughs, and post those videos as PR comments
Manage your account, subscription, and billing
Send transactional emails: account confirmations, password resets, billing receipts, and service notifications
Respond to support requests and contact form submissions
Monitor service health, diagnose errors, and fix bugs
Improve the product based on usage patterns
Prevent fraud, abuse, and unauthorized access
Comply with legal obligations

We do not sell your data. We do not use your code diffs or PR content to train machine learning models. Code and diff content is processed transiently to generate the video script and is not retained in identifiable form after video generation is complete.

3. Data Retention

Account data (email, name, company) is kept for as long as your account is active. If you delete your account, we delete this data within 30 days, except where retention is required by law (for example, billing records may be retained for up to 7 years for accounting purposes).

Generated videos are stored temporarily in Cloudflare R2. Videos posted as PR comments are available for a limited period and may be deleted after that window unless you have an active subscription tier that includes longer retention. The specific retention window for your plan is stated in the service.

PR diff content is processed in memory during video generation and is not stored persistently on our infrastructure after the job completes. The generated script derived from the diff may be stored briefly as part of the job record and is deleted when the job record is purged.

Log data is retained for up to 90 days and then deleted.

Contact form submissions are retained as long as reasonably necessary to handle your inquiry and then deleted.

4. How We Share Your Information

We share data only as necessary to operate the service or as required by law. We do not sell or rent your personal information to third parties for their marketing purposes.

Service providers

We use third-party companies to help us run PRVod. These companies access your data only to perform work on our behalf and are bound by data processing agreements that prohibit them from using your data for their own purposes. Current service providers include:

GitHub: repository and pull request access via the GitHub App integration
Google Cloud Text-to-Speech: converting generated narration scripts into audio
Creatomate: rendering the final video files
Cloudflare R2: storing generated video files
Neon (PostgreSQL): our primary database hosting provider
Lemon Squeezy: payment processing and subscription management
Google reCAPTCHA Enterprise: bot and abuse prevention on forms
Resend: transactional email delivery

Legal requirements

We may disclose your information if we are required to do so by law, court order, or a valid government request, or if we believe in good faith that disclosure is necessary to protect the rights, property, or safety of PRVod, our users, or the public.

Business transfers

If PRVod is acquired, merged, or substantially all of its assets are transferred, your data may be transferred as part of that transaction. We will notify you via email or a notice on the website before your data is transferred and becomes subject to a different privacy policy.

5. Cookies and Tracking

PRVod uses cookies and similar technologies for the following purposes:

Authentication: We set a session cookie to keep you logged in while you use the application. This cookie is strictly necessary for the service to function.
Preferences: We may store your UI preferences locally in your browser.
Analytics: If we use an analytics tool, it may set cookies or use local storage to track page visits and feature usage. Where possible, we use privacy-preserving analytics configurations.
reCAPTCHA: Google reCAPTCHA Enterprise sets cookies as part of its bot-detection mechanism on the contact form.

You can instruct your browser to refuse all cookies or to alert you when cookies are being set. If you disable the authentication cookie, you will not be able to log in. Most other cookies are optional.

6. Third-Party Services and Their Privacy Practices

Some third-party services we use have their own privacy policies that govern how they handle data sent to them. We encourage you to review these policies:

7. Security

We take reasonable technical and organizational measures to protect your data against unauthorized access, loss, or disclosure. These include encryption of data in transit (TLS), access controls limiting who on our team can access production data, and use of managed cloud services with their own security certifications.

No method of transmission over the internet or method of electronic storage is 100% secure. We cannot guarantee absolute security. If you discover a security vulnerability, please report it to us at the contact address in Section 11 and we will investigate promptly.

8. International Data Transfers

PRVod is operated primarily from the United States. If you are accessing the service from the European Union, United Kingdom, or another jurisdiction with laws governing data collection and use, please be aware that your data will be transferred to and processed in the United States and other countries where our service providers operate.

For transfers of personal data from the European Economic Area (EEA) or the UK, we rely on Standard Contractual Clauses (SCCs) or other approved transfer mechanisms where required. By using the service, you acknowledge this transfer.

9. Your Rights

All users

Regardless of where you are located, you may:

Access the personal data we hold about you
Correct inaccurate data
Request deletion of your account and associated personal data
Opt out of marketing emails at any time using the unsubscribe link in any such email

European users (GDPR)

If you are in the European Economic Area, you have the following additional rights under the General Data Protection Regulation:

Right to access: Request a copy of the personal data we process about you.
Right to rectification: Request correction of inaccurate or incomplete data.
Right to erasure: Request that we delete your personal data, subject to any legal retention obligations.
Right to restriction: Ask us to pause processing of your data in certain circumstances.
Right to data portability: Request a machine-readable copy of your data that you can transfer to another service.
Right to object: Object to processing based on legitimate interests or for direct marketing purposes.
Right to withdraw consent: Where processing is based on consent, withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.

Our legal bases for processing your personal data are: (a) contract performance, for data necessary to provide the service you signed up for; (b) legitimate interests, for fraud prevention, security, and product improvement; and (c) consent, where you have given it. You may lodge a complaint with your local data protection authority if you believe your rights have been violated.

California users (CCPA / CPRA)

If you are a California resident, you have rights under the California Consumer Privacy Act and California Privacy Rights Act, including:

Right to know: Request disclosure of the categories and specific pieces of personal information we have collected about you, the sources, the business purposes, and the categories of third parties with whom we share it.
Right to delete: Request that we delete your personal information, subject to certain exceptions.
Right to correct: Request correction of inaccurate personal information.
Right to opt out of sale or sharing: We do not sell or share your personal information for cross-context behavioral advertising purposes.
Right to non-discrimination: We will not discriminate against you for exercising your privacy rights.

To exercise any of these rights, contact us using the information in Section 11. We will respond within the timeframes required by applicable law. We may need to verify your identity before processing your request.

10. Children's Privacy

PRVod is intended for use by developers and engineering teams and is not directed at children under 13 years of age (or 16 in the EEA). We do not knowingly collect personal data from anyone under these ages. If you believe we have inadvertently collected data from a child, please contact us immediately and we will delete it.

11. Contact Us

If you have questions about this Privacy Policy, want to exercise your rights, or have a privacy concern, please reach out:

Contact form: prvod.dev/#contact

We will respond to privacy-related inquiries within 30 days. For GDPR requests, we aim to respond within the 30-day statutory period, with a possible extension of up to two additional months for complex requests.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date at the top of this page and, where appropriate, notify you by email or through a notice in the application before the changes take effect. Continued use of the service after changes take effect constitutes acceptance of the updated policy.

We encourage you to review this page periodically to stay informed about how we handle your data.

This policy is provided for informational purposes. If you have specific legal concerns, consult a qualified attorney.