Privacy Policy
Last updated: October 13, 2026
Triage is operated by Chodeberg, a sole proprietorship based in the United States ("Chodeberg", "we", "us"). Privacy questions and requests: privacy@support.chodeberg.com.
For vendor content (their code, and the reports their customers send them), Chodeberg acts as the vendor's processor or service provider. For account data, Chodeberg is the controller.
1. What we collect
| Data | From whom | Why |
|---|---|---|
| Account: name, email, GitHub username and ID | Vendors and reporters, via sign-in | Running your account, security, support |
| Repository access: installation ID, repository names and tags, the source at tagged commits | Vendors, via the read-only GitHub App | Building environments (Terms §5) |
| Bug reports: description, recorded steps, the app version you run, your terminal size, shell, OS and locale, and a redacted copy of the app's config | Reporters, via the vendor's intake | Reproducing and verifying the bug for the vendor |
| Session telemetry: CPU, memory, process lists, exit codes, logs, crash dumps, screenshots or video, accessibility-tree snapshots, all from inside the sandbox | Generated while your report replays | Evidence in the vendor's report |
| Billing: credit purchases and usage | Vendors; card and tax details go to Paddle, not us | Charging and accounting |
| Technical logs: request IDs, timestamps, coarse IP-derived location, error details. We don't log view-link tickets, secrets, prompts or code | Everyone, automatically | Security, abuse prevention, reliability |
Telemetry describes the sandbox we run, not your own computer. We don't read anything from your machine beyond what you or your assistant choose to submit.
2. Redaction
Before storing configs, logs and recordings, we run automated secret and token detection and redact what it finds. It isn't perfect. Don't submit secrets or other people's personal data.
3. Who we share data with
- The vendor you report to gets your report and its evidence, including your GitHub username.
- Sub-processors:
- Cloudflare (hosting, storage, containers, Artifacts, email);
- GitHub (repository access, sign-in);
- Paddle (payments, as merchant of record).
- Anyone holding a view-only live link a vendor shares can watch that session until it expires.
- When the law requires it, or to protect users and our infrastructure from abuse.
We don't sell personal data. We don't use vendor code, reports or telemetry to train AI models.
4. Retention
- Environments and source snapshots: until retired. The latest 5 releases are kept, plus any release with an open report. Everything for a repository is deleted within 7 days of uninstall, loss of access, or transfer.
- Reports and evidence: while the vendor keeps them, or until the account is deleted.
- Live sessions: 15 minutes at most. View links expire with the session.
- Billing records: as long as tax law requires.
- Technical logs: up to 30 days.
5. Security
- Sessions run in isolated containers with no internet by default.
- Secrets stay on our servers, never in sandboxes.
- View-link tickets are stored only as hashes.
- Access to vendor data is limited to running the service.
6. Your rights
Depending on where you live, you can ask to access, correct, export or delete your personal data, or object to its processing. Email privacy@support.chodeberg.com and we'll answer within 30 days.
If your data reached us as part of a vendor's reports, we'll pass the request to that vendor and help them answer it.
7. International transfers
We're based in the United States, and Cloudflare runs globally, so your data may be processed outside the country where you live. Where data leaves the EEA or UK, we rely on the Standard Contractual Clauses and other safeguards our sub-processors provide.
8. Children
Triage is not meant for children under 16, and we don't knowingly collect their data.
9. Changes
We'll post updates here and email account holders about material changes.