Privacy Policy

Last updated: August 7, 2025

At PullRule (“PullRule”, “we”, “our”, or “us”), we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and protect your information when you use our service at https://pullrule.com (the “Service”).

We process your data in accordance with the General Data Protection Regulation (GDPR) and other applicable laws.

---

1. Who We Are

   PullRule is a company based in the Netherlands. We provide a SaaS platform that allows users to score and evaluate pull requests using custom-defined rules.

   For privacy-related questions, contact us at: legal@pullrule.com

2. What Information We Collect

   We collect and process the following types of data:

   1. Account Information
      1. Name, email address, profile photo
      2. Login credentials via OAuth (GitHub, Google, Bitbucket)
   2. Git & Pull Request Data
      1. PR titles, descriptions, changed files, commits, branches, reviewers
      2. Associated metadata (authors, timestamps, comments, status)
      We do not access your repositories or code beyond what is required for PR scoring and rendering.
   3. Usage Data
      1. IP address, browser type, device type
      2. Actions within the application (e.g., rule creation, PR scoring)
   4. Billing Data (for paid users)
      1. Billing address (if applicable)
      2. Payment info handled by Stripe — we do not store card details.

3. How We Use Your Data

   We use your data to:

   1. Provide and improve the PullRule Service
   2. Authenticate your account
   3. Connect with third-party services like GitHub and Google
   4. Score pull requests based on your custom rules
   5. Respond to support requests
   6. Manage subscriptions and payments
   7. Comply with legal obligations
   We do not sell your data.

4. Legal Bases for Processing

   Under GDPR, we rely on the following legal bases:

   1. Contract: to provide the Service
   2. Consent: for optional features (e.g., profile photo uploads)
   3. Legal obligation: for compliance and tax reporting
   4. Legitimate interest: for service improvement and fraud prevention

5. Third-Party Integrations

   We use secure integrations with:

   1. GitHub – for pull request and repo metadata
   2. Bitbucket – same as above
   3. Google – for account sign-in
   4. Stripe – for secure payment processing

   Each provider has its own privacy policy. We do not control or assume liability for their practices.

6. Data Storage & Retention

   Your data is stored securely in EU-based or GDPR-compliant cloud infrastructure. We retain your data:

   1. For as long as your account is active
   2. Up to 90 days after deletion for backup and legal purposes

   You may request deletion at any time.

7. Your Rights Under GDPR

   You have the right to:

   1. Access your personal data
   2. Correct inaccurate data
   3. Request data deletion (“right to be forgotten”)
   4. Restrict or object to processing
   5. Data portability (receive your data in a structured format)
   6. Lodge a complaint with your local Data Protection Authority (DPA)

   To exercise your rights, contact: legal@pullrule.com

8. Cookies

   We use strictly necessary cookies for login sessions and security. We do not use tracking or advertising cookies.

   If analytics cookies are introduced in the future, we will request your consent.

9. Data Security

   We use encryption (in transit and at rest), access controls, and best practices to secure your data. While no system is 100% secure, we continuously monitor and improve our protections.

10. International Data Transfers

    Data may be processed outside the EU (e.g., via sub-processors like GitHub or Google), but always in compliance with GDPR using appropriate safeguards such as Standard Contractual Clauses (SCCs) or adequacy decisions.

11. Changes to This Policy

    We may update this Privacy Policy occasionally. Major changes will be notified via email or in-app messaging. Continued use of PullRule after changes implies your acceptance.

12. Contact Us

    If you have questions or requests regarding your data: PullRule legal@pullrule.com