> ## Documentation Index
> Fetch the complete documentation index at: https://docs.sweetr.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# Data-privacy & Security

Your data security and privacy come first. We follow strict security best practices to protect our servers and application.

## Data deletion

We understand the importance of data privacy. Upon uninstalling our GitHub app, we automatically hard delete all organizational data to ensure that no remnants are left behind. Your data is your own, and we respect your right to complete control over it.

## Source code handling

We do not store any of your repositories' source code. We only access the metadata required to provide our tools and features.

## GitHub permissions

Our GitHub app asks for permission for:

* Read: <Tooltip tip="Used to enable features like teams, people directory and allow teammates to login to your workspace.">members</Tooltip> and <Tooltip tip="Used to name your workspace.">metadata</Tooltip>.

* Read and write: <Tooltip tip="Read: Used on insights | Write: Used in automations, to post comments to pull requests.">pull requests</Tooltip> and <Tooltip tip="Write: Used in automations, to add commit checks to pull requests.">commit status</Tooltip>.

These permissions are necessary to sync metadata from GitHub to our database and provide service to you.

## Minimal data storage

We save only the data needed to provide service to you. Less stored data means less risk.

## Trust and transparency

Our code is source-available. You're welcome to <a href="https://github.com/sweetr-dev/sweetr.dev" target="_blank" rel="noopener noreferrer">audit it yourself</a>. We believe trust is earned through transparency, not promises.

## Security inquiries

We're happy to answer any security questions from your organization.

<Info>Email [security@sweetr.dev](mailto:security@sweetr.dev) to inquire about our security practices.</Info>

## Report Vulnerabilities

Please report vulnerabilities directly to [security@sweetr.dev](mailto:security@sweetr.dev) - do not open an issue in our GitHub or post it anywhere else that is publicly accessible.