Who is responsible?Revido LLC is the controller of personal data processed through LintCycle. Contact privacy@revido.io for privacy questions or rights requests.
1. Scope
This policy applies to the LintCycle marketing site, authenticated application, subscription journey, and support communications. LintCycle is offered to organizations for business use.
2. Information we process
Account and workspace data
We process account identifiers, name and email address, authentication records, organization membership, workspace settings, repository selections, and subscription or entitlement status.
Provider metadata
When an organization connects a supported provider, LintCycle processes the minimum read-only metadata needed to inventory and correlate repositories, pull requests, preview environments, deployments, and preview branches. We do not use the Supabase integration to read application database contents.
Operational and support data
We process service logs, security events, audit records, scan and job metadata, and information you send to support. Credentials are not intended to appear in logs, job payloads, API responses, fixtures, or audit data.
Billing data
Stripe processes payment-card details on our behalf. LintCycle receives billing identifiers and subscription, tax, invoice, and payment status needed to provide the service, but does not receive full card numbers.
3. Why we process it
We process personal data to provide and secure the service, authenticate users, enforce workspace access, run requested provider inventory, manage subscriptions, respond to support, maintain records, prevent misuse, and comply with law. Depending on the context, our legal bases include performance of a contract, legitimate interests in operating and securing a B2B service, legal obligations, and consent where required.
4. Service providers and international transfers
We use service providers including Cloudflare for delivery and security; Stripe for checkout, tax calculation, payments, and subscription management; authentication infrastructure for sign-in; hosting and database infrastructure for the application; and GitHub, Railway, and Supabase when a workspace chooses to connect them. These providers process data under their own terms and applicable data-processing arrangements.
Some providers may process data outside the European Economic Area. Where required, we rely on recognized transfer mechanisms such as adequacy decisions or standard contractual clauses.
5. Retention
We retain account and workspace data while the service is active and for a limited period afterward as needed for security, dispute resolution, accounting, and legal obligations. Provider inventory and findings are retained according to product and workspace needs. We delete or anonymize data when it is no longer reasonably necessary, subject to backups and legal retention requirements.
6. Security and tenancy
LintCycle verifies organization membership server-side and uses PostgreSQL row-level security for tenant-owned data. Provider credentials stay behind server boundaries and provider access is read-only in version one. No internet service can promise absolute security, but we use technical and organizational controls proportionate to the data and service.
7. Your rights
Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a portable copy of personal data, and to complain to a supervisory authority. Contact privacy@revido.io. We may need to verify your identity and, for workspace data, confirm the request with the relevant customer organization.
8. Cookies and analytics
The marketing site does not currently run marketing analytics, advertising pixels, or session recording. Essential cookies may be used by the authenticated application, Stripe, authentication services, or Cloudflare security features. See the Cookie Notice.
9. Changes and contact
We may update this policy as the product or legal requirements change. Material changes will be communicated through an appropriate service channel. Privacy questions may be sent to privacy@revido.io; other legal notices may be sent to legal@revido.io.