Privacy

Operator and contact

Reviewz is a service published by QUADRAFRAME, a French simplified joint-stock company (SAS), registered under SIREN 105371496, whose registered office is 60 rue François Ier, 75008 Paris, France. QUADRAFRAME is responsible for website and identity data processing. For privacy questions or rights requests, contact contact@quadraframe.com.

Your account and Google sign-in

Reviewz processes the information necessary for your account, the login methods you choose, workspace memberships and permissions. Google sign-in requests only openid, email and profile: a stable Google identifier, a verified email address, and a name and profile picture when supplied. It does not request access to Gmail messages, Drive files or contacts.

A Google account identifies a login method; it does not provide Git repository permissions. An email login requires explicit verification of a code. An address returned by Google or GitHub does not automatically become a login or recovery method. Login methods and Git accounts are linked to your existing Reviewz person through an explicit confirmation.

Review data and requests

Reviewz processes authorized repository and pull request metadata, accessible code context, notes, drafts and contributions to provide its review features. Contributions you choose to publish are sent to GitHub under the selected Git account. When AI enrichment is enabled, code context may be sent to the provider selected by the service administrator under the repository's effective data policy.

The website form forwards the information you provide to handle an access or pilot request. Account and review processing serves the provision of the service under the contractual relationship. Security and the handling of website requests rely on QUADRAFRAME's legitimate interests in protecting the service and responding to requests.

Providers and processing locations

Google and GitHub participate in the connections you choose. Email delivery providers receive the recipient address and message content. Hosting providers and, when enabled, the selected AI provider process data necessary for their functions.

Reviewz's principal server is currently hosted on Google Cloud in the United States. Some data is therefore processed outside the European Economic Area. Contact contact@quadraframe.com for the service providers, processing locations and contractual transfer information applicable to your use of the service.

Storage and retention

Reviewz uses technical session and authentication transaction cookies. Navigation preferences and private drafts may be stored in your browser; the draft vault uses encrypted, bounded storage. Git authorizations are encrypted on the server.

Authentication codes and transactions are valid for ten minutes. A Reviewz session lasts at most eight hours, with a two-hour inactivity limit. The identity security audit has a technical retention period of ninety days. These limits do not mean that all account or review data is deleted when a session ends.

Signing out does not delete workspace history. Closing an account revokes its sessions, login methods and Git authorizations; some review, security or operational records may remain. For retention details about a particular category, or to request deletion, contact contact@quadraframe.com.

Your choices and rights

My account lets you edit your profile, manage login methods, revoke sessions and disconnect Git accounts. Account closure may require transferring or closing workspaces you are responsible for.

You may request access, correction, deletion or restriction of your personal data, and exercise objection and portability rights where they apply, by writing to contact@quadraframe.com. You may lodge a complaint with the CNIL. Do not send passwords, OAuth tokens or login codes in a rights request.