Privacy

What we store

• Your GitHub user id, username and avatar, in a signed cookie, so you stay signed in.
• For each site you set up: its address, the GitHub repo you connect, the GitHub App installation id, and whether you proved you own it.
• Scan results, proposed fixes and their activity log for those sites.
• Phone numbers you register for alerts, and the texts and calls about your sites.

Scans you run while signed out are not stored at all.

What we don't store

We don't keep your GitHub or Vercel access tokens. The Vercel token is used once to list your projects and domains. Your code is cloned only for the length of a code check or a fix, then deleted.

Who else sees it

Data lives in Supabase. Code for a fix is read by Factory's Droid on a Chalk server. Texts go through Photon and calls through ElevenLabs. We don't sell or share your data with anyone else.

Removing your data

Uninstall the Antibody GitHub App or Vercel Integration at any time to cut off access. To have your stored data deleted, open an issue at github.com/antibody-hq/Antibody.