Your account and your data

What the hosted account record holds, how long it is kept, and how to delete your account permanently.

What DiffGuardian holds about your account, and how to get rid of it.

#What the account record contains

The hosted service stores what it needs to sign you in and bill you:

Your email address, name, and avatar, from your sign-in provider
Your plan and subscription status
Which versions of the legal documents you accepted, and when
Any product feedback or ratings you chose to submit

It does not contain your source code, diffs, prompts, AI responses, repository names, branch names, or pull-request contents. Those never reach it. See Privacy and data handling.

#Legal document acceptance

When you accept the Terms of Service, Privacy Policy, and AI Disclaimer during onboarding, DiffGuardian records the exact version of each document you accepted and the time you accepted it. If a document is revised, you are asked to accept the new version on your next sign-in.

The current documents are available from the app's Legal screen and at Security.

#Feedback and ratings

Ratings and survey responses you submit from the app are stored against your account so that we can follow up on a specific report. Everything you send is something you chose to send — DiffGuardian does not collect feedback silently.

Anonymous product analytics are separate, are stripped of personal and code fields before sending, and can be turned off in Settings.

#Retention

Administrative audit records are deleted automatically once they pass their retention window. Data held by our subprocessors — for example error diagnostics you submitted — is subject to that provider's own retention policy.

#Deleting your account

Account deletion is permanent and immediate. From the app's account settings, choose Delete account and confirm.

When you confirm:

Your user record is deleted, along with everything attached to it — feedback, ratings, and legal-acceptance records.
Your sign-in identity is deleted from our identity provider, so the account can no longer authenticate.
A single administrative record of the deletion is retained, holding no email address in the clear — only an irreversible hash of it — so that we can prove an erasure request was honoured.

There is no undo and no grace period. If you have an active subscription, cancel it first from the billing portal so you are not billed for a period you cannot use — see Manage your subscription.

Anything on your machine — the local repository index, knowledge bases, and your credential-store entries — is yours to remove separately by uninstalling the app and deleting its stored keys.

#Questions