Privacy policy
Last updated: 10 November 2026
This policy explains what personal data ArgusADR, 10439 Berlin, Germany ("we", "us") collects when you use Argus: the website at https://argusadr.dev and the application athttps://app.argusadr.dev. We are the controller of this data. Contact us atsupport@argusadr.dev.
What we collect
When you sign in
You sign in with GitHub. From your GitHub account we store your user ID, login, name and avatar address, and the organisations and teams you belong to, so that we show you only what your organisations can see. We store the access token GitHub gives us, encrypted, to check those memberships. For your session we store a hash of its ID (never the ID itself), your browser's user agent, and when it was created, last used and ends.
When your organisation installs the GitHub App
The App reads the repositories your organisation chose: code structure, pull requests and their reviews, commits, CODEOWNERS files and architecture decision records. These contain the GitHub logins of the people who wrote and reviewed the changes. We keep the findings, approvals and an audit log of who did what in the service, which names the person or agent that acted.
When coding agents report to the service
Agents connect to the MCP server with tokens your organisation creates. We store a hash of each token, and the sessions, branches and pull requests the agents report, with the GitHub login of the person who created the token.
When you pay
Paddle.com, our reseller and Merchant of Record, collects your payment details and billing address directly; we never see or store your card number. Paddle shares with us what we need to run your subscription: your name, email address, country, the plan, and the status of your payments. Paddle's handling of your data is described in itsprivacy notice.
When you visit the website
The website has no analytics, advertising or tracking, and sets no cookies. It remembers your light or dark theme choice in your own browser's storage, which never reaches us. Like any web server, our hosting provider sees your IP address in order to answer each request.
When you write to us
We keep the emails you send us and our replies.
Why we use it
- To provide the service you signed up for (performance of our contract with you or your organisation).
- To take payments and keep tax and accounting records (legal obligation).
- To keep the service secure and to find and fix faults (our legitimate interest).
- To answer your messages.
We do not sell personal data, show advertising, or use your data or code to train AI models.
Who we share it with
Only the providers we need to run the service, each bound to use the data only for us:
- GitHub, for sign-in and to read the repositories you connected;
- Paddle, for payments, tax and invoices;
- Cloudflare, which serves the website;
- Google Cloud, which hosts the application and its database in Frankfurt, Germany (EU);
- Slack, only when your organisation connects it, for the digests and alerts it asked for.
Some of these providers process data outside your country. Where that happens we rely on the safeguards the law provides, such as standard contractual clauses. We disclose data to authorities only when the law requires it.
How long we keep it
We keep your account data while your account is active. When you delete your account, or your organisation removes the GitHub App, we delete the related personal data within 30 days, except the audit log and the billing records we must keep by law. Sessions end after seven days and you can sign out at any time.
Your rights
Depending on where you live, you can ask to see, correct, export or delete your personal data, to restrict or object to how we use it, and to withdraw any consent you gave. Email support@argusadr.dev; we answer within one month. You can also complain to your local data protection authority.
Security
Connections are encrypted with HTTPS, GitHub tokens are stored encrypted, and session IDs and agent tokens are stored only as hashes.
Changes
We will show the date of the latest version at the top of this page, and tell account holders before a material change takes effect.