// legal
Privacy Policy
Short version: Perch Review is a local desktop application. Your source code, pull request content, and AI analysis never leave your computer. We collect only what is strictly necessary to run your subscription.
1. Who We Are
Perch Review is a software product developed and operated as an independent product. For privacy matters, contact us at privacy@perch-review.dev.
2. What Data We Collect
2.1 Data You Provide Directly
- Email address — collected when you purchase a subscription via Paddle. Used to deliver your license key and subscription-related communications.
- Payment information — handled entirely by Paddle. We never see or store your card number.
- GitHub / GitLab personal access token — stored locally on your device in
~/.perch-review/config.json. Never transmitted to our servers.
2.2 Data Collected Automatically
- License validation requests — when you activate or revalidate your license, your license key is sent to our validation endpoint (
license.perch-review.dev) hosted on Cloudflare Workers. No logs of these requests are retained beyond Cloudflare's standard infrastructure logs (max 24 hours).
2.3 Data We Do NOT Collect
- Your source code or pull request content
- AI analysis results or prompts
- Usage statistics or analytics
- Crash reports or error telemetry
- Device identifiers
3. Local AI Processing
Perch Review's AI features are powered by Ollama, which runs entirely on your local machine. All AI inference happens locally. No data is sent to any AI cloud provider.
4. How We Use Your Data
The limited data we hold is used solely to:
- Verify your active subscription and grant access to the application
- Send transactional emails related to your subscription via Paddle
- Respond to support requests you initiate
We do not sell, rent, or share your personal data with third parties for marketing purposes.
5. Third-Party Services
Paddle (Payment Processor)
Payments are processed by Paddle.com Market Ltd, who acts as Merchant of Record. Paddle collects and processes your billing data under their own privacy policy: paddle.com/legal/privacy.
Cloudflare (Infrastructure)
Our license validation API runs on Cloudflare Workers. Cloudflare may process request metadata as part of standard infrastructure operations. See Cloudflare's Privacy Policy.
GitHub / GitLab
When you connect a GitHub or GitLab account, Perch Review makes API calls directly from your device using your personal access token. We have no visibility into these calls.
6. Data Storage and Security
Configuration data is stored locally at ~/.perch-review/config.json on your machine, protected by your OS file permissions. Our backend uses HTTPS for all communications.
7. Data Retention
We retain your email address and subscription status for as long as you have an active or recently cancelled subscription, and for up to 3 years thereafter for accounting and legal compliance.
8. Your Rights (GDPR)
If you are located in the EEA, you have the right to access, rectify, erase, port, object to, or restrict processing of your personal data. To exercise any of these rights, email privacy@perch-review.dev. We will respond within 30 days.
9. Deletion Requests
Email privacy@perch-review.dev with the subject "Data Deletion Request". We will process your request within 14 days. To remove local data, delete ~/.perch-review/ on your computer.
10. Cookies
The Perch Review desktop application does not use cookies. This website is a static page and does not use tracking cookies or analytics scripts.
11. Children's Privacy
Perch Review is a professional developer tool not directed at children under 16.
12. Changes to This Policy
We may update this policy to reflect changes in our practices. The "Last updated" date at the top will reflect any changes. We will notify active subscribers of material changes via email.
13. Contact
For privacy questions: privacy@perch-review.dev