Privacy Policy

1. Data we collect

When you connect your tools to EOS, we collect the following information:

• OAuth tokens — read-scoped access tokens for GitHub, Slack, and Linear, used solely to fetch the data described below.
• Pull request and commit metadata — PR titles, descriptions, review activity, merge status, commit authors, and timestamps from GitHub.
• Issue and project data — issue titles, statuses, assignees, and cycle metadata from Linear.
• Slack notification preferences — channel IDs and user IDs required to deliver workspace digests and alerts.
• Email address — collected at sign-up and used for authentication and essential account communications.

We do not collect source code, message contents, passwords, or any financial information.

2. How we use your data

• Engineering analytics — computing metrics such as cycle time, review depth, and throughput across your team.
• AI-powered summaries — generating natural-language digests of engineering activity using large language model inference. Metadata is sent to our AI provider for this purpose (see Third Parties below).
• Slack notifications — sending automated digests and alerts to the Slack channels your workspace has configured.
• Product improvement — understanding aggregate feature usage to guide development. We do not sell or share individual data for advertising purposes.

3. Data retention

We retain your workspace data for as long as your workspace exists on EOS. When a workspace is deleted — whether by the workspace owner or upon account closure — all associated data is permanently removed from our systems within 30 days. OAuth tokens are revoked immediately upon disconnection or deletion.

4. Third-party services

EOS relies on the following sub-processors to deliver the platform:

• Supabase — primary data store and authentication provider. Data is stored in US-based infrastructure. See supabase.com/privacy.
• Anthropic — large language model inference used for AI summaries. Metadata passed for inference is not used to train Anthropic's models under our enterprise agreement. See anthropic.com/privacy.
• Slack — delivery of workspace notifications via the Slack API. See slack.com/privacy-policy.
• GitHub and Linear — source of engineering metadata, accessed via OAuth on your behalf.

We do not sell, rent, or trade your data to any other third party.

5. Security

We use industry-standard practices including encryption in transit (TLS), encryption at rest, row-level security on all database tables, and short-lived access tokens. We conduct regular security reviews of our infrastructure and code.

6. Your rights

Depending on your jurisdiction, you may have the right to access, correct, export, or delete your personal data. To exercise any of these rights, or if you have questions about this policy, contact us at:

hello@eos.dev

7. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above. Continued use of EOS after changes constitutes acceptance of the updated policy.