Privacy

When you create an account or sign in, we store your account identifier and the settings you choose, including project configuration, repository links, integration connections, notification routing, and AI preferences.

When your agents send reports, we store the crash or log payload, the information needed to group repeat occurrences, and the safe results of any analysis you request. Incoming payloads are sanitized before analysis to remove common secrets, request and session identifiers, URLs, network addresses, and other volatile identifiers.

We use your data to provide BugFixes: to group and display reports, deliver notifications and tickets you configure, run AI analysis when you request it, and let you manage your account and projects.

We use data to maintain the security and reliability of the service, to support you, and to improve the product. We do not sell your data.

We do not sell your personal data or report payloads.

Repository credentials and integration secrets are stored by the service that needs them and are accessed only through authenticated internal service paths. AI analysis is performed by the provider you choose; when you use Bring Your Own AI, your provider credential never leaves your control.

Where a report results in a ticket in a linked external service such as GitHub, that ticket is created in your repository and is visible under your own account terms.

Exact submitted payloads are deleted after sanitization for every account. Free accounts delete the encrypted sanitized version at terminal finalization. Paid accounts may retain the encrypted sanitized payload for a bounded, configurable period, defaulting to 7 days, after which it is removed automatically.

Account and project settings, report status, and safe analysis results are retained for as long as your account is active.

You can review and change your account and project settings at any time from the dashboard. To delete your account and its stored settings and report data, contact us through the Contact page and we will remove it.

If you believe we hold personal data about you in error, or you want to exercise a right applicable in your jurisdiction, contact us using the details below.

Retained payloads are encrypted in the analysis service with AES-256-GCM, with per-account and per-project keys derived using HKDF-SHA256. Details are on the Security page.

We may update this policy from time to time. Material changes will be reflected on this page.

For privacy questions or requests, contact the BugFixes team through the Contact page, linked in the footer of every page.