Legal
as of TK
Who else touches your data on Preston’s behalf, and why. This table changes as a vendor is added or dropped — the date above is the one to check.
Region pending the data-handling audit
Vendor and purpose are grounded in what’s actually wired today. Processing region is not — an audit of exactly what leaves the repo, and where, is in flight. That column reads TK until it lands, rather than a guess.
| Vendor | Purpose | Data touched | Region |
|---|---|---|---|
| GitHub | source hosting · App installation · OAuth sign-in | repository content, PR metadata, account identity | TK |
| DeepSeek | review + grounding inference (default provider) | diff content, repository excerpts sent for reasoning | TK |
| Anthropic | review + grounding inference (selectable provider) | diff content, repository excerpts sent for reasoning | TK |
| Fly.io | application hosting for the API and web app | everything the running service holds | TK |
| Stripe | payment processing and invoicing | billing contact, payment method, invoice history | TK |