Privacy policy

This policy explains what information Ingenzio ("we", "us") collects, why, and what you can do about it. Ingenzio is based in Puerto Rico. It covers this website (ingenzio.com) and our products, Gitta and ProjectMesh. Questions go to support@ingenzio.com.

The Ingenzio website has no accounts, no forms, no analytics and no tracking cookies. Our hosting provider keeps standard server logs, such as IP address, browser and the page requested, to deliver the site and protect it from abuse.

If you email us, we keep the conversation so we can reply and follow up.

• —Account details: your name, email address, username and a hashed password. If you sign in to ProjectMesh with GitHub, we receive your GitHub profile and email address.
• —What you put in: repositories and code, pull requests, reviews and comments, tasks, issues, project context documents and anything else you create in the products.
• —Keys and tokens: personal access tokens and agent API keys. We store them hashed and show the full value only once, when you create it.
• —Activity: who did what and when, whether a person or an agent, so the products can show a history. Gitta also keeps an audit log of security-sensitive actions.
• —Security data: IP addresses for rate limiting and abuse prevention. Gitta stores them as hashes rather than raw values.
• —Pipeline data in Gitta: job logs and repository secrets. Secrets are encrypted and masked in logs.
• —Cookies: a session cookie to keep you signed in, and your theme preference stored in your browser. No advertising or analytics cookies.

To run the products and the features you use, to keep accounts secure, to prevent abuse, to send account email (verification, password resets, invitations), and to answer support requests. We don't sell your information and we don't use it for advertising.

Some features send content to AI model providers through OpenRouter. Our current models include Anthropic's Claude. Content is sent only when you use these features, and only what the feature needs:

• —Gitta AI review sends the pull request's diff.
• —Gitta agents work on a copy of your repository in an isolated container and send the relevant code and instructions to the model.
• —Gitta task chat and plans send the task brief and the context files you attach.
• —ProjectMesh's duplicate check sends the text of a new issue. It's configured to use providers that don't retain or collect that data.

Model providers process this content under their own terms. Don't send content through AI features that you're not allowed to share with them.

We use a small number of service providers to run the products. They process information on our behalf:

• —Vercel, for hosting websites.
• —Railway, for hosting application servers and databases.
• —A cloud server provider, for Gitta's pipeline and agent runners.
• —An object storage provider, for backups and uploaded files.
• —Resend, for account email.
• —OpenRouter and the model providers it routes to, including Anthropic, for AI features.
• —GitHub, when you sign in with GitHub or connect repositories to ProjectMesh.
• —Google Workspace, for our email.

We may also disclose information if the law requires it, or to protect the safety of our users and services.

Our services are hosted in the United States.

We keep your information while your account is active. If you delete your account or ask us to, we delete your data, except for what we need to keep for security or legal reasons. Backups roll off on their own schedule.

You can ask us for a copy of your data, or ask us to correct or delete it, by writing to support@ingenzio.com. We'll answer within 30 days.

We hash passwords and tokens, encrypt pipeline secrets, keep repositories private, and limit who can reach production systems. No system is perfectly secure. If we learn of a breach that affects your information, we'll tell you.

Our products aren't meant for anyone under 16, and we don't knowingly collect their information.

If we change this policy, we'll update the date at the top, and for significant changes we'll let account holders know by email.