Do you train AI models on my code?
No — codqual has no training pipeline and never uses your code to train any model. To produce a review, codqual sends your code to LLM providers (Anthropic, and others via OpenRouter) solely to generate that review; how each provider handles data is governed by its own terms.
What does codqual send to the model?
The diff of your pull request plus bounded excerpts of the surrounding code — a window of lines around each changed or cited location, not entire files or your whole repository. codqual sends only what a reviewer needs to judge the change in context.
How long do you keep my code?
codqual keeps no standing copy of your repository. The working copy used for a review runs in a temporary workspace that is deleted the moment the review finishes.
What happens when I disconnect codqual?
Disconnecting a GitHub organization removes its repositories from codqual right away and stops all future reviews. codqual also asks GitHub to revoke its own access.
Which repositories can codqual see?
Only the ones you choose. codqual installs as a GitHub App with access scoped to the repositories you select during install — and you can change that selection any time from GitHub.
Who on my team can see findings?
Owners and admins see every repo and finding in the org by default — a centralized view meant for governance. Regular members see findings only for repositories they've been explicitly granted access to, directly or through a team; without a grant, a member sees nothing for that repo. Access is closed by default, never shared automatically across the org.
