Security and privacy

​

Overview

• Producta does not use your source code to train models.
• Your source code and the code Producta generates for you will never be accessible to other clients.
• Only the repositories you give Producta access to will be used to generate your code solutions.
• Producta will not modify any Github repository, issue or pull request it has not created.

​

Permissions

To operate, Producta needs you to install its GitHub and Linear apps. These are the premissions you grant Producta when installing those apps, and why we need them:

• Installing the GitHub app provides Producta with permission to do the following:
  • Read the content of the selected repositories
    • Our AI needs access to your files in order to solve your technical tasks, as many of them will require to update, add or remove code from the files.
  • Read and open pull requests on the selected repositories
    • We will open pull requests to present the solutions to the given tasks.
    • We also need read access to be able to read code reviews and commentaries in the pull requests we open, in order to react to them and update the code as needed.
  • Read, create and remove webhooks
    • After installing the app, we will create three webhooks, to be notified of these events:
      • Updates on pull request comments and reviews, to react to the ones left in the pull requests we open
      • Updates on the state of pull requests, to track when the ones we open get closed or merged
      • Updates on the branch our pull requests point to, to make sure we are always working on the last version of the files
• Installing the Linear app provides Producta with complete permissions to the Linear API. It is not possible at this time to create an app with a smaller set of permissions. We will reduce our set of permissions to the minimum as soon as that becomes possible.
  • We will use the API access solely to perform the following actions:
    • Create a webhook. This webhook will be used to receive notifications when a task is updated. We need these to know when to start working on a task, and during the refinement flow, which requires the user to update the task description.
    • Comment on tasks. There are only two types of comments, the ones related to the task refinement flow, and the ones used as a way to notify users of new pull requests.