Privacy policy

This Privacy Policy explains how Yaman Jalal, operating as Refinar (“Refinar”, “we”, “us”, or “our”), collects, uses, shares, and retains personal information when you visit our website, create an account, connect a repository, or use our application, APIs, and related services (the “Service”).

For privacy questions or requests, contact yaman@refinar.ai.

Depending on how you use Refinar, we may collect:

• Account details: name, email address, authentication identifiers, and account preferences.
• Connected repository data: repository names, branches, source files, commit and pull request metadata, and permissions granted through a connected provider.
• Workspace content: prompts, attachments, instructions, generated output, review decisions, and activity history.
• Usage and device data: browser type, approximate location from IP, timestamps, pages or features used, diagnostics, and security logs.
• Payment information: billing status, plan, invoices, and limited transaction metadata. Payment card details are handled by the payment provider rather than stored directly by Refinar.
• Communications: information you provide when you contact support or respond to our messages.

We use personal information to:

• create and secure accounts and authenticate users;
• provide the Service, including reading authorized repository context and producing requested changes;
• open, track, and support branches, commits, and pull requests;
• process subscriptions, billing, refunds, and support requests;
• monitor performance, prevent abuse, and investigate incidents;
• communicate about service updates, security issues, and account activity; and
• improve reliability and user experience using aggregated or de-identified information where reasonably possible.

To respond to a request, Refinar may send relevant prompts, code context, files, and instructions to the AI or infrastructure providers that power the Service. We limit the information sent to what is reasonably needed for the requested operation and apply access controls intended to keep one customer’s content separate from another’s.

We do not sell your private repository content. We do not use private repository content to train a general-purpose model unless we first disclose that practice and have a lawful basis or permission to do so. You remain responsible for removing secrets and for deciding whether your content may be processed by an AI-assisted service.

We may share information with:

• Service providers that host, authenticate, secure, analyze, support, or operate Refinar under contractual or technical safeguards;
• Connected providers such as GitHub, when you direct us to connect or act through them;
• Payment and merchant-of-record providers that process checkout, taxes, invoices, refunds, subscriptions, fraud checks, and payment disputes;
• Professional advisers or authorities when reasonably necessary to comply with law, protect rights, prevent fraud, or respond to a valid legal process; and
• A successor organization if Refinar is involved in a merger, acquisition, financing, reorganization, or sale of assets, subject to applicable law.

Depending on where you live, we may process information because it is needed to perform our contract with you, to comply with law, for our legitimate interests in securing and improving the Service, or because you gave consent. Where processing relies on consent, you may withdraw it, although that will not affect processing already carried out.

You can access, correct, export, or request deletion of your personal information by contacting yaman@refinar.ai. You may also object to or request restriction of certain processing where applicable. We may need to verify your identity before completing a request, and some information may be retained where required by law or needed for security, accounting, or dispute resolution.

We retain information for as long as needed to provide the Service, maintain an active account, meet legal and financial obligations, resolve disputes, enforce agreements, and protect the Service. When information is no longer needed, we delete it, anonymize it, or isolate it for the limited purposes allowed by law.

We use administrative, technical, and organizational measures such as access controls, encrypted transport, secret management, logging, and least-privilege permissions. No online service is completely secure, so keep your own backups and notify us promptly of suspected compromise.

We may use essential cookies or local storage to keep you signed in, remember preferences, protect sessions, and understand basic product usage. If we add non-essential analytics or advertising technologies, we will provide any notices or choices required by applicable law. You can control cookies through your browser, but blocking essential technologies may affect the Service.

Refinar and its providers may process information in countries other than the one where you live. Where required, we use appropriate safeguards for international transfers.

The Service is not directed to children under the minimum age required by applicable law. We do not knowingly collect personal information from children who are not permitted to use the Service. If you believe a child provided information to us, contact yaman@refinar.ai.

We may update this policy when our practices or legal obligations change. We will post the new version and update the date above. For questions, privacy requests, or complaints, contact yaman@refinar.ai.