Privacy policy

This page covers the Vicunia website, vicunia.si, and the Vicunia app. It's short because we collect as little as the product needs.

Early access list

When you join the early access list, we store your email address, the page you signed up from and, if present, the campaign parameters in the link you followed (such as utm_source). We use it only to send your invite and product news about Vicunia. We delete it when you ask, or when early access ends if you didn't become a user.

Analytics

We use Google Analytics 4 to understand which pages help people. Analytics cookies are only set if you click Accept in the cookie banner. Until then, Google Analytics runs in a cookieless mode without identifiers. We don't use advertising features and we don't sell data.

You can change your choice at any time by clearing this site's storage in your browser; the banner will ask again.

Your rights

You can ask for a copy of your data, ask us to correct it or delete it, and object to its use. Write to hello@vicunia.si. If you're in the EU, you can also complain to your data protection authority.

Your account and your projects

When you use the app, we store:

• Your name, email address and photo from Google sign-in. We ask Google for nothing else.
• Your projects, their rules, the requests sent to them, the specs written from those requests and the history of each job.
• For the chats you link: your Telegram chat id and username, so the bot can reach you and check that button presses come from you.
• What your runner reports: job status, diff statistics, the names of changed files, test summaries and short, redacted log excerpts.
• For GitHub: which installation and repositories you connected, pull request numbers and CI results.
• Your plan and subscription status.

Your source code never reaches our servers. The runner works in a git worktree on your machine, with your own agent and your own git credentials, and pushes straight to GitHub.

The people who send you requests

A request from your app's feedback widget or error alerts may include the sender's email address, if your integration sends one. We use it only to tell that person when their request shipped, once. You decide what your integration sends.

Who processes data for us

• Google, for sign-in.
• Anthropic or OpenAI, which receive the text of each request to write its spec. They don't receive your code.
• Telegram, which carries the messages between you and the Vicunia bot.
• Resend, which sends our emails.
• GitHub, through the Vicunia GitHub App you install, to open, check and merge pull requests.
• Polar, which handles payments for Pro. We never see your card details.

How long we keep it

Account and project data is kept while your account exists. Deleting a project's data or your account is done on request: write to us and we'll confirm when it's done.