Privacy
This is a pre-launch draft and will be finalized before general availability.
The waitlist stores your email address so we can tell you when runtime monitoring opens. If you choose to answer the two optional questions on the form — what you build with, and what you would pay per month — we store those answers too; they are optional and the form works with an email alone. Your IP address is not stored: it is hashed to rate-limit signups. We do not sell any of this.
When you install the GitHub App, Bishop reads your code and git history to find and prove issues. Tokens are least-privilege, scoped to one repository for one hour, and encrypted at rest. Logs are redacted at ingestion; a real secret is never placed in a pull request, comment, or a log we store.
If you connect your Sentry, Bishop reads your error data read-only — through an OAuth token stored encrypted — to detect and prove vulnerabilities from real errors. It never writes to your Sentry.
Untrusted test code runs in an isolated sandbox only, never on the host that holds your data.
To access or delete your data, email bishop.startup@gmail.com.
Still to finalize before general availability
Structure is listed here so nothing is missed; each is completed and reviewed with counsel before paid plans open.
- Subprocessors — the third parties that process data on our behalf — e.g. the database host, GitHub, Sentry, Slack, and the LLM provider. [to finalize before GA / review with counsel]
- Data retention — how long waitlist entries, tokens, logs, and findings are kept, and deletion on account close. [to finalize before GA / review with counsel]
- Your rights — access, correction, deletion, and export, and how to exercise them. [to finalize before GA / review with counsel]
- Data location and transfers — where data is stored and processed. [to finalize before GA / review with counsel]
- Legal basis (GDPR/CCPA) — lawful basis and regional disclosures where they apply. [to finalize before GA / review with counsel]
- Cookies and analytics — what, if anything, is set in the browser. [to finalize before GA / review with counsel]