Privacy policy

Last updated September 28, 2026

PORT4LLEO is published by Triaxis Ventures Private Limited. This policy explains what the PORT4LLEO GitHub App reads, what it stores and how to remove it.

What PORT4LLEO reads

  • Your public GitHub profile and public activity: repositories, contributions, pull requests and GitHub Projects.
  • For repositories you install the app on: repository metadata, file contents, Actions runs, check runs, deployments, pull requests and Dependabot alerts. All access is read-only. PORT4LLEO cannot change your code, settings or issues.
  • If you add one, your Vercel project list, read with the token you provide.

What PORT4LLEO stores

  • Your GitHub login, name and avatar URL.
  • Your email address, read from GitHub at sign-in and stored by our sign-in provider (Supabase Auth) with your account. PORT4LLEO does not display it, share it or send you email.
  • Portfolio snapshots: counts and repository names. Private repositories are counted but never named.
  • Governance audits: findings per repository. Possible personal data found in files is stored only as a masked excerpt (the first two and last two characters). The full value is never stored or shown.
  • GitHub and Vercel access tokens, encrypted with AES-256-GCM. They are used only to refresh your data.
  • If you create one, a Claude plugin token: only its SHA-256 hash, last four characters, and when it was created and last used. Revoke it from the dashboard at any time.
  • Corrections you enter, such as hackathons or prototypes.

PORT4LLEO does not sell data, show ads or use your code to train models.

Who can see it

  • Your portfolio is public by default. You can make it private from the dashboard.
  • Governance audits are never public. A signed-in user sees findings only for repositories they can already access on GitHub. This is checked against GitHub each time the page loads.

Retention and deletion

  • The 30 most recent portfolio snapshots and 30 most recent audits per account are kept. Older ones are deleted.
  • Uninstalling the app deletes that installation and all of its audits immediately.
  • To delete your account and portfolio data, open a request at https://github.com/axxess-triaxis/port4lleo/issues.

Service providers

Data is hosted on Supabase (database and sign-in) and Vercel (application hosting). Both process data only to run PORT4LLEO.

Contact

Questions: https://github.com/axxess-triaxis/port4lleo/issues.