Privacy

Mergegate is a desktop application that runs on your machine. We do not host your source code or pull request contents, and reviews run against agents and credentials you configure locally.

Settings you enter in the app — including host access tokens (Azure DevOps PAT, GitHub token) and agent API keys — are stored in plain JSON files in the app's local data folder on your machine (the path is shown in Settings). They are sent only to the services you configured, never to us. The trial start date is also stored locally.

When you purchase a license on this site, payment is processed by Stripe; we receive the name and email you provide at checkout plus payment metadata needed to fulfill your order. We store your order, license key, and download events in our database so we can deliver and support your purchase. Card details never touch our servers.

Installed apps periodically contact our update service to check for new releases. Licensed installs authenticate with their license key; trial installs check the public feed. Download links are private and time-limited.

Application and review logs stay on your machine. They are sent to us only when you use Settings → Report an issue and explicitly consent to include recent logs. That upload may contain error messages, file paths, and agent CLI output. It is not intended to include access tokens, API keys, or your local config.json.

For questions or data requests, contact support@mergegate.xyz.