Privacy Policy

Overview

BlueFairy is a developer tool that connects to your team's GitHub repositories (and, if you choose, Slack, Linear and Figma) to provide AI-driven context and proactive updates to your team. This policy explains what data we collect, how we use it, and who we share it with.

Who we are

BlueFairy is operated by BlueFairy Ltd, a company registered in England and Wales (company number 17428026), whose registered office is at Apartment 7, City Heights, 1 Samuel Ogden Street, Manchester, M1 7AX, United Kingdom.

We are the controller of your account information and of data about how our website and service are used. For data we process from your company's connected repositories and workspace, your company is the controller and we act as its processor under our Data Processing Agreement.

Data we collect

• Account information — your email address and GitHub username, collected when you sign in via GitHub OAuth.
• GitHub data — repository names, commit history, pull request activity, and excerpts of source code and code changes from repositories you choose to connect via the BlueFairy GitHub App.
• Role and interests — we infer your likely role (for example frontend or backend) and the projects you work on from your recent commit history, so that updates are relevant to you.
• Slack data — if your team connects Slack, your Slack user ID and the channel we create for you, so we can deliver updates and sync reactions.
• Linear data — if your team connects Linear, issue and project details such as titles, statuses, assignees and comments.
• Figma data — design file names and structure from Figma projects you choose to connect.
• Messages — chat messages you send within BlueFairy, your reactions, and AI-generated responses.
• Push notifications — if you enable browser notifications, the push subscription details your browser gives us.
• Usage data — product usage events (for example, when an update is delivered or you open the BlueFairy widget), linked to your account, and basic server logs (request paths, timestamps and IP addresses) for debugging and reliability.

How we use your data

• To generate AI responses relevant to your team's codebase and designs.
• To deliver proactive notifications about repository and design updates, personalised to your role and interests.
• To associate your messages and context with your company workspace.
• To understand how BlueFairy is used, so we can fix problems and improve it.

We do not sell your data or use it for advertising. We don't use your data to make decisions that have legal or similarly significant effects on you; inferring your role only changes which updates you see, and your team can adjust it.

Legal basis

We process your data where it is necessary to provide the service your company has signed up for (performance of a contract), and for our legitimate interests in running, securing and improving BlueFairy. Where your company is the controller, it decides the legal basis for processing its repository and workspace data.

Third-party services

BlueFairy uses the following third-party services to operate:

• Google Gemini AI — repository, project and design context is sent to Google's Gemini API to generate responses. On paid API tiers, Google does not use this data to train models.
• Supabase — authentication and database hosting.
• Railway — server hosting.
• Vercel — frontend hosting.
• GitHub App — used to read repository data from repositories you select during installation. Access is read-only and enforced by GitHub.
• Figma API — used to read design file data you have authorised.
• Slack — used to deliver notifications and messages, if your team connects a Slack workspace.
• Linear — used to read issue and project data, if your team connects a Linear workspace.
• Sentry — error monitoring for our servers.

International transfers

Most of these providers process data in the United States. Where your data is transferred outside the UK, we rely on the safeguards in those providers' data processing terms, such as the standard contractual clauses with the UK International Data Transfer Addendum, or the UK–US data bridge where the provider is certified.

Data retention

Messages and AI-generated updates are stored persistently in your workspace and are accessible until your account is deleted. GitHub activity data (commit metadata, pull request summaries) is retained to power your team's morning digests. Excerpts of code changes are stored alongside the updates they relate to, so your team can ask follow-up questions about them; we never keep a full copy of your repositories. All of this is deleted within 30 days of your account or company workspace being removed. Server logs, error reports and backups expire automatically on our providers' standard schedules.

Your rights

You have the right to access, correct or delete your personal data, to restrict or object to how we process it, and to receive a copy of it in a portable format. To exercise any of these rights, email us at the address below; we'll respond within one month. Where your company is the controller, we may pass your request to them.

You can revoke BlueFairy's access at any time by uninstalling the GitHub App or disconnecting Slack, Linear or Figma in those platforms' settings.

If you're unhappy with how we've handled your data, you can complain to the UK Information Commissioner's Office (ico.org.uk). We'd appreciate the chance to put things right first.

Browser extension

The BlueFairy browser extension (for Chrome and Firefox) adds a widget to GitHub and Figma pages. It reads the page address to work out which repository you're viewing, and stores your authentication token and widget preferences in your browser's local storage. It communicates only with the BlueFairy server, and does not read page content, form data, or any information beyond what is described in this policy.

Contact

Questions about this policy? Email us at jakegordon53@gmail.com.