Privacy Policy

Last updated: 17 June 2026

QuietMerge ("we", "us") is a GitHub App that reviews Terraform and OpenTofu dependency-update pull requests, auto-merges the provably safe ones, and posts a verdict on anything that could break. This policy explains what we collect, why, and who we share it with. Questions: hello@quietmerge.dev.

What we collect

Installation metadata — your GitHub account or organisation login, and the IDs and names of the repositories you install QuietMerge on.
Pull request metadata — for dependency-update PRs: the PR number, author (the bot that opened it), branch name, and the before/after versions being bumped.
A redacted plan summary — when your CI runs terraform plan, it sends QuietMerge only a summary: the exit code and counts of resources that would be added, changed, or destroyed.

What we never receive. Your cloud credentials, your source code, your secrets, and the full terraform plan output all stay inside your own CI. The plan runs in your workflow; only the redacted summary above ever leaves it.

How we use it

To classify each dependency-bump PR as safe or risky and post a verdict.
To auto-merge pull requests you have opted in to and that are provably no-ops.
To keep an audit trail of verdicts and actions taken on your repositories.

Who we share it with

Anthropic — for risky PRs, the redacted plan summary and changelog text are sent to the Claude API to generate the plain-English verdict. No source, secrets, or credentials are included.
Railway — our hosting and database provider; data is stored on infrastructure they operate.
GitHub — we act on your repositories through the GitHub API to post comments and merge PRs.

We do not sell your data or share it with anyone else.

Storage and retention

Installation metadata, PR metadata, and verdicts are stored in a Postgres database on Railway and retained for audit purposes. When you uninstall the App we disable your repositories; you can request full deletion of your data at any time by emailing us.

Cookies

The setup and settings pages use strictly functional cookies — a signed session cookie and a CSRF token, both HttpOnly; Secure; SameSite=Lax. We use no advertising or tracking cookies and no third-party analytics.

Your rights

You can request access to, or deletion of, the data we hold about your installation by emailing hello@quietmerge.dev. Uninstalling the GitHub App stops all further processing.

Changes

We may update this policy; the "last updated" date above will change when we do. Material changes will be reflected on this page.