PRFlow Sign In

Privacy Policy

Last updated: January 10, 2026

1. Introduction

PRFlow ("we", "our", or "the Service") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our GitLab to Slack notification service.

2. Information We Collect

We collect the following types of information:

Account Information

  • GitLab username and email address
  • GitLab OAuth tokens (encrypted)
  • Slack workspace and channel information
  • Slack OAuth tokens (encrypted)

Webhook Data

  • Merge request metadata (title, author, status, URL)
  • Pipeline status information
  • Comment content (for notification delivery only)

Usage Data

  • Service usage statistics
  • Error logs for troubleshooting

3. How We Use Your Information

We use the collected information to:

  • Deliver merge request notifications to your Slack channels
  • Display pipeline status in notifications
  • Sync comments from GitLab to Slack threads
  • Authenticate and authorize your account
  • Improve and maintain the Service
  • Respond to support requests

4. Data Storage and Security

We take the security of your data seriously:

  • OAuth tokens are encrypted at rest using industry-standard encryption
  • All data is transmitted over HTTPS
  • Webhook payloads are processed and not permanently stored
  • We use secure cloud infrastructure with regular security updates

5. Data Retention

We retain your account information for as long as your account is active. Webhook data (merge request content, comments) is processed in real-time and not stored beyond what is necessary for delivery. You may request deletion of your account and associated data at any time.

6. Third-Party Services

PRFlow integrates with the following third-party services:

  • GitLab - For authentication and receiving webhook events
  • Slack - For delivering notifications to your workspace

Your use of these services is governed by their respective privacy policies.

7. Your Rights

You have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data
  • Disconnect your GitLab or Slack integrations at any time
  • Export your configuration data

8. Cookies

PRFlow uses essential cookies for authentication and session management. We do not use tracking cookies or third-party analytics that track you across websites.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of any material changes by posting the new policy on this page and updating the "Last updated" date.

10. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at hello@prflow.dev.