# Data handling and privacy

> How devlo handles your code, what it keeps, who in your organization sees it, how to delete it, and where to find its SOC 2 report and legal documents.

devlo doesn’t store your source code or train on it. It keeps the results of its work, your settings, and your chats for your dashboard and analytics, until you ask it to delete them.

## Your code

* devlo uses your code only to provide the service you ask for.
* For reviews, coding runs, and automations, devlo works on a temporary copy of your repository and deletes it when the run ends.
* devlo has zero-data-retention agreements with its AI model providers.
* Data is encrypted in transit.
* Each run happens in an isolated environment.
* Access to your code is limited to the systems that provide the service and to authorized devlo staff.

## What devlo keeps

* Account information and sign-in details.
* Organization settings, such as repositories, members, automations, and integrations.
* Review comments devlo posted, with the lines of code they’re on, and their outcomes, for analytics.
* Titles, descriptions, and activity of pull requests on connected repositories, for analytics.
* Lessons saved from review feedback, per repository. See [Teach devlo](/code-review/customize/#teach-devlo).
* Run history.
* Chat history for projects, repository chats, and the Assistant, and the files of projects you build in devlo. Changes from a repository chat live on a branch in your GitHub repository.

## Who in your organization sees what

Owners and admins see **Analytics** (including per-member credit use on **AI Usage**), **Contribution** (including the code behind each outcome), run history, and billing. Members with the user role don’t.

## What is public

* Preview links are public. Anyone with one can open the preview of a project or repository chat, even when you aren’t using it. See [Preview, Code, and Admin](/build/preview-and-code/).
* Published sites are public. See [Publish and custom domains](/build/publish/).

## Delete your data

Removing devlo from GitHub, Slack, or Jira stops new work but keeps your reviews, analytics, and chats. Uninstalling the GitHub App also removes members and roles.

To delete your account or personal information, use the [contact form](https://devlo.ai/contact-us). To delete a project or repository chat, or to unpublish a site, email <help@devlo.ai>. To remove devlo from GitHub, Slack, or Jira, see [Remove devlo’s access](/security/access/#remove-devlos-access).

## SOC 2 and legal documents

devlo is SOC 2 Type II compliant and runs regular security audits and penetration testing. Its SOC 2 reports are in the Trust Center.

[Open the Trust Center](https://app.vanta.com/devlo.ai/trust/7qm9y0w0kwy29p3tqzhtq)

* [Sub-processors](https://devlo.ai/subprocessors)
* [Terms of Service](https://devlo.ai/tos) and [Privacy Policy](https://devlo.ai/privacypolicy), the authoritative sources for this page

For a security review or a data processing agreement, [contact sales](https://devlo.ai/contact-us).

## Related

* [Access and permissions](/security/access/)