Privacy & source access

Information processed

We process repository information and content you submit to generate and deliver videos. Source code access is read-only. Submitted code is not executed. On repositories an admin enables, Vorticel automatically generates stories with videos for new PRs and posts story-link comments and reactions. Existing open PRs require a separate request. Repository writers can also request a new video with an @baa command.

Third-party processing

We use service providers for AI processing, speech generation, hosting and content delivery. Relevant source content, narration, generated media and request data may be processed by these providers to perform those services. Repository credentials are excluded from AI processing.

Repository access

GitHub sign-in stores your GitHub ID, username and encrypted access credentials. For private repositories, you choose which repositories the GitHub App can read. Source-code access uses read-only Contents permission. GitHub publishing uses Issues and Pull requests write permissions for conversation comments and reactions. Pull requests write also grants broader PR-editing capability; Vorticel uses it for walkthrough comments. Dashboard access is limited to repositories both you and the app can read. An admin must separately enable automation for each repository. Automated generation rechecks the enabling admin’s access before starting. Disabling automation stops pending requests; already queued or running videos may finish. You can remove repositories or uninstall the app in GitHub at any time. Credentials are not sent to AI providers or included in downloads.

Videos and sharing

Vorticel posts a link to the hosted PR story using the GitHub App. No separate upload token is required. Stories begin with a narrated video and include the pinned code changes. Walkthroughs generated from the repository dashboard, including their selected source evidence, are visible to signed-in people who currently have access to that repository through the Vorticel GitHub App. Access is checked when viewing the walkthrough and its downloads. Dashboard walkthroughs use authenticated links, not public share links. Older personal videos remain private to your account unless you share them. Anyone with a share link can watch and download that video until the link expires or you revoke it. Revoking a link cannot remove copies already downloaded. Share links do not include source files or repository credentials.

Data retention

We retain submitted source content, generated materials, usage records and videos to support the service, retries and troubleshooting. Disconnecting a repository does not delete previously retained data. No automatic deletion period is in place yet; email linas@kodan.dev to request deletion.

Cookies and browser storage

Necessary cookies support sign-in and shared-video access. A pending PR URL is stored temporarily in your browser so you can resume after signing in. This site does not include third-party analytics or advertising scripts.

Operator access

The service operator can access retained data and logs for support and operation. This is not end-to-end encrypted storage.