Privacy Policy

Gungi (“we”, “our”, or “the Service”) is operated by Shogun Inc. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our GitHub Marketplace application and related services.

2.1 Information from GitHub

When you install and authorize Gungi, we receive the following from GitHub:

• GitHub user profile (username, email address, avatar URL)
• Organization membership and role information
• Repository metadata (name, description, visibility)
• Issue and Pull Request content for repositories where Gungi is enabled
• GitHub Marketplace subscription and billing information

2.2 Information Generated by the Service

• Chain execution logs and reports
• Agent configuration and prompt templates
• Usage metrics (execution count, seat usage, concurrent workflows)

2.3 AI Provider Credentials

When you configure AI providers (Claude, OpenAI, Gemini), your API keys or OAuth tokens are encrypted and stored securely. We never use your API keys for any purpose other than executing chains on your behalf.

• Execute AI-powered development workflows (chains) on your repositories
• Manage your subscription, billing, and seat allocation
• Provide customer support and respond to inquiries
• Improve the Service and develop new features
• Enforce our Terms of Service and prevent abuse

We do not store your source code. When Gungi executes a chain, your code is temporarily accessed within an isolated execution environment (GitHub Actions runner or Docker container). After execution completes, no source code is retained on our servers.

Execution reports and logs may contain file paths, function names, or code snippets generated by AI agents. These are stored as part of the execution record and are accessible only to authorized members of your organization.

We do not sell your personal information. We may share data with:

• AI Providers: Issue content and code context are sent to the AI provider you configure (Anthropic, OpenAI, Google) to generate implementations, reviews, and tests. This is governed by the respective provider's privacy policy.
• GitHub: We interact with GitHub APIs to create branches, pull requests, and comments on your behalf.
• Service Providers: Infrastructure providers (cloud hosting, databases) that help us operate the Service, bound by data processing agreements.
• Legal Requirements: When required by law, court order, or governmental authority.

• Account data: Retained while your account is active. Deleted within 30 days of account deletion.
• Execution logs: Retained for 90 days, then automatically purged.
• Billing records: Retained for the period required by applicable tax and accounting laws.

We implement industry-standard security measures including encryption at rest and in transit, access controls, and regular security reviews. AI provider credentials are encrypted using AES-256 before storage.

You have the right to:

• Access: Request a copy of data we hold about you
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your data
• Export: Receive your data in a portable format
• Revoke access: Uninstall the GitHub App at any time to revoke all repository access

To exercise these rights, contact us at privacy@gungi-ai.com.

Your data may be processed in Japan and the United States, where our servers and AI provider services are located. We ensure appropriate safeguards are in place for cross-border data transfers.

Gungi is not directed at individuals under the age of 13. We do not knowingly collect personal information from children.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the “Last updated” date.

If you have questions about this Privacy Policy, please contact us at:

• Email: privacy@gungi-ai.com
• Support: gungi-ai.com/support