Privacy Policy

Last updated October 21, 2026

Who is responsible

OpenWings Automação Comercial Ltda. (CNPJ 63.852.648/0001-06), Rua Padre João Wislinski, 441, Santa Cândida, Curitiba – PR, CEP 82630-494, Brazil, is the controller for the data described here. Its data protection officer, the encarregado the LGPD requires, is Gustavo Salomé Silva.

Signing in

You sign in with Google or with GitHub. All we receive from them is what their consent screen shows: your name, your email address and your profile picture. We use them to create your account and to recognise you when you come back. We ask them for nothing else (not your Gmail, your Drive, your calendar or your contacts) and the read-only repository access described above comes from the GitHub App you install, not from signing in. We do not sell what these providers give us, we do not use it for advertising, and we do not train models on it. To disconnect, remove featury at myaccount.google.com/permissions or at github.com/settings/applications. featury's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

What we access

When you connect a repository, featury is granted read-only access through the GitHub App you install, scoped to the repositories you select. We never request write access and never modify your code.

How your code is handled

Repositories are cloned to analyze them. Files that commonly hold secrets (such as .env files, keys, and certificates) are never read, and text that looks like a secret is removed before anything is sent to an AI provider.

Data we store

We store the analysis featury produces (your feature inventory, classified changes, and related metadata) along with the account and organization information needed to operate the service. We do not sell your data.

Sub-processors

featury runs on third-party infrastructure. Supabase holds accounts and handles signing in. Our email provider delivers the messages described below: it receives your address, your name and the message itself.

Analysis and chat run on AI models that we reach through OpenCode Go. Google Gemini turns text into numbers we can search, and reads the images and voice notes people attach. If every model on OpenCode Go fails, featury tries OpenRouter as a last resort. These providers get only what a task needs: pieces of your code and its history (files, the changes in each commit, commit and pull request text), and the questions and requests people write in featury. Before code is sent, featury replaces text that looks like a secret with [REDACTED]. That covers private keys, access tokens, passwords and web addresses with a password inside. It matches common formats, so an unusual secret could get through.

featury never trains a model on your code. One of the AI providers we use can. Our first model is Muse Spark, from Meta. Muse Spark is much cheaper to use, and in return Meta may use the prompts it receives and the answers it gives to train future Meta models. That includes the pieces of your code that featury sends to it, and Meta may keep them. OpenCode Go lists our other models (MiMo, GLM, Qwen and LongCat) as not used for training and not kept. OpenRouter and Google Gemini handle what they receive under their own terms.

To keep a repository away from these providers, disconnect it in the app. featury stops reading it and deletes its analysis. What a provider has already received stays with that provider, and featury cannot take it back.

AI apps and agents

Connecting featury to Claude, ChatGPT or another AI app lets that app work as you. What it can see, what we keep and how to cut it off are on their own page: Privacy when you connect an AI app

Emails we send

About your account: sign-up confirmation, password resets, invitations, notices about your own products (a request that shipped, an edition that published) and the alerts you set up. They are part of the service, so they can't be turned off while the account exists.

News and tips: the first-steps series over your first two weeks. You choose at sign-up, and you can change your mind whenever you like. Use the unsubscribe link at the bottom of every one, or the First-steps emails switch in Account → Preferences.

We don't sell your email address.

Your choices

You can disconnect a repository or delete your organization at any time, which removes the associated analysis. For questions about your data, contact us at the address below.

Your rights

Under the LGPD and the GDPR you can ask us to confirm whether we hold data about you, to show it to you, to correct it, to delete or anonymize it, to hand it over in a portable form, to tell you who we shared it with, and to stop processing where our basis is legitimate interest. Disconnecting a repository or deleting your organization you do yourself, in the app. Everything else goes to the address below and is answered within 15 days.

Cookies and analytics

This marketing site sets no cookies, runs no analytics and carries no advertising trackers. Nothing here follows you. The app keeps what it needs to work: your sign-in session and the interface language you chose. It also keeps the email you type on a sign-in screen, in this browser only and for up to 30 minutes, so the next sign-in screen can fill it in. Signing in clears it. If we ever add analytics, this section says so before we do.

Contact

Questions about this policy? Email privacy@featury.app.