Last Updated: January 2026
Your privacy matters to us. This policy explains how dxTheory collects, uses, and protects your information.
dxTheory ("we," "our," or "us") is a developer insights platform that analyzes publicly available GitHub data to provide objective metrics about software engineers. We are committed to protecting your privacy and being transparent about our data practices.
This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you use our website and services. Please read this policy carefully. If you do not agree with the terms of this privacy policy, please do not access our services.
When you create an account, we collect information you provide directly, including your email address, display name, and profile information from OAuth providers (GitHub, Google, or Apple) you choose to authenticate with.
We analyze publicly available GitHub data to generate developer insights, including commits, pull requests, code reviews, repository contributions, and collaboration patterns. Important: We never store or access actual source code. Our analysis focuses solely on metadata and contribution patterns.
When an engineer explicitly grants access through our invitation flow, we may analyze private repository metadata to enhance insights. This access is entirely optional and requires explicit consent. Engineers control which repositories to share, and this access can be revoked at any time.
We automatically collect certain information when you use our services, including your IP address, browser type, device information, pages visited, features used, and interaction patterns. This helps us improve our services and user experience.
If you use our team features, we collect information about team membership, roles, collaborative activities, and shared insights within your team.
Payment processing is handled by third-party payment processors. We do not store complete credit card numbers or payment credentials. We retain only transaction records necessary for our services and legal compliance.
We use the information we collect to:
When someone purchases an insight using tokens, they gain access to the generated analytics for that developer profile for a period of 3 months. This access is renewable. Multiple users may purchase access to the same insight, and all current subscribers are notified when insight data is refreshed.
Within teams, insights and activity are shared according to role-based permissions. Team owners and researchers can view and manage team insights, while viewers can access purchased insights but cannot make purchases.
We share information with third-party service providers who perform services on our behalf, including Supabase (database and authentication), Resend (email delivery), and payment processors. These providers are contractually obligated to protect your information.
We do not sell, rent, or trade your personal information to third parties for their marketing purposes. We do not share your data with data brokers or advertising networks.
We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).
You can access your account information and settings at any time through your dashboard. Engineers can view their own insights for free, with data refreshed every 48 hours.
You have the right to request deletion of your personal data. You can delete your account through your settings, or contact us to request deletion. Please note that some information may be retained as required by law or for legitimate business purposes.
You have the right to receive a copy of your personal data in a structured, machine-readable format. Contact us to request a data export.
You can manage your notification preferences in your account settings. You may opt out of marketing communications at any time, though we may still send you transactional messages related to your account.
If you are a resident of the European Economic Area, you have additional rights including the right to access, rectify, port, and erase your data, as well as the right to restrict or object to certain processing activities.
If you are a California resident, you have the right to know what personal information we collect, request deletion, and opt out of the sale of personal information (though we do not sell personal information).
We implement appropriate technical and organizational measures to protect your personal information, including:
While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.
Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that are different from the laws of your country.
We take appropriate safeguards to ensure that your personal information remains protected in accordance with this Privacy Policy, including using standard contractual clauses approved by regulatory authorities where required.
Our services are not intended for individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take steps to delete that information.
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. For significant changes, we will provide additional notice, such as an email notification or a prominent notice on our services.
We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.
If you have any questions about this Privacy Policy or our data practices, please contact us at:
Email: [email protected]
We will respond to your inquiry within 30 days.