Privacy

Bisc is a service that reads the source code you upload and returns a written report. This page says what we keep, for how long, and who else sees it.

What we collect

Your account. Your email address and the account information supplied when you use an email link or Google sign-in.

Your brand brief. Your app’s name, purpose, audience, platform and optional public website or store listing. The shared brief is saved in your account preferences and copied into your project.

Your code. Your archive, accepted text source, proposed edits, and the working copy containing applied edits. We read source without running it.

The report and the chat. The findings we produce and the questions you ask about them.

Payment. Stripe handles payment details. Bisc stores the checkout reference, amount and payment status, without storing your card number.

How we use it

To review source, answer your questions and make the edits you authorize. Relevant source and conversation context are sent to Anthropic’s Claude API. Bisc does not train its own models on your source, project answers or conversations, and does not sell them.

When you ask Bisc to learn about your brand, we send the public link you supply to Jina’s page reader. Your answers and the returned public page text may be sent to Anthropic to prepare a brand brief. If the page or AI summary is unavailable, the brief uses your answers and tells you that.

If you connect an external AI through MCP, that AI can retrieve your projects and findings and send questions to Bisc’s specialists using your session token. Only connect a client you trust. The token expires with your session and can access the same records as your signed-in account.

How long we keep it

Source expires seven days after upload. A scheduled cleanup removes archives, extracted text, workspace copies, change proposals and conversations associated with that upload. Reports can retain short code excerpts as evidence. Reports remain until you delete the project or account. Export edits before the source expires.

Your shared brand brief remains in account preferences until you replace it or delete the account. The public page text used for the brief is processed for that request and is not saved as an upload.

Where it lives

Project data is stored with Supabase in Frankfurt, Germany. Cloudflare hosts the application. Anthropic processes relevant source for reviews and agent conversations. Stripe processes payments.

Your choices

You can delete a project or your whole account from Settings at any time. You can write to us to ask what we hold about you or to have it removed.