Privacy

What Review Box sends, where, and what it keeps. Last updated 26 October 2026.

Your code stays between you, GitHub and the AI provider you pick. Review Box has no accounts, ads or third-party tracking, and this website sets no cookies of its own.

Who we are

Review Box is made by CODERBOX LTD (VAT BG203244773), a Bulgarian company. For anything about your data, write to coderbox@rstankov.com.

Your code

Review Box talks to GitHub directly from your computer. Your repositories, pull requests and GitHub token are never sent to us, unless they show in a feedback screenshot you choose to send. The token is kept in your system's secure storage when it offers one.

AI

When you use AI features, your code and prompts go straight from your computer to the provider or local agent you picked, under that provider's own terms. API keys stay on your computer. Nothing passes through us.

Your computer

Update checks, billing and feedback send identifiers for your computer, the app version and your operating system. Billing also sends your license key. They are used to deliver updates and run trials and licenses, which is needed to provide the app you use or bought, and to understand how Review Box is used, which is our legitimate interest. They are kept while they are needed for that.

This website

We may measure visits to this website, such as pages viewed and where visitors come from, with tools that use no cookies and do not identify you. Your theme choice and the reactions you leave are kept in your browser and never sent to us.

Videos are YouTube embeds in privacy-enhanced mode, loaded only when you press play. Playing one sends your IP address and browser details to Google, which may store data in your browser under its own privacy policy.

Feedback

Feedback you send includes your message, your email only if you add it, and a screenshot of the window only if you pick “Feedback with Screenshot”. It is used to answer you and improve Review Box, which is our legitimate interest, and kept for as long as it is needed for that.

Payment

Payments are processed by Stripe. Card details never reach us. Stripe shares your email, name, billing address and VAT number if you gave one. They are used to run your subscription and kept for as long as tax law requires.

Who else handles it

Stripe processes payments, Cloudflare hosts our servers and stores the data above, and Google serves the videos you play. All may process it outside the European Union, under the European Commission's standard contractual clauses or the EU–US Data Privacy Framework. We do not sell your data or share it with anyone else.

Security

Everything Review Box sends to us travels over HTTPS. We never hold card details. If you think someone else is using your license key, email us and we will replace it.

Your rights

You can ask to see, correct, delete or take a copy of your data, or object to how it is used, by writing to the email above. Deleting your billing data also ends your license, so we check with you first. You can also complain to the Bulgarian Commission for Personal Data Protection (cpdp.bg) or the data protection authority where you live.

Changes

When this policy changes, the date at the top changes with it. We will not start collecting anything this page says we don't.