paritrix
Install on GitHub

Privacy policy

What Paritrix keeps, and what it doesn't.

Paritrix reads your code to measure design-system drift. It keeps the results, never the code. This page lists everything it stores, who processes it and how to remove it.

Effective 12 October 2026

What we collect

  • Your GitHub account. When you sign in: your GitHub user ID, username, name and avatar, and which Paritrix installations and repositories you can access. This sits in a signed cookie in your browser. We don't keep your GitHub access token.
  • Repositories you install Paritrix on. Repository ID, owner, name and default branch.
  • Scan results. For each scan: the commit, branch or pull request; counts; and each hardcoded value found, with its file path, line, the value and the suggested tokens. Also component drift results (component and property names), team names from CODEOWNERS, and whether a pull request's commit messages show it was written with an AI coding tool.
  • Visual checks. When you run one: screenshots of your deployed Storybook stories and of the matching Figma frames.
  • Settings you add. A Figma personal access token (encrypted), a Slack incoming-webhook URL, your weekly digest choice and who last changed them.
  • Tokens. Paritrix API tokens and the access granted to connected apps (Claude, Claude Code, Codex) are stored only as one-way hashes, with the app's name, the repositories it can read and when it was last used.
  • Server logs. Our hosting provider records requests (IP address, URL, time) to run and secure the service.

Your source code

For each scan, Paritrix downloads the commit from GitHub into a temporary folder, reads it and deletes the folder when the scan ends. We don't keep copies of your code and never use it to train AI models. Paritrix never sends your source code to an AI provider. When you run "Find matches" on the Components tab, Paritrix sends Anthropic the names of your components, their file paths, prop names and types, and your Figma components' names and properties, so Claude can suggest which ones belong together. Anthropic doesn't train on this data.

The local connector (@paritrix/mcp) runs on your machine and sends nothing to Paritrix. The Figma plugin's Lint view runs inside Figma and sends nothing either.

How we use it

Only to run Paritrix for you: scan your repositories, show your dashboard and report, comment on pull requests, open fix pull requests when someone asks for one, send the digest you turn on, and answer the apps you connect, for the repositories you allowed. We don't sell data, show ads or use analytics or tracking tools.

Who processes it

  • GitHub: sign-in and access to the repositories you install Paritrix on.
  • Vercel: hosting and request logs.
  • Supabase: the database, in Seoul, South Korea.
  • Figma: only if you add a Figma token; Paritrix reads your files' components and exports frames.
  • Slack: only if you add a webhook; Paritrix posts your weekly digest to it.
  • Anthropic: only when you run "Find matches"; Claude receives component and property names (never source code) to suggest matches.
  • Apps you connect (Claude, Claude Code, Codex, the Figma plugin) receive the results of the tools they call, for the repositories you allowed.

Cookies

One cookie keeps you signed in, and a short-lived one protects the GitHub sign-in step. No analytics or advertising cookies.

Retention and deletion

  • Scan results and screenshots stay while Paritrix is installed on the repository, so you can see history.
  • API tokens expire after 90 days. Connected apps get one-hour access that renews for at most 90 days after you connect them. Revoke either in Settings at any time.
  • To delete your data, uninstall the Paritrix GitHub App and email us. We delete the repositories' data within 30 days.

Security

Everything travels over HTTPS. The database is reachable only from Paritrix's servers. Tokens are stored as hashes, and Figma tokens are encrypted. Paritrix never pushes to your existing branches; fixes arrive as pull requests you review.

More, and how to report a vulnerability: Security.

Your choices

You can ask to see, correct or delete the data Paritrix holds about you or your repositories. Email us and we'll answer within 30 days. Paritrix isn't meant for children under 16.

Changes and contact

If this policy changes, the date at the top changes with it, and anything that widens what we collect is announced before it takes effect.

Paritrix is run by Aditya Jain. Questions or requests: aditya.official824@gmail.com.