Security & Trust

Our Commitment

ProgressCue is built for engineering teams, and we understand that trusting a third party with your development data is a serious decision. Security and data protection are foundational to how we build and operate our product.

Minimal Data Access

We only access the pull request metadata needed to generate your analytics: titles, timestamps, review timelines, and contributor information. We never access source code, file contents, or commit diffs. Your intellectual property stays on GitHub.

Authentication

ProgressCue uses GitHub OAuth for authentication. We never ask for or store passwords. OAuth access tokens are encrypted at rest and scoped to the minimum permissions required.

Encryption

All data is encrypted at rest in our databases and in transit via HTTPS/TLS for every connection between your browser, our servers, and third-party services.

Infrastructure & Data Residency

Your data is stored on servers located in the European Union. Our hosting providers operate under strict data processing agreements (DPAs) and maintain industry-standard physical and logical security controls.

Access Controls

We enforce strict internal access controls. Access to production data is limited to authorized personnel only, following the principle of least privilege.

Data Retention & Deletion

We retain your data for as long as your account is active. If you decide to leave, request account deletion and we will remove all your personal data within 30 days. Contact us at hello@progresscue.com to make a request.

Third-Party Services

We integrate with a limited number of third-party services, each operating under data processing agreements:

• GitHub API — To retrieve pull request metadata for your connected repositories
• Google Analytics (GA4) — For anonymized website usage analytics (IP anonymization enabled)
• Tawk.to — For live chat support on our website
• Hosting providers — Infrastructure partners who store and process data under strict DPAs

Compliance

We are committed to protecting your privacy and handling data responsibly. We provide full transparency about data collection and give you control over your information. For details on your rights and how we handle your data, see our Privacy Policy and Cookie Policy.

Reporting Security Issues

If you discover a security vulnerability or have concerns about our security practices, please contact us at hello@progresscue.com. We take all reports seriously and will respond promptly.