← elek.sh

Privacy Notice

Status: beta notice. Last updated 2026-06-28.

Elek is a comment-only GitHub pull request reviewer. The hosted service processes pull request metadata and code context only to provide reviews and operate the service. Telemetry is opt-in and defaults to off.

Data processed for reviews

When the GitHub App receives an eligible pull request event, Elek may process repository name, installation id, pull request number, pull request metadata, bounded diff/code context, and review job status. The review engine sends the code context needed for the review to the configured model provider.

Hosted model provider

Hosted mode uses the model provider configured by Elek for the runner. BYO mode uses the provider key configured by the account administrator for that account. Model provider processing is limited to review execution; do not install Elek on repositories whose policies prohibit third-party model processing.

Telemetry

Telemetry defaults to none. If enabled, aggregate telemetry excludes source, diffs, prompts, raw file paths, author identities, repository names, branch names, commit SHAs, secrets, and blocked PII/secret-looking values. Finding metadata telemetry remains metadata-only and is validated before ingestion.

Retention and minimization

Elek stores operational delivery/job records needed for idempotency, status, billing, and abuse prevention. Raw GitHub webhook payloads are not retained by default; historical raw payloads are purged by the privacy minimization migration.

Secrets

Provider keys saved in the dashboard are encrypted at rest and are not returned to the browser after saving. They are decrypted only for runner dispatch in BYO mode.

Contact

For privacy requests or security issues, contact the project maintainers through the GitHub repository linked from the site.