Privacy Policy

Universal Global Services Ltd ("UGS", "we", "us") operates TriageFlow (triageflow.app). This Privacy Policy explains what personal data we process when you use TriageFlow and the rights you have under applicable law, including the UK GDPR and the EU GDPR.

1. Data controller and contact

The controller is Universal Global Services Ltd, a company registered in England and Wales (Company No. 17423506) with registered address 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom.

Contact: [email protected].

Legal entity: Universal Global Services Ltd (UK). Support: [email protected].

2. Data we process

• Account data (sign-in with GitHub): when you sign in with GitHub we receive your GitHub account identifier, username, display name, avatar and email address where GitHub permits that sharing. We use this data only to create your account, sign you in and keep the service secure.
• Repository integration (GitHub App): connecting repositories uses the separate TriageFlow GitHub App, which is a repository integration and not a sign-in method. Through it we receive repository names, issue titles and bodies, labels, comments and metadata for the repositories you connect, so that we can triage issues.
• Triage data: AI triage results, suggested priorities and labels, duplicate candidates, confidence scores and triage history.
• Usage data: triage runs, quota usage, plan state and billing state.
• Payment data: processed by Stripe on our behalf. We do not store card numbers. Stripe may collect billing address and VAT ID for tax purposes.
• Support data: messages you send to our support addresses and the related customer issue records.

3. Legal bases and purposes

• Performance of a contract: operate your account, triage issues, apply the automation you have enabled and provide support.
• Legitimate interests: service security, abuse prevention, product improvement and aggregate analytics.
• Legal obligation: tax, accounting and regulatory record-keeping.
• Consent: where local law requires it for marketing or non-essential cookies.

4. Sharing

We share data only with processors that help us run the service, under data-processing agreements, and where legally required. We do not sell personal data. Processors we use:

• Stripe — payment processing and tax calculation (Stripe Tax) at checkout.
• Amazon SES — transactional email delivery (account verification, notifications).
• Resend — transactional email delivery.
• Brevo — transactional email delivery.
• OpenRouter — AI model access for issue triage (issue content only).

VAT registration applied for; not yet valid.

5. Retention

We retain account data while your account is active and thereafter only as required for tax, legal and security purposes. Financial records are typically kept for up to six years. Triage history is retained while your repository remains connected.

6. Your rights

Depending on your jurisdiction you may have rights to access, rectify, erase, restrict or port your personal data, and to object to processing. For data subject requests contact [email protected]. We respond within 30 days.

7. International transfers

Data may be processed in the United Kingdom, the EU and the United States. Where transfers occur outside the UK or EEA we rely on appropriate safeguards such as UK or EU Standard Contractual Clauses.

8. AI features and EU AI Act transparency

TriageFlow uses AI (large language models) to analyse new issues and to suggest priorities, labels and duplicate candidates. In line with the transparency requirements of the EU AI Act (Regulation (EU) 2024/1689): AI triage output is advisory and confidence-gated, meaning results below our confidence threshold are surfaced as suggestions rather than applied, automation can be disabled at any time through the operational controls, and we do not use these features for automated decisions that produce legal effects concerning you. AI processing relies on the legal bases described in Section 3.

9. Changes

We may update this policy from time to time and will notify you of significant changes through the service or by email.

Last updated: 27 September 2026.