Access Review Hub

Who has access — reviewed and proven

Privacy

What this app collects regardless of configuration

These are properties of how the app is built, not choices made per deployment.

  • Sign-in identity. Authentication is delegated to GitHub. When you sign in, the app receives your name, email address and avatar from GitHub. No password is created or stored here.
  • Error reports. When something breaks, a report is sent to our error-tracking provider so it can be fixed. Reports do not identify you individually.
  • Usage analytics — only if you agree. Nothing is collected and nothing is stored in your browser until you accept. Declining is the default state.

Access Review Hub records the information needed to authenticate organisation members, import accounts, route reviews, record decisions, and produce attestation reports.

Your choices

You can change your analytics choice at any time. It is a per-browser setting.

What this app collects

  • Your GitHub name, email address, avatar, organisation memberships, and role.
  • Imported account identifiers, display names, entitlements, review decisions, reasons, and timestamps.
  • Invitation email addresses and roles, session records, sign-in events, and a consent record containing the notice version and choice.
  • Audit records containing an actor reference and action, never an actor email address.

This service does not collect payment data, health data, or government-identifier data. It does not collect passwords or credentials. The authentication adapter stores sign-in tokens as its only secret data.

What each service receives

These are the data categories sent to each implemented service.

Sentry

Error messages, stack traces, failed-request technical details, and organisation id tags.

PostHog

Consented analytics events and organisation id tags. Analytics is disabled until you opt in.

Postmark

Recipient email address, sender address, notification template, and template variables for transactional messages.

App database (Convex)

Identity, review, and consent records needed to run access reviews.

How long it is kept

  • Application data: Indefinitely -- nothing expires
  • Audit log: Indefinitely -- append-only, no application delete path
  • Backups: 14 days
  • Error reports (Sentry): No error report has ever been sent: NEXT_PUBLIC_SENTRY_DSN is not configured, so every Sentry call in this app is inert. The Sentry organisation exists (greenpath-labs, US region) on the Developer plan, whose documented retention for error events is 30 days. If and when the key is configured, that is the period that applies
  • Product analytics (PostHog): No analytics data exists yet. Analytics remains opted out until you explicitly accept; only visitors who consent are eligible for analytics.
  • Platform logs (Vercel, Convex functions): Provider-managed operational window; this app does not retain platform logs in its application database
  • Exported artifacts: Attestation PDFs and CSV exports are stored with the campaign that produced them and kept for the life of the customer organisation, because they are the evidence the review was performed; they are not temporary artifacts and nothing expires them

Your rights, and how to exercise them

Correct your profile in Settings. For anything else -- a copy of your data, deletion, restriction, objection, or a portable copy -- write to support@greenpathlabs.io. We respond within one month, free of charge.

Supervisory authorities

You may complain to a data-protection authority if you believe your rights have not been respected. The authorities for the jurisdictions where this notice applies are:

  • United States: Federal Trade Commission (FTC).
  • European Union: Irish Data Protection Commission (DPC).
  • United Kingdom: Information Commissioner's Office (ICO).

Questions

Contact support@greenpathlabs.io with any privacy question or request.