Privacy Policy
Last updated: May 2025
Overview
BlueFairy is a developer tool that connects to your GitHub and Figma accounts to provide AI-driven context and proactive updates to your team. This policy explains what data we collect, how we use it, and who we share it with.
Data we collect
- Account information — your email address and GitHub username, collected when you sign in via GitHub OAuth.
- GitHub data — repository names, file structure, commit history, and pull request activity from repositories you choose to connect.
- Figma data — design file names and structure from Figma projects you choose to connect.
- Messages — chat messages you send within BlueFairy, and AI-generated responses.
- Usage data — basic server logs (request paths, timestamps) for debugging and reliability.
How we use your data
- To generate AI responses relevant to your team's codebase and designs.
- To deliver proactive notifications about repository and design updates.
- To associate your messages and context with your company workspace.
We do not sell your data or use it for advertising.
Third-party services
BlueFairy uses the following third-party services to operate:
- Google Gemini AI — repository and design context is sent to Google's Gemini API to generate responses. On paid API tiers, Google does not use this data to train models.
- Supabase — authentication and database hosting.
- Railway — server hosting.
- GitHub API — used to read repository data you have authorised.
- Figma API — used to read design file data you have authorised.
Data retention
Chat messages are retained for the duration of your active session. We do not retain GitHub or Figma content beyond what is needed to generate a response.
Your rights
You can request deletion of your account and associated data at any time by contacting us. You can revoke BlueFairy's access to your GitHub or Figma account at any time through those platforms' OAuth settings.
Chrome extension
The BlueFairy Chrome extension injects a UI overlay on GitHub and Figma pages. It reads your authentication token from local browser storage to identify you, and communicates only with the BlueFairy server. It does not read page content, form data, or any information beyond what is described in this policy.