[ privacy ]
[ on your machine ]
tony doesn't call a model. Your agent reads your code where it already is. tony sends nothing to a model provider.
[ what gets uploaded ]
Publishing a review uploads it here. It includes the diff and the code around each change, so your source code is stored on this site.
tony also keeps your username, avatar, and account id; each review's repo name, range, and summary; which agent and model wrote it; and your sign-in session. tony never sees your password.
[ protection ]
Reviews are encrypted with AES-256-GCM in a private store. Sign-in tokens are stored only as hashes.
tony holds the key. Anyone who can run code on this server, or a legal demand to tony, can read a review. Don't publish code you couldn't share with tony.
[ who can read a review ]
Anyone signed in with the link. Treat it like a password.
[ deleting ]
Reviews are deleted automatically after 30 days. You can delete one sooner, or delete your whole account, from your reviews. Both take effect immediately.
No ads, no third-party analytics, nothing sold.