Perillo Privacy Policy
Last Updated: September 7, 2026
This Privacy Policy explains how Perillo, Inc. (“Perillo,” “we,” “us,” or “our”) collects, uses, discloses, and otherwise processes information when you use FlowTrace, visit our website at https://www.perillo.ai, communicate with us, or otherwise interact with our products and services.
FlowTrace includes both downloadable software that runs on your device (the “Software”) and hosted services operated by Perillo (the “Services”).
This Privacy Policy should be read together with our Terms of Service.
If you have questions about this Privacy Policy or our privacy practices, contact us at support@perillo.ai.
1. Information We Collect
The information we collect depends on how you use FlowTrace.
Information You Provide to Us
Account information. When you create a Perillo account, we may collect information such as your name, email address, account credentials, and other information necessary to create and maintain your account.
If you create or authenticate your account through GitHub or another third-party service, we may receive information made available by that service, such as your username, user ID, email address, and profile information.
Payment information. If you purchase a paid FlowTrace plan, payment information is processed by our payment provider. Perillo does not need to receive your complete payment-card number. We may receive transaction information such as your billing status, subscription plan, payment token, transaction identifiers, and limited payment-method details.
Communications. If you contact us, we collect the information contained in your message and any other information you choose to provide.
Information From Connected Accounts
If you use the hosted Services, you may connect a source-code hosting account such as GitHub.
When you connect an account, we may receive:
- your account identifier and profile information;
- authorization credentials or tokens;
- information about repositories available to your account;
- the repositories you choose to connect; and
- information made available through the permissions you grant.
We use this access to provide FlowTrace. You control which repositories you connect and may revoke access through FlowTrace or the applicable third-party provider.
Your Code
When you use the hosted Services, FlowTrace reads source code and related repository information from repositories you choose to connect in order to generate analysis.
This may include:
- source-code contents;
- configuration files;
- file, module, class, function, and symbol names;
- repository structure;
- commit information and commit history; and
- other information contained in or associated with the repository.
Your Code may incidentally contain personal information, such as names or email addresses in commit history, comments, configuration files, or other repository contents.
FlowTrace is not designed for storing or processing sensitive personal information as a primary purpose. You should not intentionally use FlowTrace to process health information, financial-account credentials, government identification numbers, information about children, or similar highly sensitive information unless it is incidental to a repository you are authorized to analyze.
Derived Data and Output
The Services may generate and retain information derived from repositories you connect, including:
- file, module, and symbol names and relationships;
- structural information about a codebase;
- dependency graphs;
- commit identifiers;
- analysis results;
- reports and visualizations; and
- other output generated by FlowTrace.
We refer to these materials collectively in this Privacy Policy as “Derived Data” and “Output.”
Information Collected by the Software
The downloadable Software primarily analyzes repositories on your own device.
The Software is designed so that source-code contents, repository names, file paths, and commit identifiers analyzed locally are not transmitted to Perillo as part of that local analysis.
The Software may communicate with Perillo for account, licensing, security, diagnostic, update, and telemetry purposes.
Account validation. When the Software verifies your account or license, it may transmit information such as:
- your Perillo account identifier;
- Software version; and
- operating-system or platform information.
Optional usage telemetry. Unless disabled, the Software may send limited diagnostic and usage information such as:
- Software version;
- operating system and architecture;
- command or feature used;
- duration or performance information;
- error category; and
- a randomly generated installation identifier.
The installation identifier is intended to distinguish installations for telemetry purposes and is not intended to contain information from your repository.
Telemetry is not intended to include source-code contents, repository names, file paths, commit identifiers, or other code-derived content.
Where available, you may disable optional Software telemetry using the controls provided with FlowTrace.
Information Collected Automatically Through Our Website and Services
When you visit our website or use the hosted Services, our systems and service providers may automatically receive technical information such as:
- IP address;
- browser type;
- device and operating-system information;
- pages or features accessed;
- dates and times of access;
- referring pages;
- log and diagnostic information; and
- information about interactions with the Services.
We use this information to operate, secure, troubleshoot, and improve FlowTrace.
2. How We Use Information
We may use information we collect to:
- create, authenticate, and maintain your account;
- provide the Software and Services;
- access repositories you choose to connect;
- analyze Your Code and generate Output;
- maintain and improve FlowTrace;
- troubleshoot bugs and technical problems;
- monitor performance and reliability;
- protect against fraud, abuse, security threats, and unauthorized access;
- administer subscriptions and payments;
- provide customer support;
- communicate with you about your account, FlowTrace, and changes to our services or policies;
- send product or marketing communications where permitted by law;
- comply with legal obligations;
- enforce our Terms of Service; and
- establish, exercise, or defend legal claims.
No Model Training on Your Code
Perillo does not use Your Code, Derived Data, or Output to train or fine-tune machine-learning models.
We may use aggregated or de-identified information about the operation and use of FlowTrace—for example, feature usage, performance, error rates, or programming-language distribution—to operate and improve FlowTrace, provided that the information does not identify you or disclose Your Code or repositories.
3. AI and Model Providers
The hosted Services may use third-party artificial intelligence providers to help generate Output.
Our current model providers are:
- Anthropic — AI model inference;
- OpenAI — AI model inference; and
- Fireworks AI — hosting and inference for certain AI models.
When necessary to perform an analysis, portions of Your Code may be transmitted to one or more of these providers.
Perillo requires model providers processing Your Code on our behalf not to use Your Code to train or fine-tune their models. We use contractual and technical data controls applicable to the services we use.
We may change model providers over time as FlowTrace evolves. If we add or replace a provider that receives Your Code, we will update this Privacy Policy as appropriate.
4. How We Disclose Information
We do not sell your personal information.
We do not share personal information for cross-context behavioral advertising.
We may disclose information in the following circumstances.
Service Providers
We use third parties to help operate FlowTrace. Depending on the services we use, these providers may assist with:
- cloud infrastructure and hosting;
- artificial intelligence and model inference;
- authentication;
- payment processing;
- email delivery;
- analytics;
- error monitoring;
- security; and
- other technical or business services.
Our current AI providers that may receive portions of Your Code are Anthropic, OpenAI, and Fireworks AI.
Other service providers may receive account, billing, technical, or usage information as reasonably necessary to provide their services to Perillo.
We require service providers processing information on our behalf to do so only as necessary to provide their services and subject to applicable contractual protections.
Connected Account Providers
When you connect FlowTrace to GitHub or another third-party service, we communicate with that provider through its APIs and systems.
Those providers independently process information according to their own terms and privacy policies.
Legal Requirements and Protection of Rights
We may disclose information if we reasonably believe disclosure is necessary to:
- comply with applicable law, regulation, legal process, or governmental request;
- enforce our agreements and policies;
- investigate fraud, abuse, or security incidents;
- protect the rights, property, or safety of Perillo, our users, or others; or
- establish, exercise, or defend legal claims.
Where legally permitted and appropriate, we may notify affected users before disclosing information in response to legal process.
Business Transfers
If Perillo is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or part of our business or assets, information may be disclosed or transferred as part of that transaction.
Any successor will remain subject to applicable privacy obligations concerning personal information it receives.
With Your Direction or Consent
We may disclose information when you ask or authorize us to do so.
5. Cookies and Similar Technologies
Our website and hosted Services may use cookies or similar technologies needed to:
- keep you signed in;
- maintain security;
- remember preferences;
- operate website and service functionality; and
- understand how our website and Services are used.
We may also use analytics technologies to understand usage and improve FlowTrace.
Where applicable law requires consent before using non-essential cookies or similar technologies, we will request consent before using them.
We do not use cookies for third-party behavioral advertising.
The downloadable Software does not use browser cookies merely to analyze repositories on your local device, although its locally hosted viewer may use browser functionality necessary to operate the viewer.
6. GitHub and Other Third-Party Accounts
FlowTrace may allow you to sign in with or connect an account from GitHub or another third-party provider.
When you do, we may receive information that the provider makes available to us based on the permissions you authorize.
We use this information to authenticate you, connect repositories, and provide FlowTrace.
We do not control how the third-party provider independently collects, uses, or retains information. You should review the provider’s own privacy policy for information about its practices.
7. How We Handle Your Code
Local Software
When you analyze a repository using local mode, the analysis is performed on your device.
The Software is designed not to send source-code contents, repository names, file paths, or commit identifiers to Perillo as part of that analysis.
If you independently connect the Software to an AI assistant, agent, model, or other third-party tool, information transmitted to that third party is governed by your relationship with that provider. Perillo does not control those independently configured transmissions.
Hosted Services
When you use the hosted Services, Perillo accesses Your Code from repositories you choose to connect.
Source-code contents may be held temporarily in memory or ephemeral processing storage while an analysis job is running. We do not retain source-code contents after the processing job is completed as part of our ordinary operation of FlowTrace.
We may retain Derived Data and Output so that you can view results and so that FlowTrace can provide ongoing functionality based on previous analyses.
8. International Transfers
Perillo is based in the United States, and information may be processed in the United States and other countries where our service providers operate.
If you use FlowTrace from outside the United States, your information may therefore be transferred to a country whose privacy laws differ from those where you live.
Where applicable law requires a transfer mechanism for personal information transferred internationally, we use an appropriate lawful mechanism, which may include contractual protections such as the European Commission’s Standard Contractual Clauses and applicable United Kingdom transfer mechanisms.
9. Data Retention
We keep information only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer period is required or permitted by law.
Our general retention practices are as follows.
Your Code
For hosted analyses, source-code contents may be processed temporarily while a job is running but are not retained after the processing job is completed as part of our ordinary operation of FlowTrace.
Derived Data and Output
We may retain Derived Data and Output while the applicable repository remains connected and your account remains active.
If you disconnect a repository, we will ordinarily delete the associated Derived Data and Output within 30 days.
If you delete your account, we will ordinarily delete the associated Derived Data and Output within 30 days.
Account Information
We retain account information while your account remains active.
Following account deletion, we ordinarily delete account information within 30 days, except for information we reasonably need to retain for legal, security, fraud-prevention, tax, accounting, dispute-resolution, or similar purposes.
Payment Records
We may retain transaction and billing records for the period necessary to satisfy tax, accounting, fraud-prevention, and legal obligations.
Logs and Telemetry
We retain usage, security, diagnostic, and telemetry information for periods reasonably necessary to operate, secure, and improve FlowTrace.
We may retain aggregated or de-identified statistics for longer periods where the information no longer reasonably identifies an individual.
Backup systems may retain deleted information for a limited additional period before it is overwritten according to our normal backup lifecycle.
10. Information Security
We use reasonable administrative, technical, and organizational safeguards designed to protect personal information and customer data.
These measures may include:
- encryption in transit;
- encryption at rest where applicable;
- access controls;
- restrictions on production access;
- security logging and monitoring; and
- isolation or access controls around processing systems.
However, no internet transmission, storage system, or security measure can be guaranteed to be completely secure.
You are responsible for maintaining the security of your own devices, repositories, credentials, and connected accounts.
11. Children’s Privacy
FlowTrace is intended for adults and is not directed to individuals under 18 years of age.
We do not knowingly collect personal information directly from children through account registration.
If you believe a person under 18 has created an account or directly provided personal information to us, contact support@perillo.ai.
Information about minors may occasionally appear incidentally in source code or repository materials submitted by an authorized user. We process repository contents only for the purposes described in this Privacy Policy.
12. Your Privacy Rights
Depending on where you live, applicable privacy law may give you rights regarding your personal information.
These may include the right to:
- request access to personal information we hold about you;
- request correction of inaccurate information;
- request deletion of personal information;
- obtain a copy of certain personal information;
- object to or restrict certain processing;
- withdraw consent where processing is based on consent;
- opt out of certain uses or disclosures;
- appeal a decision concerning a privacy request where applicable; and
- complain to a privacy or data-protection authority.
These rights are subject to applicable exceptions and limitations.
To exercise a privacy right, contact us at support@perillo.ai.
We may need to verify your identity before completing a request. If you submit a request through an authorized agent, we may ask for evidence that the agent is authorized to act for you.
We will respond within the period required by applicable law.
Account Deletion
Where available, you may delete your Perillo account through account settings.
You may also request account deletion by contacting support@perillo.ai.
Repository Disconnection
You may disconnect a repository through FlowTrace or revoke our access through your source-code hosting provider.
Marketing Communications
If you receive optional marketing emails from us, you may unsubscribe using the link included in those messages.
We may still send non-promotional communications necessary to operate your account or provide FlowTrace.
Software Telemetry
Where FlowTrace provides a mechanism to disable optional local Software telemetry, you may use that mechanism at any time.
13. United States Privacy Disclosures
Residents of certain U.S. states may have additional privacy rights under applicable state law.
The types of personal information we may collect are described in Section 1 of this Privacy Policy and may include:
- identifiers, such as name, email address, IP address, account identifiers, and online identifiers;
- internet or electronic activity information, such as service usage and logs;
- commercial information, such as subscription and transaction information;
- professional or employment-related information that you choose to provide or that may incidentally appear in repository materials;
- account and authentication information;
- information contained in repositories you choose to connect; and
- inferences or analysis produced from information processed through FlowTrace.
We collect and use these categories for the business purposes described in Section 2.
We disclose information to the categories of recipients described in Section 4.
We do not sell personal information.
We do not share personal information for cross-context behavioral advertising.
We also do not knowingly sell or share personal information relating to individuals under 18 for cross-context behavioral advertising.
If applicable state law gives you a right to access, correct, delete, obtain, or otherwise control your personal information, you may submit a request to support@perillo.ai.
We will not discriminate against you for exercising a privacy right granted by applicable law.
14. European Economic Area, United Kingdom, and Switzerland
If you are located in the European Economic Area, United Kingdom, or Switzerland, this section provides additional information about our processing.
Depending on the circumstances, our legal bases for processing personal information may include:
Performance of a contract. We process information when necessary to provide FlowTrace, maintain your account, provide requested analyses, administer subscriptions, and otherwise perform our agreement with you.
Legitimate interests. We may process information where necessary for legitimate interests such as securing FlowTrace, preventing abuse, diagnosing errors, understanding product usage, improving our services, and communicating with users, where those interests are not overridden by your rights.
Consent. We rely on consent where required, such as for certain cookies, analytics, or optional marketing communications. You may withdraw consent at any time.
Legal obligations. We may process information when necessary to comply with applicable legal obligations.
Legal claims and protection. We may process information where necessary to establish, exercise, or defend legal claims or protect our rights and those of others.
Where applicable, you may have rights to access, correct, erase, restrict, object to processing, receive certain data in portable form, withdraw consent, and lodge a complaint with your local supervisory authority.
You may contact us at support@perillo.ai to exercise these rights.
15. Do Not Track and Privacy Signals
Some browsers and devices offer “Do Not Track” or similar signals. There is not currently a single universally accepted standard governing all such signals, and our response may depend on applicable law and the technology involved.
Because Perillo does not sell personal information or share it for cross-context behavioral advertising, we do not use browser signals to opt users out of those activities.
Where applicable law requires us to recognize a legally valid privacy preference signal for a particular processing activity, we will do so.
16. Third-Party Websites and Services
FlowTrace and our website may contain links to or integrations with third-party websites, products, or services.
We do not control the privacy practices of third parties acting independently from Perillo.
Information you provide directly to a third party is governed by that third party’s privacy policy and terms.
This includes third-party tools or AI systems you independently choose to connect to the local FlowTrace Software.
17. Changes to This Privacy Policy
We may update this Privacy Policy from time to time as FlowTrace changes or as legal requirements evolve.
When we update it, we will change the “Last Updated” date at the top of this page.
If a change materially affects how we process personal information, we will provide additional notice where appropriate or required by law, such as by email or through FlowTrace.
We encourage you to review this Privacy Policy periodically.
18. Contact Us
If you have questions, concerns, or requests concerning this Privacy Policy or our privacy practices, contact:
Perillo, Inc.
PO Box 150123
Brooklyn, NY 11215
United States