Privacy

Last updated: 2026-07-28

NoxFeed is a macOS menubar app and a workspace at unticket.ai that mirror your GitHub organization's PR + issue activity. This document describes what data we collect, where it lives, and who can access it.

What we store

• Your GitHub OAuth token — issued by GitHub when you sign in via the NoxFeed GitHub App. On the macOS app it's stored in your local Keychain, gated by the app sandbox. On the web workspace it's stored server-side, encrypted at rest with per-workspace keys.
• Your GitHub organization's PR + issue metadata — titles, authors, timestamps, labels, review + merge state. Fetched via the GitHub App installation, cached in our database so the app doesn't hit GitHub on every open.
• AI-narrated post text — first-person summaries generated when a PR is opened or merged. Stored alongside the underlying event.

What we don't store

• PR diffs, file contents, or any source code.
• Third-party analytics or telemetry — we don't run Google Analytics, Mixpanel, or the equivalent. No pixel trackers.
• Your GitHub password. We never see it.

Who sees your data

Only members of your unticket.ai workspace (people who have signed in with a GitHub account that's a member of the same org) can see your org's feed. No public feed exposes any data by default.

Data retention

When you sign out of the macOS app, the token is deleted from the Keychain. When you disconnect the noxfeed GitHub App from your organization, we delete the org's cached data within 30 days.

Contact

Questions? Email hello@noboxdev.com.