Privacy Policy

Who we are and what this policy covers

This Privacy Policy describes how Okikiolu Technologies Inc. ("Okikiolu," "we," "us," or "our") handles information in connection with Pyre, our browser extension, this website at usepyre.com, and pilot program inquiries.

Pyre is designed for business use by engineering, platform, and security teams. If you use Pyre through your employer, your organization may have its own policies that also apply.

Information we collect

We collect only what is needed to operate Pyre, respond to inquiries, and improve the product.

How the extension works with your tools

The current pilot runs on GitHub repository Security overview pages. Pyre reads visible advisory rows (title, GHSA link, severity label, published-advisory marker) in your browser and uses that content in memory to classify findings, add review labels, group similarly titled items, and optionally hide eligible lower-priority findings after explicit user confirmation.

Vulnerability content stays in your browser. Pyre's servers receive only the information required for pilot access and license validation, including your work email and session credentials.

Pyre does not modify GitHub, create records in it, or change permissions in your organization's systems.

Browser permissions explained

The pilot build requests only the permissions needed for its GitHub Security workflow:

• Storage: to save your extension settings, overrides, and pilot metrics on your device.
• Host permissions: github.com (content script on Security overview pages) and api.usepyre.com (pilot sign-in and license validation only).

All extension code is bundled at publish time. Pyre does not download or execute code from external servers, and it does not use eval or remotely hosted scripts.

How we use information

We use information in the following ways:

• To provide and maintain the Pyre extension and website
• To respond to pilot requests, support questions, and other correspondence
• To understand product feedback you voluntarily share with us
• To comply with legal obligations and protect our rights

We do not use extension data for advertising, and we do not build profiles of individual users from page content.

Sharing and subprocessors

Pyre's extension does not send operational data to third parties during normal use.

We may share information in limited circumstances:

• With service providers that help us operate our website or business (for example, email or hosting providers), subject to confidentiality obligations
• When required by law, regulation, legal process, or enforceable government request
• To protect the rights, safety, and security of Okikiolu, our users, or others
• In connection with a merger, acquisition, or sale of assets, with notice where required by law

We do not sell personal information.

Retention

Extension settings, overrides, and pilot metrics remain on your device until you change them, reset them, or uninstall the extension. Uninstalling the extension removes all locally stored Pyre data from your browser.

Pilot session data on Pyre's servers expires after 30 days by default. Organization and invitation records are retained while the pilot is active. Access can be revoked individually; contact us to delete organization or session records.

If you contact us by email, we retain correspondence for as long as needed to respond, maintain business records, and resolve disputes.

Security

Vulnerability content stays in your browser. Pyre's servers receive only the information required for pilot access and license validation, including your work email and session credentials. We apply reasonable administrative, technical, and organizational safeguards to protect information we hold, such as pilot session records and email correspondence.

No method of transmission or storage is completely secure. We cannot guarantee absolute security.

International users

Okikiolu Technologies Inc. is based in Canada. If you access Pyre from outside Canada, your information may be processed in Canada and in other locations where our service providers operate.

We handle personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws. Where required, we also respect rights under other frameworks such as the EU/UK General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA), to the extent they apply to our processing.

Your rights and choices

Depending on where you live, you may have rights to access, correct, delete, or restrict certain processing of personal information we hold about you. You may also have the right to object to processing or to data portability where applicable.

You can manage extension behavior through Pyre's Options page, sign out to invalidate your session, and uninstall the extension at any time. To request deletion of server-side pilot records (organization, invitation, or session data), email security@usepyre.com. We may need to verify your identity before responding.

If you use Pyre through an employer, your organization may act as the controller of certain data in your tools. In those cases, workplace privacy requests may need to be directed to your organization as well.

Children

Pyre is a business product and is not directed to children under 16. We do not knowingly collect personal information from children.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. Material changes will be posted on this website. Continued use of Pyre after an update means you accept the revised policy.

Contact us

Questions about this Privacy Policy or Pyre's data practices can be sent to: