Permissions & data access

Privacy and data handling

• You authenticate directly with your GitHub account. tAI never sees your GitHub password.
• Only one repo is active per conversation, chosen explicitly through the composer's repo picker. Connecting your account does not give tAI standing access to every repo you can see.
• Once attached, a working copy of the repo is cloned into that conversation's own sandbox, isolated from every other conversation.
• Every commit tAI pushes carries a Co-authored-by trailer identifying it as written by tAI, added automatically rather than left to chance.
• Nothing is ever pushed directly to a repo's default branch. All changes land on a dedicated working branch first.
• Access can be revoked at any time from Settings → Connectors in tAI, or from your GitHub account's application settings. Either one takes effect immediately.