This policy describes how data is collected and used by Beanbag, Inc. for

This policy is effective May 25, 2017.

Information we collect

We collect and use the following information to operate and improve our services:

Account information: To create your account, we collect information such as your real name, e-mail address, and payment information.

User data: When you use RBCommons, we store transmitted data such as uploaded diffs and files, comments, and configuration information.

Usage: We collect information such as IP addresses and type of web browser in order to monitor and improve our services.

Cookies: A cookie is a small piece of data which is stored on your computer. RBCommons uses cookies to keep track of your login session. This cookie is temporary, and you will be periodically required to log in again.

How we use and share information

Account information and user data is stored on our servers for the purposes of providing the service. Payment information is kept solely by our billing partner, Stripe.

User data is kept on our servers and is only accessible to you and other users designated as members of your team. Employees of Beanbag, Inc. may only access your data for the purposes of assisting with support requests or maintaining the service.

RBCommons uses various third-party vendors to provide hosting and data storage capabilities. These vendors maintain the physical infrastructure upon which the RBCommons software runs, and provide services such as support ticketing, payment processing, and performance monitoring. When RBCommons transfers your personal data to these services, we do so under the Privacy Shield framework and remain responsible for it. This sharing cannot be limited.

You have the right to access all personal data stored by RBCommons. 

Our guarantees

We understand that your source code is crucial to your business, and therefore we’d like to make a few guarantees:

  • We will never sell your data or personal information to a third party. We will only share your data when required by law (such as to comply with warrants or subpoenas). When possible, we will notify you about any such requests for your data.
  • If you cancel your account, we will permanently delete your data from our servers. Backups are kept for two weeks, after which they are permanently deleted.
  • We will make every effort to ensure the security of your data, including following all best practices for security.

EU and Swiss Privacy Shield

By choosing to use RBCommons, you consent to the transfer and storage of any provided information on our servers located in the United States.

Beanbag, Inc. adheres to the US-EU and US-Swiss Privacy Shield Principles of Notice, Choice, Onward Transfer, Security, Data Integrity, Access and Enforcement, and is registered with the U.S. Department of Commerce’s Privacy Shield Program at

For EU and Swiss residents, we ask that you submit any questions or concerns about this privacy policy to us at We will investigate and attempt to resolve your complaint. If we cannot resolve your complaint, we have chosen JAMS as the organization responsible for resolving disputes. If we were unable to resolve your issue, you may file a claim at

In some circumstances, European Union individuals may invoke binding Privacy Shield arbitration as a last resort if all other forms of dispute resolution have been unsuccessful. See for more information about this process.

RBCommons is subject to the investigatory and enforcement powers of the Federal Trade Commission.


If we are involved in a merger, acquisition, or other reorganization, your information may be transferred as part of that deal. We will notify you of any such deal and outline your choices at that time.

Beanbag, Inc. may periodically make changes to this policy. We will notify you of any significant changes via an e-mail to the address associated with your account.

Contact us

If you have any questions or concerns about this privacy policy or how your data is used, please contact us at