Your security is our top concern. We recognize the sensitivity of sharing company data with third-party tools, and we take this responsibility seriously.
Mrgr is an advanced realtime alerting and dashboard tool for engineering managers. The product is driven by data about activity at your organization which is fed to us via our Github App. During Mrgr onboarding, we will prompt you to install our Github App at your Github Organization. At this time you can choose which repositories it may access. You may grant the access only to specific repos, or you may grant access to all repos in your organization. Our Github App requests certain permissions in order for Mrgr to function correctly. Here’s an outline of the permissions we request and why we request them.
Installing the Mrgr Github app allows us to receive webhooks and to make API calls to Github to access your data. These API calls are authorized via a token. To improve security, this token must be rotated every hour.
❗️ We never store your source code anywhere in our systems.
When installing our Slack integration, we may see a list of users at your organization. This allows us to route the notification to the proper consumer (ie, you).
All data in our network is transmitted via 128-bit SSL encryption, and is encrypted at rest. Company access to customer data is monitored and restricted to authorized personnel only.
You may terminate your Mrgr account at any time from your Account Settings page. Terminating your account will remove the Mrgr Github App installation from your Github organization and purge any Github data from our servers (comments, commits, etc). Some small amount of user data will be retained for internal billing, audit, and customer service purposes.