# Trust

Upseam reads your code to find the lines an API change touches. These pages
say what it sees and stores, who runs what, and what it can and cannot do.

:::cards Start with the facts

- [Trust and your data](trust.md)
  What Upseam sees and stores, where keys live and how long data stays.
- [Security model](security.md)
  Who runs what, the patch gates and how secrets in your files are masked.
- [Threat model](threat-model.md)
  Where your data goes and what an attacker would get if Upseam were compromised.

:::

:::cards The terms

- [Privacy Policy](privacy.md)
  How Upseam handles personal data.
- [Terms of Service](terms.md)
  The terms for using Upseam.

:::

## The short version

Upseam never stores your code. It stores the file, line and symbol of a
match. Your CI, not Upseam, runs the model's answer, and deterministic patch
gates decide what may be pushed. Upseam writes only to `upseam/*` branches.

To report a vulnerability, see [Threat model](threat-model.md#report-a-vulnerability).