AI Policy

Last updated June 10, 2026

Rebase is built to work alongside AI coding tools. This policy explains how AI features work, how your data is treated, and the commitments we make.

1. Our core commitments

  • We do not train AI models on your data. Customer Data — tickets, feedback, screenshots, and diagnostic context — is never used to train or fine-tune Rebase’s or any third party’s models.
  • AI features are optional and customer-initiated. Nothing is sent to an AI system unless you turn on a feature or connect an agent.
  • You stay in control. You decide which agents and integrations to connect and what ticket context they can access.

2. Connecting your own AI agents (MCP)

Rebase exposes ticket context through the Model Context Protocol (MCP) so that an AI agent you connect — such as Claude or Cursor — can read a ticket and help draft a fix. When you connect an agent:

  • The agent and its underlying model provider are chosen and controlled by you;
  • Ticket context you authorize is shared with that agent under the provider’s terms;
  • Rebase does not send your data to large-language-model providers on your behalf without your action.

Because the model provider is your choice, that provider acts as your subprocessor for the data you route to it, not Rebase’s. Review your provider’s data and retention policies before connecting.

3. AI-assisted features within Rebase

Where Rebase offers AI-assisted functionality (for example, summarizing or helping triage tickets), it operates only on the relevant ticket data, with a human in the loop, and is not used to make decisions producing legal or similarly significant effects without human review. Any third-party model providers used to power such features are listed on our Subprocessors page.

4. Data minimization & masking

The same privacy protections that apply to capture apply to AI features: password, payment, hidden, and customer-marked fields are masked, and secrets are scrubbed, before data is stored or shared. You remain responsible for configuring masking for sensitive fields on your site.

5. Accuracy

AI output can be incomplete or incorrect. Suggestions are aids, not professional advice, and should be reviewed by a person before you rely on them.

6. Changes & contact

We’ll update this policy as our AI features evolve. Questions? Email support@rebase.dev.