Absolute visibility into what we track — and what we don't.
We request the minimum permissions possible. You can verify this directly in your GitHub settings.
What FlowMetrics can see
-
Pull request titles, numbers, and states (open / merged / closed)
-
PR creation, merge, and close timestamps
-
Review events — who reviewed, when, and what type (approved / changes requested)
-
PR size metadata — lines added / removed, files changed, commit count
-
Author GitHub username and ID
-
Only repositories you explicitly install the GitHub App on
What FlowMetrics cannot see
-
Source code, file contents, or commit diffs
-
Secrets, environment variables, or credentials
-
Issues, comments outside of PRs, or wikis
-
CI/CD results, Actions logs, or deployment records
-
Repository settings or configuration
-
Any repository it is not explicitly installed on
GitHub App permissions requested
You can revoke access at any time from github.com/settings/installations.
How your data is protected
Uses GitHub OAuth
No need to create a new username/password, login directly with GitHub for seamless transition between FlowMetrics and GitHub.
Secure repository authentication
Repository access uses the same permissions as GitHub. Your team will only see what you want them to see, no additional setup required.
Read-only access
FlowMetrics has only read-only access to your pull request metadata. It cannot see your source code, diffs, secrets, change memberships, or create commits.
Stop guessing. Start measuring.
Connect your GitHub account and have answers by tomorrow morning.
Generate Your Dashboard →Reads pull request metadata only. We cannot read your source code.