Pull Request Pilot and the GitHub API

Compliance with GitHub's terms

The App calls the GitHub GraphQL API on behalf of the signed-in user, with that user's own personal access token, as permitted by Section H (API Terms) of GitHub's Terms of Service.

User-initiated. The App reads the searches the user defines and changes a pull request's draft state only when the user asks.
No scraping. Everything goes through the documented GraphQL API at api.github.com.
Within rate limits. Refreshes run on an interval the user chooses, at least 30 seconds apart; they pause while the Mac sleeps or is offline and wait out any rate limit GitHub reports.
Nothing leaves the Mac. GitHub data is never shared with third parties. Beyond a small snapshot for the App's own widgets, it is kept in memory only.

The App needs a GitHub personal access token.

Create a classic token with the repo scope.
Open the App. The token setup appears on first launch.
Paste the token and click Save & Validate.
Once it's validated, click Get Started, then create the preset views to see your pull requests.

The privacy policy lists everything the App stores and every address it connects to, and the source code is public.