| Before | After | ||
|---|---|---|---|
| 0 | Privacy Policy Last modified: October 15, 2025 See the changes since the previous version or visit our archives . | 0 | Privacy Policy Last modified: June 12, 2026 Visit our archives for prior versions of this policy. |
| 1 | At Sourcegraph, Inc. | 1 | This Privacy Policy explains how Sourcegraph, Inc. |
| 2 | ( "Sourcegraph," "we," "our," or "us" ), we value your privacy. | 2 | ( "Sourcegraph" , "we" , "our" , or "us" ) collects, uses, shares, and protects personal data when we act as a Data Controller, including when individuals: visit our website, www.sourcegraph.com (the "Website") use our Services receive communications from us. |
| 3 | This Privacy Policy explains how we collect, use, share and protect your personal information that we collect when you use our website and products (collectively, "Services" ). | 3 | This Privacy Policy does not cover User Content processed through our Services, such as customer Code. |
| 4 | This Privacy Policy does not apply to Customer Personal Data, which we process on behalf of customers to our business offerings. | 4 | When we process User Content and related personal data on behalf of our customers, we act as a Data Processor, and that processing is governed by our customer agreements. |
| 5 | Our use of that data is instead governed by our customer agreements. | — | Removed |
| 6 | By using our Service, you agree to the terms of this Privacy Policy and our Terms of Service . | — | Removed |
| 8 | Short version We do not sell your information. | 6 | Index Definitions Personal Data We Collect Personal Data You Provide To Us Personal Data We Receive Automatically How We Use Cookies and Similar Technologies Personal Data We Receive from Third Parties Personal Data We Derive from Your Use of the Services Personal Data We Collect As Defined Under CCPA Personal Data We Do Not Collect How We Use Personal Data How We Share Personal Data Your Rights How to Exercise Your Rights Data Transfers Legal Bases for Processing Data Storage, Security, and Retention Children's Privacy Changes to this Privacy Policy Definitions Throughout this Privacy Policy, we use the following defined terms: Account Information means information necessary to create, authenticate, and maintain your account, such as account credentials, user profile information, role and permission settings, and authentication data. |
| 9 | ( read more ) We use a number of trusted third parties to help provide our products. | 7 | Activity Data means data about how visitors interact with our Website, such as pages viewed, features accessed, click data, session duration, referral sources, search queries, and navigation patterns. |
| 10 | ( read more ) We use cookies to provide, protect, and promote our own products and Amp Free Mode is advertiser-sponsored. | 8 | Analytics Data means data collected in connection with your use of the Services, including anonymized, per-instance numeric user identifiers and limited, non-sensitive string data fields tied to feature interaction events, as well as user-identifying information, including usernames and email addresses associated with user accounts. |
| 11 | ( read more ) You can exercise your rights under privacy laws. | 9 | Analytics Data does not include User Content or Code. |
| 12 | ( read more ) What information do we collect, and for what purpose When you interact with our Services, we collect information that could be used to identify you ( "Personal Information" ). | 10 | Billing and Payment Information means information necessary to process payments and maintain billing records, such as billing contact details, purchase order numbers (if applicable), and payment processing information. |
| 13 | Examples include a username and password, an email address, a name, and an IP address. | 11 | Communications Information means information you provide or that is generated when you contact us through any channel, such as messages sent via email, contact forms, chat, social media, or other communication methods, including the contents of those messages, attachments, related metadata, or call recordings or transcripts. |
| 14 | Some of the information we collect is stored in a manner that cannot be linked back to you ( "Non-Personal Information" ). | 12 | Contact Information means information that allows us to identify and communicate with you or your organization, such as your name, job title, organizational affiliation, work email address, and phone number. |
| 15 | Non-Personal Information includes aggregated, non-personally identifying information that does not identify a user or cannot otherwise be reasonably linked or connected with them. | 13 | Where we obtain Contact Information from publicly available sources, professional contact information may also include any email addresses or phone numbers associated with your professional profile. |
| 16 | Information you provide to us directly When you register for a Sourcegraph account, participate in forums, comment on blog posts, submit a feedback survey, submit prompts, or correspond with us, we may collect account information (username, password, email), profile information (display name, avatar URL), Content you post, add, receive, or share on our hosted services, and any payment information. | 14 | Contact Information also includes the email address of the site installer and site administrators, which we collect automatically to support product updates, security notices, and license management. |
| 17 | We do not process or store your payment information, but our third-party payment processor does. | 15 | Device and Connection Data means technical information about the devices and connections used to access our Website and Services, such as IP addresses, browser type and version, operating system, device identifiers, and network connection data. |
| 18 | Information we receive from third parties We may receive information about you from third-party services if you log in or otherwise interact with our Website or Services through a code host or social media, for example, by liking us on Facebook or following us on Twitter. | 16 | Feedback means information you submit about the Services, such as comments, suggestions, reviews and other input. |
| 19 | The data we receive depends on your privacy settings with the third party but can include your name, email, third-party user ID, and location. | 17 | Inferences means conclusions or predictions we derive about your preferences, interests, or behaviors based on Usage Data, Analytics Data, or Marketing Information. |
| 20 | Review, and if necessary, adjust your privacy settings on third-party websites and services before linking or connecting them to the Service. | 18 | Location Data means geographic location information derived from IP addresses and similar sources. |
| 21 | How does Sourcegraph use my information provided directly by me and third parties? | 19 | Log Data means records of activity on our Website and Services, such as access logs, authentication and authorization events, security events, and audit trails. |
| 22 | We use information provided directly by you and third parties to operate, maintain, improve, and provide to you the features of the Services. | 20 | Marketing Information means information about your marketing preferences and engagement, such as your communication preferences and details about how you interact with our sales and marketing efforts. |
| 23 | We may use this information to communicate with you, such as to send you email messages, and to follow up with you to offer news and information about our Services. | 21 | Performance and Diagnostic Information means information about the performance and reliability of our Website and Services, such as error logs, crash reports, response times, and system performance metrics. |
| 24 | We may also send you Service-related emails or messages (e.g., account verification, change or updates to features of the Services, technical and security notices). | 22 | Support Data means information necessary to diagnose and resolve issues, such as support ticket details, correspondence, diagnostic and technical information about your use of the Services, and the context you provide to us as part of a support request, such as code snippets and error messages. |
| 25 | For more information about your communication preferences, see Will Sourcegraph send me emails below. | 23 | Usage Data means data we generate or derive from your use of the Services that reflects how you interact with and use the Services, such as feature interaction data and usage patterns (including user identifiers associated with feature usage), feature flags and configuration settings, AI feature usage (including types of Inputs submitted, prompt titles, prompt categories, query-derived metadata, and interaction patterns), deployment information, system configuration data, session data, operational signals, and service health metrics. |
| 26 | Automatically collected information Usage data When you use our Services, Sourcegraph automatically collects data about the Services and how they are used, including: Aggregated and high-level information about usage through a server ping. | 24 | Usage Data includes Analytics Data and Inferences, but does not include User Content or customer Confidential Information. |
| 27 | The server ping sends a payload containing data such as total number of users and whether certain features are enabled or in use. | 25 | Personal Data We Collect We collect personal data in several ways: Directly from you From your organization's administrators From third-party services Automatically from your use of our Website and Services Personal Data You Provide To Us When you use our Website or Services, we may collect: Account Information Billing and Payment Information Communications Information Contact Information Device and Connection Data Feedback Marketing Information Support Data When you authenticate through third-party services (such as single sign-on providers), those providers' privacy policies govern what information is shared with us. |
| 28 | For more information about the specific information we have access to, see our server pings documentation . | 26 | Personal Data We Receive Automatically When you use our Website or Services, we automatically collect: Analytics Data Activity Data (from Website visitors) Device and Connection Data Performance and Diagnostic Information Location Data Log Data Information through Cookies and Similar Technologies How We Use Cookies and Similar Technologies We may use cookies, web beacons, pixels, and similar tracking technologies to collect information about your use of our Website, our Services, and your interactions with our marketing communications. |
| 29 | Event analytics data and metadata to better understand usage within the Services, including click patterns and length and frequency of feature utilization, tied to an internally-generated user ID number. | 27 | Types of technologies we may use include: Essential cookies , which are necessary for the Website and Services to function, such as session management and authentication. |
| 30 | When you visit our website or use our Services, we may automatically collect the following information. | 28 | Analytics cookies , which help us understand how you use the Website and Services and identify areas for improvement. |
| 31 | Cookies When you visit our website or use our Services, we may send one or more cookies — a small text file containing a string of alphanumeric characters — to your computer that uniquely identifies your browser and lets us help you log in faster and enhance your navigation through the Services. | 29 | Marketing cookies , which help us track engagement with our marketing communications and measure campaign effectiveness. |
| 32 | A cookie may also convey information to us about how you use the Services (e.g., the pages you view, the links you click, how frequently you access the Services, and other actions you take on the Services), and allow us to track your usage of the Services over time. | 30 | You can control cookies through your browser settings. |
| 33 | For more information, see "Third-party tracking and online advertising" below. | 31 | Note that disabling certain cookies may limit the functionality of our Website and Services. |
| 34 | Log data As with most websites and technology services delivered over the internet, when you access or use our Services, our servers automatically collect data and record it in log files. | 32 | Personal Data We Receive from Third Parties We may receive personal data from: Your Organization , such as Contact Information and Account Information necessary to provision and manage your access to the Services. |
| 35 | This log data may include your web request, IP address, browser type and settings, date and time of use, information about browser configuration, error data, repository name, user ID, and cookie data. | 33 | Authentication and Identity Providers , such as Account Information when you use SSO or similar authentication mechanisms. |
| 36 | Access, authorization, and activity audit logs When you visit or use our Services, we may collect information related to accessing systems and data, including IP addresses, usernames, and data accessed. | 34 | Service Providers , such as Support Data, usage analytics, and performance metrics from providers who help us deliver and improve our Website and Services. |
| 37 | This information is only retained for the purposes of identifying, analyzing, and resolving potential security incidents. | 35 | Billing and Payment Providers , such as Billing and Payment Information for processing payments according to our customer agreements. |
| 38 | Access to this information is limited to those who require access for these purposes and will only be shared with the relevant customers in the event of a security incident. | 36 | Security and Fraud Prevention Providers , such as information about potential risks or threats to our Services. |
| 39 | Device data When you visit or use our Services, we automatically collect information about your device, which may include the type of hardware and software you are using (for example, your operating system and browser type), IP address, and other unique identifiers for devices used to access our Website and Hosted Services. | 37 | Sales and Marketing Service Providers , such as Contact Information and Marketing Information to identify prospective customers and understand market engagement. |
| 40 | Location data This is the geographic area where you use your computer or mobile devices (as indicated by an IP address or similar identifier) when interacting with our Services. | 38 | Third-Party Data Providers , such as professional and organizational information about users and contacts to better understand how our Services are used. |
| 41 | Email beacons When we send you emails, we may employ clear gifs (also known as web beacons) in HTML-based emails sent to our users to track which emails are opened and which links are clicked by recipients. | 39 | Publicly Available Sources , such as Contact information and organizational information. |
| 42 | The information allows for more accurate reporting and improvement of the Services. | 40 | Personal Data We Derive from Your Use of the Services We derive Usage Data from your use of the Services to help us operate, maintain, and improve the Services. |
| 43 | Web analytics We may also collect analytics data, or use third-party analytics tools, to help us measure traffic and usage trends for the Services. | 41 | Personal Data We Collect As Defined Under CCPA If you are located in California, we collect the following categories of personal data as defined under the California Consumer Privacy Act (CCPA): Identifiers : Contact Information, Account Information, Analytics Data, Device and Connection Data, Location Information Commercial Information : Billing and Payment Information, Marketing Information Internet or Network Activity : Usage Data, Activity Data, Log Data, Performance and Diagnostic Information Professional or Employment Information : Job title, organizational affiliation, work contact information Inferences : Usage patterns and preferences derived from Usage Data, Marketing Data, or Analytics Data. |
| 44 | These tools collect information sent by your browser or mobile device, including the pages you visit, your use of third-party applications, and other information that assists us in analyzing and improving the Services. | 42 | Geolocation Data : Location Data derived from IP addresses and similar sources. |
| 45 | Although we do our best to honor the privacy preferences of our users, we are not able to respond to Do Not Track signals from your browser at this time. | 43 | We disclose these categories of personal information to our service providers. |
| 46 | Amp Free Mode Keywords When you use Amp Free Mode, we may perform periodic, automated keyword searches of your files, codebase, or data sources that you have connected to Amp in order to deliver context-specific advertisements to you. | 44 | We retain each category of personal information for as long as reasonably necessary to fulfill the purposes for which it was collected, including to satisfy legal, tax, audit, and accounting obligations, resolve disputes, and enforce our agreements. |
| 47 | No personal data will be collected or processed during a keyword search. | 45 | When personal information is no longer needed for these purposes, we delete or de-identify it in accordance with our standard data management practices. |
| 48 | Data access is moment-in-time, on a per-advertisement basis, and is not ongoing. | 46 | Personal Data We Do Not Collect Sensitive Personal Data . |
| 49 | Results of keyword scans are exclusively used for advertisement placement applicability and not for any other reason, and results are not co-mingled with any other data collected. | 47 | We do not intentionally collect government-issued identification numbers, health information, or other sensitive personal data as defined under applicable law. |
| 50 | The results of keyword searches are not shared with Advertising Partners. | 48 | Providing Sensitive Personal Data to us as part of your use of the Services violates our Terms of Service . |
| 51 | How does Sourcegraph use my automatically collected data? | 49 | Personal Data in User Content . |
| 52 | We may use the automatically collected data to: remember information so that you will not have to re-enter it during your visit or the next time you visit the site; provide custom, personalized content and information; serve you relevant advertisements from Amp Free Mode Advertising Partners; provide and monitor the effectiveness of our Services; monitor aggregate metrics such as total number of visitors, traffic, usage, and demographic patterns on our website and our Service; understand user behaviors when using the Services to drive product development and business strategies identify, diagnose and fix technology problems and security risks; plan for and enhance our service; comply with our legal obligations; and for other purposes with your consent. | 50 | User Content may contain personal data such as developer names, email addresses in code comments, or other identifiers. |
| 53 | What we do not collect Sensitive Personal Information Sourcegraph does not intentionally collect "Sensitive Personal Information," such as personal data revealing racial, ethnicity, political and religious beliefs, trade union membership, or genetic, biometric, health, or sexual data. | 51 | We process User Content to provide and improve the Services as described in our customer agreements. |
| 54 | Providing Sensitive Personal Information violates our Terms of Use. | 52 | However, we do not intentionally extract, store, or use personal data from User Content for any purpose. |
| 55 | Personal Information in Repositories We do not intentionally collect any Personal Information that is stored in your repositories or other free-form content inputs. | 53 | How We Use Personal Data We use personal data to: Provide, operate, and maintain the Services , including enabling access, administering accounts, supporting features, and delivering functionality to our customers. |
| 56 | Any Personal Information within a user's repository is the responsibility of the repository owner. | 54 | Secure and protect the Services , including monitoring for misuse, detecting and investigating security incidents, maintaining audit logs, and enforcing our policies. |
| 57 | Bases for processing your information Where laws like GDPR govern our processing of your Personal Information, Sourcegraph must tell you about the legal basis under which we process your Personal Information. | 55 | Understand and improve how customers use the Services , including analyzing aggregated usage patterns, performance metrics, and reliability data to develop new features, improve existing functionality, and support product planning. |
| 58 | Sourcegraph processes Personal Information under the following legal bases: Performance of a contract: We use your Personal Information to provide the Services you subscribe to and to fulfill requests you make of us. | 56 | Conduct research and analysis , including analyzing trends and publishing findings based on aggregated or de-identified data and deriving Inferences about how customers and users interact with our products and Services, including usage preferences, feature adoption patterns, and engagement trends, to improve our products and Services. |
| 59 | Legitimate interests: We use your Personal Information for our legitimate interests, such as security, abuse, and fraud prevention, product improvement, and communications about your use of our Services. | 57 | Track Analytics , including tracking feature adoption and usage, understanding usage patterns across users and teams, and measuring engagement to improve the functionality of existing features and develop new products and features. |
| 60 | Consent: We may rely on your consent to use your personal information for certain direct marketing purposes, such as sending you newsletter updates about Sourcegraph products. | 58 | Operate and improve our Website and marketing activities , including understanding Website usage, measuring engagement, and promoting the Services. |
| 61 | You may withdraw your consent at any time through the unsubscribe feature provided with each marketing email or by contacting us at the address given at the end of this Privacy Policy. | 59 | Communicate with you , including responding to inquiries or form submissions, providing support and customer success services (which may include proactive outreach based on usage patterns to offer guidance, training, or assistance), sending service-related notices, and sharing information about updates or changes to the Services. |
| 62 | Does Sourcegraph share my information? | 60 | Process billing and commercial transactions , including issuing invoices, receiving payments, and maintaining financial records. |
| 63 | We may share your personal information with third parties in the instances described below. | 61 | Comply with legal obligations and protect our rights , including responding to lawful requests, resolving disputes, and enforcing applicable agreements. |
| 64 | Service providers Our service providers process your Personal Information as needed to provide our Services to you, including your content and processing prompts to help you write code. | 62 | For information about the legal bases on which we process your personal data, please see the Legal Bases for Processing section of this Privacy Policy. |
| 65 | They may only process your Personal Information pursuant to our instructions and to perform their duties to us. | 63 | How We Share Personal Data We disclose personal data only as described in this Privacy Policy and only when necessary to operate our Website, provide the Services, or meet legal and security obligations, including to the following third parties and in the following circumstances: Affiliates and Related Entities . |
| 66 | See our Subprocessors page for a list of our service providers. | 64 | We may disclose personal data between and among our affiliates and related entities. |
| 67 | Advertisers in Amp Free Mode Certain Sourcegraph products, specifically Amp Free Mode, are provided free of charge to users and are sponsored by Advertising Partners. | 65 | If we are involved in a merger, acquisition, reorganization, or sale of business assets, we may disclose personal data as part of that transaction. |
| 68 | Users of Amp Free Mode are shown ads that may be relevant to them, based on information gathered by Sourcegraph about their habits and codebase. | 66 | The acquiring entity will handle personal data in accordance with privacy obligations at least as protective as those in this Privacy Policy. |
| 69 | The only information Sourcegraph shares with Advertising Partners is aggregated information about our Amp Free Mode customer base as a whole. | 67 | Service Providers . |
| 70 | If you click on an advertisement, any information you provide will be directly to the Advertising Partner and not to Sourcegraph. | 68 | We may disclose personal data to third-party service providers that help us operate our Website and Services. |
| 71 | Security purposes If you are a member of an Organization, we may share your username, email, IP address, and any collected logs about the user associated with that Organization with an owner or administrator of the Organization to investigate or respond to a security incident that affects or compromises the security of that particular Organization. | 69 | Service providers process personal data only as necessary to perform their contractual obligations to us and pursuant to our instructions. |
| 72 | Legal disclosure We may share your Personal Information with law enforcement and other third parties if required by law or subpoena or if we reasonably believe that such action is necessary to (a) comply with the law, legal process, and the reasonable requests of law enforcement; (b) to enforce our Terms of Service or to protect the security or integrity of our Service with regard to suspected fraud or other illegal activities; or (c) to exercise or protect the rights, property, or personal safety of Sourcegraph, our users, or others. | 70 | A list of our service providers is available on our Subprocessor Page . |
| 73 | Mergers and common ownership We may share your Personal Information with another entity in connection with a company transaction, such as a merger, acquisition, sale of assets or shares, reorganization, or bankruptcy. | 71 | Legal and Regulatory Obligations . |
| 74 | In these cases we may transfer some or all of your Personal Information to another entity, subject to this Privacy Policy. | 72 | We may disclose personal data when required by law or legal process, to respond to lawful requests from public authorities, or to comply with applicable regulations. |
| 75 | We may also share your Personal Information with any companies owned by or under common ownership with Sourcegraph, subject to this Privacy Policy. | 73 | Protection of Services . |
| 76 | With your consent With your consent, we may share your Personal Information with third parties. | 74 | We may disclose personal data to protect the security or integrity of our Services or to prevent fraud or abuse. |
| 77 | If you join an Organization, you agree to provide the administrator of the Organization with the ability to view your activity in the Organization's access log. | 75 | Protection of Rights . |
| 78 | Any information or content that you post to the Services will be displayed in accordance with your privacy settings. | 76 | We may disclose personal data to enforce or defend our legal rights or enforce our agreements. |
| 79 | If you remove information or content that you posted to the Services, copies may remain viewable in cached and archived pages of the Services, or if other users have copied or saved that information. | 77 | Professional Advisors . |
| 80 | Does Sourcegraph share aggregate, Non-Personal Information with third parties? | 78 | We may disclose personal data to professional advisors such as lawyers, auditors, accountants, and consultants when necessary for the services they provide to us. |
| 81 | We share aggregated, Non-Personal Information with others about our product usage like number of users, user growth, and lines of indexed code. | 79 | Third-Party Integrations . |
| 82 | Does Sourcegraph sell, share, or rent my Personal Information? | 80 | Our Services may integrate with third-party websites, applications, or services such as code repositories (e.g., GitHub), development tools (e.g., JetBrains), and AI coding agents that connect to our Services through our MCP. |
| 83 | No. We do not sell, share, or rent your Personal Information for cross-contextual behavioral advertising, whether or not for monetary or other consideration under the CCPA (California Consumer Privacy Act of 2018) or other data privacy laws. | 81 | When you or your organization enable an integration, personal data may be shared with that third party under their privacy practices. |
| 84 | Will Sourcegraph send me emails From time to time, we may share information about product announcements, product use, and special offers. | 82 | We do not control how third parties collect, use, or share personal data. |
| 85 | You may opt out of our promotional email communications at any time by clicking the "unsubscribe" link provided in such communications. | 83 | Review each third party's privacy policy and terms of service before enabling integrations. |
| 86 | Sourcegraph users will continue to receive transactional messages related to your use of our Services such as account management, technical, and security notices, even if you unsubscribe from promotional emails. | 84 | With Your Consent . |
| 87 | Third-party tracking and online advertising of Sourcegraph We participate in interest-based advertising and use third-party advertising companies to serve you targeted advertisements based on your online browsing history and your interests. | 85 | We may disclose personal data when you provide consent or direct us to share information with third parties. |
| 88 | We permit third-party online advertising networks, social media companies, and other third-party services, to collect information about your use of our Services over time so that they may play or display ads for our products on other websites, apps, or services you may use and on other devices you may use. | 86 | Aggregated or De-Identified Data . |
| 89 | We and our third-party partners may use cookies and tracking technologies on our Services for the purpose of tracking the effectiveness of our own ads placed on Google, Twitter, etc. | 87 | We may aggregate or de-identify Usage Data so that it no longer identifies any individual or organization. |
| 90 | We and our third-party partners use this information to make the advertisements you see online more relevant to your interests, as well as to provide advertising-related services such as reporting, attribution, analytics and market research. | 88 | Once de-identified, that data is no longer personal data under applicable privacy laws, and we may use or disclose it for any purpose, including analyzing usage patterns, developing new features, and conducting research. |
| 91 | To learn more about interest-based advertising and how you may be able to opt-out of some of this advertising, you may wish to visit the Network Advertising Initiative's online resources, at http://www.networkadvertising.org/choices , and/or the DAA's resources at www.aboutads.info/choices . | 89 | Your Rights You have certain rights regarding your personal data, depending on where you live and applicable laws. |
| 92 | You may also be able to set your browser to delete or notify you of cookies by actively managing the settings on your browser or mobile device. | 90 | Because our Services are provided to enterprise customers, your rights may be exercised individually or in coordination with your organization. |
| 93 | Please note that some advertising opt-outs may not be effective unless your browser is set to accept cookies. | 91 | These rights apply to personal data we process as a Data Controller as described in this Privacy Policy. |
| 94 | Furthermore, if you use a different device, change browsers or delete the opt-out cookies, you may need to perform the opt-out task again. | 92 | If your personal data is contained within User Content (such as customer source code) that we process as a Data Processor on behalf of our customers, please direct your request to the relevant customer organization. |
| 95 | You may also be able to limit certain interest-based mobile advertising through the settings on your mobile device by selecting "limit ad tracking" (iOS) or "opt-out of interest based ads" (Android). | 93 | We will assist the customer in responding to your request in accordance with our customer agreements and applicable law. |
| 96 | Google Analytics and Advertising . | 94 | Access and Portability. |
| 97 | We may also utilize certain forms of display advertising and other advanced features through Google Analytics, such as Remarketing with Google Analytics, Google Display Network Impression Reporting, and Google Analytics Demographics and Interest Reporting. | 95 | You have the right to access and receive a copy of the personal data we hold about you in a structured, commonly used, machine-readable format. |
| 98 | These features enable us to use first-party cookies (such as the Google Analytics cookie) and third-party cookies to inform, optimize, and display ads based on your past visits to the Sites. | 96 | Where technically feasible, you may request that we transmit your personal data directly to another controller. |
| 99 | You may control your advertising preferences or opt-out of certain Google advertising products by visiting the Google Ads Preferences Manager, currently available at https://google.com/ads/preferences , or by visiting NAI's online resources at http://www.networkadvertising.org/choices . | 97 | Correction. |
| 100 | Google provides further information about its own privacy practices and offers a browser add-on to opt out of Google Analytics tracking at https://tools.google.com/dlpage/gaoptout . | 98 | You have the right to request correction of inaccurate or incomplete personal data. |
| 101 | Global privacy practices Information we collect will be stored and processed in the United States in accordance with this Privacy Policy but we understand that users from other countries may have different expectations and rights with regard to their privacy. | 99 | If you use our Services, you can update certain Account Information and Contact Information through your account settings. |
| 102 | For all website visitors and Services users, no matter their country of location, we will: provide clear methods of unambiguous, informed consent when we do collect your personal information; only collect the minimum amount of personal data necessary for the purpose it is collected for, unless you choose to provide us more; offer you simple methods of requesting access, correction, or deletion your information that we have collected, which we will make reasonable efforts to accommodate; and provide Service users notice, choice, accountability, security, and access, and we limit the purpose for processing. | 100 | Deletion. |
| 103 | We also provide our users a method of recourse and enforcement. | 101 | You have the right to request deletion of your personal data, subject to certain limitations. |
| 104 | If you are located in the European Union, you are entitled to the following rights with regard to your personal information and data: Right of access to your personal data, to know what information about you we hold Right to correct any incorrect or incomplete personal data about yourself that we hold Right to restrict/suspend our processing of your personal data Right to complain to a supervisory authority if you believe your privacy rights are being violated Additional rights that may apply to you in certain instances: Right of data portability (if our processing is based on consent and automated means) Right to withdraw consent at any time (if processing is based on consent) Right to object to processing (if processing is based on legitimate interests) Right to object to processing of personal data for direct marketing purposes Right of erasure of your personal data from our system ("right to be forgotten") if certain grounds are met To exercise your privacy rights, you can contact us directly at [email protected] . | 102 | For Website visitors: We will delete your personal data upon request, subject to our need to retain certain information to comply with legal obligations or fulfill legitimate business interests. |
| 105 | Data storage, security, deletion, and retention Where is my information stored? | 103 | For users of our Services: Because our Services are provided to your organization and your work product is owned by your organization, we retain limited data elements necessary to maintain the integrity of the organizational workspace for as long as your organization maintains an active workspace with us. |
| 106 | We store and process the information that we collect in the United States in accordance with this Privacy Policy, though our employees, contractors, and service providers may store and process data outside the United States. | 104 | We process this retained data for our legitimate interest in supporting our customers. |
| 107 | When we transfer the personal data of EEA, Swiss, and UK residents outside of those regions, we do so via appropriate user privacy safeguards, such as using Standard Contractual Clauses or obtaining your consent. | 105 | When your access is deprovisioned, your Contact Information may be anonymized, but your work product remains accessible to your organization as part of the organizational workspace. |
| 108 | How secure is my information? | 106 | You can delete certain data yourself through your account's privacy settings, but note that these limited data elements may still be accessible to your organization's administrators as necessary to maintain the organizational workspace. |
| 109 | We secure your information by implementing technical and organizational security controls that you can read about in Security is core to everything we do . | 107 | Restriction. |
| 110 | When we receive your information, we protect it on our servers using technical, physical, and logical security safeguards. | 108 | You have the right to request that we restrict the processing of your personal data where you contest its accuracy, the processing is unlawful, we no longer need it but you require it for legal claims, or you have objected to processing pending verification of our legitimate grounds. |
| 111 | For information stored in any Software installed in your computing system, you are responsible for its security by making use of the security features of your device. | 109 | Objection. |
| 112 | We recommend that you take the appropriate steps to secure all computing devices that you use in connection with our Services. | 110 | You have the right to object to processing of your personal data based on our legitimate interests. |
| 113 | Sourcegraph cares about the security of your information, and uses commercially reasonable physical, administrative, and technological safeguards to preserve the integrity and security of all information collected through the Service. | 111 | We will cease processing unless we demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or the processing is necessary for legal claims. |
| 114 | However, no security system is impenetrable and we cannot guarantee the security of our systems 100%. | 112 | Withdrawal of Consent. |
| 115 | In the event that any information under our control is compromised as a result of a breach of security, Sourcegraph will take reasonable steps to investigate the situation and where appropriate, notify those individuals whose information may have been compromised and take other steps, in accordance with any applicable laws and regulations. | 113 | Where we process your personal data based on your consent, you may withdraw that consent at any time. |
| 116 | How do I update or delete my Personal Information from Sourcegraph? | 114 | Withdrawal does not affect the lawfulness of processing that occurred before withdrawal. |
| 117 | You can update or remove your Personal Information from Sourcegraph at any time by logging into your account and updating your profile settings, including deleting your account. | 115 | Automated Decision-Making. |
| 118 | How long does Sourcegraph retain my Personal Information? | 116 | We do not use your personal data for decisions based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you. |
| 119 | You can remove your Personal Information from Sourcegraph at any time by deleting your account as described above. | 117 | If this changes, we will update this Privacy Policy and provide appropriate safeguards as required by applicable law. |
| 120 | Sourcegraph will retain your information for as long as your account is active or as needed to perform our contractual obligations, provide you services, to comply with tax, legal, and audit obligations, resolve disputes, preserve legal rights, or enforce our agreements. | 118 | Marketing Communications. |
| 121 | For questions about reviewing, modifying, or deleting your account information, contact us at [email protected] . | 119 | You may opt out of promotional communications at any time by using the "unsubscribe" link in our emails or by contacting us. |
| 122 | Children's privacy Sourcegraph does not knowingly collect or solicit any information from anyone under the age of 13 or knowingly allow such persons to register as Users. | 120 | Opting out of promotional communications does not affect service-related or transactional messages. |
| 123 | If you are based in the European Union, we will not knowingly collect your information if you are under the age of 16. | 121 | No Sale or Targeted Advertising. |
| 124 | Different countries may have different minimum age limits. | 122 | We do not sell or share personal data for cross-context behavioral advertising as defined under applicable privacy laws. |
| 125 | If you are below the minimum age for providing consent for data collection in your country, you may not have a Sourcegraph account. | 123 | Lodge a Complaint. |
| 126 | In the event that we learn that we have collected personal information from a child under age 13 or the applicable minimum age limit, we will delete that information as quickly as possible. | 124 | If you are located in the EEA, UK, or Switzerland, you have the rights described above under the General Data Protection Regulation and, where applicable, UK GDPR. |
| 127 | If you believe that we might have any information from a child under 13 or otherwise under the applicable minimum age limit, please contact us at [email protected] . | 125 | You also have the right to lodge a complaint with your local supervisory authority if you believe that we have processed your personal data unlawfully or have failed to respond adequately to your request. |
| 128 | Links to other web sites and services Our Services may integrate with or contain links to other third-party sites and services. | 126 | How to Exercise Your Rights To exercise your rights, email us at [email protected] . |
| 129 | We are not responsible for the practices employed by third-party websites or services embedded in, linked to, or linked from the Services and your interactions with any third-party website or service are subject to that third-party's own rules and policies. | 127 | If you use our Services, you may also manage certain settings through the privacy controls in your account. |
| 130 | How to contact us If you have any questions about this Privacy Policy or the Service, please contact us at [email protected] . | 128 | We will respond to verified requests within one month of receipt. |
| 131 | Changes to our privacy policy Sourcegraph will update this Privacy Policy to keep up with the changes in our business, Services, and applicable laws. | 129 | If we require additional time due to the complexity of your request or the number of requests, we will notify you within the initial one-month period and may extend the response time by up to two additional months. |
| 132 | When we do so, we will revise the "last modified" date at the top of this page. | 130 | Because our Services are provided to enterprise organizations, if you are a Services user, we may handle your request in coordination with your organization's administrator or direct you to your administrator where appropriate. |
| 131 | We may need to verify your identity before responding to your request. | ||
| 132 | We may also deny a request if we have a lawful reason for doing so. | ||
| 133 | If we deny your request, you have the right to appeal that decision by contacting us at [email protected] . | ||
| 134 | To exercise your California privacy rights, email us at [email protected] or use the privacy controls in your account settings. | ||
| 135 | If you are a resident of Virginia, Colorado, Connecticut, Utah, or another state with a comprehensive privacy law, you may exercise your rights by contacting us at [email protected] . | ||
| 136 | If you are located in the European Economic Area (EEA), United Kingdom (UK), or Switzerland, you have the right to lodge a complaint with your local supervisory authority if you believe that we have processed your personal data unlawfully or failed to respond adequately to your request. | ||
| 137 | Data Transfers Our servers and operations are located in the United States, and we have team members located around the world. | ||
| 138 | If you access our Website or Services from outside the United States, your personal data will be transferred to, stored, and processed in the United States and potentially in other countries where our teammates are located. | ||
| 139 | Transfers from the European Economic Area, United Kingdom, and Switzerland. | ||
| 140 | For personal data originating from the EEA, UK, or Switzerland, we rely on the Standard Contractual Clauses approved by the European Commission and the UK Information Commissioner's Office as the legal mechanism for transferring your personal data to the United States. | ||
| 141 | United States Privacy Rights. | ||
| 142 | If you are a resident of California or another U.S. state with comprehensive privacy legislation, please note that we may transfer your personal data to Service Providers and other third parties as described in the How We Share Personal Data section above. | ||
| 143 | Legal Bases for Processing Purpose Type of Data Legal Basis Provide, operate, and maintain the Services Contact Information Account Information Billing and Payment Information Usage Data Analytics Data Activity Data Communications Information Support Data Inferences Third-Party Data Provider Information Performance of Contract Secure and protect the Services Contact Information Account Information Usage Data Activity Data Log Data Device and Connection Data Support Data Legitimate Interests Legal Obligation We have a legitimate interest to protect our business, users, and systems from unauthorized access, fraud, and security threats. | ||
| 144 | We also have a legal obligation to provide adequate security safeguards. | ||
| 145 | Understand and improve the Services Usage Data Analytics Data Performance and Diagnostic Information Feedback Support Data Inferences Third-Party Data Provider Information Legitimate Interests We have a legitimate interest and the interest of our users to analyze how customers use the Services and to improve functionality, develop new features, and enhance user experience based on that understanding. | ||
| 146 | Conduct research and analysis Usage Data Analytics Data Activity Data Feedback Inferences Legitimate Interests We have a legitimate interest in conducting research that improves our Services and contributes to industry knowledge. | ||
| 147 | Analyze feature usage and user engagement Usage Data Activity Data Analytics Data Contact Information Account Information Device & Connection Data Inferences Performance of Contract Legitimate Interests We have a legitimate interest to understand how customers use certain features of our Services, including AI features, to improve functionality and develop new capabilities. | ||
| 148 | Operate our Website and improve our marketing activities Contact Information Marketing Information Usage Data Activity Data Device and Connection Data Inferences Third-Party Data Provider Information Legitimate Interests We have a legitimate interest in promoting our Services and understanding website engagement. | ||
| 149 | Communicate with customers or users of the Services Contact Information Communications Information Marketing Information Third-Party Data Provider Information Performance of Contract (for Services-related communications) Consent (for marketing communications) Legitimate Interests (for marketing communications) We have a legitimate interest in communicating with customers about their use of the Services and sending direct marketing communications where permitted. | ||
| 150 | Process billing and commercial transactions Contact Information Billing and Payment Information Performance of Contract Comply with legal obligations and protect our rights Contact Information Account Information Billing and Payment Information Communications Information Usage and Activity Data Legal Obligation Legitimate Interests We have legal obligations to respond to lawful requests and maintain certain records. | ||
| 151 | We also have a legitimate interest in enforcing our agreements and protecting our legal rights. | ||
| 152 | Data Storage, Security, and Retention Data Storage. | ||
| 153 | We store personal data on servers located in the United States. | ||
| 154 | Data Security. | ||
| 155 | We implement appropriate technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse, alteration, or destruction. | ||
| 156 | We maintain a comprehensive information security program that includes administrative, technical, and physical safeguards to protect the personal data we collect and process. | ||
| 157 | For detailed information about our security practices, please refer to our Security Page . | ||
| 158 | While we are committed to maintaining industry-standard or better security practices and continuously work to protect your data, no method of transmission over the Internet is completely secure. | ||
| 159 | We cannot guarantee absolute security of your personal data. | ||
| 160 | Your Security Responsibilities. | ||
| 161 | You are responsible for maintaining the confidentiality of your Account Information and for any activity that occurs under your account. | ||
| 162 | If you believe your account has been compromised, please contact us immediately at [email protected] . | ||
| 163 | Enterprise customers and their administrators are responsible for managing user access, permissions, and security configurations within their organizational workspace. | ||
| 164 | Data Retention. | ||
| 165 | We retain your personal data for as long as necessary to perform our contractual obligations and provide the Services to you and your organization. | ||
| 166 | When personal data is no longer necessary for these purposes, we delete it in accordance with our data retention policies, though we may retain certain information necessary to attribute work product to and maintain the integrity of the organizational workspace. | ||
| 167 | We may also retain personal data as necessary to comply with our legal, tax, audit, and accounting obligations, to resolve disputes, to preserve our legal rights, or to enforce our agreements. | ||
| 168 | Children's Privacy Our Services are not directed to children, and we do not knowingly collect personal data from children under 18. | ||
| 169 | If you have reason to believe that a child under the age of 18 has provided any personal data to us, please contact us at [email protected] , and we will investigate and, if appropriate, delete the personal data. | ||
| 170 | Changes to this Privacy Policy We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. | ||
| 171 | When we make changes, we will update the "Last modified" date at the top of this Privacy Policy and, if appropriate, provide notice through our Website or Services. | ||
| 172 | We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data. | ||
| 173 | Contact Us If you have any questions about this Privacy Policy, contact us at [email protected] . | ||
Follow unlimited companies, monitor the clauses that matter across every platform, and get the full institutional analysis on what each change obligates you to do.