The agreement prohibits using GitHub's systems to send spam, conduct excessive automated bulk activity, relay unsolicited advertising, or operate get-rich-quick solicitation schemes.
This analysis describes what GitHub's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision restricts automated and bulk communications activity through GitHub infrastructure, which is relevant for organizations using GitHub Actions, bots, or API integrations for high-volume operations that may approach the threshold of prohibited bulk activity.
Interpretive note: The term 'excessive automated bulk activity' is not defined with a specific operational threshold, leaving the boundary between permissible high-volume automation and prohibited bulk activity subject to GitHub's discretionary interpretation.
Under this clause, using GitHub's systems to send unsolicited communications, operate bulk automated activity beyond permissible thresholds, or relay advertising solicitations is prohibited. API integrations and GitHub Actions workflows that involve high-volume outbound communications should be assessed against this restriction.
How other platforms handle this
You may not display any personal contact, banking, or peer-to-peer payment information, whether in relation to you or any other person (for example, names, home addresses or postcodes, telephone numbers, email addresses, URLs, credit/debit card...)
Bypass or ignore instructions contained in our robots.txt file that controls automated access to portions of our Services;
Send bulk emails, meaning commercial or marketing emails directed to a number of individuals with the same content, through Mailchimp Inbox.
"You may not use our servers for any form of excessive automated bulk activity (including, for example, sending spam or cryptocurrency mining), to place undue burden on our servers through automated means, or to relay any form of unsolicited advertising or solicitation through our systems, such as get-rich-quick schemes.Excerpt from GitHub's Acceptable Use Policies
1) REGULATORY LANDSCAPE: This provision engages the CAN-SPAM Act, which regulates commercial email and unsolicited bulk electronic messaging in the US.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision restricts automated and bulk communications activity through GitHub infrastructure, which is relevant for organizations using GitHub Actions, bots, or API integrations for high-volume operations that may approach the threshold of prohibited bulk activity.
Under this clause, using GitHub's systems to send unsolicited communications, operate bulk automated activity beyond permissible thresholds, or relay advertising solicitations is prohibited. API integrations and GitHub Actions workflows that involve high-volume outbound communications should be assessed against this restriction.
ConductAtlas has identified this type of provision across 282 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by GitHub.