GitHub may use your personal data, activity, and content to train artificial intelligence and machine learning models, including features like GitHub Copilot, though certain opt-out options are available.
This analysis describes what GitHub's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes GitHub's operational authority to apply user-generated content to AI model training, which affects how the platform monetizes and develops its technical infrastructure. The clause defines the boundaries of permitted data use beyond the immediate service delivery.
The updated terms now explicitly authorize GitHub to collect AI outputs generated within the platform alongside user-provided code and content, and to share personal data with Microsoft and other GitHub affiliates for purposes including training and improving artificial intelligence and machine learning technologies. The privacy statement indicates that aggregate and de-identified data will be used where feasible, but the updated language establishes broader authority for affiliate data sharing and AI model development than the previous version stated. The revised terms also remove specific disclosure of the conditions under which GitHub personnel may access private repositories, replacing that detail with a cross-reference to the Terms of Service, which means the scope of internal GitHub access to private repositories is now defined in a separate contract document rather than the privacy statement itself.
View change record →Your code contributions, usage patterns, and other data could be used to improve GitHub's AI features without explicit consent in all cases. Opting out of applicable AI training uses is possible through privacy settings.
How other platforms handle this
We may use the information we collect to help us improve our products and services, to develop new features, and to perform analytics. We may also use your information to personalize your experience and to allow us to deliver the type of content and product offerings in which you are most interested...
We target (and measure the performance of) ads to Members, Visitors and others both on and off our Services directly or through a variety of partners, using the following data, whether separately or combined: Data from advertising technologies on and off our Services, like web beacons, pixels, ad ta...
Microsoft uses data we collect to provide you with rich, interactive experiences. In particular, we may use data to show you advertising or serve Microsoft-selected content within Microsoft products and services. Microsoft does not use what you say in email, chat, video calls, or voice mail to targe...
Monitoring
GitHub has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
This provision implicates GDPR Article 6 legitimate interests as a lawful basis for AI training, requiring a balancing test; under CPRA, use of sensitive personal information for AI training may require additional disclosures and opt-out mechanisms. Enterprises should assess whether employee use of GitHub results in organizational data being incorporated into AI training pipelines.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Monitor: 25 platforms + same-day alerts. No credit card required.
We read the privacy policies and terms of service of 38 AI platforms. Here is what they say about training, retention, arbitration, and liability.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
This provision establishes GitHub's operational authority to apply user-generated content to AI model training, which affects how the platform monetizes and develops its technical infrastructure. The clause defines the boundaries of permitted data use beyond the immediate service delivery.
Your code contributions, usage patterns, and other data could be used to improve GitHub's AI features without explicit consent in all cases. Opting out of applicable AI training uses is possible through privacy settings.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by GitHub.