This analysis describes what GitHub's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
When your data is shared with Microsoft affiliates, it becomes subject to a separate, broader privacy framework over which you have limited visibility and control via GitHub alone.
The updated terms now explicitly authorize GitHub to collect AI outputs generated within the platform alongside user-provided code and content, and to share personal data with Microsoft and other Git…
The policy states GitHub collects identifiers, device information, usage activity, payment data, and user-generated content, and authorizes sharing this data with Microsoft affiliates, service providers, and analytics and advertising partners. Public repository content is described as globally visible and potentially indexed by search engines, meaning code and associated metadata posted publicly is not treated as private personal data under the policy. You can submit data access, deletion, or correction requests through GitHub's privacy contact form at https://support.github.com/contact/privacy.
How other platforms handle this
Affiliates are companies controlling, controlled by or under common control with us, including, for example, LinkedIn Ireland, LinkedIn Corporation, LinkedIn Singapore and Microsoft Corporation or any of its subsidiaries (e.g., Github, Inc.).
We may share your personal information with third parties, including our affiliates, service providers, financial institution partners, and business partners. We may share information with third parties for their own marketing purposes or to provide you with offers and promotions that may be of inte...
We may share your Personal Data with third parties in the following circumstances: Vendors and Service Providers: We share your Personal Data with vendors and service providers who perform services for us, such as hosting, infrastructure, analytics, payment processing, and customer support. Affiliat...
Monitoring
GitHub has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.
"As a member of the Microsoft family of companies, we share personal data with Microsoft Corporation and its affiliates. Microsoft may use the data in accordance with Microsoft's own privacy statement. We encourage you to review Microsoft's privacy statement.— Excerpt from GitHub's GitHub Privacy Statement
ConductAtlas detected a major restructuring of Meta’s privacy policy that removed detailed consumer rights disclosures and relocated them to separate documents.
Your genetic data may be transferred to a new owner as a business asset. Here is what the Terms of Service actually say and what you can do right now.
Professional Governance Intelligence
Need to monitor specific governance provisions?
Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
When your data is shared with Microsoft affiliates, it becomes subject to a separate, broader privacy framework over which you have limited visibility and control via GitHub alone.
ConductAtlas has identified this type of provision across 2 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by GitHub.