7 Total
2 High severity
5 Medium severity
0 Low severity
Summary

This is Replit's privacy policy, explaining how the AI-powered coding platform collects and uses your personal data — including the code you write, your project content, and your AI assistant interactions. The most important thing to know is that Replit may use your code and platform activity to improve its products and AI models, meaning content you create on the platform could be used for AI training. If you are a California resident, you have the right to request deletion of your personal data or opt out of certain data uses by contacting Replit at privacy@replit.com.

Technical Summary

This document is Replit's Privacy Policy governing the collection, use, storage, and disclosure of personal information by Replit, Inc. in connection with its AI-driven software development platform, operating under a consent and legitimate interests framework with references to California (CCPA/CPRA) and international (GDPR) frameworks. Most significant obligations include Replit's collection of usage data, code content, AI interaction data, and technical identifiers, as well as disclosure of personal data to third-party service providers, analytics vendors, and potential acquirers in corporate transactions. Notably, the policy permits Replit to use user-generated content — including code written in Repls — for product improvement and AI model training purposes, which represents a material deviation from standard developer platform privacy norms and creates intellectual property and privacy risk for users building proprietary software. The policy engages GDPR (Articles 6, 13, 14), CCPA/CPRA (Cal. Civ. Code §1798.100 et seq.), COPPA (given the platform's use by minors and educational institutions), and FTC Act Section 5; compliance teams should note that the educational use context implicates FERPA and that AI training data use provisions may conflict with emerging EU AI Act obligations regarding training data transparency.

Evidence Provenance
Captured April 29, 2026 08:12 UTC
Document ID CA-D-000454
Version ID CA-V-001031
Wayback Machine View archived versions →
SHA-256 1285e323b786feb5ba0676f16239aa2cf37ee6d3173a563a860949745b7c8fbd
✓ Snapshot stored ✓ Text extracted ✓ Change verified ✓ Cryptographically signed
Institutional Analysis

🔒 Institutional analysis locked

Regulatory exposure by statute, material risk assessment, vendor due diligence action items, and enforcement precedent. Available on Professional.

Upgrade to Professional — $149/mo
Change Timeline
View full version history (0 captures) →
High Severity — 2 provisions
Medium Severity — 5 provisions

Cross-platform context

See how other platforms handle AI Model Training Use of User Content and similar clauses.

Compare across platforms →