Track 1 platform and get the weekly governance digest. No credit card required.
This page describes what the document states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability may vary by jurisdiction. Methodology
This document establishes Sourcegraph's privacy practices for its website, Cody AI assistant, Amp coding tool, and related services, disclosing collection and use of personal information across these platforms. The policy permits automated keyword scanning of connected files and codebases for Amp Free Mode users to facilitate targeted advertisement delivery from Advertising Partners, with scan results not retained or shared with advertisers. The policy authorizes collection of account information, IP addresses, device data, log data, usage analytics, and event analytics tied to an internally-generated user ID across all service tiers.
This document is Sourcegraph, Inc.'s Privacy Policy (last modified October 15, 2025), governing personal information collected through the company's website and products, excluding Customer Personal Data processed under separate customer agreements. The policy states that Sourcegraph collects account information (username, password, email), profile information, log data (IP address, browser type, date and time of use, cookie data), device data, location data derived from IP address, usage analytics tied to internally-generated user IDs, and event analytics including click patterns and feature utilization frequency; the policy also authorizes automated keyword scanning of files, codebases, and connected data sources for users of Amp Free Mode in order to deliver targeted advertisements. The Amp Free Mode advertising mechanism is operationally distinct from commonly observed developer tool privacy practices, in that the policy states Sourcegraph performs periodic automated keyword searches of user files and connected data sources for advertisement placement, while asserting that no personal data is collected or retained from these scans and that scan results are not shared with Advertising Partners. The policy identifies GDPR legal bases (contract performance, legitimate interests, and consent) and references California, Colorado, Connecticut, Virginia, and other US state privacy laws, as well as EU data subject rights. Compliance teams should note that the policy explicitly carves out Customer Personal Data from its scope, meaning enterprise customers operating under separate data processing agreements are subject to different frameworks, and that the Amp Free Mode advertising model may require evaluation under applicable consumer protection and privacy regulations depending on user jurisdiction.
Institutional analysis available with Compliance
Regulatory exposure by statute, material risk assessment, vendor due diligence action items, and enforcement precedent. Available on Compliance.
Start Compliance free trialMonitoring
Sourcegraph Cody has updated this document before.
Monitor includes same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
Compliance Governance Intelligence
Need provision-level monitoring and regulatory mapping?
Compliance includes governance timelines, compliance memos, audit-ready analysis, and full provision tracking.
Start Compliance free trialCross-platform context
See how other platforms handle Amp Free Mode Codebase Keyword Scanning for Advertising and similar clauses.
Compare across platforms →Governance Monitoring
Structured alerts for policy changes, governance events, and provision updates across 318+ platforms.