Provision record
Sourcegraph Cody · Sourcegraph Privacy Policy · View original document ↗

GDPR and Global Privacy Rights

Medium severity High confidence Explicit document language Common · 290 of 352 platforms
Stay ahead of the changes
Track Sourcegraph Cody and get the diff the day its terms change.
Share 𝕏 Share in Share 🔒 PDF
Document Record

What it is

Sourcegraph processes your personal data under three legal bases under GDPR: contract performance, legitimate interests, and consent for marketing. You can withdraw consent for marketing at any time.

This analysis describes what Sourcegraph Cody's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

This provision establishes the legal bases Sourcegraph relies on under GDPR, which determines what rights you have and under what circumstances you can object to or request deletion of your data.

Clause Stability Stable

0
Changes
3
Months Monitored
May 12, 2026
First Seen
May 22, 2026
Last Seen
This clause type exists across 5149 other provisions on other platforms.

Consumer impact (what this means for users)

EU and other users covered by GDPR can withdraw consent for marketing communications at any time using the unsubscribe link in marketing emails or by contacting Sourcegraph directly. For data processed under legitimate interests, you have a right to object, which Sourcegraph must evaluate.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.
  • Delete Your Data
    To exercise GDPR rights including access, erasure, rectification, portability, or objection, contact Sourcegraph at the privacy email address provided at the end of the Privacy Policy. To withdraw marketing consent only, use the unsubscribe link in any marketing email.

How other platforms handle this

Google Cloud Medium

When you use them, we'll validate your request by verifying your identity (for example, by confirming that you're signed in to your Google Account).

Notion Medium

Not be Discriminated Against by us for exercising your privacy rights.

Square Medium

You may contact our privacy team with any requests of disclosure, correction, or deletion of your personal information. You may also request suspension of use or suspension of sharing of your personal information with certain third parties.

See all platforms with this clause type →
▸ View Original Clause Language DOCUMENT RECORD
"
Where laws like GDPR govern our processing of your Personal Information, Sourcegraph must tell you about the legal basis under which we process your Personal Information. Sourcegraph processes Personal Information under the following legal bases: Performance of a contract: We use your Personal Information to provide the Services you subscribe to and to fulfill requests you make of us. Legitimate interests: We use your Personal Information for our legitimate interests, such as security, abuse, and fraud prevention, product improvement, and communications about your use of our Services. Consent: We may rely on your consent to use your personal information for certain direct marketing purposes, such as sending you newsletter updates about Sourcegraph products. You may withdraw your consent at any time through the unsubscribe feature provided with each marketing email or by contacting us at the address given at the end of this Privacy Policy.

Excerpt from Sourcegraph Cody's Sourcegraph Privacy Policy

ConductAtlas Analysis

Institutional analysis (regulatory & governance intelligence)

1) REGULATORY LANDSCAPE: This provision directly engages GDPR Articles 6, 7, and 21.

Insight

Unlock the full institutional analysis

Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.

Applicable agencies

  • State Attorney General
    State AGs in California, New York, Texas, and other states can investigate violations of state consumer protection and privacy laws, including CCPA (California), SHIELD Act (New York), and equivalents.
    Who can file: Residents of states with comprehensive privacy laws — primarily California, Virginia, Colorado, Connecticut, and Utah
    What you need: Evidence of the violation, explanation of how your state rights were affected, and your account or contact information with the company
    What to expect: Outcomes vary by state. May result in investigation, enforcement action, or requirement for the company to change practices. No direct individual compensation in most cases.

    Search "[your state] attorney general consumer complaint" to find your state's direct complaint form

Applicable regulations

Colorado AI Act
US-CO
Connecticut Data Privacy Act Amendments
US-CT
EU AI Act - High Risk Provisions
EU
Indiana Consumer Data Protection Act
US-IN
Kentucky Consumer Data Protection Act
US-KY
Universal Opt-Out Mechanism Expansion 2026
US

Provision details

Document information
Document
Sourcegraph Privacy Policy
Entity
Sourcegraph Cody
Document last updated
May 12, 2026
Tracking information
First tracked
May 12, 2026
Last verified
May 12, 2026
Record ID
CA-P-011845
Document ID
CA-D-00799
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
df2d4196ecea360b04ad9684b8e596ac2cfeb41cb2be50ace2b878d7c3dd599f
Analysis generated
May 12, 2026 15:34 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: Sourcegraph Cody
Document: Sourcegraph Privacy Policy
Record ID: CA-P-011845
Captured: 2026-05-12 15:34:28 UTC
SHA-256: df2d4196ecea360b…
URL: https://conductatlas.com/platform/sourcegraph-cody/sourcegraph-privacy-policy/provision/CA-P-011845/gdpr-and-global-privacy-rights/
Accessed: Aug. 12, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
Medium
Categories

Other risks in this policy

Related Analysis

Get the research letter

Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.

Frequently Asked Questions

What does Sourcegraph Cody's GDPR and Global Privacy Rights clause do?

This provision establishes the legal bases Sourcegraph relies on under GDPR, which determines what rights you have and under what circumstances you can object to or request deletion of your data.

How does this clause affect you?

EU and other users covered by GDPR can withdraw consent for marketing communications at any time using the unsubscribe link in marketing emails or by contacting Sourcegraph directly. For data processed under legitimate interests, you have a right to object, which Sourcegraph must evaluate.

How many platforms have this type of clause?

ConductAtlas has identified this type of provision across 290 platforms. See the full comparison.

Is ConductAtlas affiliated with Sourcegraph Cody?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Sourcegraph Cody.