The Statement covers Personal Data GitHub, Inc. or GitHub B.V. processes as Data Controller for Services that display it
The Statement describes how GitHub handles your "Personal Data", meaning information directly linked or linkable to you. It applies to Personal Data that GitHub, Inc. or GitHub B.V. processes as the "Data Controller" when you interact with websites, applications and services that display this Statement (together, the "Services"). It does not apply to services or products that do not display it, such as Previews, where relevant.
Supporting quotations
This is where we describe how we handle your “Personal Data”, which is information that is directly linked or can be linked to you.
It applies to the Personal Data that GitHub, Inc. or GitHub B.V., processes as the “Data Controller” when you interact with websites, applications, and services that display this Statement (collectively, “Services”).
This Statement does not apply to services or products that do not display this Statement, such as Previews, where relevant.
Qualifications & exceptions
Scope is limited to processing where GitHub, Inc. or GitHub B.V. is the Data Controller; where an organization supplies your account, GitHub is mostly a Data Processor (see the organization-account cards).
Services that do not display this Statement, such as Previews where relevant, are outside it.
Not stated here
The Statement does not say which of GitHub, Inc. or GitHub B.V. is the controller for a given user in this passage.
Use & Processing · Context
For organization-provided accounts GitHub acts as Data Processor under a Data Protection Agreement
If you use GitHub through an account provided by an organization such as your employer or school, the organization becomes the Data Controller and this Statement's direct applicability to you changes. GitHub then acts as a Data Processor and follows the controller's instructions about processing your Personal Data. A Data Protection Agreement governs the relationship between GitHub and the organization, and you are pointed to the organization's own privacy statement for its practices. GitHub says it remains dedicated to preserving your privacy rights.
Supporting quotations
Should you access a GitHub Service through an account provided by an organization, such as your employer or school, the organization becomes the Data Controller, and this Privacy Statement's direct applicability to you changes.
In such circumstances, GitHub functions as a Data Processor, adhering to the Data Controller's instructions regarding your Personal Data's processing.
A Data Protection Agreement governs the relationship between GitHub and the Data Controller.
For further details regarding their privacy practices, please refer to the privacy statement of the organization providing your account.
Even so, GitHub remains dedicated to preserving your privacy rights.
Qualifications & exceptions
The organization's privacy statement and the Data Protection Agreement are not supplied with this document.
Not stated here
The Statement does not say which parts of this Statement still apply to you directly when an organization is controller, beyond the specific activities in the Data Protection Agreement.
Use & Processing · Context
The purposes list describes all the potential ways GitHub may process your Personal Data
GitHub says the Personal Data it processes depends on your interfaces, features and access tools, and that this section details all the potential ways it may process your Personal Data. For all these activities GitHub says it practices data minimization and uses the minimum amount of Personal Information required.
Supporting quotations
This section details all the potential ways GitHub may process your Personal Data:
When carrying out these activities, GitHub practices data minimization and uses the minimum amount of Personal Information required.
Qualifications & exceptions
The data-minimization statement is GitHub's own description; the Statement does not say how minimization is measured.
Use & Processing · Company practice
Personal Data is used for billing, accounting, compensation and aggregated internal and financial reporting
GitHub uses Personal Data for business operations like billing, accounting and compensation, including creating aggregated statistical data for internal reporting, financial reporting, revenue planning, capacity planning and forecast modeling, including product strategy.
Supporting quotations
Business Operations: We use Personal Data for activities like billing, accounting, and compensation.
This includes creating aggregated statistical data for internal reporting, financial reporting, revenue planning, capacity planning, and forecast modeling (including product strategy).
When carrying out these activities, GitHub practices data minimization and uses the minimum amount of Personal Information required.
Qualifications & exceptions
GitHub says it practices data minimization and uses the minimum Personal Information required for these activities.
Use & Processing · Company practice
GitHub uses your data to send offers and promotions as well as invoices, security alerts and administrative messages
GitHub uses Personal Data to inform you about new Services, features, offers, promotions and other pertinent information, and to send confirmations, invoices, technical notices, updates, security alerts and administrative messages.
Supporting quotations
Communication: We use Personal Data to inform you about new Services, features, offers, promotions, and other pertinent information.
This also includes sending confirmations, invoices, technical notices, updates, security alerts, and administrative messages.
When carrying out these activities, GitHub practices data minimization and uses the minimum amount of Personal Information required.
Qualifications & exceptions
GitHub says it practices data minimization and uses the minimum Personal Information required for these activities.
Not stated here
This passage does not say how to opt out of promotional messages.
Use & Processing · Company practice
Personal Data is used to personalize the Service and to measure enterprise ads and promotions
GitHub uses Personal Data to customize the Service to your preferences, to evaluate the effectiveness of enterprise business ads and promotional communications, and to keep the user experience seamless and consistent.
Supporting quotations
Personalization: We use Personal Data to customize the Service to your preferences, to evaluate the effectiveness of enterprise business ads and promotional communications, and to ensure a seamless and consistent user experience.
When carrying out these activities, GitHub practices data minimization and uses the minimum amount of Personal Information required.
Qualifications & exceptions
GitHub says it practices data minimization and uses the minimum Personal Information required for these activities.
Use & Processing · Company practice
Personal Data is used to deliver, update, troubleshoot and maintain the Services and personalize recommendations
GitHub uses Personal Data to deliver and update the Services as you configure and use them, to make ongoing personalized experiences and recommendations, to identify and resolve technical issues, and to keep the Services up to date and performant and meet productivity, reliability, efficacy, quality, privacy, accessibility and security needs.
Supporting quotations
Service Provision: We use Personal Data to deliver and update our Services as configured and used by You, and to make ongoing personalized experiences and recommendations.
Troubleshooting: We use Personal Data to identify and resolve technical issues.
Ongoing Service Performance: Personal Data helps us keep the Services up to date and performant, and meet user productivity, reliability, efficacy, quality, privacy, accessibility and security needs.
When carrying out these activities, GitHub practices data minimization and uses the minimum amount of Personal Information required.
Qualifications & exceptions
GitHub says it practices data minimization and uses the minimum Personal Information required for these activities.
Use & Processing · Company practice
GitHub uses Personal Data to develop products, including training AI and machine learning models
GitHub uses Personal Data to develop and improve its products, services and technologies, including artificial intelligence and machine learning technologies. This includes improving features, developing new offerings, enhancing safety and security capabilities and training models. GitHub says it applies appropriate technical safeguards, including aggregation and de-identification where feasible, to protect your privacy while making these improvements.
Supporting quotations
Product Development and Improvement: We use Personal Data to develop and improve our products, services, and technologies, including artificial intelligence and machine learning technologies.
This includes improving features, developing new offerings, enhancing safety and security capabilities, and training models.
We apply appropriate technical safeguards, including aggregation and de-identification techniques where feasible, to protect your privacy while enabling these improvements.
When carrying out these activities, GitHub practices data minimization and uses the minimum amount of Personal Information required.
Qualifications & exceptions
Aggregation and de-identification are applied only "where feasible", so model training is not limited to de-identified data.
GitHub says it practices data minimization and uses the minimum Personal Information required for these activities.
Not stated here
The Statement does not say which Personal Data, such as code or AI inputs, is used for training, or whether you can opt out of training here.
Organization-provided accounts may be governed by a Data Protection Agreement that is not supplied.
Use & Processing · Company practice
Personal Data is used to deliver and improve Professional Services such as training, consulting and migration
GitHub uses Personal Data to deliver training, consulting or implementation ("Professional Services"), including technical support, planning, advice, guidance, data migration, deployment and solution or software development. It also uses it to improve the delivery, efficacy, quality and security of Professional Services and the underlying products based on issues found while providing them, including fixing software defects.
Supporting quotations
Delivering Professional Services: We use Personal Data to deliver training, consulting or implementation (“Professional Services”).
This includes providing technical support, professional planning, advice, guidance, data migration, deployment, and solution/software development services.
Improving Professional Services: Enhancing delivery, efficacy, quality, and security of Professional Services and the underlying product(s) based on issues identified while providing Professional Services, including fixing software defects, and otherwise keeping the Professional Services up to date and performant.
When carrying out these activities, GitHub practices data minimization and uses the minimum amount of Personal Information required.
Qualifications & exceptions
GitHub says it practices data minimization and uses the minimum Personal Information required for these activities.
Use & Processing · Company practice
Your data is stored and processed in many countries, including the United States
GitHub stores and processes Personal Data in a variety of locations, including your local region, the United States and other countries where GitHub, its affiliates, subsidiaries or subprocessors operate.
Supporting quotations
GitHub stores and processes Personal Data in a variety of locations, including your local region, the United States, and other countries where GitHub, its affiliates, subsidiaries, or subprocessors have operations.