Ansible
- Your data trains their AI unless you switch it off in settings.
- Your data is used for personalized ads, including by third-party ad companies.
- Data is shared with partners and affiliates; you can opt out.
- Staff may review your content; the policy does not describe an opt-out.
Red Hat collects browsing and marketing data, takes a broad license on uploads, and may train on Galaxy content unless you turn that off.
Agent Trust Hub uses AI and may make mistakes. Review reports and confirm their contents before relying on them.
Collected
Account and contact info, purchases, browsing history, location, and guesses about your interests.
Read the exact line
Privacy policy
“Internet or other similar network activity: Information collected when you visit a website, such as IP address, browsing history, information on your interaction with the website, browser type and language, operating system, location, date and time;”
Training
They use it for accounts, marketing, ads, and AI analysis; Galaxy uploads can train models unless you opt out.
Read the exact line
Privacy policy
“We may use artificial intelligence and machine learning capabilities, including those provided by third-party service providers, to facilitate the uses described above, such as to analyze data, identify trends, make predictions and provide AI-generated responses.”
Sharing
Partners, IBM affiliates, and ad networks may get data; cookie tracking may count as a sale.
Read the exact line
Privacy policy
“When you use Red Hat websites, Red Hat’s authorized partners, such as advertising networks, data analytics providers, social networks and advertising partners, may collect cookies and similar technology and use this data”
Kept
They keep it as long as they say they need it; deletion is by request, not a set short clock.
Read the exact line
Privacy policy
“Red Hat will retain your personal data for only as long as is required to fulfill the purposes for which the information is processed or for other valid reasons to retain your personal information”
Controls
Cookie tools, marketing opt-out, a data-request form, and a Galaxy setting to exclude training.
Read the exact line
Privacy policy
“If you would like to exercise any of these rights, you may do so via our Personal Data Request Form.”
Fine print
Uploads can stay public, is capped at $100, you them, and continued use accepts changes.
Read the exact line
Terms of service
“THE MAXIMUM OF RED HAT IN AGGREGATE FOR ALL CLAIMS MADE AGAINST RED HAT IN CONTRACT, TORT, OR OTHERWISE UNDER OR IN CONNECTION WITH THESE TERMS WILL NOT EXCEED $100.”
Expand “Read the exact line” to see the source alongside the explanation.
What you can turn off
The controls and opt-outs their own documents describe, and where they say to find them.
Exclude Galaxy content from AI training
Ansible Galaxy Site account settings
Turn off advertising cookies
Cookie Preferences (or similar) link at the bottom of the website, or your browser cookie settings
Request access or deletion of personal data
Personal Data Request Form, or U.S. 1-800-546-7274, or privacy@redhat.com
Opt out of marketing emails
Unsubscribe link in marketing emails or Personal Data Request Form
If a switch is not where they say, the deletion request above still applies.
Line by line
The lines that matter most, worst first.
They can keep using, changing, and sharing what you upload even if you later leave.
Read the exact line
Terms of service
“By posting Your Content to the Site, you hereby grant to Red Hat a non-exclusive, , worldwide, license to use, reproduce, distribute, , adapt, modify, and publish Your Content”
For example, a playbook you posted could still be copied and published after you close your account.
What you upload is treated as public unless they say otherwise.
Read the exact line
Terms of service
“Except if specifically stated otherwise, Your Content is not confidential and may be made publicly available.”
For example, a document you thought was private on a portal could show up for other users.
Roles and collections you share on Galaxy can be used to train AI unless you change settings.
Read the exact line
Terms of service
“By sharing Your Content on the Ansible Galaxy Site, Your Content may be used as training data for machine learning models that provide content suggestions in response to user prompts or input in an editor or other application.”
For example, code in a collection you published could help an editor suggest similar code to others.
If someone sues them over your upload or how you used the site, you pay their legal bills.
Read the exact line
Terms of service
“You will defend and Red Hat from and against any and all damages, costs, losses and expenses (including reasonable attorney fees) incurred as a result of any claim, suit or proceeding brought against Red Hat in relation to Your Content or as a result of any use or misuse of the Site by you.”
For example, if a company claims your posted role stole their code, you could owe Red Hat’s lawyer fees.
If the site harms you, they say they will not pay more than $100.
Read the exact line
Terms of service
“THE MAXIMUM OF RED HAT IN AGGREGATE FOR ALL CLAIMS MADE AGAINST RED HAT IN CONTRACT, TORT, OR OTHERWISE UNDER OR IN CONNECTION WITH THESE TERMS WILL NOT EXCEED $100.”
For example, if a site outage costs your team thousands, their cap is still $100.
Ad and analytics partners collecting cookies may count as selling your data, with cookie opt-outs.
Read the exact line
Privacy policy
“This activity may qualify as a “sale” under applicable Data Protection Laws. You can make choices to allow or prevent such uses”
For example, an ad network could use your site visits to target ads unless you reject advertising cookies.
Closing an account does not necessarily take your posts down.
Read the exact line
Terms of service
“If you close your Account, Your Content may remain accessible on the Site.”
For example, a Galaxy role you uploaded could stay listed after you delete the account.
They post material privacy changes for 30 days; keeping using the site after that counts as agreeing unless you refuse in writing.
Read the exact line
Privacy policy
“A notice will be posted on this page for 30 days whenever this Privacy Statement is changed in a material way, and the date of last update will be indicated at the top of the Privacy Statement. If you do not refuse the changes in writing within that notice period and you continue to use our websites, we consider that you have read and understand the Privacy Statement as changed”
For example, if they add a new data use, you must write to refuse or they treat continued visits as acceptance.
Galaxy has a setting to stop your shared content from being used as training data.
Read the exact line
Terms of service
“If you don't want Your Content to be used as training data in this way, you can exclude it by modifying your Account settings in the Ansible Galaxy Site.”
For example, you can flip a Galaxy account setting so a collection is not used to train suggestion models.
They say they usually do not collect health, religion, or biometric data.
Read the exact line
Privacy policy
“Red Hat generally does not collect sensitive personal data, which is data such as your religious or philosophical beliefs, racial or ethnic origin, health or medical information (other than for the purpose of responding to an accommodation request for an event), genetic or biometric data”
For example, visiting the site should not mean they store a fingerprint or your medical details.
Words to know
Legal words from the lines above, in plain English.
- third parties
- Any company or person other than you and the app, such as advertisers, partners or analytics firms. For example, an analytics company that receives a record of every screen you tap is a third party.
- service providers
- Outside companies that handle your data on the app's instructions, such as a cloud host or an email sender. For example, the company that stores the app's files in the cloud sees your data but only does what the app tells it.
- cookies
- Small files a website saves on your device so it can recognise you and remember what you did. For example, a cookie keeps you logged in and can also tell an ad company which sites you visited.
- retention
- How long a company keeps your data before deleting it. For example, a policy might keep your messages for 30 days after you delete them, or for as long as it likes.
- personal data
- Any information that is about you or can be linked to you, from your name to your phone's ID. For example, your email, your IP address and the list of apps on your phone are all personal data.
- limitation of liability
- A cap on what the company will ever pay you if something goes wrong, often only what you paid in the last year. For example, if a leak of your data costs you thousands, the most you may get back is a month's subscription fee.
- irrevocable
- Cannot be taken back or cancelled once given, even if you change your mind or delete your account. For example, an irrevocable licence to your photos means you cannot withdraw it later.
- royalty-free
- The company can use your content without ever paying you for it. For example, your photo can appear in the app's ads and you get nothing.
- worldwide license
- You let the company use your content anywhere on earth, usually for free and for as long as it likes. For example, a video you post can be shown in ads in any country without asking you again.
- sublicensable
- The company can pass its rights over your content on to other companies without asking you. For example, an app can let an advertiser or a partner reuse your video under the licence you gave.
- model training
- Using your content and conversations as examples to teach an AI system, which can then echo them in future answers. For example, a story you write in a chatbot may be studied by the company to make the next version of the bot.
- prompt
- What you type or say to an AI to get a response. For example, asking a chatbot to write a birthday message is a prompt, and it may be stored.
How we got here · grade D · score 38/100 · 15 of 15 policy answers backed by a verified quote · 1 not stated
What does the app collect beyond what it needs to work?
They collect more than account and content: browsing history, IP, location, purchase records, and inferences about your interests.
Does it record your voice, face or body, and what happens to that?
They say they generally do not collect biometric data. Voice or face recording is not described.
Are your chats and uploads used to train AI models, and is that off by default?
Ansible Galaxy content may be used as training data unless you exclude it in Galaxy account settings. They also use AI on collected data more generally.
Can employees or contractors read your conversations, and when?
They say they may monitor site use, content, and activity, with no opt-out described.
Are you profiled or tracked for advertising?
Advertising cookies and remarketing let third parties serve targeted ads on other sites.
Do they sell or share your data, and can you opt out?
They say they do not sell data in the everyday sense, but partner cookie collection may count as a sale you can limit with cookie choices.
What rights do they take over what you type and what the AI makes?
You keep ownership, but posts can be public and you grant an irrevocable, sublicensable license to use and publish them.
How long do they keep your data after you delete it, and can you delete it in the app?
They keep data as long as needed for stated purposes. Deletion is through a Personal Data Request Form, not a stated in-app 30-day wipe.
Does it build a lasting memory or profile of you, and can you see, edit or turn it off?
They draw inferences about topics and products you may like. No chat-memory on/off controls are described.
Do they commit to basic security, and have they leaked data?
They describe physical, administrative, and technical safeguards and encrypt some payment data in transit. No audit or leak history is given.
Is there a real age gate, and are teens protected?
You must be over 16 to create an account. They do not knowingly collect from children under 16; it is a stated minimum, not a described ID check.
Will they tell you when the rules change, and is the policy specific?
The privacy policy is dated and they post material changes for 30 days. Continued use after that, without a written refusal, counts as acceptance.
Can they close your account without warning, and can you get your data out first?
They may suspend or deactivate an account if they decide it is needed. Closing an account does not remove your content from the site.
If something goes wrong, who pays?
The site is “as is,” liability is capped at $100, and you must indemnify them for claims about your content or your use of the site.
Do subscriptions renew on their own, and can you get a refund?
Not stated in the documents.
The privacy policy is 5,933 words at a professional or legal expert level (Flesch reading ease 11.9); the terms are 2,313 words at a college graduate level.
