Memory Lol
- Your data trains their AI unless you switch it off in settings.
- Your data is used for personalized ads, including by third-party ad companies.
- Data is shared with partners and affiliates; you can opt out.
- The policy describes staff access for safety and legal checks.
GitHub-style terms: they collect a lot, train AI unless you opt out in settings, can close you anytime, and you cover their legal costs.
Agent Trust Hub uses AI and may make mistakes. Review reports and confirm their contents before relying on them.
Collected
Account info, your code and chats, device IDs, usage, cookies, and sometimes photos, payments, and partner data.
Read the exact line
Privacy policy
“Personal Data is collected from you directly, automatically from your device, and also from third parties.”
Training
They run the service, personalize, advertise, and train AI models unless you opt out of AI input/output training.
Read the exact line
Privacy policy
“We use Personal Data to develop and improve our products, services, and technologies, including artificial intelligence and machine learning technologies.”
Sharing
Microsoft and other affiliates, vendors, advertisers, your org if they own the account, and the public if you post publicly.
Read the exact line
Privacy policy
“Personal Data may be shared with GitHub affiliates, including Microsoft, to facilitate customer service, marketing and advertising”
Kept
Kept while the account is active; after you cancel they say they delete profile and repos within 90 days.
Read the exact line
Terms of service
“barring legal requirements, we will delete your full profile and the Content of your repositories within 90 days of cancellation or termination”
Controls
You can opt out of AI training in account settings, cookie settings, GPC, and email privacy@github.com for deletion.
Read the exact line
Terms of service
“unless (a) you opt out through your account settings, or (b) your use of the Service is governed by a GitHub Customer Agreement”
Fine print
They can close you with no notice; service is as-is; you pay their legal bills; paid plans are non-refundable.
Read the exact line
Terms of service
“GitHub has the right to suspend or terminate your access to all or any part of the Website at any time, with or without cause, with or without notice, effective immediately.”
Expand “Read the exact line” to see the source alongside the explanation.
What you can turn off
The controls and opt-outs their own documents describe, and where they say to find them.
Turn off AI input/output training
Account settings (terms Section J.3)
Cancel your account
Settings in the global navigation bar; cancellation link on the Account screen
Opt out of sharing for ads
Footer link “Do Not Share My Personal Information” or Global Privacy Control
Ask to access or delete personal data
Email privacy@github.com (written as privacy[at]github[dot]com in the policy)
If a switch is not where they say, the deletion request above still applies.
Line by line
The lines that matter most, worst first.
They get a license to copy your stuff and use it to train AI, not only to show it back to you.
Read the exact line
Terms of service
“You grant GitHub and our Affiliates the right to store, host, archive, parse, display, and make copies of Your Content as necessary to provide, develop, and improve the Service, including by training AI Features”
For example, code you put in a public repo can be used to train GitHub and Microsoft AI models.
Your AI prompts and answers are used for training unless you turn that off in settings.
Read the exact line
Terms of service
“You also grant GitHub and its Affiliates a license to collect and use your Inputs and Outputs to develop, train and improve artificial intelligence and machine learning models”
For example, a Copilot chat about a private bug can train models until you opt out.
If someone sues them because of how you used the service, you may have to pay their lawyers.
Read the exact line
Terms of service
“You agree to us, defend us, and hold us harmless from and against any and all claims, liabilities, and expenses, including attorneys’ fees, arising out of your use of the Website and the Service”
For example, if AI output you shipped gets you sued, they can ask you to cover their legal costs too.
They can shut your account instantly for any reason and do not have to warn you first.
Read the exact line
Terms of service
“GitHub has the right to suspend or terminate your access to all or any part of the Website at any time, with or without cause, with or without notice, effective immediately.”
For example, you could lose access to repos overnight with no email first.
Paid plans charge ahead of time and you do not get money back if you cancel mid-cycle.
Read the exact line
Terms of service
“the Service is billed in advance on a monthly or yearly basis respectively and is non-refundable. There will be no refunds or credits for partial months of service”
For example, if you cancel a yearly plan after a week, they keep the full year payment.
Third parties can track you across sites to show ads based on your interests.
Read the exact line
Privacy policy
“We may also employ third-party Cookies to gather data for interest-based advertising.”
For example, visiting marketing pages can feed ad networks a profile of what you clicked.
People can look at your data when they think there is abuse or a rules break.
Read the exact line
Privacy policy
“we process Personal Data, using both automated and, at times, manual techniques for abuse detection, prevention, and violations of terms of service.”
For example, a contractor might read a flagged repo or support ticket.
You can stop future AI-chat training in account settings; it does not erase past use.
Read the exact line
Terms of service
“If you opt out, GitHub will not collect or use your Inputs and Outputs for the purposes described in this paragraph from the effective date of your opt-out going forward.”
For example, after you flip the switch, new Copilot chats should not go into training.
You still own what you upload; they take a license to run and improve the service.
Read the exact line
Terms of service
“You own Your Content. If you post Content you did not create, you are responsible for ensuring you have the right to post it”
For example, your private repo files stay yours even while they host them.
Big privacy-rule changes should come with 30 days’ warning.
Read the exact line
Privacy policy
“If there are material changes to the statement, we will provide at least 30 days prior notice by updating our website or sending an email”
For example, they should email you before a new training use starts.
Words to know
Legal words from the lines above, in plain English.
- personal data
- Any information that is about you or can be linked to you, from your name to your phone's ID. For example, your email, your IP address and the list of apps on your phone are all personal data.
- third parties
- Any company or person other than you and the app, such as advertisers, partners or analytics firms. For example, an analytics company that receives a record of every screen you tap is a third party.
- affiliates
- Other companies owned by or connected to the same parent company. For example, if you use one app, its sister apps under the same owner may also get your data.
- opt out
- Something is on by default and stays on until you find the setting and turn it off. For example, your chats may be used for training unless you go into settings and switch it off.
- inputs and outputs
- Inputs are what you type, say or upload to an AI; outputs are what it gives back to you. For example, the question you ask a chatbot is an input and its answer is an output, and both may be stored.
- model training
- Using your content and conversations as examples to teach an AI system, which can then echo them in future answers. For example, a story you write in a chatbot may be studied by the company to make the next version of the bot.
- indemnify
- You promise to pay the company's legal costs and losses if your use of the service gets it sued. For example, if you post a song you do not own and the label sues the app, you owe the app's lawyer bills.
- cookies
- Small files a website saves on your device so it can recognise you and remember what you did. For example, a cookie keeps you logged in and can also tell an ad company which sites you visited.
- targeted advertising
- Ads chosen for you based on what you have done across other apps and websites, not just this one. For example, you look at shoes in one app and see shoe ads in a totally different app the next day.
How we got here · grade B · score 48/100 · 15 of 15 policy answers backed by a verified quote · 2 not stated
What does the app collect beyond what it needs to work?
They collect account and content plus usage, device IDs, cookies, geolocation, demographics, payments, and data from partners.
Does it record your voice, face or body, and what happens to that?
Not stated in the documents.
Are your chats and uploads used to train AI models, and is that off by default?
AI inputs and outputs are used to train models unless you opt out in account settings. Public content can still be used under other licenses.
Can employees or contractors read your conversations, and when?
They say people may review data with automated and manual techniques for abuse, security, support, and legal reasons.
Are you profiled or tracked for advertising?
They use third-party cookies and partners for interest-based advertising, with cookie and GPC controls.
Do they sell or share your data, and can you opt out?
They share with affiliates including Microsoft, advertisers, and vendors. They describe a Do Not Share link and GPC; they say they do not sell Nevada covered information.
What rights do they take over what you type and what the AI makes?
You own your content. You grant a license to host it and to develop and train AI. Licenses for posted content end when you remove it unless others forked it.
How long do they keep your data after you delete it, and can you delete it in the app?
You cancel in Settings. They say they delete your profile and repository content within 90 days, except legal needs and forks.
Does it build a lasting memory or profile of you, and can you see, edit or turn it off?
Not stated in the documents.
Do they commit to basic security, and have they leaked data?
They say they use administrative, technical, and physical security controls. No independent audit is described in these pages.
Is there a real age gate, and are teens protected?
You must be 13 or older. They do not describe extra age checks beyond that rule.
Will they tell you when the rules change, and is the policy specific?
The policies are dated. They say they will give at least 30 days’ notice of material changes by website or email.
Can they close your account without warning, and can you get your data out first?
They can suspend or terminate access at any time, with or without cause or notice. You can cancel in Settings.
If something goes wrong, who pays?
The service is as-is with broad damage limits, and you must indemnify them for claims from your use, including AI output.
Do subscriptions renew on their own, and can you get a refund?
Subscriptions bill in advance monthly or yearly and are non-refundable. Prices can change at the end of a term.
The privacy policy is 6,015 words at a college graduate level (Flesch reading ease 34.2); the terms are 7,285 words at a college level.
