pypi
- The documents do not say whether your data trains AI.
- Your data is used for personalized ads, including by third-party ad companies.
- Data is shared only with the providers who run the service.
- The documents do not say who can read your content.
PyPI collects account and usage data, shows third-party ads, lets you cancel in settings, and you may have to cover their legal costs.
Agent Trust Hub uses AI and may make mistakes. Review reports and confirm their contents before relying on them.
Collected
They collect email, display names, IP addresses, browser info, organization details, and billing data.
Read the exact line
Privacy policy
“PSF may collect the following information from users of PyPI: Email addresses Display names IP addresses HTTP User-Agent Company, firm, organization, agency, or other entity information Billing and payment information”
Training
They use it to run PyPI, process payments, send relevant notices, and publish a public dataset.
Read the exact line
Privacy policy
“To provide you with information about activites relevant to you on PyPI To administer and improve the PyPI website and services To process payments To provide the PyPI BigQuery Public Dataset”
Sharing
Hosting, ads, payments, and other vendors may process your information on their servers.
Read the exact line
Privacy policy
“EthicalAds to serve advertising on pypi.org. Some personal information may be processed on their servers.”
Kept
If you cancel in Settings, they say they delete your profile and project content right away.
Read the exact line
Terms of service
“we will delete your full profile and the Content of your Project(s) and/or Organizations immediately upon cancellation or termination (though some information may remain in encrypted backups).”
Controls
You can cancel in Settings; they will try to give you a copy of your content if you ask first.
Read the exact line
Terms of service
“You can cancel your Account at any time by going into your Settings in the global navigation bar at the top of the screen.”
Fine print
They can close access without notice, payments are non-refundable, and you may have to pay their legal costs.
Read the exact line
Terms of service
“PSF has the right to suspend or terminate your access to all or any part of the Website at any time, with or without cause, with or without notice, effective immediately.”
Expand “Read the exact line” to see the source alongside the explanation.
What you can turn off
The controls and opt-outs their own documents describe, and where they say to find them.
Cancel your account in Settings
Settings in the global navigation bar at the top of the screen; the Account screen has a cancellation link
Ask for a copy of your content before you cancel
Request it before cancellation, termination, or downgrade (they say they will make a reasonable effort)
Turn on two-factor authentication
Account security tools they offer while you use the service
If a switch is not where they say, the deletion request above still applies.
Line by line
The lines that matter most, worst first.
If someone sues them because of how you used PyPI, you may have to pay their legal bills.
Read the exact line
Terms of service
“You agree to us, defend us, and hold us harmless from and against any and all claims, liabilities, and expenses, including attorneys’ fees, arising out of your use of the Website and the Service”
For example, if a package you upload leads to a lawsuit against them, you could be on the hook for their lawyers.
They can shut off your account instantly and do not have to warn you first.
Read the exact line
Terms of service
“PSF has the right to suspend or terminate your access to all or any part of the Website at any time, with or without cause, with or without notice, effective immediately.”
For example, you could lose access to your projects overnight with no email explaining why.
If you pay for organization features, they keep the money even if you cancel mid-month.
Read the exact line
Terms of service
“Services are billed in advance on a monthly basis and is non-refundable. There will be no refunds or credits for partial months of service, downgrade refunds, or refunds for months unused with an open Account”
For example, if you pay for a month and cancel on day two, you do not get the rest back.
A third-party ad company may process some of your personal information to show ads.
Read the exact line
Privacy policy
“EthicalAds to serve advertising on pypi.org. Some personal information may be processed on their servers.”
For example, visiting package pages could send some data to EthicalAds so ads can be shown.
If your upload is not already under a free license they can use, you give them and other users broad rights to copy and share it.
Read the exact line
Terms of service
“you grant the PSF, its legal successors and assigns, and all other users of the Service an , worldwide, , nonexclusive license to reproduce, distribute, transmit, display, perform, and publish the Content, including in digital form.”
For example, they can host and redistribute your package worldwide without paying you.
They do not promise the site will work, stay up, or be free of errors.
Read the exact line
Terms of service
“PSF provides the Website and the Service "as is" and "as available," of any kind.”
For example, if a download fails or the site is down, they are not promising to make it right.
They collect more than just your packages, including technical identifiers.
Read the exact line
Privacy policy
“PSF may collect the following information from users of PyPI:”
For example, they may log your IP address and browser type when you visit.
You still own what you upload, and you are responsible for it.
Read the exact line
Terms of service
“You retain ownership of and responsibility for Your Content.”
For example, if you upload code you do not have rights to, that problem stays yours.
When you take your content off their servers, the extra license you gave them stops.
Read the exact line
Terms of service
“The licenses you grant to us will end when you remove Your Content from our servers.”
For example, after you delete a project, they no longer have that extra right to keep publishing it as your live content.
You can close your account yourself in the site settings.
Read the exact line
Terms of service
“You can cancel your Account at any time by going into your Settings in the global navigation bar at the top of the screen.”
For example, you open Settings and use the cancellation link instead of emailing them.
For big rule or price changes, they say they will give 30 days’ notice on the site or by email.
Read the exact line
Terms of service
“We will notify our Users of material changes to this Agreement, such as price increases, at least 30 days prior to the change taking effect by posting a notice on our Website or sending email to the primary email address specified in your PyPI account.”
For example, if organization prices go up, they say they will email you at least 30 days ahead.
Words to know
Legal words from the lines above, in plain English.
- personal data
- Any information that is about you or can be linked to you, from your name to your phone's ID. For example, your email, your IP address and the list of apps on your phone are all personal data.
- indemnify
- You promise to pay the company's legal costs and losses if your use of the service gets it sued. For example, if you post a song you do not own and the label sues the app, you owe the app's lawyer bills.
- irrevocable
- Cannot be taken back or cancelled once given, even if you change your mind or delete your account. For example, an irrevocable licence to your photos means you cannot withdraw it later.
- royalty-free
- The company can use your content without ever paying you for it. For example, your photo can appear in the app's ads and you get nothing.
- worldwide license
- You let the company use your content anywhere on earth, usually for free and for as long as it likes. For example, a video you post can be shown in ads in any country without asking you again.
- as is
- You get the service in whatever state it is in, with no promise that it works or will keep working. For example, if the app deletes your photos by mistake, it is not promising to fix that or pay you back.
- warranty
- A promise that a product will work as described; most apps say they make no such promise at all. For example, if a paid feature never works on your phone, a no-warranty clause says that is your problem.
How we got here · grade C · score 48/100 · 15 of 15 policy answers backed by a verified quote · 5 not stated
What does the app collect beyond what it needs to work?
They collect account details plus IP addresses, browser user-agent, organization info, and billing data. They say site analytics are anonymous and aggregated.
Does it record your voice, face or body, and what happens to that?
This is a package index. The parts of the policy we could read do not collect voice, face, or body data.
Are your chats and uploads used to train AI models, and is that off by default?
Not stated in the documents.
Can employees or contractors read your conversations, and when?
Not stated in the documents.
Are you profiled or tracked for advertising?
They use EthicalAds to show ads on pypi.org and say some personal information may be processed on EthicalAds servers.
Do they sell or share your data, and can you opt out?
They list companies that help run the site, such as AWS, Fastly, Stripe, Sentry, and others. They do not say they sell your data.
What rights do they take over what you type and what the AI makes?
You keep ownership of what you upload. You give them a license to host and share it so the service can work, and that license ends when you remove the content.
How long do they keep your data after you delete it, and can you delete it in the app?
You can cancel in Settings. They say they delete your full profile and project content immediately, though some data may stay in encrypted backups and activity logs.
Does it build a lasting memory or profile of you, and can you see, edit or turn it off?
Not stated in the documents.
Do they commit to basic security, and have they leaked data?
Not stated in the documents.
Is there a real age gate, and are teens protected?
Not stated in the documents.
Will they tell you when the rules change, and is the policy specific?
The privacy notice is dated. For material terms changes they give 30 days’ notice, but they do not spell out how long they keep each type of data.
Can they close your account without warning, and can you get your data out first?
They can suspend or terminate access at any time, with or without cause, and with or without notice. You can ask for a copy of your content before you cancel.
If something goes wrong, who pays?
The service is as-is with a broad limit on what they pay. You also agree to cover their legal costs if a claim comes from your use.
Do subscriptions renew on their own, and can you get a refund?
Paid organization services are billed in advance monthly and they say payments are non-refundable, including unused time.
The privacy policy is 724 words at a college level (Flesch reading ease 45.2); the terms are 5,080 words at a fairly hard level.
