Cody (Sourcegraph) policy evolution
Before/after stance changes across captured policy versions, with exact citations. If no before/after delta is available yet, AIRIN shows the latest citation-backed stance events instead.
No before/after stance delta is available for this filter yet. Latest citation-backed stance events are shown below.
Jul 29, 2026privacymedium
data sharing
Latest stance: third party or vendor sharing
“Our servers and operations are located in the United States, and we have team members located around the world. If you access our Website or Services from outside the United States, your personal data will be transferred to, stored, and processed in the United States and potentially in other countries where our teammates are located. Transfers from the European Economic Area, United Kingdom, and Switzerland. For personal data originating from the EEA, UK, or Switzerland, we rely on the Standard Contractual Clauses approved by the European Commission and the UK Information Commissioner's Office as the legal mechanism for transferring your personal data to the United States. United States Privacy Rights. If you are a resident of California or another U.S. state with comprehensive privacy legislation, please note that we may transfer your personal data to Service Providers and other third parties as described in the How We Share Personal Data section above.”
Open citationJul 29, 2026privacymedium
data sharing
Latest stance: third party or vendor sharing
“We may receive personal data from: Your Organization , such as Contact Information and Account Information necessary to provision and manage your access to the Services. Authentication and Identity Providers , such as Account Information when you use SSO or similar authentication mechanisms. Service Providers , such as Support Data, usage analytics, and performance metrics from providers who help us deliver and improve our Website and Services. Billing and Payment Providers , such as Billing and Payment Information for processing payments according to our customer agreements. Security and Fraud Prevention Providers , such as information about potential risks or threats to our Services. Sales and Marketing Service Providers , such as Contact Information and Marketing Information to identify prospective customers and understand market engagement. Third-Party Data Providers , such as professional and organizational information about users and contacts to better understand how our Services are used. Publicly Available Sources , such as Contact information and organizational information.”
Open citationJul 29, 2026privacymedium
data sharing
Latest stance: third party or vendor sharing
“We disclose personal data only as described in this Privacy Policy and only when necessary to operate our Website, provide the Services, or meet legal and security obligations, including to the following third parties and in the following circumstances: Affiliates and Related Entities . We may disclose personal data between and among our affiliates and related entities. If we are involved in a merger, acquisition, reorganization, or sale of business assets, we may disclose personal data as part of that transaction. The acquiring entity will handle personal data in accordance with privacy obligations at least as protective as those in this Privacy Policy. Service Providers . We may disclose personal data to third-party service providers that help us operate our Website and Services. Service providers process personal data only as necessary to perform their contractual obligations to us and pursuant to our instructions. A list of our service providers is available on our Subprocessor Page . Legal and Regulatory Obligations . We may disclose personal data when required by law or legal process, to respond to lawful requests from public authorities, or to comply with applicable regulations. Protection of Services . We may disclose personal data to protect the security or integrity of our Services or to prevent fraud or abuse. Protection of Rights . We may disclose personal data to enforce or defend our legal rights or enforce our agreements.”
Open citationJul 29, 2026privacymedium
data sharing
Latest stance: third party or vendor sharing
“Professional Advisors . We may disclose personal data to professional advisors such as lawyers, auditors, accountants, and consultants when necessary for the services they provide to us. Third-Party Integrations . Our Services may integrate with third-party websites, applications, or services such as code repositories (e.g., GitHub), development tools (e.g., JetBrains), and AI coding agents that connect to our Services through our MCP. When you or your organization enable an integration, personal data may be shared with that third party under their privacy practices. We do not control how third parties collect, use, or share personal data. Review each third party's privacy policy and terms of service before enabling integrations. With Your Consent . We may disclose personal data when you provide consent or direct us to share information with third parties. Aggregated or De-Identified Data . We may aggregate or de-identify Usage Data so that it no longer identifies any individual or organization. Once de-identified, that data is no longer personal data under applicable privacy laws, and we may use or disclose it for any purpose, including analyzing usage patterns, developing new features, and conducting research.”
Open citationJul 29, 2026privacyhigh
data sharing
Latest stance: sale or sell
“Restriction. You have the right to request that we restrict the processing of your personal data where you contest its accuracy, the processing is unlawful, we no longer need it but you require it for legal claims, or you have objected to processing pending verification of our legitimate grounds. Objection. You have the right to object to processing of your personal data based on our legitimate interests. We will cease processing unless we demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or the processing is necessary for legal claims. Withdrawal of Consent. Where we process your personal data based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal. Automated Decision-Making. We do not use your personal data for decisions based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you. If this changes, we will update this Privacy Policy and provide appropriate safeguards as required by applicable law. Marketing Communications. You may opt out of promotional communications at any time by using the "unsubscribe" link in our emails or by contacting us. Opting out of promotional communications does not affect service-related or transactional messages. No Sale or Targeted Advertising. We do not sell or share personal data for cross-context behavioral advertising as defined under applicable privacy laws.”
Open citationJul 8, 2026privacymedium
data sharing
Latest stance: third party or vendor sharing
“We may receive personal data from: Your Organization , such as Contact Information and Account Information necessary to provision and manage your access to the Services. Authentication and Identity Providers , such as Account Information when you use SSO or similar authentication mechanisms. Service Providers , such as Support Data, usage analytics, and performance metrics from providers who help us deliver and improve our Website and Services. Billing and Payment Providers , such as Billing and Payment Information for processing payments according to our customer agreements. Security and Fraud Prevention Providers , such as information about potential risks or threats to our Services. Sales and Marketing Service Providers , such as Contact Information and Marketing Information to identify prospective customers and understand market engagement. Third-Party Data Providers , such as professional and organizational information about users and contacts to better understand how our Services are used. Publicly Available Sources , such as Contact information and organizational information.”
Open citationJul 8, 2026privacymedium
data sharing
Latest stance: third party or vendor sharing
“We disclose personal data only as described in this Privacy Policy and only when necessary to operate our Website, provide the Services, or meet legal and security obligations, including to the following third parties and in the following circumstances: Affiliates and Related Entities . We may disclose personal data between and among our affiliates and related entities. If we are involved in a merger, acquisition, reorganization, or sale of business assets, we may disclose personal data as part of that transaction. The acquiring entity will handle personal data in accordance with privacy obligations at least as protective as those in this Privacy Policy. Service Providers . We may disclose personal data to third-party service providers that help us operate our Website and Services. Service providers process personal data only as necessary to perform their contractual obligations to us and pursuant to our instructions. A list of our service providers is available on our Subprocessor Page . Legal and Regulatory Obligations . We may disclose personal data when required by law or legal process, to respond to lawful requests from public authorities, or to comply with applicable regulations. Protection of Services . We may disclose personal data to protect the security or integrity of our Services or to prevent fraud or abuse. Protection of Rights . We may disclose personal data to enforce or defend our legal rights or enforce our agreements.”
Open citationJul 8, 2026privacymedium
data sharing
Latest stance: third party or vendor sharing
“Professional Advisors . We may disclose personal data to professional advisors such as lawyers, auditors, accountants, and consultants when necessary for the services they provide to us. Third-Party Integrations . Our Services may integrate with third-party websites, applications, or services such as code repositories (e.g., GitHub), development tools (e.g., JetBrains), and AI coding agents that connect to our Services through our MCP. When you or your organization enable an integration, personal data may be shared with that third party under their privacy practices. We do not control how third parties collect, use, or share personal data. Review each third party's privacy policy and terms of service before enabling integrations. With Your Consent . We may disclose personal data when you provide consent or direct us to share information with third parties. Aggregated or De-Identified Data . We may aggregate or de-identify Usage Data so that it no longer identifies any individual or organization. Once de-identified, that data is no longer personal data under applicable privacy laws, and we may use or disclose it for any purpose, including analyzing usage patterns, developing new features, and conducting research.”
Open citationJul 8, 2026privacyhigh
data sharing
Latest stance: sale or sell
“Restriction. You have the right to request that we restrict the processing of your personal data where you contest its accuracy, the processing is unlawful, we no longer need it but you require it for legal claims, or you have objected to processing pending verification of our legitimate grounds. Objection. You have the right to object to processing of your personal data based on our legitimate interests. We will cease processing unless we demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or the processing is necessary for legal claims. Withdrawal of Consent. Where we process your personal data based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal. Automated Decision-Making. We do not use your personal data for decisions based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you. If this changes, we will update this Privacy Policy and provide appropriate safeguards as required by applicable law. Marketing Communications. You may opt out of promotional communications at any time by using the "unsubscribe" link in our emails or by contacting us. Opting out of promotional communications does not affect service-related or transactional messages. No Sale or Targeted Advertising. We do not sell or share personal data for cross-context behavioral advertising as defined under applicable privacy laws.”
Open citationJul 8, 2026privacymedium
data sharing
Latest stance: third party or vendor sharing
“Our servers and operations are located in the United States, and we have team members located around the world. If you access our Website or Services from outside the United States, your personal data will be transferred to, stored, and processed in the United States and potentially in other countries where our teammates are located. Transfers from the European Economic Area, United Kingdom, and Switzerland. For personal data originating from the EEA, UK, or Switzerland, we rely on the Standard Contractual Clauses approved by the European Commission and the UK Information Commissioner's Office as the legal mechanism for transferring your personal data to the United States. United States Privacy Rights. If you are a resident of California or another U.S. state with comprehensive privacy legislation, please note that we may transfer your personal data to Service Providers and other third parties as described in the How We Share Personal Data section above.”
Open citationJun 17, 2026privacyhigh
data sharing
Latest stance: sale or sell
“We do not sell your information. ( read more ) We use a number of trusted third parties to help provide our products. ( read more ) We use cookies to provide, protect, and promote our own products and Amp Free Mode is advertiser-sponsored. ( read more ) You can exercise your rights under privacy laws. ( read more )”
Open citationJun 17, 2026privacyhigh
data sharing
Latest stance: sale or sell
“No. We do not sell, share, or rent your Personal Information for cross-contextual behavioral”
Open citationJun 17, 2026privacyhigh
data sharing
Latest stance: sale or sell
“No. We do not sell, share, or rent your Personal Information for cross-contextual behavioral advertising, whether or not for monetary or other consideration under the CCPA (California Consumer Privacy Act of 2018) or other data privacy laws.”
Open citationGenerated from live stance events. Informational only, not legal advice.