Developer / Coding · github.comChatDev
Graded against 804 verified platforms, from its own policy text. Automated assessment against a published rubric — not legal advice.
“We use your Inputs to generate Outputs and provide the AI Features. You also grant GitHub and its Affiliates a license to collect and use your Inputs and Outputs to develop, train and improve artificial intelligence and machine learning models and technologies including those that power AI Features, unless (a) you opt out through your account settings, or…”
Watch: governing law disputes
Start here. These are the highest-risk verified clauses AIRIN found in the platform's own policy text.
Grants GitHub the unrestricted right to assign or delegate the Terms and Privacy Statement to any person or entity at any time, while prohibiting users from assigning or delegating any rights or obligations without GitHub's prior written consent and rendering unauthorized assignments void.
Plain-language summary stating GitHub will not be liable for damages or losses arising from use or inability to use the service, previewing the operative limitation of liability terms.
Affirms that GitHub's liability cap applies regardless of whether GitHub was informed of possible damages or whether a contractual remedy has failed its essential purpose, and further disclaims liability for force-majeure-type failures or delays.
How to read this page: Overall risk rates what ChatDev's own policy terms mean for your prompts, outputs, and data. The benchmark bands below grade those same verified terms relative to peers — a platform in a risky-by-default category can rate HIGH risk and still grade STRONG against its peer set. Both trace to the cited findings.
Policy benchmark
rubric v1.0 — how this is scoredBased on 379 verified, verbatim-cited findings below — read the citations.
Based on 391 verified, verbatim-cited findings below — read the citations.
Automated assessment against a published rubric — not legal advice.
Fully verified — complete core corpus captured and read in full.
- Terms of ServiceVerified - read in full - 170 citationsstaticLast captured 2026-07-19
- Privacy PolicyVerified - read in full - 134 citationsstaticLast captured 2026-07-20
Only citation-backed plan differences are shown here; absent cells mean AIRIN has not verified a tier-specific claim.
Grants users the right to request detailed information about specific types of personal data collected over the past 12 months including data disclosed for business purposes, establishing a data category disclosure right.
" The right to request detailed information about the specific types of Personal Data we've collected over the past 12 months, including data disclosed for business purposes"
This segment authorizes GitHub and its third-party analytics and advertising partners to use mobile identifiers to collect data for sales and marketing purposes when users visit Enterprise Marketing pages on mobile devices, constituting a data sharing permission with named partner categories.
" Mobile identifiers for analytics can be accessed and used by apps on mobile devices in much the same way that websites access and use cookies. When visiting Enterprise Marketing pages, like resources.github.com, on a mobile device these ma..."
Short-version summary explaining differences between Personal Accounts and Organizations, minimum age requirements, email requirements, free account limits, and user responsibility for account activity and security, framing the operative obligations in the section.
" Short version: Personal Accounts and Organizations have different administrative controls; a human must create your Account; you must be 13 or over; you must provide a valid email address; and you may not have more than one free Account. Y..."
Permits disclosure of personal data in connection with corporate transactions such as a sale or merger, subject to legal limits and the privacy statement, defining a transactional disclosure right.
" Corporate Transaction Entities: we might disclose Personal Data within the limits of the law and in accordance with this Privacy Statement for strategic business transactions such as sales or a merger."
Prohibits use of the GitHub API to download data or Content for spamming purposes, including the sale of GitHub users' personal information to recruiters or job boards, restricting data harvesting activities.
" You may not use the API to download data or Content from GitHub for spamming purposes, including for the purposes of selling GitHub users' personal information, such as to recruiters, headhunters, and job boards."
Subjects all GitHub API use to both the Terms of Service and the GitHub Privacy Statement, incorporating those documents as governing terms for API usage.
" All use of the GitHub API is subject to these Terms of Service and the GitHub Privacy Statement ."
This segment grants permission to GitHub to use cookies and similar technologies including web beacons, local storage, mobile analytics, and advertising IDs to operate services and pursue sales and marketing purposes on Enterprise Marketing Pages.
" We use cookies and similar technologies, such as web beacons, local storage, and mobile analytics, to operate and provide our Services. When visiting Enterprise Marketing Pages, like resources.github.com, these and additional cookies, like..."
Establishes GitHub's use of personal data for service personalization, advertising effectiveness evaluation, and user experience consistency, defining a permitted processing purpose.
" Personalization: We use Personal Data to customize the Service to your preferences, to evaluate the effectiveness of enterprise business ads and promotional communications, and to ensure a seamless and consistent user experience."
Clause A states a user may not have more than one free Account, while Clause B explicitly allows for one free machine account in addition to a free Personal Account, creating opposing claims about the total number of free accounts a user can maintain.
" Short version: Personal Accounts and Organizations have different administrative controls; a human must create your Account; you must be 13 or over; you must provide a valid email address; and you may not have more than one free Account. You alone are responsible for your Account and anything that happens while you are signed in to or using your Account. You are responsible for keeping your Account secure. "
" A machine account is an Account set up by an individual human who accepts the Terms on behalf of the Account, provides a valid email address, and is responsible for its actions. A machine account is used exclusively for performing automated tasks. Multiple users may direct the actions of a machine account, but the owner of the Account is ultimately responsible for the machine's actions. You may maintain no more than one free machine account in addition to your free Personal Account."
Within one document
Evidence appendix
Showing priority citations first. The full appendix is available for audit trails; not every citation is a severe risk.
" One person or legal entity may maintain no more than one free Account (if you choose to control a machine account as well, that's fine, but it can only be used for running a machine)."
Restricts each person or legal entity to no more than one free Account, with the exception that a machine account may also be maintained solely for automated tasks — limiting free account proliferation.
AI-generated interpretation, not legal advice.
" Your login may only be used by one person — i.e., a single login may not be shared by multiple people. A paid Organization may only provide access to as many Personal Accounts as your subscription allows."
Restricts a single login to one person (prohibiting shared logins) and limits paid Organizations to providing access only to the number of Personal Accounts allowed by their subscription — imposing per-seat and per-login usage restrictions tied to account tier.
AI-generated interpretation, not legal advice.
" Payment Based on Plan For monthly or yearly payment plans, the Service is billed in advance on a monthly or yearly basis respectively and is non-refundable. There will be no refunds or credits for partial months of service, downgrade refunds, or refunds for months unused with an open Account; however, the service will remain active for the length of the paid billing period. In order to treat everyone equally, no exceptions will be made."
Establishes that plan-based billing is collected in advance and is non-refundable, with no credits or refunds for partial months, downgrades, or unused time, while ensuring service remains active through the paid billing period and explicitly prohibiting exceptions.
AI-generated interpretation, not legal advice.
" to comply with our legal obligations if we have reason to believe the contents are in violation of the law."
This segment identifies compliance with legal obligations where GitHub has reason to believe contents violate the law as a permitted exception to the restriction on GitHub's access to private repository content without consent.
AI-generated interpretation, not legal advice.
" Short version: We will not be liable for damages or losses arising from your use or inability to use the service or otherwise arising under this agreement. Please read this section carefully; it limits our obligations to you. "
Plain-language summary stating GitHub will not be liable for damages or losses arising from use or inability to use the service, previewing the operative limitation of liability terms.
AI-generated interpretation, not legal advice.
" Our liability is limited whether or not we have been informed of the possibility of such damages, and even if a remedy set forth in this Agreement is found to have failed of its essential purpose. We will have no liability for any failure or delay due to matters beyond our reasonable control."
Affirms that GitHub's liability cap applies regardless of whether GitHub was informed of possible damages or whether a contractual remedy has failed its essential purpose, and further disclaims liability for force-majeure-type failures or delays.
AI-generated interpretation, not legal advice.
" GitHub may assign or delegate these Terms of Service and/or the GitHub Privacy Statement , in whole or in part, to any person or entity at any time with or without your consent, including the license grant in Section D.4. You may not assign or delegate any rights or obligations under the Terms of Service or Privacy Statement without our prior written consent, and any unauthorized assignment and delegation by you is void."
Grants GitHub the unrestricted right to assign or delegate the Terms and Privacy Statement to any person or entity at any time, while prohibiting users from assigning or delegating any rights or obligations without GitHub's prior written consent and rendering unauthorized assignments void.
AI-generated interpretation, not legal advice.
" To the extent this agreement is not enforceable by applicable law, you grant GitHub the rights we need to use Your Content without attribution and to make reasonable adaptations of Your Content as necessary to render the Website and provide the Service."
This segment provides a fallback exception: if the moral rights waiver is unenforceable under applicable law, the user separately grants GitHub the right to use content without attribution and to make adaptations necessary to render the website and provide the service.
AI-generated interpretation, not legal advice.
" Additionally, we may be compelled by law to disclose the contents of your private repositories."
This segment identifies compelled legal disclosure as an additional exception to the confidentiality of private repositories, establishing that GitHub may be required by law to disclose private repository contents.
AI-generated interpretation, not legal advice.
" You understand and agree that we will not be liable to you or any third party for any loss of profits, use, goodwill, or data, or for any incidental, indirect, special, consequential or exemplary damages, however arising, that result from"
Operative limitation clause excluding GitHub's liability to the user or any third party for loss of profits, use, goodwill, data, or any incidental, indirect, special, consequential, or exemplary damages, introducing an enumerated list of causative scenarios.
AI-generated interpretation, not legal advice.
" your use or inability to use the Service;"
Excludes GitHub liability for damages resulting from the user's use or inability to use the Service, a core limitation on service-availability claims.
AI-generated interpretation, not legal advice.
" The opt-out right described in this section applies solely to the use of your Inputs and Outputs as described in this section, and does not apply to the license granted in Sections D.4-D.8 or to any Content that does not constitute Input or Output (including Content stored in public repositories)."
Defines the limited scope of the opt-out right: it applies only to the training use of Inputs and Outputs under J.3, and does not affect licenses under Sections D.4-D.8 or Content that is not Input or Output, including Content in public repositories.
AI-generated interpretation, not legal advice.
" GitHub may offer subscription-based access to our API for those Users who require high-throughput access or access that would result in resale of GitHub's Service."
Permits GitHub to offer subscription-based API access for users requiring high-throughput access or access resulting in resale of GitHub's Service, indicating a tiered access model for the API.
AI-generated interpretation, not legal advice.
" This section applies to all AI Features unless a specific feature has additional terms that expressly modify them. The training and data-use provisions in Section J.3 apply only to individual licenses. If your use of the Service is governed by a GitHub Customer Agreement or volume licensing agreement, those agreements govern the use of your data in connection with AI Features and Section J.3 does not apply to you."
Defines the scope of Section J's applicability: it covers all AI Features unless specific additional terms override; the training/data-use provisions in J.3 apply only to individual licenses and are excluded for users governed by a GitHub Customer Agreement or volume licensing agreement, creating a tier-based carve-out.
AI-generated interpretation, not legal advice.
" If you have signed up for GitHub Enterprise Cloud, the Enterprise Cloud Addendum applies to you, and you agree to its provisions."
Incorporates the Enterprise Cloud Addendum for users signed up for GitHub Enterprise Cloud, requiring agreement to its provisions — a tier-specific incorporation of additional contractual terms.
AI-generated interpretation, not legal advice.
" We will immediately bill you when you upgrade from the free plan to any paying plan."
Imposes an immediate billing obligation on GitHub when a user upgrades from a free plan to a paid plan.
AI-generated interpretation, not legal advice.
" We aim to promptly respond to requests in compliance with legal requirements. Please note that we may retain certain data as necessary for legal obligations or for establishing, exercising, or defending legal claims."
States GitHub's obligation to respond promptly to data requests and discloses that certain data may be retained for legal obligations or legal claims, creating a retention exception that limits the scope of deletion rights.
AI-generated interpretation, not legal advice.
" Abuse and Fraud Prevention Entities: We may disclose Personal Data based on a good faith belief it is needed to prevent fraud, abuse, or attacks on our Services, or to protect the safety of GitHub and our users."
Grants GitHub permission to disclose personal data to abuse and fraud prevention entities based on a good-faith belief that disclosure is necessary to prevent fraud, abuse, or attacks, or to protect safety.
AI-generated interpretation, not legal advice.
Common questions about ChatDev's policies
- Does ChatDev train its AI models on your data?
- Training possible — conditions or opt-outs apply — based on 9 verified findings from ChatDev's published policy. Informational only, not legal advice.
- Who owns the content you create with ChatDev?
- You own outputs — with license carve-outs — based on 12 verified findings from ChatDev's published policy. Informational only, not legal advice.
- Can you use ChatDev's output commercially?
- Commercial use allowed — based on 3 verified findings from ChatDev's published policy. Informational only, not legal advice.
Clause detail — protections, your obligations, and coverage
Every clause below is a verbatim quote from ChatDev's own published policy, read in full and linked to its exact location. Protections and user obligations are reported separately from risk because they are different kinds of clause — an obligation on you is not a risk to your data. Informational only, not legal advice.
✅ Protections found
45 verified clausesClauses in ChatDev's policies that work in your favour — commitments the platform made to you.
- Audit rights, DPA & residency
“GitHub also complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce. GitHub has certified to the U.S. Depart…”
States GitHub's certification and compliance obligations under the EU-U.S. DPF, UK Extension, and Swiss-U.S. DPF, describing the binding commitments GitHub has made to the U.S. Department of Commerce for processing perso…
📍 Privacy Policy › “Data Privacy Framework (DPF)”Jump to exact text → - Subprocessors & data sharingsale/sharing of personal data
“Under California Civil Code section 1798.83, also known as the “Shine the Light” law, California residents who have provided personal information to a business with which the individual has established a business relationship for personal, family, or household…”
Discloses that the company does not share personal information with third parties for their direct marketing purposes as defined under the California Shine the Light law, constituting a compliance disclaimer limiting use…
📍 Privacy Policy › “Shine the Light Act”Jump to exact text → - Audit rights, DPA & residency
“GitHub stores and processes Personal Data in a variety of locations, including your local region, the United States, and other countries where GitHub, its affiliates, subsidiaries, or subprocessors have operations. We transfer Personal Data from the European U…”
Describes where GitHub stores and processes Personal Data (including via affiliates, subsidiaries, and subprocessors) and discloses the legal mechanism (EU Standard Contractual Clauses under Decision 2021/914) used for t…
📍 Privacy Policy › “International data transfers”Jump to exact text → - Moderation & enforcementterms can change anytime
“We reserve the right, at our sole discretion, to amend these Terms of Service at any time and will update these Terms of Service in the event of any such amendments. We will notify our Users of material changes to this Agreement, such as price increases, at le…”
Establishes GitHub's right to amend the Terms of Service at its sole discretion, mandates at least 30 days' advance notice for material changes (e.g., price increases) via website posting or email, and deems continued us…
- Terms changes: advance notice promised
📍 § R (Changes to These Terms)Jump to exact text → - Confidentiality
“Exceptions. Confidential Information will not include information that is: (a) or becomes publicly available without breach of this Agreement through no act or inaction on your part (such as when a private Beta Preview becomes a public Beta Preview); (b) known…”
This clause defines the exceptions to what constitutes Confidential Information, carving out publicly available information, previously known information, independently developed information, and disclosed-with-permissio…
📍 § 2 (Confidentiality)Jump to exact text → - Audit rights, DPA & residency
“Should you access a GitHub Service through an account provided by an organization, such as your employer or school, the organization becomes the Data Controller, and this Privacy Statement's direct applicability to you changes. Even so, GitHub remains dedicate…”
This segment defines GitHub's role as Data Processor when users access Services through organizational accounts, specifies that a Data Protection Agreement governs the relationship, and explains that the Privacy Statemen…
📍 Privacy Policy › “End User Notice: Organization-Provided GitHub Accounts”Jump to exact text →
+ 39 more verified clauses of this kind on this platform, cited in full in the report.
📋 Rules you must follow
9 verified clausesWhat ChatDev requires of YOU. These are your obligations, not risks to your data or IP, so they are cited here and excluded from this platform's risk rating.
- Prompt ownership
“GitHub and our licensors, vendors, agents, and/or our content providers retain ownership of all intellectual property rights of any kind related to the Website and Service. We reserve all rights that are not expressly granted to you under this Agreement or by…”
Affirms GitHub and its licensors retain all IP rights in the Website and Service, reserves all non-expressly-granted rights, and restricts users from duplicating HTML/CSS, JavaScript, or visual design elements without ex…
📍 § 1 (GitHub's Rights to Content)Jump to exact text → - Commercial useconduct restrictions
“This Section D.9 does not apply to Access solely for the purpose of academic research or if, on the date you Access the Content, the number of monthly active users of the products or services made available by you is less than 700 million in the preceding cale…”
This segment carves out exceptions to the Section D.9 reciprocity obligation for academic research purposes and for entities with fewer than 700 million monthly active users, and defines 'you' to include affiliates under…
📍 § 9 (Access Reciprocity)Jump to exact text → - Moderation & enforcement
“Your use of the Website and Service must not violate any applicable laws, including copyright or trademark laws, export control or sanctions laws, or other laws in your jurisdiction. You are responsible for making sure that your use of the Service is in compli…”
Requires users to agree not to violate GitHub's Acceptable Use Policies or Community Guidelines under any circumstances, incorporating those external policy documents as binding obligations.
📍 Article C (Acceptable Use)Jump to exact text → - Moderation & enforcementconduct restrictions
“You may not use the API to download data or Content from GitHub for spamming purposes, including for the purposes of selling GitHub users' personal information, such as to recruiters, headhunters, and job boards.”
Prohibits use of the GitHub API to download data or Content for spamming purposes, including the sale of GitHub users' personal information to recruiters or job boards, restricting data harvesting activities.
📍 § H (API Terms)Jump to exact text → - Moderation & enforcement
“Your login may only be used by one person — i.e., a single login may not be shared by multiple people. A paid Organization may only provide access to as many Personal Accounts as your subscription allows.”
Prohibits use of GitHub in violation of U.S. or applicable export control or sanctions laws, and restricts use by Specially Designated Nationals or persons subject to denied-party prohibitions, while permitting limited a…
📍 § 3 (Account Requirements)Jump to exact text →
+ 4 more verified clauses of this kind on this platform, cited in full in the report.
What the policies actually cover
16 topics- Product telemetry & usage tracking17 clauses
- Advertising & tracking3 protective20 clauses
- Sale or sharing of personal data5 protective8 clauses
- Sensitive data (biometric, location, health)1 clause
- Children's data1 protective4 clauses
- Government & law-enforcement disclosure6 clauses
- Data shared with other AI providers2 clauses
- Trains by default, opt-out available3 clauses
- Arbitration & class-action waiver1 protective1 clause
- Damages & liability cap8 clauses
- Indemnity direction3 clauses
- Terms can change at any time2 protective5 clauses
- Deletion rights & post-termination survival2 protective3 clauses
- License survival after account deletion1 clause
- Auto-renewal & cancel window3 clauses
- Conduct restrictions3 obligations3 clauses
216 further verified clauses are cited on this page but not yet assigned a topic.
Cross-clause notes
Two verified clauses intersect on the same subject matter: the Privacy Policy, Privacy Policy › “Security and Retention” addresses how long content is retained, and the Terms of Service, § 3 (Access) addresses use of content in connection with model training or service improvement. Both clauses are in force at the same time — read them together.
The Terms of Service, § 5 (License Grant to Other Users) describes rights the platform takes in user content, and the Privacy Policy, Privacy Policy › “Sharing of Personal Data” describes disclosure of data to third parties or subprocessors. Both clauses are in force at the same time — read them together.
The Terms of Service, § 3 (Access) describes a way to decline model training, and the Terms of Service, § 2 (Upgrades, Downgrades, and Changes) states that terms differ by plan or tier. Whether the opt-out applies on every tier is determined by those clauses together — read both before relying on the opt-out.
Verified retention clauses point in different directions: the Privacy Policy, Privacy Policy › “Security and Retention” describes broad or open-ended retention, while the Privacy Policy, Privacy Policy › “Cookies and tracking technologies” describes deletion or erasure. Which clause controls in a given situation is not resolved by the documents' text alone — this is surfaced as an ambiguity, treated as Caution.
Automated cross-reference against the published rubric — not legal advice.
Clause intelligence
Canonical clauses and stance patterns extracted from the same gate-verified citations shown on this page.
The clause provides a deletion or time-bounded retention path.
“We will retain and use your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements, but barring legal requirements, we will delete your full profile and the Content of your repositories within 90 days of cancellation or termination (though some information may remain in encrypted backups). This information cannot be recovered once your Account is canceled.”Open source citation
The clause provides a deletion or time-bounded retention path.
“We will retain and use your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements, but barring legal requirements, we will delete your full profile and the Content of your repositories within 90 days of cancellation or termination (though some information may remain in encrypted backups). This information cannot be recovered once your Account is canceled.”Open source citation
The clause provides a deletion or time-bounded retention path.
“We will retain and use your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements, but barring legal requirements, we will delete your full profile and the Content of your repositories within 90 days of cancellation or termination (though some information may remain in encrypted backups). This information cannot be recovered once your Account is canceled.”Open source citation
The clause imposes arbitration, class-action waiver, or jury-trial waiver terms.
“An individual has the possibility, under certain conditions, to invoke binding arbitration for complaints regarding DPF compliance not resolved by any of the other DPF mechanisms. For additional information visit https://www.dataprivacyframework.gov/framework-article/ANNEX-I-introduction .”Open source citation
The clause imposes arbitration, class-action waiver, or jury-trial waiver terms.
“An individual has the possibility, under certain conditions, to invoke binding arbitration for complaints regarding DPF compliance not resolved by any of the other DPF mechanisms. For additional information visit https://www.dataprivacyframework.gov/framework-article/ANNEX-I-introduction .”Open source citation
Tier matrix
Plan-level conditions detected from citation-backed clauses. Empty tiers mean AIRIN has not captured decisive tier language yet.
| Tier | Surface | Verdict | Risk | Citations |
|---|---|---|---|---|
| All applicable tiers | data retention | improves | LOW | 9 |
| All applicable tiers | indemnity liability | conditional | MEDIUM | 10 |
| All applicable tiers | output ownership | conditional | MEDIUM | 10 |
| All applicable tiers | privacy data use | worsens | HIGH | 5 |
| All applicable tiers | prompt ownership | improves | LOW | 2 |
| All applicable tiers | subprocessors data sharing | worsens | HIGH | 1 |
| All applicable tiers | tier differences | worsens | HIGH | 1 |
| All applicable tiers | training use | improves | LOW | 3 |
| Free | commercial use | worsens | HIGH | 4 |
| Free | prompt ownership | worsens | HIGH | 2 |
| Government | governing law disputes | conditional | MEDIUM | 3 |
Policy evolution
Open full timelineBefore/after stance changes across captured policy versions. When no material delta exists yet, AIRIN shows the latest citation-backed stance events instead.
data sharing improved from high/sale or sell to medium/third party or vendor sharing.
“You may use the Global Privacy Control (GPC) to communicate your privacy preferences. If GitHub detects the GPC signal from your device, GitHub will not share your data (we do not sell your data). To learn more, visit Global Privacy Control — Take Control Of Your Privacy”Before citation
“Affiliates: Personal Data may be shared with GitHub affiliates, including Microsoft, to facilitate customer service, marketing and advertising, order fulfillment, billing, technical support, legal and compliance obligations, product development and improvement (including training and improving artificial intelligence and machine learning technologies), and for other purposes described in their respective privacy statements. When we share data with affiliates, they will process it in accordance with applicable law and their privacy commitments.”After citation
content ownership worsened from low/user retains rights to high/platform claims or reserves rights.
“D. User-Generated Content You own the content you post on GitHub. However, you have some responsibilities regarding it, and we ask you to grant us some rights so we can provide services to you.”Before citation
“GitHub and our licensors, vendors, agents, and/or our content providers retain ownership of all intellectual property rights of any kind related to the Website and Service. We reserve all rights that are not expressly granted to you under this Agreement or by law. The look and feel of the Website and Service is copyright © GitHub, Inc. All rights reserved. You may not duplicate, copy, or reuse any portion of the HTML/CSS, JavaScript, or visual design elements or concepts without express written permission from GitHub.”After citation
legal burden changed from medium/liability limited to medium/indemnity.
“P. Limitation of Liability We will not be liable for damages or losses arising from your use or inability to use the service or otherwise arising under this agreement. Please read this section carefully; it limits our obligations to you.”Before citation
“You agree to indemnify us, defend us, and hold us harmless from and against any and all claims, liabilities, and expenses, including attorneys’ fees, arising out of your use of the Website and the Service, including but not limited to your violation of this Agreement, provided that GitHub (1) promptly gives you written notice of the claim, demand, suit or proceeding; (2) gives you sole control of the defense and settlement of the claim, demand, suit or proceeding (provided that you may not settle any claim, demand, suit or proceeding unless the settlement unconditionally releases GitHub of all liability); and (3) provides to you all reasonable assistance, at your expense.”After citation
data sharing worsened from medium/third party or vendor sharing to high/sale or sell.
“Confidentiality Obligations. You agree that any non-public Beta Preview information we give you, such as information about a private Beta Preview, will be considered GitHub’s confidential information (collectively, “Confidential Information”), regardless of whether it is marked or identified as such. You agree to only use such Confidential Information for the express purpose of testing and evaluating the Beta Preview (the “Purpose”), and not for any other purpose. You should use the same degree of care as you would with your own confidential information, but no less than reasonable precautions to prevent any unauthorized use, disclosure, publication, or dissemination of our Confidential Information. You promise not to disclose, publish, or disseminate any Confidential Information to any third party, unless we don’t otherwise prohibit or restrict such disclosure (for example, you might be part of a GitHub-organized group discussion about a private Beta Preview feature).”Before citation
“You may use the Global Privacy Control (GPC) to communicate your privacy preferences. If GitHub detects the GPC signal from your device, GitHub will not share your data (we do not sell your data). To learn more, visit Global Privacy Control — Take Control Of Your Privacy”After citation
data sharing improved from high/sale or sell to medium/third party or vendor sharing.
“You may use the Global Privacy Control (GPC) to communicate your privacy preferences. If GitHub detects the GPC signal from your device, GitHub will not share your data (we do not sell your data). To learn more, visit Global Privacy Control — Take Control Of Your Privacy”Before citation
“Confidentiality Obligations. You agree that any non-public Beta Preview information we give you, such as information about a private Beta Preview, will be considered GitHub’s confidential information (collectively, “Confidential Information”), regardless of whether it is marked or identified as such. You agree to only use such Confidential Information for the express purpose of testing and evaluating the Beta Preview (the “Purpose”), and not for any other purpose. You should use the same degree of care as you would with your own confidential information, but no less than reasonable precautions to prevent any unauthorized use, disclosure, publication, or dissemination of our Confidential Information. You promise not to disclose, publish, or disseminate any Confidential Information to any third party, unless we don’t otherwise prohibit or restrict such disclosure (for example, you might be part of a GitHub-organized group discussion about a private Beta Preview feature).”After citation
Latest stance: sale or sell on privacy data use
“You may use the Global Privacy Control (GPC) to communicate your privacy preferences. If GitHub detects the GPC signal from your device, GitHub will not share your data (we do not sell your data). To learn more, visit Global Privacy Control — Take Control Of Your Privacy”Open timeline citation
Latest stance: third party or vendor sharing on subprocessors data sharing
“GitHub has the responsibility for the processing of Personal Data it receives under the Data Privacy Framework (DPF) Principles and subsequently transfers to a third party acting as an agent on GitHub’s behalf. GitHub shall remain liable under the DPF Principles if its agent processes such Personal Data in a manner inconsistent with the DPF Principles, unless the organization proves that it is not responsible for the event giving rise to the damage.”Open timeline citation
Latest stance: third party or vendor sharing on subprocessors data sharing
“We disclosed the following categories of personal information for a business purpose in the last 12 months: identifiers/contact information, demographic information (such as gender and rough geographic location), payment information, commercial information, Internet or other electronic network activity information, geolocation data, audio, electronic, visual or similar information, and inferences drawn from the above. We disclosed each category to third-party business partners and service providers, third-party sites or platforms such as social networking sites, and other third parties as described in the Sharing of Personal Data section of our Privacy Statement.”Open timeline citation
Latest stance: third party or vendor sharing on subprocessors data sharing
“Partners and Resellers: We cooperate with third-parties that offer sales, consulting, support, and technical services for our Services. We may share your data with these partners and resellers where allowed, and with your consent when required.”Open timeline citation
Capture recency
- Terms of Service:Last captured 2026-07-19· verified 2026-07-19
- Privacy Policy:Last captured 2026-07-20· verified 2026-07-20
Dates state when our pipeline captured and verified each document — not when the vendor last changed it. Documents are re-scanned on a recurring cadence; a document verified once says so until a re-scan confirms it again.
↑ 399 more findings this quarter vs last (662 vs 263). First scan: June 2026.
Compare and stack are saved in your browser. Open compare · View your stack. A correction triggers an automated re-read of ChatDev's policies — no human edits the data.
Need this for procurement or legal diligence?
Free shows today's risk. A Stack Audit gives you a citable, verbatim-sourced PDF across your whole AI stack — and flags the moment a vendor's terms change.
Every finding above is a verbatim quote from ChatDev's own published policy, captured to an immutable snapshot and read in full through a two-gate verification pipeline. Confidence labels and any analysis are AI-generated and informational only — not legal advice.
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.