Skip to main content
Platform Review
PricingSign in
← All platforms
Developer / Coding · coderabbit.com

CodeRabbit

Graded against 804 verified platforms, from its own policy text. Automated assessment against a published rubric — not legal advice.

Overall riskHIGHReviewed 2026-08-31
Creator: medium · GRC: medium · Counsel: medium
creator band
Adequate
enterprise · Strong
Exhibit A · Privacy Policy · verbatim

-       Neither CodeRabbit nor OpenAI or Anthropic uses personal information collected as part of the code review to train, refine, or otherwise influence our models or any third-party models. Our commitment is to use the data solely for the purpose of reviewing the code in accordance with the user's request, and no other utilization takes place. The above

highest-risk verified finding on training use — tap for the citation
119 verified findings13 policy surfaces2/2 core docs verified
Risk triage

Watch: indemnity liability

Start here. These are the highest-risk verified clauses AIRIN found in the platform's own policy text.

0
high
42
medium
46
low
2/2
docs
Trains on your data?
Training possible — conditions or opt-outs apply
from 4 cited findings
Who owns outputs?
You own your outputs
from 2 cited findings
Commercial use?
Commercial use allowed — with conditions
from 3 cited findings
Every rating:verbatim-citedsnapshot-datedchange-loggedHow we keep ratings honest →
Risk by role
Select a role to tailor the summary and reorder the findings below.

Scores derived from 36 enriched findings — same verbatim citations as below. AI-generated, not legal advice.

What this means for you
  • CodeRabbit's training terms are conditional — check the tier, opt-out, and enterprise exceptions before relying on protection.
  • Output ownership has conditions — review the commercial use and license carve-outs before building on these outputs.
  • Data handling is conditional — 4 privacy or retention clauses warrant review before using CodeRabbit at scale.

Derived from AI-enriched analysis of the verified findings below — informational only, not legal advice.

How to read this page: Overall risk rates what CodeRabbit's own policy terms mean for your prompts, outputs, and data. The benchmark bands below grade those same verified terms relative to peers — a platform in a risky-by-default category can rate HIGH risk and still grade STRONG against its peer set. Both trace to the cited findings.

Creator lens
Your prompts, your outputs, your IP
ADEQUATE

Based on 82 verified, verbatim-cited findings below — read the citations.

Enterprise lens
Data use, retention, subprocessors, audit
STRONG

Based on 99 verified, verbatim-cited findings below — read the citations.

Automated assessment against a published rubric — not legal advice.

Fully verifiedDeveloper / Coding

Fully verified — complete core corpus captured and read in full.

Document status
  • Terms of Service
    Verified - read in full - 41 citationsstaticLast captured 2026-08-31
  • Privacy Policy
    Verified - read in full - 78 citationsLast captured 2026-08-10
Tier conditions

Only citation-backed plan differences are shown here; absent cells mean AIRIN has not verified a tier-specific claim.

plan language
Output ownership

Retains for CodeRabbit all intellectual property rights in the Services and assigns Feedback to CodeRabbit, while retaining for Customer all right, title, and interest in Customer Data; also disclaims any obligation to back up Customer Data and indicates it may be deleted without notice, and governs how CodeRabbit may use Customer Data.

" 6.1 CodeRabbit IP Rights. CodeRabbit alone, and where applicable its licensors, retain all Intellectual Property Rights relating to the Services and the CodeRabbit Confidential Information and any suggestions, ideas, enhancement requests r..."
plan language
Training on your content

This segment requires Customer to represent it has all necessary rights to grant CodeRabbit access to Third-Party Accounts without breaching Third-Party Terms, and discloses that the Services use AI powered via API integrations with third parties, establishing subprocessor data sharing through third-party API connections.

"Customer's use of the Third-Party Account is governed solely by its agreement with the applicable Third-Party Account provider (“ Third-Party Terms ”). Customer represents and warrants that it has all necessary rights, consents, authorizati..."
plan language
Commercial use

This segment grants Customer a worldwide, non-exclusive, non-sublicensable, non-transferable right to access and use the Services for internal business purposes during the Term, and reserves CodeRabbit's right to modify the Services, establishing the permitted scope of commercial use.

" 2.1 Grant. Subject to the terms and conditions of this Agreement, CodeRabbit grants to Customer a worldwide, non-exclusive, non-sublicensable, and non-transferable right, and with respect to the applicable components of the Self-Hosted Ser..."
plan language
Commercial use

Grants Customer a worldwide, non-exclusive, non-sublicensable, non-transferable right to access and use the Services during the Term solely for Customer's internal business purposes, and reserves CodeRabbit's right to modify the Services with notice.

" 2.1 Grant. Subject to the terms and conditions of this Agreement, CodeRabbit grants to Customer a worldwide, non-exclusive, non-sublicensable, and non-transferable right, and with respect to the applicable components of the Self-Hosted Ser..."
plan language
Privacy & data use

Describes the nature and risks of User Contributions, disclaiming the company's ability to control how other users or third-party platforms handle publicly posted information, and placing responsibility for sharing on the user.

" · User Contributions: You may have the ability to interact with parts of our Website or with us through third-party platforms, such as the ability to post on third-party forums or to submit tickets on our Website. Your feedback or posts ma..."
plan language
Privacy & data use

This segment discloses that CodeRabbit collects GitHub/GitLab/Azure DevOps/Bitbucket-specific data including tokens, organization info, usernames, and user roles via API and OAuth integration, and also collects social media account information, defining the scope of third-party platform data ingestion.

" · GitHub/GitLab/Azure DevOps/Bitbucket Details  : We may collect data necessary to enable your CodeRabbit account to interface with your GitHub account, such as your GitHub token, your user organization, your GitHub username, and your user..."
📍 Privacy Policy › “Cookies and Other Automatic Data Collection Technologies”Jump to exact text →
plan language
Privacy & data use

Grants California residents CCPA-based rights including the right to know what personal information has been collected, used, and disclosed in the preceding 12 months, and references prior policy sections defining the scope of those disclosures.

" If you are a California resident, the California Consumer Privacy Act (CCPA) may provide you with additional privacy rights with respect to our collection, use and disclosure of your Personal Information. To the extent that CodeRabbit is a..."
📍 Privacy Policy › “California Residents”Jump to exact text →
plan language
Privacy & data use

Describes the collection of platform-specific credentials and tokens (e.g., GitHub tokens, usernames, organization, and user roles) necessary for service integration, and clarifies that login credentials themselves are not accessed; also describes the receipt of information from social media accounts depending on user privacy settings.

" · GitHub/GitLab/Azure DevOps/Bitbucket Details  : We may collect data necessary to enable your CodeRabbit account to interface with your GitHub account, such as your GitHub token, your user organization, your GitHub username, and your user..."
📍 Privacy Policy › “Cookies and Other Automatic Data Collection Technologies”Jump to exact text →

Evidence appendix

Showing priority citations first. The full appendix is available for audit trails; not every citation is a severe risk.

High - 0
Medium - 42
Tier-specific - 3
Total citations - 119
Severity
Surface
Document
Tier
Training on your content
CautionHigh
" -       Neither CodeRabbit nor OpenAI or Anthropic uses personal information collected as part of the code review to train, refine, or otherwise influence our models or any third-party models. Our commitment is to use the data solely for the purpose of reviewing the code in accordance with the user's request, and no other utilization takes place. The above representation does not apply to open-source projects (OSS). We use OSS to train our systems."
§ 7 (HOW WE DISCLOSE AND SHARE YOUR INFORMATION)Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

Expressly restricts CodeRabbit, OpenAI, and Anthropic from using personal information collected during code reviews to train, refine, or influence AI models, while carving out an exception that permits use of open-source project data for training purposes.

AI-generated interpretation, not legal advice.

Privacy & data use
CautionHigh
" As you navigate through and interact with our Website, We and our third-party service providers, including analytics and third-party content providers, may automatically collect certain information from you whenever youaccess or interact with the Service. · Usage Information. Details of your visits to our Website, including which links you clicked on, content response times, location data, logs, and other similar communication data and statistics about your interactions. · Device Information. Information about your computer and internet connection, including your Internet Protocol address, operating system, and browser type. · Non-Identifying Information: We may collect non-identifying or non-personal information when you use our Website, such as zip codes, demographic data, age, gender, time zone, publicly available data, and general information regarding your use of the Service. We may combine this automatically collected log information with other information we collect about you. We do this to improve services we offer you, analytics, and site functionality."
Privacy Policy › “Information Collected Automatically”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

This segment describes automatic collection of usage and device information by CodeRabbit and its third-party service providers, defining specific categories of automatically collected data including usage information and device information that users should be aware of.

AI-generated interpretation, not legal advice.

Privacy & data use
CautionHigh
"Web beacons are small graphics with a unique identifier that may be invisible to you, and which are used to track the online activity of Internet users. Web beacons are embedded in the web pages you review or email messages you receive. Web beacons or similar technologies may be used for a number of purposes, including, without limitation, to count visitors to our Service, to monitor how CodeRabbit Users navigate the Service, to count how many emails that were sent were actually opened, or to count how many particular articles or links were actually viewed. · Embedded Scripts: We and our operational partners, affiliates, analytics, and service providers may also employ software technology known as an Embedded Script. An Embedded Script is programming code that is designed to collect information about your interactions with the Service, such as the links you click on. The code is temporarily downloaded onto your computer or other device and is deactivated or deleted when you disconnect from the Service. Information Received from Third Parties.   We also may receive information about you from third parties. For example, we and our partners, affiliates and service providers may use a variety of other technologies (such as tags) that collect statistical data relating to your Website activity for security and fraud detection purposes.  You may choose to elect that certain third parties share information with us, for example, when you choose to access the Services through another service, such as through Single Sign-on (e.g., GitHub and GitLab). "
Privacy Policy › “Cookies and Other Automatic Data Collection Technologies”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

This segment describes the use of web beacons and embedded scripts by CodeRabbit and its operational partners to track user activity, count visitors, and monitor navigation, disclosing specific surveillance technologies and their purposes.

AI-generated interpretation, not legal advice.

Privacy & data use
CautionHigh
"If your information is deleted, then your account may become deactivated. If your account is deactivated or you ask to close your account, you will no longer be able to use the Services.  Please note that our Services require a minimum amount of Personal Information in order to function. European residents who do not provide Personal Information (e.g., by not creating an account) may not be able to access the full functionality of features found on CodeRabbit."
Privacy Policy › “United Kingdom”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

States that deletion of information results in account deactivation and loss of service access, and imposes a minimum personal information requirement for service functionality, creating obligations tied to data retention and account status.

AI-generated interpretation, not legal advice.

Privacy & data use
CautionHigh
" To tailor content we display to you and offer we may present to you, both on the Service and elsewhere online."
§ 5 (HOW WE USE YOUR INFORMATION)Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

This segment grants CodeRabbit permission to use collected information to communicate with users and promote CodeRabbit products, services, and events, authorizing marketing communications as a use of personal data.

AI-generated interpretation, not legal advice.

Data retention
CautionHigh
"  Upon request, CodeRabbit will provide you with information about whether we hold any of your personal information. You are responsible for maintaining the accuracy of the information you submit to us, such as your contact information. If you submit a request to access all personal information you’ve submitted, we will respond to your request to access within 30 days or as otherwise required by law.  We will use commercially reasonable efforts to honor your requests for deletion; however, certain residual information may actively persist on the Service even if you close your account. In addition, the rights described above may be limited, for example, if fulfilling your request would reveal personal information about another person, or if you ask us to delete information, we are required by law to keep or have compelling legitimate interests in keeping (such as for fraud prevention purposes). Your Personal Information may remain in our archives and information you update or delete, or information within a closed account, may persist internally for our administrative purposes, to the extent permitted by law. It is not always possible to completely remove or delete information from our databases. In addition, we typically will not remove information you posted publicly through or on the Service. Bear in mind that neither you nor CodeRabbit can delete all copies of information that has been previously shared with others on the Service. "
Privacy Policy › “United Kingdom”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

Establishes the procedure for handling personal information access and deletion requests, including a 30-day response obligation, commercially reasonable deletion efforts, and disclosure that residual information may persist after account closure.

AI-generated interpretation, not legal advice.

Indemnity & liability
CautionHigh
"CodeRabbit reserves the right to modify or terminate any Beta Products at any time and without notice. Notwithstanding any other section of this Agreement, all Beta Products are provided for evaluation purposes only, "as is" and without any representations, warranties, indemnifications, support, or SLAs and CodeRabbit's liability with respect to Free Trials shall be limited to an aggregate amount of $1,000. Beta Products may never be made generally available, and participation in a beta program does not guarantee continued access or future pricing. Customer is solely responsible for determining whether Beta Products are appropriate for its case, including with respect to any Customer Data that may be provided to Beta Products."
Source: Terms of Service- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

This segment addresses Beta Products, disclaiming all warranties, indemnifications, SLAs, and support for beta tiers, capping CodeRabbit's liability for Free Trials at $1,000, and reserving the right to modify or terminate beta offerings without notice, distinguishing beta tier rights from standard commercial tiers.

AI-generated interpretation, not legal advice.

Indemnity & liability
High
" 11.1 WAIVER OF CONSEQUENTIAL DAMAGES. EXCEPT FOR CUSTOMER’S BREACH OF SECTION 4 (CUSTOMER OBLIGATIONS) OR EITHER PARTY’S BREACH OF SECTION 7 (CONFIDENTIAL INFORMATION AND DATA PROTECTION), TO THE FULLEST EXTENT PERMITTED BY LAW, IN NO EVENT WILL EITHER PARTY BE LIABLE FOR ANY INDIRECT, SPECIAL, INCIDENTAL, SPECIAL, EXEMPLARY, PUNITIVE, OR CONSEQUENTIAL DAMAGES, ARISING OUT OF OR RELATING TO THIS AGREEMENT, INCLUDING THE SERVICES, OUTPUT, AND CONFIDENTIAL INFORMATION PROVIDED HEREUNDER, REGARDLESS OF THE FORM OF ACTION WHETHER IN CONTRACT, TORT (INCLUDING NEGLIGENCE) OR OTHERWISE, EVEN IF A PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. 11.2 LIMITATION OF LIABILITY. TO THE FULLEST EXTENT PERMITTED BY LAW, IN NO EVENT WILL CODERABBIT’S TOTAL LIABILITY TO CUSTOMER FOR ALL DAMAGES, LOSSES OR CAUSES OF ACTION ARISING OUT OF OR RELATING TO THE USE OF OR INABILITY TO USE ANY PORTION OF THE SERVICES OR OTHERWISE UNDER THIS AGREEMENT, WHETHER IN CONTRACT, TORT, OR OTHERWISE EXCEED THE AMOUNT CUSTOMER HAS PAID CODERABBIT IN THE LAST TWELVE (12) MONTH PERIOD IMMEDIATELY PRECEDING THE EVENT GIVING RISE TO THE LIABILITY. 11.3 Acknowledgement. The parties agree that the disclaimers, exclusions, and limitations of liability set forth in this Agreement are an essential basis of the bargain between them and will apply even if any limited remedy fails of its essential purpose."
Source: Terms of Service- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

This segment limits both parties' liability by waiving consequential, indirect, special, exemplary, punitive, and incidental damages arising from the Agreement (including Services, Output, and Confidential Information), with exceptions for Customer's breach of Section 4 and either party's breach of Section 7, establishing the core liability cap structure.

AI-generated interpretation, not legal advice.

Indemnity & liability
High
" 11.1 WAIVER OF CONSEQUENTIAL DAMAGES. EXCEPT FOR CUSTOMER’S BREACH OF SECTION 4 (CUSTOMER OBLIGATIONS) OR EITHER PARTY’S BREACH OF SECTION 7 (CONFIDENTIAL INFORMATION AND DATA PROTECTION), TO THE FULLEST EXTENT PERMITTED BY LAW, IN NO EVENT WILL EITHER PARTY BE LIABLE FOR ANY INDIRECT, SPECIAL, INCIDENTAL, EXEMPLARY, PUNITIVE, OR CONSEQUENTIAL DAMAGES, ARISING OUT OF OR RELATING TO THIS AGREEMENT, INCLUDING THE SERVICES, OUTPUT, AND CONFIDENTIAL INFORMATION PROVIDED HEREUNDER, REGARDLESS OF THE FORM OF ACTION WHETHER IN CONTRACT, TORT (INCLUDING NEGLIGENCE) OR OTHERWISE, EVEN IF A PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. 11.2 LIMITATION OF LIABILITY. TO THE FULLEST EXTENT PERMITTED BY LAW, IN NO EVENT WILL CODERABBIT’S TOTAL LIABILITY TO CUSTOMER FOR ALL DAMAGES, LOSSES OR CAUSES OF ACTION ARISING OUT OF OR RELATING TO THE USE OF OR INABILITY TO USE ANY PORTION OF THE SERVICES OR OTHERWISE UNDER THIS AGREEMENT, WHETHER IN CONTRACT, TORT, OR OTHERWISE EXCEED THE AMOUNT CUSTOMER HAS PAID CODERABBIT IN THE LAST TWELVE (12) MONTH PERIOD IMMEDIATELY PRECEDING THE EVENT GIVING RISE TO THE LIABILITY. 11.3 Acknowledgement. The parties agree that the disclaimers, exclusions, and limitations of liability set forth in this Agreement are an essential basis of the bargain between them and will apply even if any limited remedy fails of its essential purpose."
Source: Terms of Service- Snapshot 2026-07-20- View source
Permalink to this finding →
Automated analysis

Waives liability for indirect, special, incidental, exemplary, punitive, or consequential damages for both parties, except for Customer's breach of Customer Obligations or either party's breach of Confidential Information and Data Protection provisions, limiting exposure to the fullest extent permitted by law.

AI-generated interpretation, not legal advice.

Tier differences
High
"CodeRabbit reserves the right to modify or terminate any Beta Products at any time and without notice. Notwithstanding any other section of this Agreement, all Beta Products are provided for evaluation purposes only, "as is" and without any representations, warranties, indemnifications, support, or SLAs and CodeRabbit's liability with respect to Free Trials shall be limited to an aggregate amount of $1,000. Beta Products may never be made generally available, and participation in a beta program does not guarantee continued access or future pricing. Customer is solely responsible for determining whether Beta Products are appropriate for its case, including with respect to any Customer Data that may be provided to Beta Products."
Source: Terms of Service- Snapshot 2026-07-20- View source
Permalink to this finding →
Automated analysis

Disclaims all warranties, indemnifications, support, and SLAs for Beta Products and Free Trials, caps CodeRabbit's liability for Free Trials at $1,000, and reserves CodeRabbit's right to modify or terminate Beta Products at any time without notice, distinguishing these tiers from standard service terms.

AI-generated interpretation, not legal advice.

Commercial use
NeutralHigh
" 2.1 Grant. Subject to the terms and conditions of this Agreement, CodeRabbit grants to Customer a worldwide, non-exclusive, non-sublicensable, and non-transferable right, and with respect to the applicable components of the Self-Hosted Services, a license, to access and use the Services during the Term and to permit Users to use such Services solely for Customer’s internal business purposes. CodeRabbit reserves the right to modify the Services from time to time in its sole discretion, provided that CodeRabbit will notify Customer via the Services or the published documentation if the modifications materially diminish the functionality of the Services. 2.2 No Other Rights. The license granted to Customer is expressly set forth above. No other rights or licenses are granted by CodeRabbit, whether by implication, estoppel, or otherwise. All rights not expressly granted herein are reserved by CodeRabbit. 2.3 No Support. CodeRabbit is under no obligation to provide support for the Services. In instances where we may offer support, the support will be subject to published policies and, if applicable, fees as agreed upon by the Parties in an Order Form. 2.4 Beta Products and Free Trials. Certain services (including the Services), features or functionality made be made available in exchange for no fees by CodeRabbit (a “ Free Trial ”) or may be designated as "Beta," "Early Access," "Preview," or similar (collectively with Free Trials, “ Beta Products ”). "
Source: Terms of Service- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

This segment grants Customer a worldwide, non-exclusive, non-sublicensable, non-transferable right to access and use the Services for internal business purposes during the Term, and reserves CodeRabbit's right to modify the Services, establishing the permitted scope of commercial use.

AI-generated interpretation, not legal advice.

Privacy & data use
NeutralHigh
" We use physical, technical, and organizational measures designed to protect your information against unauthorized access, theft, and loss. We restrict access to your personal information to those employees who need to know that information to service your account or perform their job functions. Although we take precautions intended to help protect information that we process, no system or electronic data transmission is completely secure. Any transmission of your personal data is at your own risk, and we expect that you will use appropriate security measures to protect your personal information. You are responsible for maintaining the security of your account and the information in your account. We may suspend your use of all or part of the Services without Policy if we suspect or detect any breach of security. You understand and agree that we may deliver electronic notifications about breaches of security to the email address on record on your account."
§ 11 (SECURITY)Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

Describes security measures implemented to protect personal information while disclaiming that no system is completely secure, placing transmission risk on the user and limiting the platform's liability for data security failures.

AI-generated interpretation, not legal advice.

Privacy & data use
High
" We collect only the minimum amount of information needed to provide you with our Services. For example, we collect basic contact information when you sign up for an account. We don’t ask you for any information if you choose not to register for an account; however, you will not be able to use our Services without registering for an account. Other types of information we collect are related to how you use our Website or Apps, which helps us improve our Services. Information You Provide to Us or Received by Us on Your Behalf · Personal Information: In the course of registering an account on our Services, we collect information that identifies you as a specific individual and can be used to contact or identify you (“ Personal Information ”). Examples of Personal Information we collect for these purposes include your name and email. · Payment Information: We may also process your payment information, such as credit card, billing address, and other financial information necessary to purchase or otherwise use our Services. Please note that we do not collect or store your Payment Information. Rather, your Payment Information is collected and stored by our Authorized Service Providers (see HOW WE DISCLOSE AND SHARE YOUR INFORMATION for more information on our Authorized Service Providers). By submitting your Payment Information, you consent to our providing your Payment Information to those Authorized Service Providers as are reasonably necessary to support and process your transactions as well as your credit card issuer and banking institution. "
Source: Privacy Policy- Snapshot 2026-07-20- View source
Permalink to this finding →
Automated analysis

Describes the procedure and scope of information collection, stating that only minimum necessary information is collected, that registration is required to use the Services, and enumerating categories of personal information collected when a user registers an account.

AI-generated interpretation, not legal advice.

Privacy & data use
High
" As you navigate through and interact with our Website, we and our third-party service providers, including analytics and third-party content providers, may automatically collect certain information from you whenever you access or interact with the Service. · Usage Information. Details of your visits to our Website, including which links you clicked on, content response times, location data, logs, and other similar communication data and statistics about your interactions. · Device Information. Information about your computer and internet connection, including your Internet Protocol address, operating system, and browser type. · Non-Identifying Information: We may collect non-identifying or non-personal information when you use our Website, such as zip codes, demographic data, age, gender, time zone, publicly available data, and general information regarding your use of the Service. We may combine this automatically collected log information with other information we collect about you. We do this to improve the services we offer you, our analytics, and site functionality."
Privacy Policy › “Information Collected Automatically”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-07-20- View source
Permalink to this finding →
Automated analysis

Describes the automatic collection of usage and device information by the company and its third-party service providers as users interact with the Website, enumerating categories such as usage details, links clicked, location data, and device identifiers.

AI-generated interpretation, not legal advice.

Privacy & data use
High
" CodeRabbit and its partners use cookies or similar technologies, which store certain information on your computer and allow us to, among other things, analyze trends, administer the Website, and gather demographic information about our user base as a whole. The technology used to collect information automatically from CodeRabbit Users may include the following: · Cookies: Like many websites, we and our operational partners, affiliates, analytics, and service providers use “cookies” to collect information. A cookie is a small data file that we transfer to your computer’s hard disk for record-keeping purposes. We use both persistent cookies that remain on your computer or similar device (such as to save your registration ID and login password for future logins to the Service) and session ID cookies, which expire at the end of your browser session (for example, to enable certain features of the Service, to better understand how CodeRabbit Users interact with the Service and to monitor aggregate usage by CodeRabbit Users and web traffic routing on the Service). You can control the use of cookies at the individual browser level, but if you choose to disable cookies, it may limit your use of certain features or functionality of the Service. · Web Beacons: We and our operational partners, affiliates, analytics, and service providers may also employ software technology known as “web beacons” and/or “tracking tags” to help us keep track of what content on our Service is effective and to serve relevant advertising to you. "
Privacy Policy › “Cookies and Other Automatic Data Collection Technologies”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-07-20- View source
Permalink to this finding →
Automated analysis

Describes the use of cookies and similar technologies by the company and its partners to collect information automatically, enumerating purposes such as analyzing trends, administering the website, and gathering demographic data.

AI-generated interpretation, not legal advice.

Privacy & data use
NeutralHigh
" 3.1 Customer Accounts. To use the Services, Customer will have to register for a CodeRabbit Customer Account (“ Account ”). Customer is responsible for maintaining the security and confidentiality of its Account information and agrees that Customer is solely responsible for all losses incurred due to someone else using its Account as a result of Customer failing to keep its Account information secure and confidential. Customer can also opt out of data storage. However, opting in helps us enhance the overall quality of the reviews for Customer based on Customer's usage. 3.2 Third-Party Accounts. In order to register an Account, Customer will be required to connect to the Services via its pre-existing account with GitLab, Bitbucket, Azure DevOps, or other third-party code repository tools. In addition, the Services may include features or functionality for Customer to connect to its pre-existing accounts with other third-party providers (each, a “ Third-Party Account ”). By connecting a Third-Party Account to the Services, Customer authorizes CodeRabbit to access Customer's Third-Party Account in order to provide the Services. Customer controls the scope of the authority granted to CodeRabbit to the extent permitted by the Third-Party Account. CodeRabbit does not license or endorse and has no liability or obligation of any kind related to any Third-Party Accounts used by Customer, and CodeRabbit does not have any responsibility for or liability with respect to Customer’s ability to utilize a Third-Party Account. "
Source: Terms of Service- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

This segment obligates Customer to maintain Account security and confidentiality, holds Customer solely responsible for losses from unauthorized Account use, and provides that opting into data storage enables CodeRabbit to use that data to enhance review quality, creating a data use permission tied to Customer's opt-in choice.

AI-generated interpretation, not legal advice.

Privacy & data use
High
" To communicate with you, and to promote products, services, offers, and events offered by CodeRabbit."
§ 5 (HOW WE USE YOUR INFORMATION)Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

This segment grants CodeRabbit permission and establishes an obligation to use collected information to comply with legal requirements and assist law enforcement, authorizing disclosure of user data in response to legal demands.

AI-generated interpretation, not legal advice.

Privacy & data use
NeutralHigh
" · GitHub/GitLab/Azure DevOps/Bitbucket Details  : We may collect data necessary to enable your CodeRabbit account to interface with your GitHub account, such as your GitHub token, your user organization, your GitHub username, and your user role. We integrate tightly with GitHub's API and Open Authentication (OAUTH) system. We do not have access to your GitHub/GitLab/Azure DevOps credentials. · Social Networking Services: When you connect with us through a social media platform, we may, depending on your privacy settings, receive some information from your social media account, and what we collect depends on your privacy settings with that social networking service. The Service may also allow you to “like” or share content with social networking services. You may register to join the Service directly via the Service or by logging into your account with a third party social networking service (“ SNS ”) via our Service (e.g., Discord ). Note that the information we collect from and through an SNS may depend on the privacy settings you have set with the SNS and the permissions you grant to us in connection with linking your account with the Service to your account with an SNS."
Privacy Policy › “Cookies and Other Automatic Data Collection Technologies”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

This segment discloses that CodeRabbit collects GitHub/GitLab/Azure DevOps/Bitbucket-specific data including tokens, organization info, usernames, and user roles via API and OAuth integration, and also collects social media account information, defining the scope of third-party platform data ingestion.

AI-generated interpretation, not legal advice.

Common questions about CodeRabbit's policies

Does CodeRabbit train its AI models on your data?
Training possible — conditions or opt-outs apply — based on 4 verified findings from CodeRabbit's published policy. Informational only, not legal advice.
Who owns the content you create with CodeRabbit?
You own your outputs — based on 2 verified findings from CodeRabbit's published policy. Informational only, not legal advice.
Can you use CodeRabbit's output commercially?
Commercial use allowed — with conditions — based on 3 verified findings from CodeRabbit's published policy. Informational only, not legal advice.

Clause detail — protections, your obligations, and coverage

Every clause below is a verbatim quote from CodeRabbit's own published policy, read in full and linked to its exact location. Protections and user obligations are reported separately from risk because they are different kinds of clause — an obligation on you is not a risk to your data. Informational only, not legal advice.

✅ Protections found

15 verified clauses

Clauses in CodeRabbit's policies that work in your favour — commitments the platform made to you.

  • Confidentiality
    7.1 Definition. Customer or CodeRabbit (“ Disclosing Party ”) may disclose or make available to the other Party (“ Receiving Party ”), information about Disclosing Party or Disclosing Party’s Affiliates’ business affairs, products, confidential intellectual pr…

    This segment defines 'Confidential Information' and the 'Disclosing Party'/'Receiving Party' roles, establishing the scope of what information is protected under the confidentiality obligations throughout the agreement.

  • Confidentiality
    7.2 Use. The Receiving Party will use Confidential Information of the Disclosing Party only in the performance of this Agreement. The Receiving Party shall maintain in confidence all Confidential Information and shall not disclose Confidential Information to a…

    This segment obligates the Receiving Party to use Confidential Information only for performance of the Agreement, to maintain confidentiality, and to restrict disclosure to employees and subcontractors with a legitimate…

  • Indemnity & liabilityindemnity direction
    10.1 By Customer. Customer agrees to indemnify and hold CodeRabbit, its suppliers, licensors and partners, and the officers, directors, employees, agents and representatives of each of them harmless, including costs, liabilities and legal fees, from any claim…

    This segment establishes mutual indemnification obligations: Customer must indemnify CodeRabbit for IP infringement claims and Customer Data claims, while CodeRabbit must indemnify Customer for IP infringement claims ari…

  • Privacy & data usesale/sharing of personal data
    If you are a California resident, the California Consumer Privacy Act (CCPA) may provide you with additional privacy rights with respect to our collection, use and disclosure of your Personal Information. To the extent that CodeRabbit is a covered business und…

    Grants California residents CCPA-based rights including the right to know what personal information has been collected, used, and disclosed in the preceding 12 months, and references prior policy sections defining the sc…

    • Designated security contact: support@coderabbit.ai
    📍 Privacy Policy › “California Residents”Jump to exact text →
  • Model trainingdoes-not-train
    Customer's use of the Third-Party Account is governed solely by its agreement with the applicable Third-Party Account provider (“ Third-Party Terms ”). Customer represents and warrants that it has all necessary rights, consents, authorizations and permissions…

    This segment requires Customer to represent it has all necessary rights to grant CodeRabbit access to Third-Party Accounts without breaching Third-Party Terms, and discloses that the Services use AI powered via API integ…

  • Confidentiality
    Each party acknowledges the irreparable harm that improper disclosure of Confidential Information may cause; therefore, the injured party will be entitled to seek immediate injunctive and other equitable relief, in addition to all other remedies, for any viola…

    This segment acknowledges the irreparable harm from improper disclosure of Confidential Information and grants the injured party the right to seek immediate injunctive and equitable relief in addition to other remedies,…

+ 9 more verified clauses of this kind on this platform, cited in full in the report.

📋 Rules you must follow

2 verified clauses

What CodeRabbit requires of YOU. These are your obligations, not risks to your data or IP, so they are cited here and excluded from this platform's risk rating.

  • Moderation & enforcementconduct restrictions
    4.1 Responsibilities. Customer agrees to use the Services only in accordance with this Agreement and in compliance with all applicable laws, rules, and regulations, including all applicable export control, sanctions, and anti-boycott laws of any relevant juris…

    This segment obliges Customer to use the Services only in compliance with applicable laws (including export controls and sanctions), makes Customer responsible for Users' compliance, and deems User breaches as Customer b…

  • Moderation & enforcement
    damages, or impairs CodeRabbit’s systems or the use of the Services by others; or (vi) use any automated system or software (including robots, spiders, or scripts) to extract data or content from the Services, or introduce any harmful, fraudulent, deceptive, t…

    This segment restricts Customer from using automated scraping tools, introducing harmful code, using the Services to deploy subliminal or manipulative techniques, or engaging in other prohibited conduct, establishing enf…

What the policies actually cover

15 topics
  • Product telemetry & usage tracking8 clauses
  • Advertising & tracking1 protective5 clauses
  • Sale or sharing of personal data1 protective1 clause
  • Children's data1 protective1 clause
  • Government & law-enforcement disclosure2 clauses
  • Data shared with other AI providers3 clauses
  • Does not train on your content2 protective3 clauses
  • Damages & liability cap4 clauses
  • Indemnity direction2 protective2 clauses
  • Terms can change at any time1 clause
  • Deletion rights & post-termination survival2 clauses
  • Auto-renewal & cancel window2 clauses
  • Feedback ownership1 clause
  • Breach-notification promises1 protective2 clauses
  • Conduct restrictions1 obligation1 clause

81 further verified clauses are cited on this page but not yet assigned a topic.

Cross-clause notes

Cross-reference

Two verified clauses intersect on the same subject matter: the Privacy Policy, Privacy Policy › “United Kingdom” addresses how long content is retained, and the Privacy Policy, § 7 (HOW WE DISCLOSE AND SHARE YOUR INFORMATION) addresses use of content in connection with model training or service improvement. Both clauses are in force at the same time — read them together.

Cross-referenceacross documents

The Privacy Policy, Privacy Policy › “Data Storage for Review Improvement” describes a way to decline model training, and the Terms of Service, § 2.4 states that terms differ by plan or tier. Whether the opt-out applies on every tier is determined by those clauses together — read both before relying on the opt-out.

Ambiguity — Caution

Verified retention clauses point in different directions: the Privacy Policy, § 12 (DATA RETENTION, STORAGE, & USAGE FOR PROPRIETARY CODE) describes broad or open-ended retention, while the Privacy Policy, Privacy Policy › “United Kingdom” describes deletion or erasure. Which clause controls in a given situation is not resolved by the documents' text alone — this is surfaced as an ambiguity, treated as Caution.

Automated cross-reference against the published rubric — not legal advice.

Clause intelligence

Canonical clauses and stance patterns extracted from the same gate-verified citations shown on this page.

330
clauses
106
patterns
106
stances
privacy sharing · 55ip license · 21legal burden · 13ip ownership · 5training use · 5commercial use · 3
commercial useLOWPrivacy Policy › “United Kingdom”

The clause permits commercial or business use.

Upon request, CodeRabbit will provide you with information about whether we hold any of your personal information. You are responsible for maintaining the accuracy of the information you submit to us, such as your contact information. If you submit a request to access all personal information you’ve submitted, we will respond to your request to access within 30 days or as otherwise required by law. We will use com...
Open source citation
commercial useLOWPrivacy Policy › “United Kingdom”

The clause permits commercial or business use.

Upon request, CodeRabbit will provide you with information about whether we hold any of your personal information. You are responsible for maintaining the accuracy of the information you submit to us, such as your contact information. If you submit a request to access all personal information you’ve submitted, we will respond to your request to access within 30 days or as otherwise required by law. We will use com...
Open source citation
commercial useLOWPrivacy Policy › “United Kingdom”

The clause permits commercial or business use.

art-27-rep-coderabbit@rickert-services.uk Upon request, CodeRabbit will provide you with information about whether we hold any of your personal information. You are responsible for maintaining the accuracy of the information you submit to us, such as your contact information. If you submit a request to access all personal information you’ve submitted, we will respond to your request to access within 30 days or as ...
Open source citation
dispute resolutionMEDIUMTerms of Service › “Terms of Service”

The clause imposes arbitration, class-action waiver, or jury-trial waiver terms.

This Agreement is a contract entered into by and between You (“ you ” or " Customer ") and CodeRabbit Inc. (“ CodeRabbit ,” “ We ,” or “ us ”) and our affiliates, to the extent expressly stated. These terms and conditions (together with our Privacy Policy, these “ Terms of Service ” or “ Terms ” or “ Agreement ”) govern your access to and use of the Services offered by CodeRabbit, whether as a guest or registered ...
Open source citation
dispute resolutionMEDIUMTerms of Service › “Terms of Service”

The clause imposes arbitration, class-action waiver, or jury-trial waiver terms.

This Agreement is a contract entered into by and between You (“ you ” or " Customer ") and CodeRabbit Inc. (“ CodeRabbit ,” “ We ,” or “ us ”) and our affiliates, to the extent expressly stated. These terms and conditions (together with our Privacy Policy, these “ Terms of Service ” or “ Terms ” or “ Agreement ”) govern your access to and use of the Services offered by CodeRabbit, whether as a guest or registered ...
Open source citation

Tier matrix

Plan-level conditions detected from citation-backed clauses. Empty tiers mean AIRIN has not captured decisive tier language yet.

TierSurfaceVerdictRiskCitations
All applicable tierscommercial useimprovesLOW8
All applicable tiersdata retentionworsensHIGH3
All applicable tiersgoverning law disputesconditionalMEDIUM2
All applicable tiersmoderation enforcementworsensHIGH2
All applicable tiersprivacy data useworsensHIGH4
All applicable tierssubprocessors data sharingworsensHIGH2
Freeindemnity liabilityconditionalMEDIUM7
Pro / Paidindemnity liabilityconditionalMEDIUM4
Team / Businesscommercial useworsensHIGH4
Team / Businessindemnity liabilityconditionalMEDIUM2
Team / Businessmoderation enforcementworsensHIGH2
Team / Businessprivacy data useworsensHIGH10

Policy evolution

Open full timeline

Before/after stance changes across captured policy versions. When no material delta exists yet, AIRIN shows the latest citation-backed stance events instead.

Aug 31, 2026model trainingHIGH

Latest stance: training permitted on training use

Customer's use of the Third-Party Account is governed solely by its agreement with the applicable Third-Party Account provider (“ Third-Party Terms ”). Customer represents and warrants that it has all necessary rights, consents, authorizations and permissions to grant CodeRabbit access to its Third-Party Accounts as described in this Agreement without any breach by Customer of any Third-Party Terms and without subjecting CodeRabbit to any payment obligations, usage limitations or other liabilities. 3.3 AI. CodeRabbit's Services use artificial intelligence, powered via API integration by OpenAI and Anthropic or other third-party AI model providers with whom CodeRabbit may partner (each, a “ Third-Party AI Model Provider ”). Customer's proprietary code remains confidential with CodeRabbit. While the code is shared with Third-Party AI Model Providers, CodeRabbit has a zero data retention policy with each Third-Party AI Model Provider. Neither CodeRabbit nor its Third-Party AI Model Providers use Customer's code to train any AI models. CodeRabbit is not responsible for the accuracy, completeness, availability, timeliness, validity, copyright compliance, legality, decency, quality, security or any other aspect of any output or content provided or made available by any third party, provided that CodeRabbit will use commercially reasonable efforts to monitor third party outputs provided to Customers as part of the Services by third parties.
Open timeline citation
Aug 31, 2026content licenseHIGH

Latest stance: sublicensable or transferable on moderation enforcement

2.1 Grant. Subject to the terms and conditions of this Agreement, CodeRabbit grants to Customer a worldwide, non-exclusive, non-sublicensable, and non-transferable right, and with respect to the applicable components of the Self-Hosted Services, a license, to access and use the Services during the Term and to permit Users to use such Services solely for Customer’s internal business purposes. The Services are designed and intended to function as a software code review assistance tool to support Customer's software development workflows. The Services are not designed or intended for use in making employment decisions, evaluating individual employee performance, allocating tasks based on individual behavior or personal traits, or monitoring individuals in work-related relationships. CodeRabbit reserves the right to modify the Services from time to time in its sole discretion, provided that CodeRabbit will notify Customer via the Services or the published documentation if the modifications materially diminish the functionality of the Services. 2.2 No Other Rights. The license granted to Customer is expressly set forth above. No other rights or licenses are granted by CodeRabbit, whether by implication, estoppel, or otherwise. All rights not expressly granted herein are reserved by CodeRabbit. 2.3 No Support. CodeRabbit is under no obligation to provide support for the Services. In instances where we may offer support, the support will be subject to published policies and, if applicable, fees as agreed upon by the Parties in an Order Form.
Open timeline citation
Aug 31, 2026data sharingMEDIUM

Latest stance: third party or vendor sharing on data retention

7.2 Use. The Receiving Party will use Confidential Information of the Disclosing Party only in the performance of this Agreement. The Receiving Party shall maintain in confidence all Confidential Information and shall not disclose Confidential Information to any person or entity, except to the employees, agents, or subcontractors who have a legitimate need to know to perform their obligations hereunder and who are required to protect the Confidential Information in a manner no less stringent than required under this Agreement. Notwithstanding the foregoing, the Receiving Party, its service providers, or service integration providers, or their representatives may be required to disclose the Disclosing Party's Confidential Information (a) to comply with the order of a court or other governmental body, or as otherwise necessary to comply with applicable law; only after providing notice to the Disclosing Party (if reasonably possible) and giving the Disclosing Party a reasonable opportunity to respond to such order; or (b) to establish Receiving Party's rights under this Agreement, including to make required court filings. 7.3 Return or Destruction. Promptly after Disclosing Party’s request, Receiving Party agrees to return or destroy the Disclosing Party’s Confidential Information; provided, however, that Receiving Party shall be entitled to retain copies of Confidential Information solely to the extent necessary for purposes of such party’s ordinary course records retention and backup policies and procedures, or to comply with applicable law, provided that such Confidential Information is treated as such for so long as it is retained.
Open timeline citation
Aug 31, 2026data sharingMEDIUM

Latest stance: third party or vendor sharing on output ownership

7.1 Definition. Customer or CodeRabbit (“ Disclosing Party ”) may disclose or make available to the other Party (“ Receiving Party ”), information about Disclosing Party or Disclosing Party’s Affiliates’ business affairs, products, confidential intellectual property, trade secrets, financial information, third-party confidential information, and other sensitive or proprietary information, whether in written, electronic, or any other form or media, that is identified as confidential at the time of disclosure or should be reasonably known by Receiving Party to be confidential or proprietary due to the nature of the information disclosed and the circumstances surrounding the disclosure (“ Confidential Information ”). CodeRabbit’s software, applications, scripts, code, plug-ins and technology incorporated in the Services, the design and layout of the CodeRabbit Platform user interface, all pricing information relating to the Services, and the terms and conditions of this Agreement (including all Order Forms) shall be deemed the Confidential Information of CodeRabbit without any marking or further designation. Customer's proprietary code, Customer Data and Output shall be deemed the Confidential Information of Customer. Confidential Information does not include information that: (a) is or becomes publicly known through no fault of the Receiving Party, its service providers, or service integration providers, or their representatives; (b) is already rightfully known to the Receiving Party at the time of disclosure; (c) is rightfully obtained and on a non-confidential basis from a third party without breach of any confidentiality obligation; or (d) is independently developed by or on behalf of the Receiving Party without access to or use of any Confidential Information of
Open timeline citation
Aug 31, 2026content licenseHIGH

Latest stance: sublicensable or transferable on commercial use

4.1 Responsibilities. Customer agrees to use the Services only in accordance with this Agreement and in compliance with all applicable laws, rules, and regulations, including all applicable export control, sanctions, and anti-boycott laws of any relevant jurisdiction. Customer represents that neither it nor any of its Users is prohibited from receiving or using the Services under such laws. Customer shall be responsible for Users’ use of the Services and any breach by a User of the terms of this Agreement shall be deemed to be a breach by Customer. Customer will promptly notify CodeRabbit if at any time it becomes aware of unauthorized or illegal use of the Services by any party. 4.2 Limitations. Customer and its Users shall not and shall not permit or assist any other party to: (i) use the Services in violation of any applicable law, including the EU Artificial Intelligence Act, as may be amended, regulation, or export control requirement or to infringe, misappropriate, or violate the rights (including Intellectual Property Rights) of any third party, or for any purpose other than as expressly permitted under this Agreement; (ii) decompile, disassemble, reverse engineer or otherwise attempt to derive the source code, underlying ideas, techniques, structure or algorithms of the Services; (iii) copy, modify, translate, create derivative works of, distribute, rent, lease, sell, sublicense or otherwise transfer or make available the Services or any portion thereof; (iv) disclose the results of any benchmarking of the Services, or use the Services to develop competing products or services without CodeRabbit’s prior written consent; (v) attempt to circumvent or disable any security or access controls of the Services, or use the Services in any manner that disrupts,
Open timeline citation
Aug 31, 2026content licenseMEDIUM

Latest stance: broad license on moderation enforcement

2.1 Grant. Subject to the terms and conditions of this Agreement, CodeRabbit grants to Customer a worldwide, non-exclusive, non-sublicensable, and non-transferable right, and with respect to the applicable components of the Self-Hosted Services, a license, to access and use the Services during the Term and to permit Users to use such Services solely for Customer’s internal business purposes. The Services are designed and intended to function as a software code review assistance tool to support Customer's software development workflows. The Services are not designed or intended for use in making employment decisions, evaluating individual employee performance, allocating tasks based on individual behavior or personal traits, or monitoring individuals in work-related relationships. CodeRabbit reserves the right to modify the Services from time to time in its sole discretion, provided that CodeRabbit will notify Customer via the Services or the published documentation if the modifications materially diminish the functionality of the Services. 2.2 No Other Rights. The license granted to Customer is expressly set forth above. No other rights or licenses are granted by CodeRabbit, whether by implication, estoppel, or otherwise. All rights not expressly granted herein are reserved by CodeRabbit. 2.3 No Support. CodeRabbit is under no obligation to provide support for the Services. In instances where we may offer support, the support will be subject to published policies and, if applicable, fees as agreed upon by the Parties in an Order Form.
Open timeline citation
Aug 31, 2026legal burdenMEDIUM

Latest stance: liability limited on indemnity liability

2.4 Beta Products and Free Trials. Certain services (including the Services), features or functionality may be made available in exchange for no fees by CodeRabbit (a “ Free Trial ”) or may be designated as "Beta," "Early Access," "Preview," or similar (collectively with Free Trials, “ Beta Products ”). CodeRabbit reserves the right to modify or terminate any Beta Products at any time and without notice. Notwithstanding any other section of this Agreement, all Beta Products are provided for evaluation purposes only, "as is" and without any representations, warranties, indemnifications, support, or SLAs and CodeRabbit's liability with respect to Free Trials shall be limited to an aggregate amount of $1,000. Beta Products may never be made generally available, and participation in a beta program does not guarantee continued access or future pricing. Customer is solely responsible for determining whether Beta Products are appropriate for its case, including with respect to any Customer Data that may be provided to Beta Products.
Open timeline citation
Aug 5, 2026data sharingMEDIUM

Latest stance: third party or vendor sharing on output ownership

7.1 Definition. Customer or CodeRabbit (“ Disclosing Party ”) may disclose or make available to the other Party (“ Receiving Party ”), information about Disclosing Party or Disclosing Party’s Affiliates’ business affairs, products, confidential intellectual property, trade secrets, financial information, third-party confidential information, and other sensitive or proprietary information, whether in written, electronic, or any other form or media, that is identified as confidential at the time of disclosure or should be reasonably known by Receiving Party to be confidential or proprietary due to the nature of the information disclosed and the circumstances surrounding the disclosure (“ Confidential Information ”). CodeRabbit’s software, applications, scripts, code, plug-ins and technology incorporated in the Services, the design and layout of the CodeRabbit Platform user interface, all pricing information relating to the Services, and the terms and conditions of this Agreement (including all Order Forms) shall be deemed the Confidential Information of CodeRabbit without any marking or further designation. Customer's proprietary code, Customer Data and Output shall be deemed the Confidential Information of Customer. Confidential Information does not include information that: (a) is or becomes publicly known through no fault of the Receiving Party, its service providers, or service integration providers, or their representatives; (b) is already rightfully known to the Receiving Party at the time of disclosure; (c) is rightfully obtained and on a non-confidential basis from a third party without breach of any confidentiality obligation; or (d) is independently developed by or on behalf of the Receiving Party without access to or use of any Confidential Information of
Open timeline citation

Capture recency

  • Terms of Service:Last captured 2026-08-31· verified 2026-08-31
  • Privacy Policy:Last captured 2026-08-10· verified 2026-08-10

Dates state when our pipeline captured and verified each document — not when the vendor last changed it. Documents are re-scanned on a recurring cadence; a document verified once says so until a re-scan confirms it again.

↑ 262 more findings this quarter vs last (343 vs 81). First scan: June 2026.

Claim this profile

Compare and stack are saved in your browser. Open compare · View your stack. A correction triggers an automated re-read of CodeRabbit's policies — no human edits the data.

Need this for procurement or legal diligence?

Free shows today's risk. A Stack Audit gives you a citable, verbatim-sourced PDF across your whole AI stack — and flags the moment a vendor's terms change.

Every finding above is a verbatim quote from CodeRabbit's own published policy, captured to an immutable snapshot and read in full through a two-gate verification pipeline. Confidence labels and any analysis are AI-generated and informational only — not legal advice.

📢 POLICY UPDATES ALERT

AIRIN Brief

Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.