GitHub

GitHub says product development and improvement can include training artificial-intelligence and machine-learning technologies.

GitHub says it applies safeguards such as aggregation and de-identification where feasible.

GitHub says personal data may be shared with Microsoft affiliates for product development and improvement, including AI and ML technologies.

Organizations can control repository visibility, member access, third-party apps, Codespaces, and Copilot settings.

GitHub still collects service usage, website usage, device, session, and email-interaction telemetry.

The privacy statement says GitHub may use online analytics products and other vendors for analytics, marketing, advertising, and social functions.

GitHub clearly separates essential cookies from non-essential cookies in its privacy statement.

Previously opted-out product-improvement preferences stay in place after the Copilot training update.

Some non-essential analytics products are described as de-identified-user analytics rather than open-ended ad-tech surveillance.

The public materials do not give one simple universal retention window for GitHub account, service, and Copilot interaction data.

Organization-controlled accounts can leave individuals with less direct control over how long some data remains available to the customer organization.

Business and Enterprise customers avoid the new personal-plan Copilot training retention surface entirely.

GitHub documents access and privacy-rights request paths for controller-side personal data.

Organization-managed deployments can govern account lifecycle, integrations, and repository access more centrally than personal accounts.

GitHub provides a Copilot privacy setting to disable model training for affected personal plans.

Earlier opt-out preferences are retained rather than being overridden by the new policy.

GitHub accounts and organization setups can restrict who accesses repositories, apps, and extensions.

The privacy statement documents access and other privacy-rights request paths.

The affected personal plans are still default-on for Copilot training unless the user changes the setting.

Organization-provided accounts can reduce how much privacy control an individual user exercises alone.