GitHub is a developer platform, reviewed for GitHub Copilot training changes, privacy controls, sharing, retention, and organization or enterprise governance.
60
Mixed
60
Mixed
GitHub keeps strong repo controls, but Copilot settings and public-repo exposure still create real privacy tradeoffs.
GitHub is strongest where users and organizations can control repository visibility, exports, account privacy, and admin settings in one mature platform.
Privacy weakens once repositories are public or when Copilot training settings are left at the default for personal plans.
45
Weak
Copilot Free, Pro, and Pro+ interaction data is used for model training by default unless a user turns the setting off.
GitHub says Copilot can still process code from private repositories while the user is actively using the tool.
70
Mixed
60
Mixed
65
Mixed
75
Good
Docs Privacy Page
Open: docs.github.comData Controls
Open: github.blog1. AI Use
Copilot Free, Pro, and Pro+ interaction data is used for model training by default unless a user turns the setting off.
2. GitHub Copilot
GitHub says Copilot can still process code from private repositories while the user is actively using the tool.
3. AI Use
GitHub says Copilot Business and Enterprise are not affected by the Free, Pro, and Pro+ training change.
4. AI Use
GitHub says the update does not use content from private repositories at rest for model training.
5. Previously Saved
Previously saved opt-out preferences are preserved instead of being silently reset.
Founded
Unknown
Founder
Unknown
Parent Company
GitHub
Lifecycle
Active
Category
Developer Platforms & Infra
CEO
Unknown
Security Team
In house
Date Added
05-18-2026
Once you delete a chat, you cannot recover it. Deleting a chat removes it both from your visible chat history and the system after the retention window.
GitHub says Copilot Business and Enterprise are not affected by the Free, Pro, and Pro+ training change.
GitHub says the update does not use content from private repositories at rest for model training.
Previously saved opt-out preferences are preserved instead of being silently reset.
70
Mixed
GitHub says data used in the Copilot training program may be shared with GitHub affiliates, including Microsoft.
The privacy statement allows disclosure to vendors, partners, resellers, legal recipients, and connected third-party applications.
GitHub gives users and admins control over whether personal-plan Copilot interaction data can be used for model training.
The privacy statement says third-party applications, marketplace tools, and linked services are user- or admin-directed rather than universally forced on every account.
Organization-managed accounts create a clearer customer-controller boundary than purely individual use.
60
Mixed
GitHub still collects service usage, website usage, device, session, and email-interaction telemetry.
The privacy statement says GitHub may use online analytics products and other vendors for analytics, marketing, advertising, and social functions.
GitHub clearly separates essential cookies from non-essential cookies in its privacy statement.
Previously opted-out product-improvement preferences stay in place after the Copilot training update.
Some non-essential analytics products are described as de-identified-user analytics rather than open-ended ad-tech surveillance.
65
Mixed
The public materials do not give one simple universal retention window for GitHub account, service, and Copilot interaction data.
Organization-controlled accounts can leave individuals with less direct control over how long some data remains available to the customer organization.
Business and Enterprise customers avoid the new personal-plan Copilot training retention surface entirely.
GitHub documents access and privacy-rights request paths for controller-side personal data.
Organization-managed deployments can govern account lifecycle, integrations, and repository access more centrally than personal accounts.
75
Good
GitHub provides a Copilot privacy setting to disable model training for affected personal plans.
Earlier opt-out preferences are retained rather than being overridden by the new policy.
GitHub accounts and organization setups can restrict who accesses repositories, apps, and extensions.
The privacy statement documents access and other privacy-rights request paths.
The affected personal plans are still default-on for Copilot training unless the user changes the setting.
Organization-provided accounts can reduce how much privacy control an individual user exercises alone.
80
Good
