Private repositories have a confidentiality promise with exceptions

GitHub says personnel will not access private-repository content without consent except for listed security, scanning, support, service-integrity, and legal reasons.

This protection and its exceptions concern content in private repositories.

Signup requires email, and GitHub collects content and usage data

A valid email is required to sign up; GitHub also lists submitted code and files, account details, device information, and service-use data among what it collects.

If you authorize a Marketplace app, it may access private repositories

A Marketplace app may receive account details or access to repository content, including the ability to read or modify private data; you can accept or deny requested permissions.

This applies if you select or use a Marketplace Developer Product and authorize its requested permissions.

Where ad cookies are used, partners may track activity for ads

On pages using advertising cookies, partners may collect browsing activity, identifiers, and device data for targeted ads; cookie controls vary by context.

Non-essential cookie use and available controls depend on the page and context; cookie choices are specific to the browser used.

Your content can be used for AI training, with private-repo limits

You keep ownership, but license GitHub and affiliates to use content to provide and improve services, including AI training; private repositories have narrower stated rules.

The private-repository limitation applies to content in private repositories; the stated exception concerns content you provide as AI-feature input.

Individual AI inputs and outputs may train models unless you opt out

For individual licenses, GitHub and affiliates may use AI inputs and outputs for model training unless you opt out; the opt-out is limited to this use.

Section J.3 applies only to individual licenses; a GitHub Customer Agreement or volume licensing agreement governs AI data use instead.

Public repository forks can remain after you remove content

Making a repository public lets others view and fork your content; the license ends when you remove it unless other users have forked it.

This applies to content you make public and to content other users fork.

The private-repository AI opt-out scope is unclear in the terms

The terms say the AI opt-out applies to private-repository content submitted as input, but also say that opt-out does not limit a separate content license.

This uncertainty concerns private-repository content you provide as input to an AI feature and the effect of opting out under Section J.3.

Closing your account can lead to unrecoverable repository content

GitHub says it will delete profile and repository content within 90 days, subject to exceptions; after cancellation, the information cannot be recovered.

Legal retention may apply; encrypted backups may retain some information, and other users’ contributions or forks are not deleted.

GitHub may suspend or end access immediately, with or without cause

The terms reserve the right to suspend or terminate access to any part of the site at any time, with or without cause or notice.

The terms specify California law and San Francisco courts

For disputes under the main terms, you agree to California law and exclusive courts in San Francisco, except where applicable law provides otherwise.

If you choose a paid plan, unused prepaid time is nonrefundable

Monthly and yearly plans are billed in advance, with no refunds or credits for partial months, downgrades, or unused months while your account remains open.

This applies if you choose a monthly or yearly payment plan.