GitHub Copilot (Individual) — privacy & data policy

Provider: GitHub/Microsoft. PromptPrivacy score: 38/100. Last verified October 18, 2026.

What happens to your data?

When using GitHub Copilot Individual, GitHub acts as an independent Data Controller collecting your account details, code, prompts, and usage telemetry. This information is retained for the lifetime of your account and can be shared with affiliates like Microsoft and third-party vendors. Importantly, GitHub uses collected personal data and user content to develop and train machine learning and AI models.

Does it train on your data?

GitHub explicitly states that Personal Data—which includes code, inputs, AI outputs, and user feedback—is used to develop and improve services, including training artificial intelligence and machine learning models. This data may also be shared with affiliates such as Microsoft for AI and ML training.

Can you opt out?

Users can object to data processing or request deletion by emailing privacy@github.com. Non-essential cookies and web tracking can be disabled via browser settings, Do Not Track signals, or Global Privacy Control, but this general policy does not describe an automated self-serve toggle to opt out of AI model training.

Data retention

Personal data is kept for as long as your account remains active and as required to fulfill contractual obligations, resolve legal disputes, and enforce agreements. Specific retention timeframes for code and AI inputs are not specified in the policy.

Encryption & security

Not specified. The policy vaguely mentions maintaining administrative, technical, and physical security controls, but does not provide details regarding transit encryption, encryption at rest, or specific compliance certifications.

Is it safe for work?

Not recommended for proprietary or confidential corporate code. Under the Individual plan, GitHub operates as a Data Controller and reserves the right to use user content and code for AI model training and affiliate sharing. Organizations should instead use GitHub Copilot Business or Enterprise, which include Data Protection Agreements and Data Processor protections.

Source policy: https://docs.github.com/site-policy/privacy-policies/github-privacy-statement