At Sourcebot ("Sourcebot," "we," "our," or "us"), we value your privacy. This Privacy Policy explains how we collect, use, share and protect your personal information that we collect when you use our website and products (collectively, "Services"). By using our Service, you agree to the terms of this Privacy Policy and our Terms of Service.

For information regarding the security of the source code your provide to our Services, please visit our Security page.

Short version

• We do not sell your information, and we don't assist companies in advertising their products to you.

• If you're self-hosting Sourcebot, the only personal information we collect is fully anonymized usage/interaction data. This can be completely disabled at any time.

• If you're self-hosting Sourcebot, your source code will never leave your machine.

• We use a number of trusted third parties to help provide our products.

• Our core web application is open source and available on GitHub.

• You can exercise your rights under privacy laws.

What is Sourcebot's business model?

We make money through paid subscriptions to use our Services. We do not sell your information or use it to train an AI model.

What information do we collect, and for what purpose?

When you interact with our Services, we collect information that could be used to identify you ("Personal Information"). This includes your email address, name, and any other information you provide to us.

Information you provide to us directly

When you register for a Sourcebot account and interact with our Services, we may collect information (username, email), profile information (display name, avatar URL), and any payment information. We do not process or store your payment information, but our third-party payment processor does.

Information we receive from third parties

We may receive information about you from third-party services if you log in or otherwise interact with our Website, GitHub organization, or Services through a code host or social media, for example, by starring us on GitHub or following us on Twitter. The data we receive depends on your privacy settings with the third party but can include your name, email, third-party user ID, and location. Review, and if necessary, adjust your privacy settings on third-party websites and services before linking or connecting them to the Service.

How does Sourcebot use my information provided directly by me and third parties?

We use information provided directly by you and third parties to operate, maintain, improve, and provide to you the features of the Services. We may use this information to communicate with you, such as to send you email messages, and to follow up with you to offer news and information about our Services. We may also send you Service-related emails or messages (e.g., account verification, change or updates to features of the Services, technical and security notices).

Automatically collected information

Usage data

When you use our Services, Sourcebot automatically collects data about the Services and how they are used. This includes event analytics data and metadata to better understand usage within the Services, including click patterns and length and frequency of feature utilization.

Cookies

When you visit you register and authenticate with us, we may send one or more cookies — a small text file containing a string of alphanumeric characters — to your computer that uniquely identifies your browser and lets us help you log in faster and enhance your navigation through the Services. A cookie may also convey information to us about how you use the Services (e.g., the pages you view, the links you click, how frequently you access the Services, and other actions you take on the Services).

Log data

As with most websites and technology services delivered over the internet, when you access or use our Services, our servers automatically collect data and record it in log files. This log data may include your web request, IP address, browser type and settings, date and time of use, information about browser configuration, error data, repository name, user ID, and cookie data.

Access, authorization, and activity audit logs

When you visit or use our Services, we may collect information related to accessing systems and data, including IP addresses, emails, and data accessed. This information is only retained for the purposes of identifying, analyzing, and resolving potential security incidents. Access to this information is limited to those who require access for these purposes and will only be shared with the relevant customers in the event of a security incident.

Device data

When you visit or use our Services, we automatically collect information about your device, which may include the type of hardware and software you are using (for example, your operating system and browser type), IP address, and other unique identifiers for devices used to access our Website and Hosted Services.

Location data

This is the geographic area where you use your computer or mobile devices (as indicated by an IP address or similar identifier) when interacting with our Services.

Email beacons

When we send you emails, we may employ clear gifs (also known as web beacons) in HTML-based emails sent to our users to track which emails are opened and which links are clicked by recipients. The information allows for more accurate reporting and improvement of the Services.

Web analytics

We may also collect analytics data, or use third-party analytics tools, to help us measure traffic and usage trends for the Services. These tools collect information sent by your browser or mobile device, including the pages you visit, your use of third-party applications, and other information that assists us in analyzing and improving the Services.

How does Sourcebot use my automatically collected data?

We may use the automatically collected data to:

• remember information so that you will not have to re-enter it during your visit or the next time you visit the site;

• provide and monitor the effectiveness of our Services;

• understand user behaviors when using the Services to drive product development and business strategies

• identify, diagnose and fix technology problems and security risks;

• plan for and enhance our service;

• comply with our legal obligations; and

• for other purposes with your consent.

What we do not collect

Sensitive Personal Information

Sourcebot does not intentionally collect "Sensitive Personal Information," such as personal data revealing racial, ethnicity, political and religious beliefs, trade union membership, or genetic, biometric, health, or sexual data. Providing Sensitive Personal Information violates our Terms of Use.

Personal Information in Repositories

We do not intentionally collect any Personal Information that is stored in your repositories or other free-form content inputs. Any Personal Information within a user's repository is the responsibility of the repository owner.

Bases for processing your information

Where laws like GDPR govern our processing of your Personal Information, Sourcebot must tell you about the legal basis under which we process your Personal Information. Sourcebot processes Personal Information under the following legal bases:

• Performance of a contract: We use your Personal Information to provide the Services you subscribe to and to fulfill requests you make of us.

• Legitimate interests: We use your Personal Information for our legitimate interests, such as security, abuse, and fraud prevention, product improvement, and communications about your use of our Services.

• Consent: We may rely on your consent to use your personal information for certain direct marketing purposes, such as sending you newsletter updates about Sourcebot products. You may withdraw your consent at any time through the unsubscribe feature provided with each marketing email or by contacting us at the email address given at the end of this Privacy Policy.

Does Sourcebot share my information?

We may share your personal information with third parties in the instances described below.

Authentication providers

We may share your email with authentication providers to authenticate you.

Legal disclosure

We may share your Personal Information with law enforcement and other third parties if required by law or subpoena or if we reasonably believe that such action is necessary to:

(a) comply with the law, legal process, and the reasonable requests of law enforcement;

(b) to enforce our Terms of Service or to protect the security or integrity of our Service with regard to suspected fraud or other illegal activities; or

(c) to exercise or protect the rights, property, or personal safety of Sourcebot, our users, or others.

Does Sourcebot sell, share, or rent my Personal Information?

No. We do not sell, share, or rent your Personal Information for cross-contextual behavioral advertising, whether or not for monetary or other consideration under the CCPA (California Consumer Privacy Act of 2018) or other data privacy laws.

Will Sourcebot send me emails?

From time to time, we may share information about product announcements, product use, and special offers. You may opt out of our promotional email communications at any time by clicking the "unsubscribe" link provided in such communications.

Sourcebot users will continue to receive transactional messages related to your use of our Services such as account management, technical, and security notices, even if you unsubscribe from promotional emails.

Global privacy practices

Information we collect will be stored and processed in the United States in accordance with this Privacy Policy but we understand that users from other countries may have different expectations and rights with regard to their privacy. For all website visitors and Services users, no matter their country of location, we will:

• provide clear methods of unambiguous, informed consent when we do collect your personal information;

• only collect the minimum amount of personal data necessary for the purpose it is collected for, unless you choose to provide us more;

• offer you simple methods of requesting access, correction, or deletion your information that we have collected, which we will make reasonable efforts to accommodate; and

• provide Service users notice, choice, accountability, security, and access, and we limit the purpose for processing. We also provide our users a method of recourse and enforcement.

  
  

If you are located in the European Union, you are entitled to the following rights with regard to your personal information and data:

• Right of access to your personal data, to know what information about you we hold

• Right to correct any incorrect or incomplete personal data about yourself that we hold

• Right to restrict/suspend our processing of your personal data

• Right to complain to a supervisory authority if you believe your privacy rights are being violated

  
  

Additional rights that may apply to you in certain instances:

• Right of data portability (if our processing is based on consent and automated means)

• Right to withdraw consent at any time (if processing is based on consent)

• Right to object to processing (if processing is based on legitimate interests)

• Right to object to processing of personal data for direct marketing purposes

• Right of erasure of your personal data from our system ("right to be forgotten") if certain grounds are met

  
  

To exercise your privacy rights, you can contact us directly at support@sourcebot.com.

Data storage, security, deletion, and retention

Where is my information stored?

We store and process the information that we collect in the United States in accordance with this Privacy Policy, though our service providers may store and process data outside the United States.

How secure is my information?

We secure your information by implementing technical and organizational security controls that you can read about on our Security page.

When we receive your information, we protect it on our servers using technical, physical, and logical security safeguards. For information stored in any Software installed in your computing system, you are responsible for its security by making use of the security features of your device. We recommend that you take the appropriate steps to secure all computing devices that you use in connection with our Services.

Sourcebot cares about the security of your information, and uses commercially reasonable physical, administrative, and technological safeguards to preserve the integrity and security of all information collected through the Service. However, no security system is impenetrable and we cannot guarantee the security of our systems 100%. In the event that any information under our control is compromised as a result of a breach of security, Sourcebot will take reasonable steps to investigate the situation and where appropriate, notify those individuals whose information may have been compromised and take other steps, in accordance with any applicable laws and regulations.

How do I update or delete my Personal Information from Sourcebot?

You can update or remove your Personal Information from Sourcebot at any time by logging into your account and updating your profile settings, including deleting your account.

How long does Sourcebot retain my Personal Information?

You can remove your Personal Information from Sourcebot at any time by deleting your account as described above. Sourcebot will retain your information for as long as your account is active or as needed to perform our contractual obligations, provide you services, to comply with tax, legal, and audit obligations, resolve disputes, preserve legal rights, or enforce our agreements.

For questions about reviewing, modifying, or deleting your account information, contact us at team@sourcebot.com.

Children's privacy

Sourcebot does not knowingly collect or solicit any information from anyone under the age of 13 or knowingly allow such persons to register as Users. If you are based in the European Union, we will not knowingly collect your information if you are under the age of 16. Different countries may have different minimum age limits. If you are below the minimum age for providing consent for data collection in your country, you may not have a Sourcebot account. In the event that we learn that we have collected personal information from a child under age 13 or the applicable minimum age limit, we will delete that information as quickly as possible. If you believe that we might have any information from a child under 13 or otherwise under the applicable minimum age limit, please contact us at team@sourcebot.com.

Links to other web sites and services

Our Services may integrate with or contain links to other third-party sites and services. We are not responsible for the practices employed by third-party websites or services embedded in, linked to, or linked from the Services and your interactions with any third-party website or service are subject to that third-party's own rules and policies.

How to contact us

If you have any questions about this Privacy Policy or the Service, please contact us at team@sourcebot.com.

Changes to our privacy policy

Sourcebot will update this Privacy Policy to keep up with the changes in our business, Services, and applicable laws. When we do so, we will revise the "last modified" date at the top of this page. Every time we update this policy, you will be able to review the changes since the previous version.