Privacy Policy

This Privacy Policy explains how information about you is collected, used and disclosed by GitGuardian (collectively, “GitGuardian”, “we” or “us”) when you use our website https://gitguardian.com (“Website”), online products and monitoring services at https://dashboard.gitguardian.com (“Platform”) (collectively, “Services”). This Privacy Policy also describes your choices regarding use, access and correction of personal information collected about you through our Services. Please read this Privacy Policy carefully and ensure that you understand it before you start to use our Services.

This Website is owned and operated by, or on behalf of, GitGuardian (“we”, “our” or “us”).

By accessing and using the Services, you acknowledge that you have read and understood the content of this Privacy Policy. We reserve the right to update this Privacy Policy from time to time. If we make changes, we will notify you by revising the date at the top of the Privacy Policy and, in some cases, we may provide you with additional notice (such as adding a statement to our homepage or sending you a notification). We encourage you to review the Privacy Policy whenever you access the Services or otherwise interact with us to stay informed about our information practices and the ways you can help protect your privacy.

Information You Provide to Us through the Services

We collect and process information you provide directly to us via the Services. Personal data submitted through the Services include the details you submit when you create an account, participate in any interactive features of the Services, fill out a form, pay for subscriptions, apply for a job, communicate with us via third party social media sites, request customer support or otherwise communicate with us. The types of information we may collect include your name, email address, company name, postal address, phone number and any other information you choose to provide.

Information We Collect Automatically When You Use the Services

When you access or use the Services we automatically collect information about you, including:

Log Files: We gather certain information about your use of the Services, including the type of browser you use, access times, pages viewed, your IP address and the page you visited before navigating to the Services, and store it in log files. We do not monitor or log data collected from your servers when using the Services, but we may log or monitor information about your access to our Services.
Information Collected by Cookies and Other Tracking Technologies: We use various technologies to collect information, including cookies and web beacons. For more information about cookies, and how to disable them, please see our Cookie Policy page and Your Choices below.

Use of information

We may use information about you to:

Enable you to have full access to the Services;
Provide, maintain and improve the Services;
Provide and deliver the products and services you request, process transactions and send you related information, including confirmations and invoices;
Send you technical notices, updates, security alerts, and support and administrative messages;
Respond to your comments, questions and requests, and provide customer support;
Create your GitGuardian account and identify you when you sign-in to your account in accordance with your agreement with us;
Communicate with you about products, services, offers, promotions, rewards, and events offered by GitGuardian and others, and provide news and information we think will be of interest to you;
Monitor and analyze trends, usage and activities in connection with the Services;
Detect, investigate and prevent fraud and other illegal activities and protect the rights and property of GitGuardian and others;
Personalize and improve the Services and provide advertisements, content or features that match user profiles or interests;
Notify you about important changes to the Services, including changes or updates to this Privacy Policy;
Link or combine with information we get from others to help understand your needs and provide you with better service;
Consider you for possible employment at GitGuardian in connection with an application that you submit; and
Carry out any other purpose described to you at the time the information was collected.

Sharing of information

We may share your personal information as follows or as otherwise described in this Privacy Policy:

With business partners, vendors, consultants and other service providers we have vetted and approved who need access to such information to carry out work on our behalf only to the extent necessary for the performance of any agreement we enter into with you. This includes companies providing the following services for our Website and/or Platform: hosting services, authentication services, cyber security and anti-fraud services, and advertising;
In response to a request for information if we believe disclosure is permitted by, in accordance with, or required by, any applicable law, regulation or legal process such as to comply with a subpoena or applicable court order;
With any person to whom disclosure is necessary to enable us to enforce our rights under this Privacy Policy or under any agreement we enter into with you or to protect the rights, property and safety of GitGuardian or third parties;
In connection with, or during negotiations of, any merger, sale of GitGuardian assets, financing or acquisition of all or a portion of our business by another company;
Between and among GitGuardian and all companies affiliated with GitGuardian who may act for us for any of the purposes set out in this Privacy Policy, including our current and future parents, affiliates, subsidiaries and other companies under common control and ownership;
With analytics and search engine providers that assist us in the improvement and optimization of our Website, subject to our Cookies Policy; and
With your consent or at your direction.

We may also share aggregated or de-identified information, which cannot reasonably be used to identify you.

Lawful Basis For Processing Your Information

We are required to state the lawful basis under which we process the personal data of our users from the European Union. Accordingly, the lawful bases upon which we process your personal information are as follows:

Where it is necessary to obtain your prior consent to the processing concerned in order for us to be allowed to do it, for instance in relation to direct marketing, we will obtain and rely on your consent in relation to the processing concerned.
Otherwise, we will process your personal data only where the processing is necessary for compliance with a legal obligation to which we are a subject; or
For the purposes of the legitimate interests pursued by us in promoting our business, providing the Platform to our business customers pursuant to our legal agreements with them, and in ensuring the security, accessibility and improvement of our Website and Platform and the development of new technology and services.

External Links

The Website may, from time to time, contain links to external sites. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites. We are not responsible for the privacy policies or the content of such sites.

Social Sharing Features

The Website may offer social sharing features and other integrated tools (“Third-Party”), which lets you share information you find on our website with other media, and vice versa. When you visit one of our pages the plugin establishes a direct connection between your browser and the third-party server. Thus, the Third-Party receives information from your browser as set out in the Third-Party's privacy policy. Please note that we, as provider of the pages, have no knowledge as to the contents of the submitted data or its use by the Third-Party. For more information about the purpose and scope of data collection and processing in connection with social sharing features, please visit the privacy policies of the entities that provide these features.

Log-in Features

We may allow you to sign up and log in using your Google account. If you sign up using your Google email account, Google will ask your permission to share certain information from your Google account with us. This may include your first name, last name, gender, general location, your timezone and birthday. This information is collected by Google and is provided to us under the terms of Google’s privacy policy.. You can control the information that we receive from Google using the privacy settings in your Google account.

Advertising and Analytics Services Provided by Others

We mays allow the following companies to serve advertisements on our behalf across the Internet and in applications: Google AdWords, Google analytics, Marketo, Twitter, Facebook, Adroll, Quora, Bing ads, Linkedin, Terminus, Demand base, Instagram, and Reddit using email address and cookies that are collected. These entities use technologies including cookies, web beacons, device identifiers and other tools to collect information about your use of the Services and other websites and applications, including your IP address, web browser, pages viewed, time spent on pages or in apps, links clicked and conversion information. This information may be used by GitGuardian and GitGuardian service providers to, among other things, analyze and track data, determine the popularity of certain content, deliver advertising and content targeted to your interests on our Services and other websites and better understand your online activity. For more information about cookies, please see below and for further information about interest-based ads, or to opt out of having your web browsing information used for behavioral advertising purposes, please see GitGuardian’s Cookie Policy.

Information Collected on Behalf of Customers in providing our Platform

In the case of personal information we handle or receive on behalf of a customer in connection with their access to, and use of, our Platform (“Customer PI”), we have no direct relationship with the customer’s employees or other individuals with whom that customer may interact with respect to the Platform. If you are such an employee or individual and are seeking access to, or would like to correct, amend or delete, Customer PI, you should direct your query to the applicable customer. We will respond within a reasonable timeframe to a customer’s request to remove Customer PI. Please note that the foregoing will not limit EU individuals from making certain requests relating to their personal data as provided in Your Rights below. We will not use Customer PI except for the purpose of providing and supporting the Services for the applicable customer. Customer PI will be retained for as long as needed for that purpose and as necessary to comply with our legal obligations, resolve disputes and enforce our agreements.

Marketing

Where permitted in our legitimate interest or with your prior consent where required by law, we will use your personal information for marketing and to provide you with promotional update communications by email about our products/services. You can object to further marketing at any time by selecting the “unsubscribe” link at the end of all our marketing and promotional electronic communications to you, or by contacting us using the contact details set out in the Your Choices and Your Rights sections of this Privacy Policy.

As part of the registration process for events hosted by GitGuardian which you register to attend, we may request personal data such as: your name, address, email address and telephone number, and details relevant to your occupation or employer. This information is required to process your registration for the event and to provide you with relevant event materials. This data may be shared with third party service providers engaged by us as more fully explained in the Sharing of Information section of this Privacy Policy. If you show an interest in an exhibitor at an event hosted by GitGuardian, such as by consenting to have your attendee badge scanned, we will provide your data to such exhibitors who may contact you for their own direct advertising and marketing purposes. In that case, the exhibitors’ use of your information would be subject to the exhibitors’ privacy policies. For events sponsored by GitGuardian, the event host may provide your personal data to GitGuardian, subject to your consent. GitGuardian will use the data as set forth in the Use of Information section of this Privacy Policy.

Security

We take reasonable steps, including physical, technical and organizational measures, to protect your personal information from unauthorized access and against unlawful processing, accidental loss, destruction and damage. Unfortunately, transmission of information via the internet is not completely secure. Although we do our best to protect your personal information, we cannot guarantee the security of your personal information submitted to us. Your personal information will be retained by GitGuardian for the duration of your account and may be retained for a period after this time as necessary and relevant to our legitimate interests, our terms of agreement with you and in accordance with applicable legal obligations. This may include retention necessary to meet our tax reporting requirements as well as time required to enforce the relevant terms of agreement or to identify, issue or resolve legal proceedings.We may retain a record of your stated objection to the processing of your data, including in respect of an objection to receiving marketing communications, for the sole legitimate purpose of ensuring that we can continue to respect your wishes and not contact you further, during the term of your objection.

Transfer of Information to the U.S. and Other Countries

GitGuardian is based in France but its servers are hosted in the United States, in Canada and in France. By accessing or using the Services or otherwise providing information to us, you understand that your information will be subject to processing, transfer and storage in and to the U.S., France and Canada, where you may not have the same rights and protections as you do under local law.

Your Rights

EU individuals have rights in relation to their personal data which is processed by GitGuardian. If you are an EU data subject, you may, by emailing us at legal@gitguardian.com :

Request access to the personal data concerned.
Request that any incorrect personal data about you that we are processing be rectified.
Request that we erase the personal data concerned.
Withdraw your consent at any time where we are processing personal data relating to you on the basis of your prior consent to that processing, after which we shall stop the processing concerned.
Lodge a formal complaint with the CNIL in France (or your local EU supervisory authority if you live outside France) if you have a complaint about any processing of your personal data being conducted by us.

If the requested EU Data is Customer PI, please include the name of the applicable customer in your request; we will refer the request to that customer to respond directly to you and will support them as needed to respond to your request.

Your Choices

‍Account Information

‍Our customers may access, update or change personal information they have provided by logging into the Services or emailing us at support@gitguardian.com.
Subject to the terms of their agreements with us, Customers may deactivate their accounts by emailing us at support@gitguardian.com, but note that we may retain certain personal information as necessary to comply with our legal obligations or for legitimate business purposes, such as to resolve disputes or enforce our agreements. We may also retain cached or archived copies of personal information for a certain period of time.

If you are an individual with whom one of our customers interacts with respect to the Services (e.g., an employee of a customer), as noted above, you should direct any requests regarding access, modification or deletion of personal information to the applicable customer.

‍Cookies‍

Most web browsers are set to accept cookies by default. If you prefer, you can usually choose to set your browser to remove or reject browser cookies. Please note that if you choose to remove or reject cookies, this could affect the availability and functionality of our Services. For more information, please see GitGuardian’s Cookie Policy.

‍Promotional Communications‍

You may opt out of receiving promotional emails from GitGuardian by following the instructions in those emails or by emailing legal@gitguardian.com. If you opt out, we may still send you non-promotional emails, such as those about your account or our ongoing business relations.

Contact us

In case of questions or concerns about this Privacy Policy, you can contact GitGuardian at legal@gitguardian.com or by letter at GitGuardian, 54 rue de Seine 75006 Paris, France.

Table of Contents