Bitbucket vs GitHub
Side-by-side comparison of the Terms of Service and Privacy Policy of Bitbucket and GitHub.
The terms are fairly standard for B2B cloud software and include some user-friendly elements like retrieval and deletion language, a security program, and IP indemnification. However, the agreement is still heavily provider-favored with auto-renewal, broad restrictions, limited remedies, and unilateral amendment/suspension powers.
Bitbucket (via Atlassian) is offered under an enterprise-style customer agreement with strong provider control over service terms, usage limits, and account administration. It includes standard business protections like security commitments, IP indemnity, and a deletion promise after termination, but also has auto-renewal, non-refundable fees, liability limits, broad suspension rights, and unilateral changes to terms with notice.
Points of interest
-
negative ●●●●○ termsAuto-renews unless canceled
Subscriptions renew automatically at the then-current rate unless notice of non-renewal is given before the term ends. Users should plan cancellation in advance to avoid unexpected charges.
-
negative ●●●●○ termsBroad suspension powers
Atlassian can limit access, remove data, or suspend accounts if it believes data or usage violates the rules or threatens security or operations, or if legally required. This gives the provider substantial discretion over service continuity.
-
negative ●●●●○ termsLiability tightly capped
Most claims are capped at fees paid in the prior 12 months, and many damages like lost data or lost profits are waived. This can leave users with limited recovery if something goes wrong.
-
positive ●●●●○ termsIP infringement indemnity
Atlassian promises to defend and indemnify customers against third-party claims that authorized use of the product infringes IP rights. That is a substantial protection for business customers relying on the platform.
-
negative ●●●○○ termsFees are non-refundable
Most fees and expenses are non-refundable, so ending service early usually does not mean getting money back. The main exception is the 30-day initial return policy for products.
-
negative ●●●○○ termsTerms can change unilaterally
Atlassian may modify the agreement by posting updates, with changes often taking effect at renewal and sometimes mid-term. If you object, your main remedy may be to terminate the affected subscription.
-
positive ●●●○○ termsData retrieval documented
The documentation is supposed to explain how customers can retrieve their data from the cloud products. That is helpful for migration planning and exit preparation.
-
positive ●●●○○ termsDeletion after termination
After the agreement ends, Atlassian says it will delete customer data according to the documentation unless law prevents it. That is a meaningful exit-right, though the exact timing and method depend on the docs.
-
neutral ●●○○○ termsBusiness-only license
The service is licensed for internal business use, not as a general-purpose consumer tool. That means your use is limited to the organization’s scope and the contract’s usage rules.
-
neutral ●●○○○ termsCustomer controls third-party apps
If you enable third-party products, those providers may access your data and their own terms apply. This can expand data sharing beyond Atlassian itself.
-
neutral ●●○○○ privacyCustomer manages account data
If an employer or organization provides the account, that organization controls the personal information and manages the account. Individual users may need to go through that organization for privacy requests.
Documents
GitHub offers notable positives such as clear notice of material changes, confidentiality commitments for private repositories, privacy rights including deletion and portability, and a simple cancellation flow. However, these are balanced by broad content and AI training licenses, strong warranty/liability disclaimers, discretionary termination rights, and some tracking/advertising data sharing.
GitHub’s legal terms are relatively transparent and include some meaningful user protections, especially for private repositories, privacy rights requests, portability, and clear account cancellation. At the same time, the service claims broad rights to use uploaded content and AI inputs for service improvement, uses cookies and some advertising-related tracking on marketing pages, limits refunds and liability, and allows account suspension at its discretion.
Points of interest
-
negative ●●●●○ termsBroad content license
You keep ownership, but GitHub and its affiliates get broad rights to store, copy, analyze, display, and use your content to provide, develop, and improve services. For public content, these rights are extensive and continue until removal, with forks potentially keeping content available.
-
negative ●●●●○ termsAI training on inputs
GitHub may use your AI inputs and outputs to develop, train, and improve AI systems unless you opt out in account settings. The opt-out is limited and does not cover broader licenses for public repository content.
-
negative ●●●●○ termsStrong liability limits
GitHub provides the service 'as is,' disclaims warranties, and broadly limits liability for damages, including data loss and service interruptions. In practice, this makes it much harder to recover losses if something goes wrong.
-
positive ●●●●○ termsPrivate repos treated confidentially
GitHub expressly treats private repository contents as confidential and says staff will only access them for limited purposes like security, support, integrity, legal compliance, or with your consent. This is a strong protection for private code compared with many platforms.
-
positive ●●●●○ privacyDeletion and portability rights
GitHub states users may access, correct, delete, object to processing, and port personal data where applicable. These rights can be exercised by contacting [email protected], which is useful for users in regulated regions and some U.S. states.
-
negative ●●●○○ privacyTracking and ad sharing
GitHub uses cookies, web beacons, and similar tools for analytics and targeted advertising on enterprise marketing pages, and says it has 'shared' some personal information with ad networks and analytics providers under applicable law. This means some browsing data may be used for marketing profiling outside core product functions.
-
negative ●●●○○ termsNon-refundable subscriptions
Paid monthly or yearly plans are billed in advance and are generally non-refundable, with no partial-month or unused-time refunds. This can be costly if you downgrade or cancel soon after renewal.
-
negative ●●●○○ termsCan terminate anytime
GitHub reserves the right to suspend or terminate access at any time, with or without cause or notice. That gives the company broad discretion over account access and continuity.
-
positive ●●●○○ termsAI training opt-out available
For AI feature inputs and outputs, GitHub gives individual users an account-level opt-out from model training and improvement use going forward. This is a meaningful control, though it does not apply to all other content licenses.
-
positive ●●●○○ privacyCookie controls honored
Users can manage non-essential cookies through settings, consent tools, browser controls, and GitHub says it honors DNT and GPC by not setting non-essential cookies or sharing data when those signals are detected. That is stronger than many services’ tracking disclosures.
-
positive ●●●○○ termsSimple cancellation flow
The terms say account closure is available through settings with a 'simple, no questions asked cancellation link.' They also say most profile and repository content is deleted within 90 days, subject to legal and backup exceptions.
-
positive ●●○○○ terms30-day notice for changes
GitHub says it will give 30 days' notice of material changes to the terms and privacy statement. Advance notice gives users time to review updates and decide whether to keep using the service.
Documents
Comparison is based on each service's published Terms of Service and Privacy Policy. Read the source documents linked above before relying on any specific clause.