ChatGPT vs GitHub Copilot
Side-by-side comparison of the Terms of Service and Privacy Policy of ChatGPT and GitHub Copilot.
The documents offer strong transparency, deletion/export rights, and local-court dispute resolution, which are helpful for users. The main concerns are broad content-processing rights, some retention beyond deletion, and extensive sharing for service, security, and legal purposes.
ChatGPT’s consumer terms are relatively user-protective on dispute rights and deletion controls, with no mandatory arbitration in the EEA/UK version and explicit access to local courts. The main tradeoff is broad permission to use user content to operate, improve, and secure the service, plus model-training use unless you opt out. Privacy disclosures are detailed, with export/deletion tools and statutory rights, but they also describe sharing with vendors, affiliates, and authorities, and retention beyond deletion for security, legal, and fraud reasons.
Points of interest
-
negative ●●●●○ termsBroad content usage rights
OpenAI can use your content worldwide to provide, maintain, develop, improve, and secure the services, plus enforce terms. For users, this is a wide license covering very broad operational uses.
-
positive ●●●●○ termsLocal courts available
If a dispute cannot be resolved informally, the terms let either side go to local courts instead of forcing arbitration. That preserves a user’s ability to sue in court.
-
positive ●●●●○ privacyDelete and export tools
The privacy policy says you can delete chats or your account and export your history and data. That makes it easier to leave or clean up your data than with many services.
-
positive ●●●●○ privacyStatutory privacy rights listed
The policy expressly lists access, deletion, correction, portability, restriction, consent-withdrawal, and complaint rights. Users also get instructions for submitting requests.
-
negative ●●●○○ privacyModel training uses content
The privacy policy says some content may be used to improve services and train models unless you opt out. That means chats and uploads may contribute to model development by default in some cases.
-
negative ●●●○○ privacyBroad data sharing
OpenAI shares personal data with vendors, affiliates, business account administrators, and sometimes government authorities or other third parties. Users should expect their data to leave the service in multiple scenarios.
-
negative ●●●○○ privacyRetention beyond deletion
Deleted data may still be kept for up to 30 days, and longer for legal, security, fraud, or accounting reasons. So deletion is not always immediate or absolute.
-
positive ●●●○○ termsTraining opt-out available
OpenAI says it may use your content to train models, but you can opt out in account settings. That gives users some control over whether their chats help improve the system.
-
negative ●●○○○ termsAuto-renewing subscriptions
Paid subscriptions renew automatically until canceled, so users need to manage cancellation themselves to avoid further charges. The terms do provide a 14-day cooling-off period for EEA consumers.
-
positive ●●○○○ privacyTemporary chats auto-delete
Temporary Chats are described as being automatically deleted within 30 days, and Atlas incognito browsing history is not saved after a session ends. This can reduce long-term retention for some activity.
Documents
GitHub offers meaningful privacy controls, deletion and portability rights, private-repo confidentiality promises, and advance notice for material changes. But the service also takes broad rights to use content for service improvement and AI training, collects extensive data, limits liability heavily, and allows sharing with affiliates and advertising partners in some contexts.
GitHub Copilot is governed by GitHub’s general terms and privacy rules. The documents are relatively transparent and include user rights like access, deletion, portability, cookie controls, and notice before material policy changes. Key tradeoffs are broad licenses over content and AI inputs/outputs, AI training by default unless you opt out, strong warranty/liability disclaimers, and broad data collection and sharing for product improvement and some advertising contexts.
Points of interest
-
negative ●●●●● termsStrong liability disclaimer
The service is provided as-is, with broad warranty disclaimers and major limits on GitHub’s liability for losses, downtime, or data issues. If Copilot or GitHub causes harm, your remedies may be very limited.
-
negative ●●●●○ termsAI training by default
Copilot inputs and outputs can be used to develop and improve GitHub and affiliate AI models unless you opt out. This matters if you do not want prompts, code context, or generated outputs used for model improvement.
-
negative ●●●●○ termsBroad content license
Even though you keep ownership, GitHub gets broad rights to host, copy, analyze, display, and use your content to run and improve the service, including AI-related improvement. For public content, other users can also view and fork it under platform rules.
-
positive ●●●●○ termsPrivate repos treated confidentially
GitHub expressly says private repository contents are confidential and limits staff access to listed situations like security, support, service integrity, or legal compliance. This is a meaningful protection for non-public code.
-
positive ●●●●○ privacyAccess, deletion, portability rights
GitHub says eligible users can access, correct, delete, restrict, object to processing, withdraw consent, and receive portable copies of their data. These are strong, user-helpful privacy rights.
-
negative ●●●○○ termsOutputs may infringe or fail
GitHub warns Copilot output may be inaccurate, incomplete, vulnerable, or resemble third-party code, and puts review responsibility on you. Users cannot rely on output being safe or license-clean.
-
negative ●●●○○ privacyExtensive data collection
GitHub collects account data, content, device and usage data, cookies, support data, geolocation, and information from third parties. That gives the company a broad picture of your activity across the service.
-
negative ●●●○○ privacyAffiliate and ad sharing
Data may be shared with affiliates including Microsoft, service providers, partners, authorities, and in some cases advertising and analytics networks. The policy also says some personal information is "shared" for marketing and audience measurement under applicable law.
-
positive ●●●○○ termsAI opt-out available
You can opt out of having Copilot inputs and outputs used for AI model development going forward. This is a practical privacy control, though it does not undo broader repository-content licenses elsewhere in the terms.
-
positive ●●●○○ termsClear cancellation and deletion
Account cancellation is described as a simple self-serve flow, and GitHub says it will generally delete your full profile and repository contents within 90 days, subject to backups and legal exceptions. You can also request a copy of account contents within 90 days.
-
positive ●●●○○ privacyCookie controls honored
GitHub offers multiple ways to reject non-essential cookies, including settings links, browser controls, Do Not Track, extensions, and Global Privacy Control. It also states it does not sell data and will not share data when GPC is detected.
-
positive ●●○○○ terms30-day change notice
GitHub promises advance notice for material changes to both the terms and privacy statement. That gives users some time to review updates before they take effect.
Documents
Comparison is based on each service's published Terms of Service and Privacy Policy. Read the source documents linked above before relying on any specific clause.