Free Policies Templates

The Common Voice Privacy Notice explains how Mozilla collects, uses, and publicly shares voice recordings and optional demographic data contributed to its open-source speech datasets. It is governed by Mozilla’s trusted privacy framework and the data is released under the CC0 license through the Mozilla Data Collective, making it reliable for research and open AI development.

The Mozilla Ad-Targeting Guidelines set rules for ethical advertising by prohibiting invasive targeting methods (such as retargeting, cross-device tracking, or using Mozilla’s data) while allowing limited, privacy-respecting tactics like contextual, device, geographic, and browser-based targeting. As an official Mozilla policy, it provides trustworthy standards for privacy-focused marketing practices used by a globally respected open-source organisation.

The GitHub General Privacy Statement explains how GitHub (and GitHub B.V.) collects, uses, shares, and protects personal data across its services, including users’ rights (GDPR/US state laws), data transfers, cookies, and security/retention practices. It is an official GitHub policy (under Microsoft) that references concrete compliance frameworks like the EU Standard Contractual Clauses and the Data Privacy Framework, making it a reliable source for understanding GitHub’s privacy posture.

The GitHub Bug Bounty Program Legal Safe Harbor sets out legal protections for security researchers who act in good faith when reporting vulnerabilities through GitHub’s bug bounty program, ensuring their work is treated as “authorized” under laws like the CFAA and DMCA. It is part of GitHub’s official security policies, providing researchers confidence and trust that responsible disclosure will not expose them to legal consequences when complying with program rules.

The GitHub Contributor Covenant Code of Conduct establishes community standards for open source projects, promoting inclusivity, respect, and a harassment-free environment while outlining unacceptable behaviors and enforcement procedures. It is adapted from the widely adopted Contributor Covenant (v1.4), giving it credibility and ensuring alignment with best practices across the global open source community.

The GitHub Subprocessors Policy identifies the third-party vendors GitHub authorizes to process customer and personal data on its behalf under the GitHub Data Protection Agreement. Maintained and published by GitHub, this list ensures GDPR compliance and transparency by providing at least 30 days’ notice before adding new subprocessors.

The GitHub DMCA Takedown Policy outlines GitHub’s notice-and-takedown process for copyright infringement claims, providing a clear framework for submitting DMCA notices, counter notices, and handling circumvention claims. It is part of GitHub’s official legal and compliance policies, making it a reliable and widely trusted resource for rights-holders and developers navigating copyright issues.

This privacy policy explains what personal data the company collects, how it’s used, shared, and protected, and the rights users have regarding their information. It emphasizes transparency, user control, and security, assuring users that their data is never sold and is managed in compliance with global privacy laws like GDPR and CCPA.

This document outlines the process for reporting security vulnerabilities and account attacks related to the company's products. It provides instructions for customers experiencing an attack and for security researchers discovering flaws, directing them to a bug bounty program. The policy also details how the company tracks, investigates, and discloses resolved security issues.

This document outlines the prohibited uses of 37signals' Services, detailing actions that are not allowed, such as collecting unauthorized data or interfering with security features. It clarifies that violations may lead to account cancellation. The policy also provides instructions on how to report abuse effectively.