[company name] Privacy Statement
Effective date: [effective date]
Welcome to the [company name] Privacy Statement. This is where we describe how we handle your “Personal Data”, which is information that is directly linked or can be linked to you. It applies to the Personal Data that [company name]
, Inc., processes as the “Data Controller” when you interact with websites, applications, and services that display this Statement (collectively, “Services”). This Statement does not apply to services or products that do not display this Statement, such as Previews, where relevant.
End User Notice: Organization-Provided [company name]
Accounts
When a school or employer supplies your [company name]
account, they assume the role of Data Controller for most Personal Data used in our Services. This enables them to:
Manage and administer your [company name]
account, including adjusting privacy settings.
Access and utilize your Personal Data, which includes details on how you use the Services, as well as your content and files.
Should you access a [company name] Service through an account provided by an organization, such as your employer or school, the organization becomes the Data Controller, and this Privacy Statement's direct applicability to you changes. Even so, [company name] remains dedicated to preserving your privacy rights. In such circumstances, [company name] functions as a Data Processor, adhering to the Data Controller's instructions regarding your Personal Data's processing. A Data Protection Agreement governs the relationship between [company name] and the Data Controller. For further details regarding their privacy practices, please refer to the privacy statement of the organization providing your account.
In cases where your organization grants access to [company name] products, [company name] acts as the Data Controller solely for specific processing activities. These activities are clearly defined in a contractual agreement with your organization, known as a Data Protection Agreement. You can review our standard Data Protection Agreement at [company name] Data Protection Agreement. For those limited purposes, this Statement governs the handling of your Personal Data. For all other aspects of [company name] product usage, your organization's policies apply.
Third Party Access and Data Protection
When you use third-party extensions, integrations, or follow references and links within our Services, the privacy policies of these third parties apply to any Personal Data you provide or consent to share with them. Their privacy statements will govern how this data is processed.
Personal Data We Collect
Personal Data is collected from you directly, automatically from your device, and also from third parties. The Personal Data [company name] processes when you use the Services depends on variables like how you interact with our Services (such as through web interfaces, desktop or mobile applications), the features you use (such as [list company applications]) and your method of accessing the Services (your preferred IDE). Below, we detail the information we collect through each of these channels:
From You
Account Data: We collect certain information when you open an account such as your [company name] handle, name, email address, password, payment information and transaction information.
This is a preview. The full template is free on GitLaw.
5.0 out of 5 on Google
Read reviewsAs seen in
About this template
What is this template?
This is a comprehensive external privacy policy that details data collection, subprocessor sharing, and international transfer mechanisms. It is not an internal employee data policy or a Data Protection Agreement between two businesses. It contains specific sections for US state-level compliance and the Data Privacy Framework certification.
When should you use it?
Use this template when launching a public-facing web service or application that collects user-generated content and requires cross-border data transfers. Use a Data Protection Agreement instead if you are drafting a contract between a controller and a processor regarding specific service delivery.
What's inside
| Clause | Name | What it does |
|---|---|---|
| Personal Data We Collect | Personal Data We Collect | Identifies the collection of account data, user content, demographic information, and payment details provided directly by users or through third-party integrations. |
| Processing Purposes: How We Use Your Personal Data | Processing Purposes | Lists specific activities for data use including billing, service provision, abuse detection, and derivation of geographic location via IP addresses. |
| Sharing of Personal Data | Sharing of Personal Data | Authorizes data sharing with Microsoft affiliates, law enforcement authorities, and subprocessors bound by security and confidentiality contracts. |
| Lawful Bases for Processing Personal Data (Applicable to EEA and UK End Users) | Lawful Bases for Processing | Specifies contractual necessity, legal obligation, legitimate interests, and consent as the grounds for processing under the GDPR. |
| Data Privacy Framework (DPF) | Data Privacy Framework (DPF) | Commits the organization to the EU-U.S. and Swiss-U.S. Data Privacy Framework Principles as set by the U.S. Department of Commerce. |
| US State Specific Information | US State Specific Information | Provides mandatory disclosures for California residents and rights of appeal for users in Colorado, Connecticut, and Virginia. |
Who it's for
- a technology provider collecting code and documents from users
- a company processing personal data from EEA and UK residents under GDPR
- a service provider certifying under the Data Privacy Framework
- a platform offering third-party marketplace integrations to end users
Law it's drafted under
United States note
This version is drafted for US law generally. Contract, employment and consumer rules vary by state — for example on non-competes and at-will employment. Tell GitLaw which state applies and it adjusts the draft.
Frequently asked questions
A template isn't binding on its own - like any contract, it becomes binding once it's properly completed and signed. Templates in our curated library are professionally drafted for US or UK law; review any template before you sign it.
Yes. Chat with GitLaw to edit any section, or make changes directly in the editor.
Yes, read about team plans here.
Describe what you need in the chat and GitLaw will draft it for you.
Templates in our curated library are professionally drafted for US or UK law. The wider library comes from the GitLaw community and public sources - a solid starting point, but check any template fits your situation before you rely on it.
Mostly US and UK law. Some templates use general commercial terms that work across jurisdictions, and many note which law they're written for.
It depends on the situation. Templates work well for routine business agreements. For anything involving significant money, complex IP, employment, or areas you're unsure about, it's worth getting professional advice before you sign. GitLaw provides templates and tools, not legal advice.
Open any template in GitLaw and describe the change you want in the chat — 'make clause 4 mutual' or 'add a 30-day notice period', for example. GitLaw drafts the revised language and shows it as a suggested edit. You accept, reject, or keep editing from there.
Yes. Upload a Word, PDF, or Markdown file and GitLaw will open it in the editor. You can review, edit, or chat with GitLaw about it the same way you would with any template from the library.
Trusted by 5,000+ businesses
From template to signed, in one place
Every template opens in an editor with an AI agent alongside it.
Open
Pick a template and open it. Nothing to download, and no credit card to start.
Free to open
Edit with AI
Describe your situation in chat and the agent adapts the wording, clause by clause.
Tracked changes you can review
Send and sign
Share it for negotiation, then collect signatures without leaving GitLaw.
eSign included
Built for your legal work,
with practicing lawyers
Trained on 5,500+ clauses and specialist areas of law. Built with a standards committee of independent lawyers.
As seen in
Ready to get started?
No sales calls, no credit card. Just chat with GitLaw.
GitLaw provides templates and tools, not legal advice. Templates are a starting point, not a substitute for advice on your situation - for anything significant, speak to a qualified lawyer.