GitCode Privacy Policy
Effective Date: September 15, 2023
Important Notice
GitCode platform (hereinafter referred to as "this platform") is operated and provided to you by Chongqing Open Source Co-Creation Technology Co., Ltd. (hereinafter referred to as "GitCode" or "us"). We deeply understand the importance of personal information security and will take security protection measures in accordance with legal requirements to protect the security and controllability of your personal information. Therefore, we have formulated this privacy policy, which covers how we collect, use, share, and protect your information during your use of the services provided by this platform (hereinafter referred to as "this privacy policy"). Please read and fully understand this privacy policy before using this service. In particular, please pay special attention to the terms marked in bold. You should read them carefully and only use the platform service after confirming that you fully understand and agree. Once you start using the platform service, it will be deemed that you accept and acknowledge this privacy policy.
If you have any questions about the content of this privacy policy, please contact us through the contact information shown under "IX. Contact Us" below this privacy policy before you register and use the platform service. We will answer your questions.
This privacy policy applies to the services provided by this platform and does not involve any services provided by third parties. This privacy policy only applies to our processing of your personal information when you use the services provided by this platform, and does not apply to our processing or custody of your personal information as an agent on this platform. For the needs of service function development and corresponding legal requirements, we may occasionally modify this privacy policy. Without your explicit consent or legal requirements, we will not make modifications that significantly reduce your existing rights. Once the privacy policy is modified, we will inform you through pop-up windows, announcements, etc. If you do not agree to the revised privacy policy, please stop using the platform service immediately. If you continue to use the platform service, it will be deemed that you agree to the revised privacy policy.
Through this privacy policy, you will learn the following:
I. Definitions
II. How We Collect and Use Your Personal Information
III. How We Share, Delegate Processing, Transfer, and Publicly Disclose Your Personal Information
IV. How We Use Cookies and Similar Technologies
V. How We Respond to Your Requests for Personal Information Rights
VI. How We Protect and Store Your Personal Information
VII. Protection of Minors' Personal Information
VIII. Changes to the Privacy Policy
IX. Contact Us
I. Definitions
(1) Personal Information: refers to various information recorded in electronic or other forms related to identified or identifiable natural persons, excluding information that has been anonymized.
(2) Sensitive Personal Information: refers to personal information that, once disclosed or illegally used, is likely to cause harm to a natural person's personality dignity or personal and property safety, including biometric identification, religious beliefs, specific identities, medical health, financial accounts, location tracking information, and personal information of minors under the age of 14.
(3) Personal Information Processing: includes collection, storage, use, processing, transmission, provision, disclosure, deletion, etc., of personal information.
The definitions of other concepts not mentioned in this privacy policy are consistent with those in relevant Chinese laws and regulations.
II. How We Collect and Use Your Personal Information
(1) Account Registration
When you complete the registration process on the GitCode website (https://www.gitcode.com), we may need you to provide your phone number and username. To ensure account security, you may also need to set a password for your account. If you refuse to provide the above information, you will not be able to register a GitCode account and can only use browsing and search services.
(2) Third-Party Account Login Function
In addition to registering an account on this platform, when you log in to this platform using a third-party platform account, you need to authorize us to collect the third-party platform account's nickname, avatar, username, phone number, and email address. You understand that, based on the requirements for providing information services under the real-name system of the platform, the aforementioned information is necessary personal information to enable logging in with a third-party platform account. If you cannot provide the above information, you will not be able to log in with a third-party platform account. The aforementioned information is collected only when you first use a third-party platform account to log in.
(3) Personal Profile Display
The platform provides a personal profile editing function, and you can enrich and improve your personal profile through the editing function. For this purpose, we will collect the user nickname, avatar, email address, Github account, personal website, company, location, and personal introduction information that you provide. The above information will be collected each time you edit your personal profile. You understand that the above personal information is voluntarily provided by you, and if you cannot provide the above information, it will not affect your use of other functions of the platform except for personal profile editing and display. Please note that your personal profile information may be displayed to other users of the platform.
(4) SSH Public Key Creation
SSH public keys are used to establish a more secure connection between your computer and this platform. This platform can generate SSH public keys for this purpose. The SSH public key and its name are set and generated by you. The above personal information is voluntarily provided by you. If you cannot provide the above information, it will not affect your use of other functions of the platform except for the SSH public key creation function.
(5) Information Obtained from Third Parties
Under legal conditions, based on your authorization, to provide you with more optimized services and meet your personalized needs, we may receive your personal information or other information from our affiliated companies or partners. In addition, we will also collect information about you that is shared by third parties when they use our products or services.
In the above scenarios, sensitive personal information such as your ID documents, detailed address, and payment information (bank account, bank transaction number) may be collected. The purposes of collecting such information include fulfilling the requirements of relevant laws and regulations for online real-name authentication, verifying your user identity, and being essential for fulfilling the contract you have signed with us, such as providing consultation or technical support, issuing invoices, and sending goods.
(6) We may use your personal information for the following purposes:
-
We use your registration information to create your account and provide you with services.
-
We use your user personal information, especially your username, to identify your identity on the GitCode website.
-
We use your personal profile information to fill in your account's personal profile and share it with other users as requested.
-
We use your email address or other contact information to contact you. To provide you with services, we will send you messages, notifications, or communicate with you for business purposes, including but not limited to necessary verification codes for completing the service and necessary push notifications when using the service. We may design, develop, and promote new products and services based on personal information statistics. We will statistically analyze our service usage and may share these statistics with the public or third parties, but these statistics do not contain any of your identity identification information.
-
We use necessary user personal information to respond to technical and other support requests. When you contact our customer service, we may need you to provide necessary information to match and verify your identity to ensure the security of your account and system. We may also keep your contact information (the contact information you use when contacting us or other contact information you actively provide, such as: phone number, email address), your communication/phone call records and content, and other necessary information related to your needs, to contact you or help you solve problems, or record the handling plan and results of the relevant issues.
-
You can publish your technical views on this platform and interact with other users. To provide you with these services, we will collect the information you upload, post, or form (which may include images, text, article comments you upload), and have the right to display your username, nickname, avatar, and posted content.
-
When you choose to participate in activities, competitions, or claim relevant rewards organized by us, we may collect your necessary information, and at that time, we will separately inform you of the purpose of collecting and using the information and obtain your authorization.
-
To improve the security of the services provided by us and our partners, protect your or other users' or the public's personal and property safety from infringement, better prevent phishing websites, fraud, network vulnerabilities, computer viruses, network attacks, network intrusions, and other security risks, accurately identify situations that violate laws and regulations or the platform's service-related agreements and rules, we may collect, use, or integrate your account information, log information, and information that you have authorized or shared according to law to comprehensively assess your account and transaction risks, perform identity verification, detect and prevent security incidents, and take necessary record, audit, analysis, and disposal measures in accordance with the law.
-
We may periodically send you activity invitations or product service experience promotions via SMS, email, in-site messages, or phone calls, or recommend projects that you may want to follow or contribute to. At that time, we will complete the above services using the contact information you provided during registration. If you do not want to accept this service, you can unsubscribe or withdraw your consent through the method indicated in section VIII (4) of this privacy policy. After you unsubscribe or withdraw your consent, we will no longer provide this service to you.
-
We may use your usage information and device information on this platform to better understand how you use the platform services to improve the platform services.
-
For security purposes, or to investigate possible fraud or attempts to damage us or our users, we may use your user personal information.
-
We may use your user personal information to fulfill our legal obligations, protect our intellectual property, and enforce our service terms.
When we provide you with features or specific services, we will collect, use, store, provide, and protect your personal information according to this privacy policy and the corresponding service agreement; if we collect your personal information beyond the scope of this privacy policy and the corresponding service agreement, we will explain the scope and purpose of the information collection separately and collect the necessary information for the service only after obtaining your consent. If you choose not to provide the aforementioned information, it will affect your use of the corresponding specific features or services.
(7) Exceptions for Collection and Use of Personal Information without Your Authorization and Consent
You fully understand that, according to applicable laws, in the following circumstances, we do not need to obtain your authorization and consent to collect and use your personal information:
-
Necessary for concluding and performing a contract in which you are a party;
-
Necessary for fulfilling the statutory obligations of this platform;
-
Necessary for protecting the life and health of natural persons or property safety in the case of sudden public health events or emergencies;
-
Processing personal information within a reasonable range for news reporting and public opinion supervision for the public interest;
-
Processing personal information that has already been publicly disclosed by you or legally disclosed, within a reasonable range according to laws and regulations;
-
Other circumstances stipulated by laws and administrative regulations.
III. How We Share, Delegate Processing, Transfer, and Publicly Disclose Your Personal Information
(1) Sharing
In principle, we share your personal information with other organizations and individuals, except in the following cases:
-
Sharing upon obtaining your explicit consent: After informing you of the name or title of the third party, contact information, purpose of processing, method of processing, and types of personal information, and obtaining your explicit consent, we will share the information within the scope of your authorization with the third party you agree to.
-
Sharing under statutory circumstances: We may share your personal information externally according to legal provisions, the needs of litigation dispute resolution, or the requirements proposed by administrative or judicial authorities.
-
Sharing in cases where it is necessary to conclude and perform a contract in which you are a party
-
Sharing among affiliated companies
We may share your personal information with our affiliated companies, and your personal information may be shared among our affiliated companies. We will only share necessary personal information, and such sharing is subject to the constraints of this privacy policy. If an affiliated company wishes to change the purpose of processing personal information, it will seek your authorization again. Furthermore, before providing the information to the affiliated company, we will make every commercial effort to assess the legality, propriety, and necessity of the information collected by the affiliated company. We will try our best to require the affiliated company to take protective measures for your information
- Sharing with business partners for the necessary provision of services
We may share your personal information with third parties such as partners to ensure the successful completion of the services we provide to you. However, we will only share your information for legitimate, proper, necessary, specific, and clear purposes, and only share the information necessary for providing the service. To ensure the security and privacy of your personal information, we have clearly defined the protection responsibilities, obligations, and requirements of the partners regarding your personal information through agreements. Partners may have their own independent privacy policies and user agreements. We recommend that you read and comply with the user agreements and privacy policies of the third party. Our partners include:
(1) Huawei Cloud: It is mandatory for using the platform services. After you register or log in to the platform, you need to authorize and activate the Huawei Cloud service provided by Huawei Cloud Computing Technology Co., Ltd. ("Huawei Cloud"), and with your separate consent, we will provide your phone number and username to Huawei Cloud.
(2) Other third-party partners: To complete the delivery or after-sales service, we may share your personal information with third-party partners who support the aforementioned functions of the platform, including third parties that supply goods or provide infrastructure technology services, data processing services, etc.
(2) Delegated Processing
We may entrust authorized partners to process your personal information so that the authorized partners can provide certain services or fulfill certain functions on our behalf. We will only entrust them to process your information for legitimate, proper, necessary, specific, and clear purposes stated in this policy, and the authorized partners will only have access to the information required for their duties. We will require them through agreements not to use this information for any purposes beyond the scope of the entrustment. If the authorized partner uses your information for purposes not entrusted by us, they will separately seek your consent. The authorized partners we entrust include the following types:
-
Code Hosting Services: Based on the need to provide code hosting services, we will entrust a cloud service technology provider to provide code hosting services, process, store, or host your content ("your content" refers to all information (including personal information), code, software, devices, text, images, videos, audio, photos, third-party applications, materials) that you transmit, store, or process while using the service. The cloud service technology provider will only provide code hosting services within the scope of the commission received from this platform and under the instructions of this platform. We will require them to handle personal information by signing strict data processing agreements or confidentiality agreements with Huawei Cloud, ensuring that they do not proactively access or access the personal information or any other data generated by you when using this platform.
-
Content Review Services: To meet the legal requirements of this platform for internet information content security and account information management, we may entrust one or more information content review technology service providers to assist us in fulfilling the legal obligations of platform content governance. We will sign strict data processing agreements or confidentiality agreements with the entrusted content review technology service providers. You understand that the aforementioned review process may involve reviewing and processing the information you submit, upload, or publicly disclose through various forms such as machines or humans. However, we will take necessary de-identification measures to ensure that these content review technology providers process the data under the condition of ensuring information security.
-
Customer Service: To promptly handle your complaints, suggestions, and other requests, we may entrust one or more customer service providers to process your relevant personal information, so that we can promptly understand, handle, and respond to your needs. We will sign strict data processing agreements or confidentiality agreements with the customer service providers. You understand that during the process of resolving customer complaints, your account information, your complaints, suggestions, or other requests may be collected and used, and in necessary cases, the results of complaint handling may be fed back to you through the phone number or other communication methods you reserved on the platform.
-
Other suppliers and partners of other products or services: We will entrust suppliers and other partners who support our business to process personal information. These supports include consulting, analysis, marketing, technical support, and other professional services provided on our behalf.
(3) Transfer
We will not transfer your personal information to any company, organization, or individual, except in the following cases:
-
Transfer upon obtaining explicit consent: After obtaining your explicit consent, we will transfer your personal information to other parties;
-
In the case of mergers, acquisitions, asset transfers, bankruptcy liquidation, or other similar situations, if personal information transfer is involved, we will require the new entity holding your personal information to continue to be bound by this privacy policy. Otherwise, we will require the entity to re-obtain your authorization. If there is a bankruptcy situation without a successor, we will delete the data in accordance with the law.
-
Situations where it is necessary to provide in accordance with applicable laws and regulations, legal procedures, mandatory administrative or judicial requirements
-
Situations that meet the agreements (including electronically signed electronic agreements) or other legal documents you have signed with us.
(4) Public Disclosure
We will only publicly disclose your information in the following situations:
-
After obtaining your separate consent, publicly disclose your personal information;
-
In accordance with the law, legal procedures, litigation, or requirements from public and government authorities, we may publicly disclose your information.
-
To protect the personal and property safety of this platform, us, and our affiliated companies' users or the public from infringement, we may disclose personal information about you in accordance with applicable laws or this platform's relevant agreements and rules.
(5) Third-Party SDKs
During your use of the platform service, some services may require us to jointly provide you with services with third-party partners, for example, social sharing, etc. For this reason, we have integrated the software development kits (SDKs) or other similar applications of third-party partners. For more details, please refer to Third-Party SDK List.
(6) Exceptions for Prior Authorization and Consent for Sharing, Transferring, and Publicly Disclosing Information
According to relevant laws and regulations or for the needs of maintaining public interests, we may share, publicly disclose, or transfer your personal information without obtaining your consent in the following circumstances:
-
Related to our fulfillment of legal and regulatory obligations;
-
Related to national security and defense;
-
Related to public safety, public health, and major public interests;
-
Related to criminal investigation, prosecution, trial, and enforcement of judgments;
-
For the purpose of maintaining your or our employees' significant personal rights and interests, but it is difficult to obtain your consent;
-
Personal information that the information subject has publicly disclosed to the public;
-
Personal information collected from legally publicly disclosed information, such as legally reported news, government information disclosure, etc.
IV. How We Use Cookies and Similar Technologies
(1) What Are Cookies and Similar Technologies
Cookies are small files stored on your computer, mobile phone, or other smart terminal devices by the website server when you log in to a website or browse online content, usually containing identifiers, site names, and some numbers and characters. We may use cookies to enhance your user experience and service friendliness when you visit this platform, mainly for statistical and analytical purposes based on your website visits and usage habits, recording your preferences and settings, thereby serving as a basis for us to improve products and enhance services. In addition to cookies, similar technologies such as web beacons or pixel tags can also achieve similar effects through embedded reporting.
(2) How We Use Cookies and Similar Technologies
When you use this platform, we may collect your username, avatar, device model, operating system, device identifier, login IP address information, cache your browsing information, and click information through cookies or similar technologies. We will not associate the aforementioned information collected through cookies and similar technologies with your personal account information or identity information, nor will we use it for any other purposes outside the scope of this privacy policy, such as statistical analysis and improving the effectiveness of the website service. The purpose of using cookies and similar technologies is to infer the interest areas of the user group based on your behavior on the platform, continuously optimize the user-friendliness of the platform, and make timely adjustments to the relevant functions or services of the platform according to your needs.
(3) How to Manage Cookies and Similar Technologies
Most device browsers usually allow you to choose to disable third-party cookies or disable all cookies. You can change your device's browser settings to enable or disable the platform's cookies and similar technologies, but this may affect your experience of using the platform, for example, we may not be able to understand your use of the platform, resulting in additional operations that need to be repeated. For detailed information, please refer to the help menu in the device terminal browser or the documentation that comes with the device.
V. How We Respond to Your Requests for Personal Information Rights
(1) Inquiry, Correction, and Supplement of Personal Information
You can query, correct, and supplement your personal information through 【Personal Settings - User Profile】.
(2) Deletion of Personal Information
-
You can delete your personal information through 【Personal Settings - User Profile】, or delete all information in your GitCode account by canceling your account, unless otherwise specified by laws and industry regulatory rules.
-
If you cannot independently realize the deletion of information through the above methods, you can also submit a personal information deletion request to us through the method indicated in "IX. Contact Us" of this privacy policy. Usually, we will process it within 15 days.
3. After you or we assist you in deleting the relevant information, due to applicable laws and security technology limitations, we may not be able to immediately delete the corresponding information from the system. We will securely store your personal information and restrict any further processing of it until it can be deleted or anonymized.
(3) Withdrawal of Consent
You can change the scope of your authorization for us to continue collecting your personal information or withdraw your authorization by deleting information, disabling functions, etc. You can also withdraw your authorization for us to continue collecting your personal information by canceling your account. However, your decision to withdraw your consent or authorization will not affect the personal information processing activities carried out based on your previous authorization.
Please understand that each business function requires some basic personal information to be completed. When you withdraw your consent or authorization, we will not be able to continue providing the services corresponding to the withdrawal of consent or authorization, nor will we process your corresponding personal information.
(4) Account Cancellation
You can apply for account cancellation through the method indicated in "IX. Contact Us". After you cancel your account, we will stop providing you with services, and unless otherwise specified by laws and regulations, we will delete your personal information. After cancellation, the account cannot be restored. If you want to enjoy the relevant services again, you need to re-register an account.
(5) How We Respond to Your Rights Request
To ensure security, you may need to provide a written request or prove your identity in another way. We may first ask you to verify your identity before processing your request. Normally, we will respond within 15 days.
For your reasonable requests, we generally do not charge fees, but for multiple repeated, excessive, or unreasonable requests, we may charge a certain cost fee depending on the circumstances. For requests that are baseless, require excessive technical means (for example, requiring the development of a new system or fundamentally changing current practices), pose risks to others' legitimate rights and interests, or are impractical (for example, involving information stored on backup tapes), we may reject them.
Please be aware that under the following circumstances, according to legal requirements, we will be unable to respond to your request:
(1) Related to national security and defense;
(2) Related to public safety, public health, and major public interests;
(3) Related to criminal investigations, prosecution, trial, and execution of judgments;
(4) There is sufficient evidence indicating that you have subjective malice or abuse of rights;
(5) Responding to your request would cause serious damage to your or other individuals' or organizations' legitimate rights and interests.
(6) Involving trade secrets.
VI. How We Protect and Store Your Personal Information
(1) We value the security of your personal information. To protect your personal information, we have taken the following measures:
-
We adopt reasonable and feasible measures to ensure the minimization of personal information collection, and will not collect personal information unrelated to the purpose of processing;
-
We use encryption technology to ensure the confidentiality of information transmission and storage. We use trusted protection mechanisms to prevent servers storing information from being attacked maliciously;
-
We deploy access control mechanisms to ensure that only authorized personnel can access personal information. And according to business needs and personnel levels, we control the number of authorized personnel and implement hierarchical authority management for authorized personnel;
-
We select business partners and service providers, and incorporate the requirements for personal information protection into our contracts, audits, and evaluations;
-
We hold security and privacy protection training courses, tests, and promotional activities to strengthen employees' awareness of the importance of protecting personal information.
(2) Although we have a responsibility to protect your personal information, you also have a responsibility to properly keep your login information, including account ID and password. If you find that others are using your account ID without your permission to use this service, please notify us immediately. You have the right to request us to suspend unauthorized use of your account.
(3) We will take reasonable and feasible measures to avoid collecting irrelevant personal information. We will strive to protect your personal information, but no measure is foolproof, and no service, product, website, information transmission, computer system, or network connection is absolutely safe.
(4) All personal information collected or generated within the People's Republic of China will be stored on servers within the People's Republic of China. According to the requirements of laws and regulations such as the "Personal Information Protection Law of the People's Republic of China," we limit the storage period of personal information to the minimum necessary.
VII. Protection of Minors' Personal Information
This website and its content and services are only available to natural persons who are at least 14 years old.
Without the consent of parents or guardians, minors under the age of 14 are not allowed to create their own user accounts. For cases where we collect minors' personal information with the consent of parents or guardians, we will only use or disclose their personal information when it is allowed by law, with the explicit consent of parents or guardians, or necessary for the protection of minors. If we find that we have collected the personal information of minors under the age of 14 without prior verifiable consent from parents or guardians, we will attempt to delete the relevant personal information as soon as possible.
VIII. Changes to the Privacy Policy
We reserve the right to update or modify this privacy policy from time to time. When this privacy policy changes, we will notify you through different channels: we will publish the latest version on our official website, and we may also send you individual notifications (such as electronic notifications) to remind you of any changes to this privacy agreement. For significant changes, we will also provide more prominent notices (including public announcements on the official website or even pop-up prompts to you).
IX. Contact Us
If you have any questions about this privacy policy or wish to exercise your personal rights, you can contact us via phone, email, or online customer service. We are happy to provide assistance.
Website Operator Name: Chongqing Open Source Co-Creation Technology Co., Ltd.
Registered Address: No. 1, Hua Yi Road, Qixinggang Street, Yuzhong District, Chongqing City
Phone Number: 400-6868-951