GDPR

> v1 - effective April 14, 2022

Types of data stored

1. User names, emails and company connections.
2. Raw/preprocessed coverage reports for 30 days.
3. Post-processed coverage reports
4. Company connections
5. Oauth tokens from your service provider
6. Commit, branch, pull-request details (author, timestamp, message, etc.)

Places where data is stored

1. Our logging service is Elastic.
2. Our hosting provider is Google Cloud Platform.
3. We use Google Analytics and FullStory.
4. We use Sentry to collect traceback data.
5. We use Google Cloud Storage to archive data.

> Codecov does not sell your data. We only use it to improve the product.

Policies

• Terms of use
• Privacy policy
• Security policy

Accountability & Management

Codcov taken all necessary measures according to the GDPR regulation.

Your Rights

1. You have the right to request your information/data.
2. You have the right to update your information/data.
3. You have the right to delete your information/data.
4. You have the right to stop processing of your information/data.

Consent

1. By logging in you grant consent to collect data.
2. By uploading reports you grant consent to collect data.
3. You may logout to remove consent to collect data.
4. You may stop uploading reports to remove consent to collect data.

For questions and feedback, contact security@codecov.io