Privacy Policy

Table of Contents

Last Updated: November 12, 2019

 

Protection SOC 2

Codecov is SOC 2 Type II certified, which means a third-party audits and attests to our practices to secure our systems and your data.

SOC II

Privacy Notice

European Privacy Disclosures

Codecov Coookie Notice

Who We Are: Codecov LLC is a leading, dedicated code coverage solution that helps developers test, strengthen, and improve their software code. We are headquartered in San Francisco, California, and serve customers around the world. When we use the terms “Codecov”, “we”, “us” or “our” in this Privacy Notice, we are referring to Codecov LLC.

Our Services: When we use the term “services,” we are referring to:

  • The highly integrated tools we provide to code developers to help them group, merge, archive, and compare code coverage reports; and
  • The website, Codecov.io.

Region-Specific Disclosures

We may choose or be required by law to provide different or additional disclosures relating to the processing of personal information about residents of certain countries, regions or states. Please refer below for disclosures that may be applicable to you:

Europe.

  • If you are based in the European Economic Area (“EEA”), Switzerland or the United Kingdom (“UK”), please click here for additional European-specific privacy disclosures.

What is Personal Information?

When we use the term “personal information” in this Privacy Notice, we mean information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, to you. It does not include aggregated or anonymized information that is maintained in a form that is not reasonably capable of being associated with or linked to you.

Our Collection of Personal Information

From the first moment you interact with us, we are collecting personal information about you. Sometimes we collect personal information automatically when you interact with our services and sometimes we collect the personal information directly from you. At times, we may collect personal information about you from other sources and third parties, even before our first direct interaction.

Personal Information You Provide
We collect the following personal information you provide in connection with our services:

  • Contact Information, including your name, email address, phone number, and address;
  • Professional/Employment Information, including your employer and team affiliation, and company connections;
  • Account Information, including your username, password, other log-in credentials, repository access permissions, coverage reports and Oauth tokens;
  • Payment Information, including your credit card information;
  • Inquiry Information, including your comments, questions, and opinions about our services; and
  • Job Applicant Information, including your resume, and any other information you choose to provide as part of your job application.

Personal Information Automatically Collected
As is true of most digital platforms, we collect certain personal information automatically when you visit our online services, including:

  • Log File Data, including your internet protocol (IP) address, operating system, domain, browser type, browser id, date/time of visit, and pages visited.
  • Analytics Data, including the electronic path you take to our services, through our services and when exiting our services, as well as your usage and activity on our services, such as the links and object you view, click or otherwise interact with (also known as “Clickstream Data”), and your impact on the repositories.
  • Location Data, including your general geographic location based on your IP address.

For information about our and our third-party partners’ use of cookies and related technologies to collect information automatically, and any choices you may have in relation to its collection, please visit our Cookie Notice.

Personal Information from Other Sources and Third Parties We also obtain personal information from other sources, which we often combine with personal information we collect either automatically or directly from you.
We receive personal information from the following sources and third parties:

  • Software Development Platforms: When you log in to our services through third party software development platforms, such as Github, you may allow us to have access to certain information in your profile, such as your name, email address, photo, location, username or ID, and password. In addition, when you sign up for Codecov you permit Codecov access to your archives on such third-party platforms. Codecov does not make any adjustments to repository source code.
  • Social Media Platforms: When you choose to interact with us on social media, we may collect personal information from the account you make public or share with us, such as your photos, videos, list of friends or connections, followers or people you follow, posts, or “likes.”

Our Use of Personal Information

We use personal information we collect to:

  • Provide you our services and fulfill your requests;
  • Register and service your account with us;
  • Communicate with you about our services, your account with us, or other products that we believe may be of interest to you;
  • Respond to your inquiries about our services;
  • Provide technical support for our services;
  • Process your payments for access to our services;
  • Evaluating your candidacy for employment;
  • Perform analysis on how you use our services;
  • Enhance our services, including to build new features;
  • Enforce the legal terms that govern your use of our services, including but not limited to our policies and terms of service;
  • Prevent, detect, or investigate fraud or potentially illegal activities, such as copyright infringement;
  • Protect the safety of our users;
  • Comply with legal obligations.

If you choose to contact us, we may need additional information to fulfill your request or respond to your inquiry. We may provide additional privacy disclosures where the scope of the inquiry and personal information we require fall outside the scope of this Privacy Notice. In that case, the additional privacy disclosures will govern how we may process the information you provide at that time.

Our Disclosure of Personal Information

We disclose personal information in the following ways:

  • Within Codecov: We are able to offer you our services because of the hard work of our team members across Codecov. We disclose personal information across Codecov for purposes and uses that are consistent with this Privacy Notice. For example, we may disclose your contact information to process and fulfill your subscription order or to facilitate communication between you and a local Codecov representative.
  • To Service Providers: We may disclose personal information to service providers who we have engaged to perform business-related functions on our behalf. These functions include: conducting research and analytics; providing customer, technical, or operational support; fulfilling orders and user requests; handling payments; hosting our services; maintaining our databases; and otherwise supporting our services.
  • As Part of a Business Transaction or Reorganization: We may take part in or be involved with a corporate business transaction, such as a merger, acquisition, joint venture, or financing or sale of company assets. We may disclose personal information to a third party during negotiation of, in connection with or as an asset in such a corporate business transaction. Personal information may also be disclosed in the event of insolvency, bankruptcy, or receivership.
  • In Accordance with Our Legal Obligations and Rights: We may disclose personal information to third parties, such as legal advisors and law enforcement:
    • in connection with the establishment, exercise, or defense of legal claims;
    • to comply with laws or to respond to lawful requests and legal process;
    • to protect the rights and property of us, our agents, customers, and others, including to enforce our agreements, policies, and terms of use;
    • to detect, suppress, or prevent fraud;
    • to reduce credit risk and collect debts owed to us;
    • to protect the health and safety of us, our customers, or any person; or
    • as otherwise required by applicable law.
  • Otherwise with Your Consent: We may disclose personal information about you to certain other third parties with your consent.

Access to Your Information

Access to certain personal information that is collected from our services and that we maintain may be available to you. For example, if you create a password-protected account within our services, you can access that account to review the information you provided. You may also send an email to the following e-mail address, support@codecov.io , to gain access to or to correct your personal information. Please include your registration information for the services such as first name, last name, and email address in the request. If for some reason you wish to remove a repository, you may do so. Please contact support at support@codecov.io to remove all reports and data collected on a repository. On the off chance you wish to terminate your account, please contact staff at support@codecov.io to erase your account data.

Children’s Personal Information

Our websites and online services are not directed to, and we do not intend to, or knowingly, collect or solicit personal information from children under the age of 13. If you are under the age of 13, please do not use our websites or online services or otherwise provide us with any personal information either directly or by other means. If a child under the age of 13 has provided personal information to us, we encourage the child’s parent or guardian to contact us to request that we remove the personal information from our systems. If we learn that any personal information we collect has been provided by a child under the age of 13, we will promptly delete that personal information.

Third-Party Websites

Our websites and online services may include links to third-party websites, plug-ins and applications. Except where we post, link to or expressly adopt or refer to this Privacy Notice, this Privacy Notice does not apply to, and we are not responsible for, any personal information practices of third-party websites and online services or the practices of other third parties. To learn about the personal information practices of third parties, please visit their respective privacy notices.

Updates to This Privacy Notice

We will update this Privacy Notice from time to time. When we make changes to this Privacy Notice, we will change the "Last Updated" date at the beginning of this Privacy Notice. If we make material changes to this Privacy Notice, we will notify you by prominent posting a notice on this website. All changes shall be effective from the date of publication unless otherwise provided.

Contact Us

If you have any questions or requests in connection with this Privacy Notice or other privacy-related matters, please send an email to hello@codecov.io

Alternatively, inquiries may be addressed to:
Codecov LLC
9450 SW Gemini Drive
#32076
Beaverton, OR 97008-7105
United States

European Privacy Disclosures

Last Updated: November 12, 2019

Unless otherwise expressly stated, capitalized terms in these Disclosures have the same meaning as defined in the Privacy Notice.

Scope of Disclosures

These Additional European Economic Area (“EEA”), Switzerland and United Kingdom (“UK”) Privacy Disclosures supplement the information contained in our Privacy Notice These Disclosures apply only to our processing of your personal data where you are based in Europe.
Codecov LLC is the data controller responsible for the collection and use of such personal data.

Personal Data Disclosures

When we use the term “personal data” in these Disclosures, we mean any information relating to an identified or identifiable natural person.

Legal Bases for Processing

We rely on the following legal grounds to process Personal Data about you, whether it is obtained from you or a third party:

  • For the performance of a contract (Art. 6 para. 1 lit. b GDPR);
  • For the purpose of legitimate interests (Art. 6 para. 1 lit. f GDPR), as described in more detail in the Our Collection of Personal Information section of the Privacy Notice;
  • For compliance with legal obligations and legal claims (Art. 6 para. 1 lit. c GDPR); and
  • Consent to the extent you have provided consent (Art. 6 para. 1 lit. a GDPR)

You are not required to provide personal data to us, but we do rely on your personal data to provide certain of our services and products. For example, we need your personal data to facilitate and deliver an order that you request. If you choose not to provide us with your personal data, we may not be able to provide you with a service or product you request.

Data Retention

We retain personal data about you for as long as is necessary for the purposes set out in these Disclosures, unless a longer period is required under applicable law or is needed to resolve disputes or protect our legal rights.
The criteria used to determine the period for which personal data about you will be retained varies depending on the legal basis under which we process the personal data:

Legitimate Interests Where we are processing personal data based on our legitimate interests, we generally will retain such information for a reasonable period of time based on the particular interest, taking into account the fundamental interests and the rights and freedoms of data subjects
Consent Where we are processing personal data based on your consent, we generally will retain the information for the period of time necessary to fulfill the underlying agreement with you, subject to your right, under certain circumstances, to have certain of your data erased (please see the Your Privacy Rights section below)
Contract Where we are processing personal data based on contract, we generally will retain the information for the duration of the contract plus some additional limited period of time that is necessary to comply with law or that represents the statute of limitations for legal claims that could arise from the contractual relationship
Legal Obligation Where we are processing personal data based on a legal obligation, we generally will retain the information for the period of time necessary to fulfil the legal obligation
Legal Claim We may need to apply a “legal hold” that retains information beyond our typical retention period where we face threat of legal claim. In that case, we will retain the information until the hold is removed, which typically means the claim or threat of claim has been resolved.

In all cases, in addition to the purposes and legal bases, we consider the amount, nature and sensitivity of the personal data, as well as the potential risk of harm from unauthorized use or disclosure of your personal data.

International Data Transfers

We may transfer personal data about you among us and to our subsidiaries or affiliates, as well as to the categories of third parties identified in the Our Disclosure of Personal Information Our Disclosure of Personal Information section of the Notice. Personal data may be transferred to, stored and processed in a country other than the one in which it was collected, including, but not limited to, the United States. The country to which personal data is transferred may not provide the same level of protection for personal data as the country from which it was transferred.

We may transfer personal data about you outside the EEA and when we do so, we rely on appropriate or suitable safeguards recognized under the GDPR including adequacy decisions and standard contractual clauses.

Your Privacy Rights

You have the following rights in relation to your personal data (subject to certain limitations at law):

Access The right to access and obtain a copy of personal data about you, as well as information relating to its processing.
Rectification The right to correct or update any personal data about you that is inaccurate or incomplete.
Restriction of Processing The right to require us to limit the purposes for which we process your personal data if the continued processing of the personal data in this way is not justified, such as where the accuracy of the personal data is contested by you.
Erasure The right to request the deletion or erasure of personal data about you without undue delay if the continued processing of that personal information is not justified.
Portability The right to obtain a copy of personal data about you in an easily accessible format and the right to transmit that personal data to another controller.
Objection to Processing You also have the right to object to any processing based on our legitimate interests where there are grounds relating to your particular situation. There may be compelling reasons for continuing to process your personal data, and we will assess and inform you if that is the case. You can object to marketing activities for any reason.

Please note that if the exercise of these rights limits our ability to process personal data, we may not be able to provide our products or services to you, or otherwise engage with you going forward.

Right to Withdraw Consent

Where we rely on your consent for processing of your personal data, you also have the right to withdraw your consent to such processing, subject to certain limitations at law. Please contact us to request to withdraw any consent you may have provided to us.

Submitting Requests

To submit a request, please contact us as set forth in the Contact Us section below. We may need to verify your identity before processing your request, which may require us to obtain additional personal data from you. In certain circumstances, we may decline a request to exercise the rights described above.

Right to Lodge a Complaint

If you have any complaints regarding our privacy practices, you have the right to lodge a complaint with your national data protection authority (i.e., supervisory authority).

Updates to These Disclosures

We may update these Disclosures from time to time. When we make changes to these Disclosures, we will change the "Last Updated" date at the beginning of these Disclosures. If we make material changes to these Disclosures, we will notify you by email to your registered email address, by prominent posting on our online services, or through other appropriate communication channels. All changes shall be effective from the date of publication unless otherwise provided in the notification.

Contact Us

If you have any questions or requests in connection with this Notice or other privacy-related matters, please send an email to hello@codecov.io

Alternatively, inquiries may be addressed to:
Codecov LLC
9450 SW Gemini Drive
#32076
Beaverton, OR 97008-7105
United States

Codecov Cookie Notice

Last Updated: November 12, 2019

Unless otherwise expressly stated, capitalized terms in this Notice have the same meaning as defined in the Privacy Notice

Scope of Notice

This Cookie Notice supplements the information contained in the Privacy Notice by explaining how we and our business partners and services providers use cookies and related technologies in the course of managing and providing our online services and our communications to you. It explains what these technologies are and why we use them, as well as your rights to control our use of them.
In some cases, we may use cookies and related technologies described in this Cookie Notice to collect personal information, or to collect information that becomes personal information if we combine it with other information. For more details about how we process your personal information, please review the Privacy Notice.

Cookies are small data files that are stored on your computer that allow us and our third-party partners and providers to collect certain information about your interactions with our email communications, websites and other online services. We and our third-party partners and providers may also use other, related technologies to collect this information, such as web beacons, pixels, embedded scripts, location-identifying technologies and logging technologies (collectively, “cookies”).

What We Collect When Using Cookies

We and our third-party partners and providers may use cookies to automatically collect certain types of usage information when you visit or interact with our email communications, websites and other online services. For example, we may collect log data about your device and its software, such as your IP address, operating system, browser type, date/time of your visit, and other similar information. We may collect analytics data or use third-party analytics tools such as e.g., Google Analytics and FullStory to help us measure usage and activity trends for our online services and better understand our customer base.
Third-party partners and providers may also collect personal information about your online activities over time and across different websites when you use our websites and online services.

How We Use That Information

We use or may use the data collected through cookies to: (a) remember information so that you will not have to re-enter it during your visit or the next time you visit our websites and online services; (b) provide and monitor the effectiveness of our websites and online services; (c) monitor online usage and activities of our websites and online services; (d) diagnose errors and problems with our websites and online services; (e) otherwise plan for and enhance our online services; and (f) facilitate the purposes identified in the Our Use of Personal Information section of our Privacy Notice We and our advertising partners also use the information we collect through cookies to understand your browsing activities, including across unaffiliated third-party sites, so that we can deliver ads and information about products and services that may be of interest to you.

Please note that we link some of the personal information we collect through cookies with the other personal information that we collect about you and for the purposes described in our Privacy Notice.

Your Choices About Cookies

If you would prefer not to accept cookies, most browsers will allow you to: (i) change your browser settings to notify you when you receive a cookie, which lets you choose whether or not to accept it; (ii) disable existing cookies; or (iii) set your browser to automatically reject cookies. Please note that doing so may negatively impact your experience using our online services, as some features and services on our online services may not work properly. Depending on your device and operating system, you may not be able to delete or block all cookies. You may also set your email options to prevent the automatic downloading of images that may contain technologies that would allow us to know whether you have accessed our email and performed certain functions with it.

You can learn more about Google’s practices with Google Analytics by visiting Google’s privacy policy here. You can also view Google’s currently available opt-out options here.

We will update this Cookie Notice from time to time. When we make changes to this Cookie Notice, we will change the "Last Updated" date at the beginning of this Notice. If we make material changes to this Notice, we will notify you by email to your registered email address, by prominent posting on this website or our online services, or through other appropriate communication channels. All changes shall be effective from the date of publication unless otherwise provided in the notification.

Contact Us

If you have any questions or requests in connection with this Cookie Notice or other privacy-related matters, please send an email to hello@codecov.io

Alternatively, inquiries may be addressed to:
Codecov LLC
9450 SW Gemini Drive
#32076
Beaverton, OR 97008-7105
United States