Privacy Policy | GitKraken

Axosoft LLC (dba GitKraken) Privacy Policy

The below agreement does not apply to our Git Integration for Jira product. You can click the following link to find the Git Integration for Jira Privacy Policy.

Last updated: March 19, 2026

We at Axosoft LLC, DBA GitKraken (“GitKraken”, “Company”, “we”, “us”, or “our”) know that our users (“you”, or “your”) care about how your personal information is used and shared. We take your privacy seriously and are committed to protecting it through our compliance with this Privacy Policy.

Please read the following to learn more about our Privacy Policy explaining our online information practices and the choices you can make about the way your information is collected and used and how you can access and update your information. By visiting or using the gitkraken.com website (the “Website”) or any other services, products, features, content, or applications offered from time to time by the Company in connection therewith (collectively with the Website, the “Service(s)”) in any manner, you acknowledge that you accept the practices and policies outlined in this Privacy Policy, and you hereby consent that we will collect, use, and share your information in accordance with this Privacy Policy. If you do not agree with our policies and practices, your choice is not to use our Services.

The GitKraken Services are subject to the GitKraken End User License Agreement (EULA).

If you have questions or concerns about our privacy practices, please contact legal@gitkraken.com. If you would like to report a suspected bug or security vulnerability with our site or products, please contact security@gitkraken.com.

THIS PRIVACY POLICY MAY CHANGE FROM TIME TO TIME. YOUR CONTINUED USE OF THE SERVICES AFTER WE MAKE CHANGES IS DEEMED TO BE ACCEPTANCE OF THOSE CHANGES, SO PLEASE CHECK THE POLICY PERIODICALLY FOR UPDATES.

PLEASE READ THIS POLICY CAREFULLY TO UNDERSTAND OUR POLICIES AND PRACTICES REGARDING YOUR INFORMATION AND HOW WE WILL TREAT IT. IF YOU DO NOT AGREE WITH OUR POLICIES AND PRACTICES, YOUR CHOICE IS NOT TO USE OUR SERVICES. BY USING OR ACCESSING THE SERVICES, YOU ARE ACCEPTING THE PRACTICES DESCRIBED IN THIS PRIVACY POLICY.

1. What Does This Privacy Policy Cover?

This Privacy Policy applies to information we collect: (1) on or through the Services; and (2) in email, text, and other electronic messages between you and our Services.

It does not apply to information collected by: (1) us offline or through any other means, including on any other website operated by the Company or any third party (including our affiliates and subsidiaries); or (2) any third party, including through any application or content that may link to or be accessible from or on our Services. This Privacy Policy does not apply to Open Source Software (as defined in the EULA).

We gather various types of Personal Information from our users, as explained more fully below. We may use this Personal Information to personalize and improve our services, to contact users, to fulfill your requests for certain products and services, to analyze how users utilize the Services, and as otherwise set forth in this Privacy Policy. We may share certain types of Personal Information with third parties, as described below.

THE SERVICES ARE NOT INTENDED FOR CHILDREN UNDER 18 YEARS OF AGE.

We do not knowingly collect or solicit Personal Information from anyone under the age of 13 or knowingly allow such persons to register for our Services. If you are under 13, please do not attempt to register for the Services or send any information about yourself to us, including your name, address, telephone number, or email address. No one under age 13 may provide any Personal Information to us or on the Services. In the event that we learn that we have collected Personal Information from a child under age 13 without verification of parental consent, we will delete that information as quickly as possible. If you believe that we might have any information from or about a child under 13, please contact us at legal@gitkraken.com.

2. What Information Does the Company Collect and How?

We may collect several types of information from and about users of our Services, including information: (a) by which you may be personally identified, such as name, postal address, email address, telephone number or any other identifier which is deemed personal information under various laws, rules, and regulations applicable to this Privacy Policy (“Personal Information”); (b) that is about you but individually does not identify you; (c) about your internet connection, the equipment you use to access the Services, and usage details; and (d) any content, code, data or information you submit to or through our AI Features, including queries, responses, and generated content (“AI Data”). You represent and warrant that you have all necessary rights and permissions to submit any AI Data and grant us the rights specified in this Privacy Policy. We collect this information (i) directly from you when you provide it to us; and (ii) automatically as you navigate through the Service. Information collected automatically may include usage details, IP addresses, and information collected through cookies and other tracking technologies.

IMPORTANT NOTICE REGARDING AI FEATURES: Our AI Features may process any information you provide through them using third-party AI services. As required by the EU Artificial Intelligence Act, we inform you that: (i) these features utilize artificial intelligence systems that may process and generate content based on your inputs; (ii) the AI systems are provided by third parties and may have limitations, biases, and varying degrees of accuracy; (iii) you should review and verify any AI-generated output before use; (iv) we maintain human oversight over our AI systems and implement appropriate risk management measures; (v) you have the right to know when you are interacting with an AI system; and (vii) the AI systems process your inputs to generate responses but do not make automated decisions affecting your legal rights. Do not submit any confidential, proprietary, or sensitive personal information through AI Features. We cannot guarantee the security or confidentiality of information processed by third-party AI services.

3. How does the Company Use and Share the Information it Receives?

We use information that we collect about you or that you provide to us, including any Personal Information:

We may disclose aggregated information about our users, and information that does not identify any individual, without restriction.

We will disclose User Content and any other data or content provided by you through AI Features of the Service to Google pursuant to their Privacy Policy and Terms of Service for the Gemini API. Such disclosure is necessary for the operation of AI Features that utilize Google’s Gemini API. You acknowledge and agree that any data submitted to AI Features may be processed, stored, analyzed, or otherwise used by Google or other AI service providers to improve their services. Your use of AI Features constitutes acceptance of Google’s applicable terms and privacy practices. We assume no responsibility for how Google or other third-party AI service providers handle your data once it is shared with their services. We may also share your data with other third-party AI service providers as necessary to provide AI Features, subject to their respective privacy policies and terms of service. You should exercise caution and review all applicable privacy policies before submitting sensitive or confidential information through AI Features.

We may disclose Personal Information that we collect or you provide as described in this Privacy Policy as follows:

Finally, we never use, share, sell or rent the Personal Information provided to us online in ways unrelated to the ones described in this Privacy Policy without also providing you an opportunity to opt-out or otherwise prohibit such unrelated uses.

4. Is Personal Information About Me Secure?

The security of your Personal Information is important to us. While we endeavor to protect the privacy of your Personal Information we hold in our records, unfortunately, the transmission of information via the internet is not completely secure. Although we do our best to protect your Personal Information, we cannot guarantee the security of your Personal Information transmitted to our Services. Any transmission of information is at your own risk. We are not responsible for circumvention of any privacy settings or security measures contained on or through the Services.

The safety and security of your information also depends on you. Where we have given you (or where you have chosen) certain access credentials for use of the Service, you are responsible for keeping this information confidential. We ask you not to share your access credentials with anyone. We urge you to be careful about giving out information in public areas of the Website or to other users.

5. What Personal Information Can I Access or Correct?

You may access and edit billing information by logging into https://app.gitkraken.com and navigating to Manage > Edit. If you have any questions about viewing or updating information we have on file about you, please contact us at our company support email. We may not accommodate a request to change information if we believe the change would violate any law or legal requirement or cause the information to be incorrect.

6. What Choices do I have with Regard to my Personal Information?

You can always opt not to disclose information to us, but keep in mind some information may be needed to register with us or to take advantage of some of our special features.

You may request deletion of your information by emailing us at legal@gitkraken.com Please note that some information may remain in our records, for example in our archives, after your request for deletion of such information. We may not accommodate a deletion of information if we believe the change would violate any law or legal requirement. We will retain and use your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. We use this procedure to better safeguard your information.

Do-Not-Track Policy: Some web browsers may transmit “do-not-track” (“DNT”) signals with which you may communicate. We currently do not change our tracking practices in response to DNT Settings in your web browsers. To determine whether any of the third-party services the Company uses honor the “Do Not Track” requests, please read their privacy policies.

7. Changes to This Privacy Policy

We may revise this Privacy Policy at any time and will post the most current version on our website. If we feel any change is significant, we will notify users of our services.

8. Data Privacy Framework (DPF) Notice

GitKraken (Axosoft LLC dba GitKraken) complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce. GitKraken has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union in reliance on the EU-U.S. DPF and from the United Kingdom (and Gibraltar) in reliance on the UK Extension to the EU-U.S. DPF. GitKraken has certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF Principles) with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF. If there is any conflict between the terms in this privacy policy and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern. To learn more about the Data Privacy Framework (DPF) program, and to view our certification, please visit https://www.dataprivacyframework.gov/.

Investigatory and Enforcement Powers: GitKraken is subject to the investigatory and enforcement powers of the Federal Trade Commission (FTC).

Dispute Resolution: In compliance with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF, GitKraken commits to resolve DPF Principles-related complaints about our collection and use of your personal information. EU, UK, and Swiss individuals with inquiries or complaints regarding our handling of personal data received in reliance on the DPF should first contact GitKraken at: legal@gitkraken.com.

If you do not receive timely acknowledgment of your DPF Principles-related complaint from us, or if we have not addressed your DPF Principles-related complaint to your satisfaction, GitKraken has further committed to refer unresolved complaints concerning our handling of personal data received in reliance on the DPF to JAMS, an alternative dispute resolution provider based in the United States. If you do not receive timely acknowledgment of your DPF Principles-related complaint from us, or if we have not addressed your DPF Principles-related complaint to your satisfaction, please visit https://www.jamsadr.com/dpf-dispute-resolution for more information or to file a complaint. The services of JAMS are provided at no cost to you.

Binding Arbitration: Under certain conditions, more fully described on the DPF website, you may be entitled to invoke binding arbitration when other dispute resolution procedures have been exhausted.

Onward Transfers: GitKraken remains responsible and liable under the DPF Principles if third-party agents that it engages to process personal data on its behalf do so in a manner inconsistent with the Principles, unless GitKraken proves that it is not responsible for the event giving rise to the damage.

Lawful Requests: GitKraken may be required to disclose personal information in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.

Choice and Access: You have the right to access your personal data and to limit its use and disclosure. If you wish to request access, limit how we use your data, or opt-out of having your data shared with non-agent third parties or used for a purpose materially different from the purpose(s) for which it was originally collected, please contact us at legal@gitkraken.com.

9. General Data Protection Regulation (GDPR)

EU Residents

If you are a resident of the European Union (“EU”), United Kingdom, Lichtenstein, Norway, Switzerland or Iceland, you may have additional rights under the EU General Data Protection Regulation (the “GDPR”) with respect to your Personal Data, as outlined below.

For this section, we use the terms “Personal Data” and “processing” as they are defined in the GDPR, but “Personal Data” generally means information that can be used to individually identify a person, and “processing” generally covers actions that can be performed in connection with data such as collection, use, storage and disclosure. Company will be the “controller” of your Personal Data processed in connection with the Services. Note that we may also process Personal Data of our customers’ end users or employees in connection with our provision of services to customers, in which case we are the “processor” of Personal Data. If we are the processor of your Personal Data (i.e., not the controller), please contact the controller party in the first instance to address your rights with respect to such data.

If there are any conflicts between this section and any other provision of this Privacy Policy, the policy or portion that is more protective of Personal Data shall control to the extent of such conflict. If you have any questions about this section or whether any of the following applies to you, please contact us at legal@gitkraken.com.

What Personal Data Do We Collect from You?
We collect Personal Data about you when you provide such information directly to us, when third parties such as our business partners or service providers provide us with Personal Data about you, or when Personal Data about you is automatically collected in connection with your use of our Services.

Information we collect directly from you: We receive Personal Data directly from you when you provide us with such Personal Data, including without limitation the following:

If you choose to integrate the Services with 3rd party applications, remember that their use of your information will be governed by their privacy policies and terms.

How Do We Use Your Personal Data?
We process Personal Data to operate, improve, understand and personalize our Services. For example, we use Personal Data to:

We may disclose aggregated information about our users, and information that does not identify any individual, without restriction. We will only process your Personal Data if we have a lawful basis for doing so. Lawful basis for processing includes consent, contractual necessity and our “legitimate interests” or the legitimate interest of others, as further described below.

How and With Whom Do We Share Your Data?
We share Personal Data with our affiliates, vendors, third-party service providers, and agents who work on our behalf and provide us with services related to the purposes described in this Privacy Policy, our Terms of Service, or our End User License Agreement. These parties include:

We also share information with third parties when you have given us consent to do so (as indicated at the point such information is collected). You may choose to make use of third-party add-ons in conjunction with certain Services. Third-party add-ons are software written by third-parties to which you grant access privileges to your content (which may include your Personal Data). When access is granted, your content is shared with the third-party. Third-party add-on policies and procedures are not controlled by the Company even though the third-party add-on may be available through the Services. This Privacy Policy does not cover the collection or use of your data by third-party add-ons, and we urge you to examine the privacy policies governing third-party add-ons.

We also share Personal Data when we believe it is necessary to:

Furthermore, if we choose to buy or sell assets, user information is typically one of the transferred business assets. Moreover, if we, or substantially all of our assets, were acquired, or if we go out of business or enter bankruptcy, user information would be one of the assets that is transferred or acquired by a third party, and we would share Personal Data with the party that is acquiring our assets. You acknowledge that such transfers may occur, and that any acquirer of us or our assets may continue to use your Personal Data as set forth in this policy.

We do not sell your Personal Data, nor do we share your Personal Data with third parties for their marketing purposes (including direct marketing purposes) without your permission.

How Long Do We Retain Your Personal Data?
We retain Personal Data about you for as long as you are a customer. In some cases, we retain Personal Data for longer, if doing so is necessary to comply with our legal obligations, resolve disputes or collect fees owed, or is otherwise permitted or required by applicable law, rule, or regulation.

Afterwards, we retain some information for marketing and promotional activities, unless you have opted out of such promotions.

What Security Measures Do We Use?
We seek to protect Personal Data using appropriate technical and organizational measures based on the type of Personal Data and applicable processing activity.

What Rights Do You Have Regarding Your Personal Data?
You have certain rights with respect to your Personal Data, including those set forth below. Additionally, where your personal data is processed by AI systems falling under the EU AI Act, you have the right to receive information about such processing, including meaningful information about the logic involved and the significance and envisaged consequences of such processing for you. For more information about these rights, or to submit a request, please email legal@gitkraken.com.

Please note that in some circumstances, we may not be able to fully comply with your request, such as if it is frivolous or extremely impractical, if it jeopardizes the rights of others, or if it is not required by law, but in those circumstances, we will still respond to notify you of such a decision. In some cases, we may also need you to provide us with additional information, which may include Personal Data, if necessary to verify your identity and the nature of your request.

Transfers of Personal Data:
The Services are hosted and operated in the United States (“U.S.”) through the Company and its service providers, and laws in the U.S. may differ from the laws where you reside.

By using the Services, you acknowledge that any Personal Data about you, regardless of whether provided by you or obtained from a third party, may be provided to the Company in the U.S. and may be hosted on U.S. servers, and you authorize Company to transfer, store, and process your information to and in the U.S. and possibly other countries. The Company minimizes any potential risk to your rights and freedoms under GDPR by not collecting or storing sensitive information about you.

What If You Have Questions Regarding Your Personal Data?
If you have any questions about this section or our data practices generally, please contact us using the following information:

Name: Axosoft LLC, DBA GitKraken

Physical address: 16435 N Scottsdale Road, Suite 130, Scottsdale, AZ 85254

Email: legal@gitkraken.com

10. Special Notice for California Residents.

The California Consumer Privacy Act (“CCPA”) and the California Privacy Rights Act (“CPRA”) require specific disclosures to California residents. These required disclosures are organized separately for convenience and to reflect terminology used in the CCPA but the Company’s privacy notice will provide additional detail on its privacy practices.

If you wish to request more information from the Company or inquire on exercising your rights under CCPA, you can find the full details on our California Privacy Rights Act Notice.

11. Special Notice for Nevada Residents.

The Privacy and Security of Personal Information Chapter of Nevada law provides that where certain types of Personal Information (“Covered Information”) are collected via a website or online service maintained by the operator of such site that the operator notify the consumer of the categories of information collected; how it is collected, shared, used and, where applicable, access by third parties. You will find this information above in Sections 1, 2, and 3. If you wish, you may submit a request with respect to your data, to Company support.

12. Contact Us

To ask questions or comment about this privacy policy and our privacy practices, contact us at: Email: legal@gitkraken.com