Data retention of Repository details

[vsenthilcoremap]

Discussion Type

General

Discussion Content

We are looking for the GitHub Policy page that explains how long repository details (like source code, pull requests, comments) are retained. Is there a general GitHub policy page that explains this or is there a Policy page stating like Code, pull requests and comments are retained for the lifetime of account subscription?

[TongyiDai]

GitHub does not publish one universal rule saying that source code, pull requests, and comments are retained for the lifetime of a subscription. Different data has different lifecycle and legal requirements.

The public Privacy Statement gives the governing general rule: GitHub retains personal data while an account is active and as needed for contractual obligations, legal requirements, dispute resolution, and enforcement; the duration depends on the purpose and legal obligations.

After account deletion, some collaborative records may remain because they belong to another user's or organization's repository—for example contributions to other repositories and comments in other users' issues. GitHub may delete or de-identify personal fields rather than deleting the shared project history. Repository deletion/recovery windows and backup retention are operational features, not a contractual promise that every deleted repository remains recoverable for a fixed period.

For a compliance or procurement requirement, use these sources rather than relying on an informal “subscription lifetime” statement:

• GitHub Privacy Statement and General Privacy Statement;
• the applicable GitHub Customer Agreement/Data Protection Agreement;
• your Enterprise Cloud retention/export settings and audit-log policies;
• a written answer from GitHub Support or your account team for the specific data class and deletion scenario.

Public policy: https://docs.github.com/en/site-policy/privacy-policies/github-privacy-statement#security-and-retention