Last updated: 11/17/2022
Information We Collect
We may collect a variety of information from or about you or your devices from various sources, as described below.
If you do not provide your information when requested, you may not be able to use some or all of our Services if that information is necessary to provide you with our Services or if we are legally required to collect it.
A. Information You Provide to Us.
Registration and Profile Information. When you register for an account, we ask you for your email address and may also request your phone number. If you sign up using a social media account, we will also receive information from those social media services such as your name, email address, and profile photo, in accordance with your privacy settings on those social media services.
Payment Information. When you add a credit card or payment method to your account a third-party service provider that handles payments on our behalf will receive and process your payment card information.
Communications. When you communicate with us, we may receive additional information about you. For example, when you communicate with our Customer Support Team, we will receive your name, email address, phone number, the contents of a message or attachments that you may send to us, and other information you choose to provide. If you subscribe to our newsletter, then we will collect certain information from you, such as your email address. When we send you emails, we may use technologies such as web beacons to track whether you open them to learn how to deliver a better customer experience and improve our Services.
Careers. If you apply for a job with us, you may submit your contact information and your resume online. We will collect the information you choose to provide on your resume, such as your education and employment experience.
B. Information We Collect Automatically When You Use Our Services.
- Strictly necessary cookies. Some cookies are strictly necessary to make the Services available to you. We cannot provide you with the Services without this type of cookies.
- Functional cookies. These are used to recognize you when you return to the Services. This enables us to adapt our content for you, and remember your preferences (for example, your choice of language or region).
You can find more information about your rights and choices, and how to block the use of certain cookies in the section Your Rights and Choices below.
What information do we automatically collect as you use the Services?
Device Information. We receive information about the device and software you use to access our Services, including internet protocol (IP) address, Internet Service Provider, web browser type, operating system version, phone carrier and manufacturer, application installations, device type and identifiers, and mobile advertising identifiers.
Location Information. We may infer your general location information from other information we collect from and about you (for example, your IP address may indicate your general geographic region).
Usage Information. To help us understand and analyze how you use our Services and to help us improve them, we automatically receive information about your interactions with our Services, like the pages or other content you view or interact with, the searches you conduct, your comments, any content you enter or post, commands you type, and the dates and times of your visits.
C. Information We Receive from Third Parties.
Information from third party services. If you choose to link our Services to a third-party account, we may receive information about you, including your profile information and your photo, and your use of the third-party account, in accordance with your settings on such third-party account. If you wish to limit the information available to us, you should visit the privacy settings of your third-party accounts to learn about your options.
Other third parties. We may receive additional information about you, such as demographic data, from third parties such as data or marketing partners and combine it with other information we have about you.
How We Use the Information We Collect
We use the information we collect:
- To provide, maintain, improve, and enhance our Services;
- To communicate with you, provide you with updates and other information relating to our Services, provide information that you request, respond to comments and questions, and otherwise provide customer support;
- To facilitate the connection of third-party services or applications, such as social networks;
- For marketing purposes, such as developing and providing promotional and advertising materials that may be useful, relevant, valuable or otherwise of interest to you;
- To personalize your experience on our Services such as presenting tailored content;
- To facilitate transactions and payments;
- To detect and prevent fraud, and respond to trust and safety issues that may arise;
- For compliance purposes, including enforcing our Terms of Service or other legal rights, or as may be required by applicable laws and regulations or requested by any judicial process or governmental agency; and
- For other purposes for which we provide specific notice at the time the information is collected.
Your Privacy Obligations
Replit provides you with the ability to publish content that could be used to collect personally identifiable information from its users. If you publish such content, it is your responsibility to understand your legal obligations and to comply with all applicable laws, including:
- Obtaining any necessary consent from your users for the processing, storage, use, and transfer of any of their personally identifiable information that you collect.
- If applicable, providing any required notices and obtaining any required verifiable parental consent under the Children’s Online Privacy Protection Act (COPPA) or similar laws.
- Complying with your legal obligations to allow your users to correct their personally identifiable information or to have it erased.
Legal Bases for Processing Information
Various global privacy laws (such as those in the European Economic Area, United Kingdom, and Brazil) require that we have a “legal basis” to process your information. The legal bases on which we rely to process your information include:
- Consent. You have consented to the use of your information, for example, where legally required, to send you marketing communications.
- Contractual necessity. We need your information to provide you with the Services, for example to facilitate your registration and respond to your inquiries.
- Compliance with a legal obligation. We have a legal obligation to use your information, for example to comply with tax and accounting obligations.
- Legitimate interests. We have a legitimate interest in using your information for a business purpose that does not override your individual rights and interests. For example, we have a legitimate interest in using your information for product development and internal analytics purposes, to improve the accuracy of our machine learning technologies such as code generation, and otherwise to improve the safety, security, and performance of our Services.
How We Share the Information We Collect
We share information with the following categories of third parties.
Service Providers. We may share any information we receive with vendors retained in connection with the provision of our Services and that process your information on our behalf. These entities may include analytics, billing, legal support, marketing, security, machine learning, and fraud prevention companies.
Third Party App Integrations. If you connect a third-party application to our Services, we may share information such as code with that third party.
**As Required by Law and Similar Disclosures. **We may access, preserve, and disclose your information if we believe in good faith that doing so is required or appropriate to: (a) comply with law enforcement requests and legal process, such as a court order or subpoenas; (b) respond to your requests; or (c) protect your, our, or others’ rights, property, or safety. For the avoidance of doubt, the disclosure of your information may occur if you post any objectionable content on or through the Services.
**Merger, Sale, or Other Asset Transfers. **We may disclose and transfer your information to service providers, advisors, potential transactional partners, or other third parties in connection with the consideration, negotiation, or completion of a corporate transaction in which we are acquired by or merged with another company or we sell, liquidate, or transfer all or a portion of our business or assets.
Consent. We may also disclose information from or about you with your permission.
Your Rights and Choices
Sharing Preferences. If you prefer to not have others see your code, you can upgrade to make that code private. If you import code from GitHub and your repository is public, it will remain public by default on Replit. If you wish to import code from GitHub and your repository is private, your code will remain private on Replit.
Marketing Communications. You can unsubscribe from our promotional emails via the link provided in the emails. Even if you opt-out of receiving promotional messages from us, you will continue to receive administrative messages from us.
How to Block Cookies. You can change your browser settings to block, disable, or notify you when you receive a Cookie, delete Cookies, or browse our Services using your browser’s anonymous usage setting. However, if you use your browser settings to block all Cookies (including essential Cookies) you may not be able to access all or parts of our Services, or some portions of the Services may not function properly.
Your European Privacy Rights. If you are located in the European Economic Area or the United Kingdom, you have the additional rights described below.
- You may request access to the information we maintain about you, update and correct inaccuracies in your information, restrict or object to the processing of your information, have the information anonymized or deleted, as appropriate, or exercise your right to data portability to easily transfer your information to another company (where technically feasible). In addition, you also have the right to lodge a complaint with a supervisory authority, including in your country of residence, place of work or where an incident took place.
- You may withdraw any consent you previously provided to us regarding the processing of your information, at any time and free of charge. We will apply your preferences going forward and this will not affect the lawfulness of the processing before you withdrew your consent.
We take measures to delete your information or maintain it in a de-identified form when it is no longer necessary to be kept in identifiable form for the purposes for which we process it, unless we are required by law to keep this information for a longer period. When determining the specific retention period, we take into account various criteria, such as the type of service provided to you, the nature and length of our relationship with you, and mandatory retention periods provided by applicable law and any statute of limitations. When you request to delete your account, we delete your data within 30 days.
We use a variety of technical, organizational, and physical safeguards designed to safeguard the information we maintain. However, as our Services are hosted electronically, we can make no guarantees as to the security or privacy of your information.
Children’s and Students’ Privacy
Under our free Teams for Education product, we offer verified educators the opportunity to create limited Replit accounts for students who are under the age of 13, by creating a private invite link for these students. When an account is created using this private invite link, we do not collect any personal information from the account holder such as their name or email address, but only a username that does not include their real name, and persistent identifiers such as IP address and cookie data to support the internal operations of our Services. For more information, see this blog post.
FERPA protects “personally identifiable information” contained in students’ education records from unauthorized disclosure. Consistent with FERPA, we will use education records, as defined under FERPA, for the purpose of providing agreed services to a school, school district or teacher. We use or share FERPA-protected information only as directed or permitted by the school, school district, teacher, or under FERPA. If a parent or eligible student requests access to education records that are hosted on our servers, we will help facilitate such access. For more information, see our U.S. Student Data Protection Addendum and our Student Privacy Notice.
Additional Information for California Residents
|Category of Personal Information||Purposes of Use||Categories of Third Parties|
|Registration and profile information|
|User-generated content (e.g., code)|
If you are a California resident, you may exercise the following rights with regard to data where we determine the purposes and means of processing:
- The right to request a copy of the personal information that we have collected about you in the prior 12 months.
- The right to request details about the categories of personal information we collect, the categories of sources, the business or commercial purposes for collecting information, and the categories of third parties with which we share information.
- The right to request deletion of the personal information that we have collected about you, subject to certain exemptions.
- The right to opt out of the sale of your personal information. We do not “sell” personal information as such term is defined in the CCPA.
California residents can submit access and deletion requests by emailing us at [email protected]. California residents can also request that we delete your information through your account settings. You have the right not to receive discriminatory treatment for the exercise of your CCPA privacy rights, subject to certain limitations.
An authorized agent may submit an access or deletion request on your behalf by sending a written authorization signed by you to [email protected]. We may still require you to directly verify your identity and confirm that you provided the authorized agent permission to submit the request.
Our Services are primarily hosted in the United States and may also be hosted in locations abroad (for example, India). If you use the Services from regions of the world with laws governing data processing, you accept that you are transferring your information to the United States and other hosting locations for storage and processing. By providing information to Replit, you agree to such transfer and processing.
Update Your Information or Pose a Question
If you have any questions, comments, or concerns about our processing activities, please email us at [email protected] or write to us at 767 Bryant St. #210, San Francisco, CA, 94107.