Privacy Policy

Last updated on 15 Jun 2026.

About us

Git Lisa is a hosted service that provides cloud-based Git hosting and related capabilities to individuals and entities who work on closed-source software. It has a strong focus on customer privacy, in particular the customer’s right of determination as to who has access to their source code; and to have their personal information be used in as limited and protected manner as possible whilst still receiving a satisfactory service.

Git Lisa is operated by Wimpie Nortje. All the service infrastructure are located in Western Europe. Development happens anywhere there is an Internet connection, mostly somewhere in South Africa.

Regardless of where staff are working from, Git Lisa is operated in accordance with the specifications of the GDPR and other regulations of the same spirit.

We need some personal information in order to provide you with the service.

We need some or all of the following information for us to effectively provide the service, depending on the selected subscription level:

Account login name.
Full name.
Contact details.
Billing address of the paying party.
Billing details of the paying party.
Organisation relationship(s) (Organisation as defined by Forgejo).
Credit card details of the paying party.

Above information is needed for setting up your customer account and entering into, and maintaining, a business relationship.

You may optionally provide additional information to improve your user experience of the service.

Your user account profile allows for entering more personal information. This is intended to make your experience of the system more personal and pleasant, it may reduce friction in team work situations and it may improve the discoverability of your public repositories. This information is optional; you may add, modify or remove it at any time without affecting your ability to use the service. A profile picture and a URL to a personal website are examples of such information though the specific fields vary between software release versions.

The Git Lisa service’s purpose is provide a managed platform where program source code that are versioned using Git can be stored. It also provides other services related to versioned source code such issue tracking and wikis. Using the service implies that you will upload your source code and related data to the degree that you make use of the various services. The data that you choose to upload is under your discretion.

Many of the features provided revolves around working together with other people, who you may or may not know. Which repositories you share with others and at which permission level is completely up to you.

You own your data.

All the data you provide or upload to the service belongs to you. You may export copies of source code related information via the mechanisms provided by the Forgejo software. You may also request a copy of all the non-source code related data we have of you by contacting us via the Contact Form, or other mechanisms which may be available in the user interface. We may request identifying information and go through a process to convince ourselves of the authenticity of the request. We do this to avoid providing personal information to unauthorised requesters.

We retain your data as long as you keep your account active with us.

We retain the personal information required for a business relationship until you delete your account. You may delete your account at any time if it is in good standing. We may need to keep some data for longer due to financial regulations. We will delete all data we don’t need as soon as it becomes legal to do so.

You may delete your optional personal information and source code related data at any time.

We make money by providing a service. We don’t sell your data.

The business makes money by providing a service and charging for access to it. We don’t sell any of the data you provide to us.

We don’t give anyone access to your private repositories, including AI companies.

You are the only one who decides who gets access to your private repositories. We will not give anyone access to your private repositories for any reason.

Publicly visible repositories are open to the Internet, including to AI scrapers and other bots.

If you choose to make your repositories publicly visible, they will be accessible from the open Internet. This includes bots of all kinds.

We may provide some of your information to third party services in order to conduct business or to enable integrations you initiated.

We may use external providers to provide our service and to conduct business, for example credit card processors. You may also initiate integrations to outside services which assist your development effort, for example continuous integration services.

In both cases we will provide the least amount of information necessary to make the process work.

We try our best to select only external service providers who operate under GDPR regulations. When no suitable one is available we select one which does not operate under legislation where they can legally be forced to disclose all the data they have access to even if it is not their customers.

In practice this means we heavily favour European owned businesses, operating on European owned infrastructure. Failing this we select providers who are not US based, don’t have any US lineage in their ownership, or operate on infrastructure with US ownership.

The external services we employ are listed on the Hosted-in-Europe page.

We use privacy respecting, anonymous analytics on our website.

We use website analytics from European-based, privacy respecting providers on our public facing website only. There are no such analytics on the pages behind the login screen.

The analytics is gathered in a way that guarantees your anonymity. It does not track any identifying information or store any identifying data in cookies or any other way.

We will post a notice on this page when our privacy policy is updated.

Any updates to our privacy policy will be made on this page.