{"name":"gjalla AI data policies","url":"https://gjalla.io/data-policies/","methodology":"https://gjalla.io/data-policies/methodology/","capturedOn":"2026-11-08","providers":[{"id":"anthropic","provider":"anthropic","name":"Anthropic (Claude)","category":"frontier-lab","checkedOn":"2026-11-08","products":[{"id":"claude-consumer","name":"Claude Free, Pro and Max (including Claude Code used with those accounts)","surface":"consumer","facts":{"default_retention":{"summary":"Kept chats: no fixed period, only 'as long as reasonably necessary'. The 'Standard Retention Timeframe' heading is empty. With training on: may be kept up to 5 years, de-identified.","status":"stated","cites":[{"quote":"Anthropic retains your personal data for as long as reasonably necessary for the purposes and criteria outlined in our [Privacy Policy](https://www.anthropic.com/legal/privacy).","source":{"doc":"help-how-long-store-data","title":"How long do you store my data?","url":"https://privacy.claude.com/en/articles/10023548-how-long-do-you-store-my-data","capturedAt":"2026-11-08T22:40:44Z","sha256":"903479788adb74ca8058679e077f4b368451df2545b3865868273f33fe227551"}},{"quote":"## Standard Retention Timeframe\n\n## Controlling Your Chats","source":{"doc":"help-how-long-store-data","title":"How long do you store my data?","url":"https://privacy.claude.com/en/articles/10023548-how-long-do-you-store-my-data","capturedAt":"2026-11-08T22:40:44Z","sha256":"903479788adb74ca8058679e077f4b368451df2545b3865868273f33fe227551"}},{"quote":"If you allow us to use your chats or coding sessions to improve Claude, we may retain your data in a de-identified format for up to 5 years in our model training pipelines.","source":{"doc":"help-how-long-store-data","title":"How long do you store my data?","url":"https://privacy.claude.com/en/articles/10023548-how-long-do-you-store-my-data","capturedAt":"2026-11-08T22:40:44Z","sha256":"903479788adb74ca8058679e077f4b368451df2545b3865868273f33fe227551"}}]},"deletion_window":{"summary":"Deleted chats leave history immediately and back-end storage within 30 days. Accounts close by emailing support. No timeline for closed accounts; on termination Anthropic 'may at our option' delete data.","status":"stated","cites":[{"quote":"Deleted from our back-end storage systems within 30 days","source":{"doc":"help-how-long-store-data","title":"How long do you store my data?","url":"https://privacy.claude.com/en/articles/10023548-how-long-do-you-store-my-data","capturedAt":"2026-11-08T22:40:44Z","sha256":"903479788adb74ca8058679e077f4b368451df2545b3865868273f33fe227551"}},{"quote":"You also are able to [delete individual conversations](https://support.anthropic.com/en/articles/8230524-how-can-i-delete-or-rename-a-conversation), which will be removed immediately from your conversation history and automatically deleted from our back-end within 30 days.","source":{"doc":"privacy-policy","title":"Privacy Policy \\\\ Anthropic","url":"https://www.anthropic.com/legal/privacy","capturedAt":"2026-11-08T22:03:47Z","sha256":"44345247ed63cd20305fb8bdf6f9c53669e8fc38dfb1a758a1f6a85f86d7519f"}},{"quote":"You may close your Account at any time by contacting us at <support@anthropic.com>.","source":{"doc":"consumer-terms","title":"Consumer Terms of Service \\\\ Anthropic","url":"https://www.anthropic.com/legal/consumer-terms","capturedAt":"2026-11-08T22:03:46Z","sha256":"371cb7e13e14d0584f0d176941c159aca72a354223364ed11197897e032ca008"}},{"quote":"Upon termination of these Terms, a Subscription, or your access to the Services, we may at our option delete any Materials or other data associated with your Account.","source":{"doc":"consumer-terms","title":"Consumer Terms of Service \\\\ Anthropic","url":"https://www.anthropic.com/legal/consumer-terms","capturedAt":"2026-11-08T22:03:46Z","sha256":"371cb7e13e14d0584f0d176941c159aca72a354223364ed11197897e032ca008"}}]},"retention_exceptions":{"summary":"Flagged chats: inputs/outputs up to 2 years, classifier scores up to 7. Feedback: 5 years. Legal, dispute, abuse and anonymized retention: no stated limit. Backups not mentioned.","status":"stated","cites":[{"quote":"We retain inputs and outputs for up to 2 years and trust and safety classification scores for up to 7 years if your chat or session is flagged by our automated trust and safety systems as violating our [Usage Policy](https://www.anthropic.com/legal/aup).","source":{"doc":"help-how-long-store-data","title":"How long do you store my data?","url":"https://privacy.claude.com/en/articles/10023548-how-long-do-you-store-my-data","capturedAt":"2026-11-08T22:40:44Z","sha256":"903479788adb74ca8058679e077f4b368451df2545b3865868273f33fe227551"}},{"quote":"Where you have provided feedback to us (e.g. by submitting feedback through our thumbs up/down button or sent bug reports), we retain data associated with that submission for 5 years.","source":{"doc":"help-how-long-store-data","title":"How long do you store my data?","url":"https://privacy.claude.com/en/articles/10023548-how-long-do-you-store-my-data","capturedAt":"2026-11-08T22:40:44Z","sha256":"903479788adb74ca8058679e077f4b368451df2545b3865868273f33fe227551"}},{"quote":"In all cases, we may retain chats and coding sessions as required by law, to resolve disputes, or as necessary to combat violations of our Usage Policy.","source":{"doc":"help-how-long-store-data","title":"How long do you store my data?","url":"https://privacy.claude.com/en/articles/10023548-how-long-do-you-store-my-data","capturedAt":"2026-11-08T22:40:44Z","sha256":"903479788adb74ca8058679e077f4b368451df2545b3865868273f33fe227551"}},{"quote":"We may anonymize or de-identify your personal data for research or statistical purposes, in which case we may retain this information for longer.","source":{"doc":"help-how-long-store-data","title":"How long do you store my data?","url":"https://privacy.claude.com/en/articles/10023548-how-long-do-you-store-my-data","capturedAt":"2026-11-08T22:40:44Z","sha256":"903479788adb74ca8058679e077f4b368451df2545b3865868273f33fe227551"}}]},"zdr":{"summary":"The consumer captured policies do not mention zero data retention. Incognito chats are excluded from training, but their retention period is not stated for consumer accounts.","status":"not_stated","cites":[]},"training_default":{"summary":"Inferred on by default: the Privacy Policy and Terms train 'unless you opt out'. The help page says 'if you allow us'. No captured policy gives the setting's starting value.","status":"inferred","cites":[{"quote":"We may use your Inputs and Outputs to train and improve Anthropic AI models, unless you opt out through your account settings.","source":{"doc":"privacy-policy","title":"Privacy Policy \\\\ Anthropic","url":"https://www.anthropic.com/legal/privacy","capturedAt":"2026-11-08T22:03:47Z","sha256":"44345247ed63cd20305fb8bdf6f9c53669e8fc38dfb1a758a1f6a85f86d7519f"}},{"quote":"We may use Materials to provide, maintain, and improve the Services and to develop other products and services, including training our models, unless you opt out of training through your account settings.","source":{"doc":"consumer-terms","title":"Consumer Terms of Service \\\\ Anthropic","url":"https://www.anthropic.com/legal/consumer-terms","capturedAt":"2026-11-08T22:03:46Z","sha256":"371cb7e13e14d0584f0d176941c159aca72a354223364ed11197897e032ca008"}}]},"training_opt_out":{"summary":"Turn off model improvement in settings to stop old and new chats feeding future training. Not covered: safety-flagged chats, submitted feedback, runs in progress, models already trained.","status":"stated","cites":[{"quote":"If you decide to turn off the model improvement setting, we will not use your previous or new chats or coding sessions for future model training. Additionally, if you delete a chat from your chat history, it will not be used to train future models. Your data will still be included in model training runs that are already in progress, or in models that have been trained.","source":{"doc":"help-how-long-store-data","title":"How long do you store my data?","url":"https://privacy.claude.com/en/articles/10023548-how-long-do-you-store-my-data","capturedAt":"2026-11-08T22:40:44Z","sha256":"903479788adb74ca8058679e077f4b368451df2545b3865868273f33fe227551"}},{"quote":"Even if you opt-out, we will use Inputs and Outputs for model improvement when: (i) your conversations are flagged for safety review to improve our ability to detect harmful content, enforce our policies, or advance AI safety research, or (ii) you've explicitly reported the materials to us (for example via our feedback mechanisms).","source":{"doc":"privacy-policy","title":"Privacy Policy \\\\ Anthropic","url":"https://www.anthropic.com/legal/privacy","capturedAt":"2026-11-08T22:03:47Z","sha256":"44345247ed63cd20305fb8bdf6f9c53669e8fc38dfb1a758a1f6a85f86d7519f"}},{"quote":"This retention period only applies to new or resumed chats after the model training setting has been enabled.","source":{"doc":"help-how-long-store-data","title":"How long do you store my data?","url":"https://privacy.claude.com/en/articles/10023548-how-long-do-you-store-my-data","capturedAt":"2026-11-08T22:40:44Z","sha256":"903479788adb74ca8058679e077f4b368451df2545b3865868273f33fe227551"}},{"quote":"Your Incognito chats are not used to improve Claude, even if you have enabled Model Improvement in your [Privacy Settings](https://claude.ai/settings/data-privacy-controls).","source":{"doc":"help-how-long-store-data","title":"How long do you store my data?","url":"https://privacy.claude.com/en/articles/10023548-how-long-do-you-store-my-data","capturedAt":"2026-11-08T22:40:44Z","sha256":"903479788adb74ca8058679e077f4b368451df2545b3865868273f33fe227551"}}]},"human_review":{"summary":"Inferred: chats can be 'flagged for safety review', and human review is named only for removing third-party content. The captured policies never say plainly when staff read your conversations.","status":"inferred","cites":[{"quote":"your Materials are flagged for safety review to improve our ability to detect harmful content, enforce our policies, or advance our safety research.","source":{"doc":"consumer-terms","title":"Consumer Terms of Service \\\\ Anthropic","url":"https://www.anthropic.com/legal/consumer-terms","capturedAt":"2026-11-08T22:03:46Z","sha256":"371cb7e13e14d0584f0d176941c159aca72a354223364ed11197897e032ca008"}},{"quote":"we reserve the right to remove or take down some or all of such Third-Party Content using, where appropriate, algorithmic and human review.","source":{"doc":"consumer-terms","title":"Consumer Terms of Service \\\\ Anthropic","url":"https://www.anthropic.com/legal/consumer-terms","capturedAt":"2026-11-08T22:03:46Z","sha256":"371cb7e13e14d0584f0d176941c159aca72a354223364ed11197897e032ca008"}}]},"memory":{"summary":"The consumer captured policies do not describe a persistent memory or profile feature, what it stores, or how to view or delete it.","status":"not_stated","cites":[]},"connector_data":{"summary":"Content Claude pulls from connected services becomes part of your Inputs. Some integrations keep access until disconnected. What happens to stored connector data after disconnect is not stated.","status":"stated","cites":[{"quote":"Claude may retrieve content and data from Third-Party Services you interact with. This data becomes part of your Inputs.","source":{"doc":"privacy-policy","title":"Privacy Policy \\\\ Anthropic","url":"https://www.anthropic.com/legal/privacy","capturedAt":"2026-11-08T22:03:47Z","sha256":"44345247ed63cd20305fb8bdf6f9c53669e8fc38dfb1a758a1f6a85f86d7519f"}},{"quote":"Some integrations or features may allow Claude to access Third-Party Services on an ongoing basis until you disable the feature or disconnect the integration in your settings.","source":{"doc":"privacy-policy","title":"Privacy Policy \\\\ Anthropic","url":"https://www.anthropic.com/legal/privacy","capturedAt":"2026-11-08T22:03:47Z","sha256":"44345247ed63cd20305fb8bdf6f9c53669e8fc38dfb1a758a1f6a85f86d7519f"}},{"quote":"Claude may send your Inputs, Outputs, and instructions to Third-Party Services to perform actions on your behalf (such as reading files, sending messages, or retrieving information). The Third-Party Service receives this data directly and processes it according to its own privacy policy.","source":{"doc":"privacy-policy","title":"Privacy Policy \\\\ Anthropic","url":"https://www.anthropic.com/legal/privacy","capturedAt":"2026-11-08T22:03:47Z","sha256":"44345247ed63cd20305fb8bdf6f9c53669e8fc38dfb1a758a1f6a85f86d7519f"}}]},"agent_actions":{"summary":"Inferred: the Privacy Policy counts actions as Outputs, so they likely follow Output retention. You are responsible for Actions. Browsing logs and stored credentials or tokens are not covered.","status":"inferred","cites":[{"quote":"Inputs generate responses and actions (“Outputs”).","source":{"doc":"privacy-policy","title":"Privacy Policy \\\\ Anthropic","url":"https://www.anthropic.com/legal/privacy","capturedAt":"2026-11-08T22:03:47Z","sha256":"44345247ed63cd20305fb8bdf6f9c53669e8fc38dfb1a758a1f6a85f86d7519f"}},{"quote":"Depending on the permissions you grant Claude, some Outputs may result in actions with effects outside the Services, such as sending communications, modifying files, or interacting with third-party services on your behalf.","source":{"doc":"privacy-policy","title":"Privacy Policy \\\\ Anthropic","url":"https://www.anthropic.com/legal/privacy","capturedAt":"2026-11-08T22:03:47Z","sha256":"44345247ed63cd20305fb8bdf6f9c53669e8fc38dfb1a758a1f6a85f86d7519f"}},{"quote":"You are responsible for all Inputs you submit to our Services and all Actions.","source":{"doc":"consumer-terms","title":"Consumer Terms of Service \\\\ Anthropic","url":"https://www.anthropic.com/legal/consumer-terms","capturedAt":"2026-11-08T22:03:46Z","sha256":"371cb7e13e14d0584f0d176941c159aca72a354223364ed11197897e032ca008"}}]},"input_ownership":{"summary":"You keep whatever rights you have in your inputs, as between you and Anthropic.","status":"stated","cites":[{"quote":"As between you and Anthropic, and to the extent permitted by applicable law, you retain any right, title, and interest that you have in the Inputs you submit.","source":{"doc":"consumer-terms","title":"Consumer Terms of Service \\\\ Anthropic","url":"https://www.anthropic.com/legal/consumer-terms","capturedAt":"2026-11-08T22:03:46Z","sha256":"371cb7e13e14d0584f0d176941c159aca72a354223364ed11197897e032ca008"}}]},"output_ownership":{"summary":"Anthropic assigns you its rights in outputs, if it has any, as long as you comply with the Terms.","status":"stated","cites":[{"quote":"Subject to your compliance with our Terms, we assign to you all of our right, title, and interest—if any—in Outputs.","source":{"doc":"consumer-terms","title":"Consumer Terms of Service \\\\ Anthropic","url":"https://www.anthropic.com/legal/consumer-terms","capturedAt":"2026-11-08T22:03:46Z","sha256":"371cb7e13e14d0584f0d176941c159aca72a354223364ed11197897e032ca008"}}]},"license_to_provider":{"summary":"No formal license clause. Anthropic may use Materials to run, improve and train models unless you opt out, and use Feedback freely. Perpetuity not stated. Trained models keep your data.","status":"stated","cites":[{"quote":"We may use Materials to provide, maintain, and improve the Services and to develop other products and services, including training our models, unless you opt out of training through your account settings.","source":{"doc":"consumer-terms","title":"Consumer Terms of Service \\\\ Anthropic","url":"https://www.anthropic.com/legal/consumer-terms","capturedAt":"2026-11-08T22:03:46Z","sha256":"371cb7e13e14d0584f0d176941c159aca72a354223364ed11197897e032ca008"}},{"quote":"You have no obligation to give us Feedback, but if you do, you agree that we may use the Feedback however we choose without any obligation or other payment to you.","source":{"doc":"consumer-terms","title":"Consumer Terms of Service \\\\ Anthropic","url":"https://www.anthropic.com/legal/consumer-terms","capturedAt":"2026-11-08T22:03:46Z","sha256":"371cb7e13e14d0584f0d176941c159aca72a354223364ed11197897e032ca008"}},{"quote":"Your data will still be included in model training runs that are already in progress, or in models that have been trained.","source":{"doc":"help-how-long-store-data","title":"How long do you store my data?","url":"https://privacy.claude.com/en/articles/10023548-how-long-do-you-store-my-data","capturedAt":"2026-11-08T22:40:44Z","sha256":"903479788adb74ca8058679e077f4b368451df2545b3865868273f33fe227551"}}]},"third_party_sharing":{"summary":"Shared with affiliates, service providers, work-email admins, connected services, merger parties and authorities. No 'sale' of data. You can opt out of targeted ads for Anthropic products.","status":"stated","cites":[{"quote":"Service providers & business partners: Anthropic may receive and disclose the categories of personal data described above with service providers and business partners for a variety of business purposes, including website and data hosting, ensuring compliance with industry standards, research, auditing, data processing, investigating and resolving safety and security issues, preventing and investigating fraud, abuse, and violations of our Usage Policy, and providing you with the Services.","source":{"doc":"privacy-policy","title":"Privacy Policy \\\\ Anthropic","url":"https://www.anthropic.com/legal/privacy","capturedAt":"2026-11-08T22:03:47Z","sha256":"44345247ed63cd20305fb8bdf6f9c53669e8fc38dfb1a758a1f6a85f86d7519f"}},{"quote":"Anthropic does not “sell” your personal data as that term is defined by applicable laws and regulations. You can opt-out of sharing your personal data for targeted advertising to promote our products and services, and we will honor global privacy controls.","source":{"doc":"privacy-policy","title":"Privacy Policy \\\\ Anthropic","url":"https://www.anthropic.com/legal/privacy","capturedAt":"2026-11-08T22:03:47Z","sha256":"44345247ed63cd20305fb8bdf6f9c53669e8fc38dfb1a758a1f6a85f86d7519f"}},{"quote":"We reserve the right, at our sole discretion, to report information from or about you, including but not limited to Inputs, Outputs, or Actions to law enforcement.","source":{"doc":"consumer-terms","title":"Consumer Terms of Service \\\\ Anthropic","url":"https://www.anthropic.com/legal/consumer-terms","capturedAt":"2026-11-08T22:03:46Z","sha256":"371cb7e13e14d0584f0d176941c159aca72a354223364ed11197897e032ca008"}}]},"data_location":{"summary":"Data goes to US servers or other countries outside the EEA/UK, under SCCs or adequacy decisions. Anthropic Ireland is controller for European users. No residency option mentioned.","status":"stated","cites":[{"quote":"Anthropic is a global company, and when you access our Services, your personal data is transferred to our servers in the US, or to other countries outside the European Economic Area (“EEA”) and the UK for the purposes outlined in Section 2 of this Privacy Policy, for example to provide you with the Service, or to train our models, or to conduct research.","source":{"doc":"privacy-policy","title":"Privacy Policy \\\\ Anthropic","url":"https://www.anthropic.com/legal/privacy","capturedAt":"2026-11-08T22:03:47Z","sha256":"44345247ed63cd20305fb8bdf6f9c53669e8fc38dfb1a758a1f6a85f86d7519f"}},{"quote":"If you live in the European Economic Area (EEA), UK or Switzerland (the “European Region”), the data controller responsible for your personal data is Anthropic Ireland, Limited.","source":{"doc":"privacy-policy","title":"Privacy Policy \\\\ Anthropic","url":"https://www.anthropic.com/legal/privacy","capturedAt":"2026-11-08T22:03:47Z","sha256":"44345247ed63cd20305fb8bdf6f9c53669e8fc38dfb1a758a1f6a85f86d7519f"}}]},"enterprise_controls":{"summary":"None for consumer plans. But an account on a work email may be linked to the employer's enterprise account, whose admin may then monitor it and access your Materials.","status":"stated","cites":[{"quote":"If you use an email address owned by your employer or another organization, your Account may be linked to the organization's Anthropic enterprise account, and the organization’s administrator may be able to monitor and control the Account, including having access to Materials (defined below).","source":{"doc":"consumer-terms","title":"Consumer Terms of Service \\\\ Anthropic","url":"https://www.anthropic.com/legal/consumer-terms","capturedAt":"2026-11-08T22:03:46Z","sha256":"371cb7e13e14d0584f0d176941c159aca72a354223364ed11197897e032ca008"}}]}}},{"id":"claude-business","name":"Claude for Work (Team and Enterprise plans) and Anthropic Console","surface":"business","facts":{"default_retention":{"summary":"Chats and coding sessions are kept in the product so you can continue them. No retention period is given.","status":"stated","cites":[{"quote":"If you use our other commercial products (e.g. Claude for Work, Claude for Enterprise, Anthropic Console, etc.) that allow you to save and continue conversations with Claude, we retain your chats and coding sessions in the product to provide you with a consistent product experience.","source":{"doc":"help-commercial-retention","title":"How long do you store my organization\\u2019s data?","url":"https://privacy.claude.com/en/articles/7996866-how-long-do-you-store-my-organization-s-data","capturedAt":"2026-11-08T22:40:44Z","sha256":"d0f329d29dc1bc55f11b18f112d098636d809ceb66253f93f6d0225277e76d27"}}]},"deletion_window":{"summary":"Deleted chats leave history immediately and back-end storage within 30 days. Incognito chats are deleted within 30 days unless flagged. No post-contract deletion timeline is stated.","status":"stated","cites":[{"quote":"Removed from your chat history immediately","source":{"doc":"help-commercial-retention","title":"How long do you store my organization\\u2019s data?","url":"https://privacy.claude.com/en/articles/7996866-how-long-do-you-store-my-organization-s-data","capturedAt":"2026-11-08T22:40:44Z","sha256":"d0f329d29dc1bc55f11b18f112d098636d809ceb66253f93f6d0225277e76d27"}},{"quote":"Deleted from our back-end storage systems within 30 days","source":{"doc":"help-commercial-retention","title":"How long do you store my organization\\u2019s data?","url":"https://privacy.claude.com/en/articles/7996866-how-long-do-you-store-my-organization-s-data","capturedAt":"2026-11-08T22:40:44Z","sha256":"d0f329d29dc1bc55f11b18f112d098636d809ceb66253f93f6d0225277e76d27"}},{"quote":"Incognito chats are automatically deleted within 30 days unless flagged as a Usage Policy violation.","source":{"doc":"help-commercial-retention","title":"How long do you store my organization\\u2019s data?","url":"https://privacy.claude.com/en/articles/7996866-how-long-do-you-store-my-organization-s-data","capturedAt":"2026-11-08T22:40:44Z","sha256":"d0f329d29dc1bc55f11b18f112d098636d809ceb66253f93f6d0225277e76d27"}}]},"retention_exceptions":{"summary":"Flagged chats: inputs/outputs up to 2 years, classifier scores up to 7. Feedback: 5 years. Covered Models: some retention. Legal/abuse holds: no stated limit. Anonymized data longer if contract permits.","status":"stated","cites":[{"quote":"We retain inputs and outputs for up to 2 years and trust and safety classification scores for up to 7 years if your chat is flagged by our automated trust and safety systems as violating our [Usage Policy](https://www.anthropic.com/legal/aup).","source":{"doc":"help-commercial-retention","title":"How long do you store my organization\\u2019s data?","url":"https://privacy.claude.com/en/articles/7996866-how-long-do-you-store-my-organization-s-data","capturedAt":"2026-11-08T22:40:44Z","sha256":"d0f329d29dc1bc55f11b18f112d098636d809ceb66253f93f6d0225277e76d27"}},{"quote":"Where you have provided feedback to us (e.g. by submitting feedback through our thumbs up/down button or sent bug reports), we retain data associated with that submission for 5 years.","source":{"doc":"help-commercial-retention","title":"How long do you store my organization\\u2019s data?","url":"https://privacy.claude.com/en/articles/7996866-how-long-do-you-store-my-organization-s-data","capturedAt":"2026-11-08T22:40:44Z","sha256":"d0f329d29dc1bc55f11b18f112d098636d809ceb66253f93f6d0225277e76d27"}},{"quote":"Additionally, for Covered Models, we require limited data retention and review as a part of our safety work.","source":{"doc":"help-commercial-retention","title":"How long do you store my organization\\u2019s data?","url":"https://privacy.claude.com/en/articles/7996866-how-long-do-you-store-my-organization-s-data","capturedAt":"2026-11-08T22:40:44Z","sha256":"d0f329d29dc1bc55f11b18f112d098636d809ceb66253f93f6d0225277e76d27"}},{"quote":"In all cases, we may retain your chats or sessions as required by law or as necessary to combat violations of our [Usage Policy](https://www.anthropic.com/legal/aup). If permitted in your contract with us, we may anonymize your organization’s data for research or statistical purposes, in which case we may retain this information for longer.","source":{"doc":"help-commercial-retention","title":"How long do you store my organization\\u2019s data?","url":"https://privacy.claude.com/en/articles/7996866-how-long-do-you-store-my-organization-s-data","capturedAt":"2026-11-08T22:40:44Z","sha256":"d0f329d29dc1bc55f11b18f112d098636d809ceb66253f93f6d0225277e76d27"}}]},"zdr":{"summary":"ZDR agreements appear only in the API section. Whether ZDR covers Claude for Work is not stated; the linked article on covered products was not captured.","status":"not_stated","cites":[]},"training_default":{"summary":"Not used for training by default.","status":"stated","cites":[{"quote":"By default, we will not use your inputs or outputs from our commercial products *(e.g. Claude for Work, Anthropic API, Claude Gov, etc.)* to train our models.","source":{"doc":"help-model-training","title":"Is my data used for model training?","url":"https://privacy.claude.com/en/articles/7996868-is-my-data-used-for-model-training","capturedAt":"2026-11-08T22:40:44Z","sha256":"60883081f6b60034613b8028dd7e4aa3f9d51ffe4840741d51926aa8b259b69e"}}]},"training_opt_out":{"summary":"No opt-out needed, since training is off by default. Feedback, bug reports, or opting in can make chats trainable. Team/Enterprise owners can block thumbs feedback with the 'Rate chats' setting.","status":"stated","cites":[{"quote":"If you explicitly report feedback or bugs to us (e.g. via our thumbs up/down feedback button), or otherwise choose to allow us to use your data, then we may use your chats and coding sessions to train our models.","source":{"doc":"help-model-training","title":"Is my data used for model training?","url":"https://privacy.claude.com/en/articles/7996868-is-my-data-used-for-model-training","capturedAt":"2026-11-08T22:40:44Z","sha256":"60883081f6b60034613b8028dd7e4aa3f9d51ffe4840741d51926aa8b259b69e"}},{"quote":"As a Primary Owner or Owner of a Team or Enterprise plan, you can disable the ability for members of your organization to submit feedback to Anthropic via the thumbs up / down button using the **Rate chats** setting, under Organization settings \\> Data and Privacy:","source":{"doc":"help-model-training","title":"Is my data used for model training?","url":"https://privacy.claude.com/en/articles/7996868-is-my-data-used-for-model-training","capturedAt":"2026-11-08T22:40:44Z","sha256":"60883081f6b60034613b8028dd7e4aa3f9d51ffe4840741d51926aa8b259b69e"}}]},"human_review":{"summary":"Inferred: Covered Models require 'review' for safety work; who reviews and when is not captured. Feedback is unlinked from user IDs before use. Otherwise not described.","status":"inferred","cites":[{"quote":"Additionally, for Covered Models, we require limited data retention and review as a part of our safety work.","source":{"doc":"help-commercial-retention","title":"How long do you store my organization\\u2019s data?","url":"https://privacy.claude.com/en/articles/7996866-how-long-do-you-store-my-organization-s-data","capturedAt":"2026-11-08T22:40:44Z","sha256":"d0f329d29dc1bc55f11b18f112d098636d809ceb66253f93f6d0225277e76d27"}},{"quote":"We de-link your feedback from your user and customer IDs before it’s used by Anthropic.","source":{"doc":"help-model-training","title":"Is my data used for model training?","url":"https://privacy.claude.com/en/articles/7996868-is-my-data-used-for-model-training","capturedAt":"2026-11-08T22:40:44Z","sha256":"60883081f6b60034613b8028dd7e4aa3f9d51ffe4840741d51926aa8b259b69e"}}]},"memory":{"summary":"The captured policies do not describe a memory or profile feature for Team or Enterprise.","status":"not_stated","cites":[]},"connector_data":{"summary":"Feedback reports exclude raw connector content (e.g. Google Drive, MCP servers) unless pasted into the chat. Connector storage and disconnect handling are otherwise not stated.","status":"stated","cites":[{"quote":"Feedback data does not include raw content from [connectors](https://support.anthropic.com/en/articles/10168395-setting-up-integrations-on-claude-ai) (e.g. Google Drive), including remote and local MCP servers, though data may be included if it’s directly copied into your conversation with Claude.","source":{"doc":"help-model-training","title":"Is my data used for model training?","url":"https://privacy.claude.com/en/articles/7996868-is-my-data-used-for-model-training","capturedAt":"2026-11-08T22:40:44Z","sha256":"60883081f6b60034613b8028dd7e4aa3f9d51ffe4840741d51926aa8b259b69e"}}]},"agent_actions":{"summary":"Coding sessions are kept in the product, but the captured policies do not describe logs of agent actions, browsing sessions, or stored credentials or tokens for business plans.","status":"not_stated","cites":[]},"input_ownership":{"summary":"Inferred: the Commercial Terms give the customer all rights to Inputs. They name API keys and Console; the help page points business users there. Team/Enterprise coverage is not confirmed.","status":"inferred","cites":[{"quote":"As between the parties and to the extent permitted by applicable law, Anthropic agrees that Customer (a) retains all rights to its Inputs, and (b) owns its Outputs.","source":{"doc":"commercial-terms","title":"Commercial Terms of Service \\\\ Anthropic","url":"https://www.anthropic.com/legal/commercial-terms","capturedAt":"2026-11-08T22:03:46Z","sha256":"fd27e69f48ba526cf6bad82a5e9d8b3fd73bf02289c79927697fa7b19eafb4d2"}},{"quote":"To find out more information regarding your use of an Anthropic commercial offering, or if you would like to know how to contact us regarding a privacy related topic, see our [Trust Center](https://trust.anthropic.com/) and [Commercial Terms](https://www.anthropic.com/legal/commercial-terms).","source":{"doc":"help-model-training","title":"Is my data used for model training?","url":"https://privacy.claude.com/en/articles/7996868-is-my-data-used-for-model-training","capturedAt":"2026-11-08T22:40:44Z","sha256":"60883081f6b60034613b8028dd7e4aa3f9d51ffe4840741d51926aa8b259b69e"}}]},"output_ownership":{"summary":"Inferred from the Commercial Terms: the customer owns Outputs, and Anthropic assigns any rights it has. No captured policy confirms these Terms govern Team/Enterprise.","status":"inferred","cites":[{"quote":"As between the parties and to the extent permitted by applicable law, Anthropic agrees that Customer (a) retains all rights to its Inputs, and (b) owns its Outputs.","source":{"doc":"commercial-terms","title":"Commercial Terms of Service \\\\ Anthropic","url":"https://www.anthropic.com/legal/commercial-terms","capturedAt":"2026-11-08T22:03:46Z","sha256":"fd27e69f48ba526cf6bad82a5e9d8b3fd73bf02289c79927697fa7b19eafb4d2"}},{"quote":"Subject to Customer’s compliance with these Terms, Anthropic hereby assigns to Customer its right, title and interest (if any) in and to Outputs.","source":{"doc":"commercial-terms","title":"Commercial Terms of Service \\\\ Anthropic","url":"https://www.anthropic.com/legal/commercial-terms","capturedAt":"2026-11-08T22:03:46Z","sha256":"fd27e69f48ba526cf6bad82a5e9d8b3fd73bf02289c79927697fa7b19eafb4d2"}}]},"license_to_provider":{"summary":"Inferred from the Commercial Terms: Anthropic disclaims rights to customer content and may not train on it, but may use feedback freely. No captured policy confirms these Terms govern Team/Enterprise.","status":"inferred","cites":[{"quote":"Anthropic disclaims any rights it receives to the Customer Content under these Terms.","source":{"doc":"commercial-terms","title":"Commercial Terms of Service \\\\ Anthropic","url":"https://www.anthropic.com/legal/commercial-terms","capturedAt":"2026-11-08T22:03:46Z","sha256":"fd27e69f48ba526cf6bad82a5e9d8b3fd73bf02289c79927697fa7b19eafb4d2"}},{"quote":"Anthropic may not train models on Customer Content from Services.","source":{"doc":"commercial-terms","title":"Commercial Terms of Service \\\\ Anthropic","url":"https://www.anthropic.com/legal/commercial-terms","capturedAt":"2026-11-08T22:03:46Z","sha256":"fd27e69f48ba526cf6bad82a5e9d8b3fd73bf02289c79927697fa7b19eafb4d2"}},{"quote":"If Customer provides (in its sole discretion) Anthropic with feedback regarding the Services, Anthropic may use that feedback at its own risk and without obligation to Customer.","source":{"doc":"commercial-terms","title":"Commercial Terms of Service \\\\ Anthropic","url":"https://www.anthropic.com/legal/commercial-terms","capturedAt":"2026-11-08T22:03:46Z","sha256":"fd27e69f48ba526cf6bad82a5e9d8b3fd73bf02289c79927697fa7b19eafb4d2"}}]},"third_party_sharing":{"summary":"Inferred: business content falls under customer agreements, not the Privacy Policy. The Commercial Terms add a DPA and need-to-know sharing limits. No subprocessor list is captured.","status":"inferred","cites":[{"quote":"This Privacy Policy does not apply to content that we process on behalf of customers of our business offerings, such as our Enterprise accounts. Our use of that data is governed by our customer agreements covering access to and use of those offerings.","source":{"doc":"privacy-policy","title":"Privacy Policy \\\\ Anthropic","url":"https://www.anthropic.com/legal/privacy","capturedAt":"2026-11-08T22:03:47Z","sha256":"44345247ed63cd20305fb8bdf6f9c53669e8fc38dfb1a758a1f6a85f86d7519f"}},{"quote":"Data submitted through the Services will be processed in accordance with the [Anthropic Data Processing Addendum](https://www.anthropic.com/legal/data-processing-addendum) (“**DPA**”), which is incorporated into these Terms by reference.","source":{"doc":"commercial-terms","title":"Commercial Terms of Service \\\\ Anthropic","url":"https://www.anthropic.com/legal/commercial-terms","capturedAt":"2026-11-08T22:03:46Z","sha256":"fd27e69f48ba526cf6bad82a5e9d8b3fd73bf02289c79927697fa7b19eafb4d2"}},{"quote":"Recipient may only share Discloser’s Confidential Information to Recipient’s employees, agents, and advisors that have a need to know such Confidential Information and who are bound to obligations of confidentiality at least as protective as those provided in these Terms (**\"Representatives\"**).","source":{"doc":"commercial-terms","title":"Commercial Terms of Service \\\\ Anthropic","url":"https://www.anthropic.com/legal/commercial-terms","capturedAt":"2026-11-08T22:03:46Z","sha256":"fd27e69f48ba526cf6bad82a5e9d8b3fd73bf02289c79927697fa7b19eafb4d2"}}]},"data_location":{"summary":"The captured policies give no processing location or residency option for business plans. The Privacy Policy's transfer section excludes enterprise content. The DPA or Trust Center would likely say.","status":"not_stated","cites":[]},"enterprise_controls":{"summary":"Owners can turn off thumbs feedback. A DPA governs commercial data. A link mentions custom retention controls for Enterprise, details not captured. SSO and audit logs are not mentioned.","status":"stated","cites":[{"quote":"As a Primary Owner or Owner of a Team or Enterprise plan, you can disable the ability for members of your organization to submit feedback to Anthropic via the thumbs up / down button using the **Rate chats** setting, under Organization settings \\> Data and Privacy:","source":{"doc":"help-model-training","title":"Is my data used for model training?","url":"https://privacy.claude.com/en/articles/7996868-is-my-data-used-for-model-training","capturedAt":"2026-11-08T22:40:44Z","sha256":"60883081f6b60034613b8028dd7e4aa3f9d51ffe4840741d51926aa8b259b69e"}},{"quote":"Configure custom data retention controls for Enterprise plans","source":{"doc":"help-commercial-retention","title":"How long do you store my organization\\u2019s data?","url":"https://privacy.claude.com/en/articles/7996866-how-long-do-you-store-my-organization-s-data","capturedAt":"2026-11-08T22:40:44Z","sha256":"d0f329d29dc1bc55f11b18f112d098636d809ceb66253f93f6d0225277e76d27"}},{"quote":"For more information about our privacy practices, please see our [Trust Center](https://trust.anthropic.com/) and [Data Processing Addendum](https://anthropic.com/legal/data-processing-addendum).","source":{"doc":"help-commercial-retention","title":"How long do you store my organization\\u2019s data?","url":"https://privacy.claude.com/en/articles/7996866-how-long-do-you-store-my-organization-s-data","capturedAt":"2026-11-08T22:40:44Z","sha256":"d0f329d29dc1bc55f11b18f112d098636d809ceb66253f93f6d0225277e76d27"}}]}}},{"id":"api","name":"Anthropic API","surface":"api","facts":{"default_retention":{"summary":"API inputs and outputs are auto-deleted within 30 days. Exceptions: features you control (e.g. Files API), ZDR or other agreements, Usage Policy enforcement, and legal requirements.","status":"stated","cites":[{"quote":"For Anthropic API users, we automatically delete inputs and outputs on our backend within 30 days of receipt or generation, except:","source":{"doc":"help-commercial-retention","title":"How long do you store my organization\\u2019s data?","url":"https://privacy.claude.com/en/articles/7996866-how-long-do-you-store-my-organization-s-data","capturedAt":"2026-11-08T22:40:44Z","sha256":"d0f329d29dc1bc55f11b18f112d098636d809ceb66253f93f6d0225277e76d27"}},{"quote":"When you use a service with longer retention under your control (e.g. Files API)","source":{"doc":"help-commercial-retention","title":"How long do you store my organization\\u2019s data?","url":"https://privacy.claude.com/en/articles/7996866-how-long-do-you-store-my-organization-s-data","capturedAt":"2026-11-08T22:40:44Z","sha256":"d0f329d29dc1bc55f11b18f112d098636d809ceb66253f93f6d0225277e76d27"}}]},"deletion_window":{"summary":"Auto-deleted within 30 days. Customer content is Confidential Information, destroyed promptly on request except backups and legally required copies. Deletion after termination is not stated.","status":"stated","cites":[{"quote":"For Anthropic API users, we automatically delete inputs and outputs on our backend within 30 days of receipt or generation, except:","source":{"doc":"help-commercial-retention","title":"How long do you store my organization\\u2019s data?","url":"https://privacy.claude.com/en/articles/7996866-how-long-do-you-store-my-organization-s-data","capturedAt":"2026-11-08T22:40:44Z","sha256":"d0f329d29dc1bc55f11b18f112d098636d809ceb66253f93f6d0225277e76d27"}},{"quote":"Customer Content is Customer’s Confidential Information.","source":{"doc":"commercial-terms","title":"Commercial Terms of Service \\\\ Anthropic","url":"https://www.anthropic.com/legal/commercial-terms","capturedAt":"2026-11-08T22:03:46Z","sha256":"fd27e69f48ba526cf6bad82a5e9d8b3fd73bf02289c79927697fa7b19eafb4d2"}},{"quote":"Recipient will destroy Discloser’s Confidential Information promptly upon request, except where retained to comply with law or copies in Recipient’s automated back-up systems, which will remain subject to these obligations of confidentiality while maintained.","source":{"doc":"commercial-terms","title":"Commercial Terms of Service \\\\ Anthropic","url":"https://www.anthropic.com/legal/commercial-terms","capturedAt":"2026-11-08T22:03:46Z","sha256":"fd27e69f48ba526cf6bad82a5e9d8b3fd73bf02289c79927697fa7b19eafb4d2"}}]},"retention_exceptions":{"summary":"Flagged content: inputs/outputs up to 2 years, classifier scores up to 7. Feedback: 5 years. Usage Policy/legal holds: no stated limit. Backups survive destruction requests. Covered Models: some retention.","status":"stated","cites":[{"quote":"We retain inputs and outputs for up to 2 years and trust and safety classification scores for up to 7 years if your chat is flagged by our automated trust and safety systems as violating our [Usage Policy](https://www.anthropic.com/legal/aup).","source":{"doc":"help-commercial-retention","title":"How long do you store my organization\\u2019s data?","url":"https://privacy.claude.com/en/articles/7996866-how-long-do-you-store-my-organization-s-data","capturedAt":"2026-11-08T22:40:44Z","sha256":"d0f329d29dc1bc55f11b18f112d098636d809ceb66253f93f6d0225277e76d27"}},{"quote":"If we need to retain them for longer to enforce our [Usage Policy (UP)](https://www.anthropic.com/legal/aup)","source":{"doc":"help-commercial-retention","title":"How long do you store my organization\\u2019s data?","url":"https://privacy.claude.com/en/articles/7996866-how-long-do-you-store-my-organization-s-data","capturedAt":"2026-11-08T22:40:44Z","sha256":"d0f329d29dc1bc55f11b18f112d098636d809ceb66253f93f6d0225277e76d27"}},{"quote":"In compliance with the law","source":{"doc":"help-commercial-retention","title":"How long do you store my organization\\u2019s data?","url":"https://privacy.claude.com/en/articles/7996866-how-long-do-you-store-my-organization-s-data","capturedAt":"2026-11-08T22:40:44Z","sha256":"d0f329d29dc1bc55f11b18f112d098636d809ceb66253f93f6d0225277e76d27"}},{"quote":"Where you have provided feedback to us (e.g. by submitting feedback through our thumbs up/down button or sent bug reports), we retain data associated with that submission for 5 years.","source":{"doc":"help-commercial-retention","title":"How long do you store my organization\\u2019s data?","url":"https://privacy.claude.com/en/articles/7996866-how-long-do-you-store-my-organization-s-data","capturedAt":"2026-11-08T22:40:44Z","sha256":"d0f329d29dc1bc55f11b18f112d098636d809ceb66253f93f6d0225277e76d27"}},{"quote":"Recipient will destroy Discloser’s Confidential Information promptly upon request, except where retained to comply with law or copies in Recipient’s automated back-up systems, which will remain subject to these obligations of confidentiality while maintained.","source":{"doc":"commercial-terms","title":"Commercial Terms of Service \\\\ Anthropic","url":"https://www.anthropic.com/legal/commercial-terms","capturedAt":"2026-11-08T22:03:46Z","sha256":"fd27e69f48ba526cf6bad82a5e9d8b3fd73bf02289c79927697fa7b19eafb4d2"}},{"quote":"Additionally, for Covered Models, we require limited data retention and review as a part of our safety work.","source":{"doc":"help-commercial-retention","title":"How long do you store my organization\\u2019s data?","url":"https://privacy.claude.com/en/articles/7996866-how-long-do-you-store-my-organization-s-data","capturedAt":"2026-11-08T22:40:44Z","sha256":"d0f329d29dc1bc55f11b18f112d098636d809ceb66253f93f6d0225277e76d27"}}]},"zdr":{"summary":"Zero data retention is available by separate agreement. The captured policies don't say who qualifies, how to get it, or whether it overrides the flagged-content retention.","status":"stated","cites":[{"quote":"When you and we have agreed otherwise (e.g. [zero data retention agreement](https://privacy.anthropic.com/en/articles/8956058-i-have-a-zero-retention-agreement-with-anthropic-what-products-does-it-apply-to))","source":{"doc":"help-commercial-retention","title":"How long do you store my organization\\u2019s data?","url":"https://privacy.claude.com/en/articles/7996866-how-long-do-you-store-my-organization-s-data","capturedAt":"2026-11-08T22:40:44Z","sha256":"d0f329d29dc1bc55f11b18f112d098636d809ceb66253f93f6d0225277e76d27"}}]},"training_default":{"summary":"Not used for training. The Commercial Terms bar training on customer content, and the help page says the API is excluded by default.","status":"stated","cites":[{"quote":"Anthropic may not train models on Customer Content from Services.","source":{"doc":"commercial-terms","title":"Commercial Terms of Service \\\\ Anthropic","url":"https://www.anthropic.com/legal/commercial-terms","capturedAt":"2026-11-08T22:03:46Z","sha256":"fd27e69f48ba526cf6bad82a5e9d8b3fd73bf02289c79927697fa7b19eafb4d2"}},{"quote":"By default, we will not use your inputs or outputs from our commercial products *(e.g. Claude for Work, Anthropic API, Claude Gov, etc.)* to train our models.","source":{"doc":"help-model-training","title":"Is my data used for model training?","url":"https://privacy.claude.com/en/articles/7996868-is-my-data-used-for-model-training","capturedAt":"2026-11-08T22:40:44Z","sha256":"60883081f6b60034613b8028dd7e4aa3f9d51ffe4840741d51926aa8b259b69e"}}]},"training_opt_out":{"summary":"No opt-out needed. The help page says feedback, bug reports or opting in can make data trainable. The Commercial Terms flatly bar training on customer content. The sources differ.","status":"stated","cites":[{"quote":"If you explicitly report feedback or bugs to us (e.g. via our thumbs up/down feedback button), or otherwise choose to allow us to use your data, then we may use your chats and coding sessions to train our models.","source":{"doc":"help-model-training","title":"Is my data used for model training?","url":"https://privacy.claude.com/en/articles/7996868-is-my-data-used-for-model-training","capturedAt":"2026-11-08T22:40:44Z","sha256":"60883081f6b60034613b8028dd7e4aa3f9d51ffe4840741d51926aa8b259b69e"}},{"quote":"Anthropic may not train models on Customer Content from Services.","source":{"doc":"commercial-terms","title":"Commercial Terms of Service \\\\ Anthropic","url":"https://www.anthropic.com/legal/commercial-terms","capturedAt":"2026-11-08T22:03:46Z","sha256":"fd27e69f48ba526cf6bad82a5e9d8b3fd73bf02289c79927697fa7b19eafb4d2"}}]},"human_review":{"summary":"Inferred: Covered Models require 'review' for safety work, and customers must answer Usage Policy information requests. When people read API traffic is not stated.","status":"inferred","cites":[{"quote":"Additionally, for Covered Models, we require limited data retention and review as a part of our safety work.","source":{"doc":"help-commercial-retention","title":"How long do you store my organization\\u2019s data?","url":"https://privacy.claude.com/en/articles/7996866-how-long-do-you-store-my-organization-s-data","capturedAt":"2026-11-08T22:40:44Z","sha256":"d0f329d29dc1bc55f11b18f112d098636d809ceb66253f93f6d0225277e76d27"}},{"quote":"Customer must cooperate with reasonable requests for information from Anthropic to support compliance with its Usage Policy, including to verify Customer’s identity and use of the Services.","source":{"doc":"commercial-terms","title":"Commercial Terms of Service \\\\ Anthropic","url":"https://www.anthropic.com/legal/commercial-terms","capturedAt":"2026-11-08T22:03:46Z","sha256":"fd27e69f48ba526cf6bad82a5e9d8b3fd73bf02289c79927697fa7b19eafb4d2"}}]},"memory":{"summary":"The API captured policies do not describe any memory or profile feature.","status":"not_stated","cites":[]},"connector_data":{"summary":"The API captured policies do not describe connector data. The Terms say only that third-party features are not Anthropic's responsibility.","status":"not_stated","cites":[]},"agent_actions":{"summary":"The API captured policies do not describe logs of agent actions, browsing, or stored credentials or tokens.","status":"not_stated","cites":[]},"input_ownership":{"summary":"The customer keeps all rights to its Inputs.","status":"stated","cites":[{"quote":"As between the parties and to the extent permitted by applicable law, Anthropic agrees that Customer (a) retains all rights to its Inputs, and (b) owns its Outputs.","source":{"doc":"commercial-terms","title":"Commercial Terms of Service \\\\ Anthropic","url":"https://www.anthropic.com/legal/commercial-terms","capturedAt":"2026-11-08T22:03:46Z","sha256":"fd27e69f48ba526cf6bad82a5e9d8b3fd73bf02289c79927697fa7b19eafb4d2"}}]},"output_ownership":{"summary":"The customer owns its Outputs. Anthropic assigns any rights it has, as long as the customer complies with the Terms.","status":"stated","cites":[{"quote":"As between the parties and to the extent permitted by applicable law, Anthropic agrees that Customer (a) retains all rights to its Inputs, and (b) owns its Outputs.","source":{"doc":"commercial-terms","title":"Commercial Terms of Service \\\\ Anthropic","url":"https://www.anthropic.com/legal/commercial-terms","capturedAt":"2026-11-08T22:03:46Z","sha256":"fd27e69f48ba526cf6bad82a5e9d8b3fd73bf02289c79927697fa7b19eafb4d2"}},{"quote":"Subject to Customer’s compliance with these Terms, Anthropic hereby assigns to Customer its right, title and interest (if any) in and to Outputs.","source":{"doc":"commercial-terms","title":"Commercial Terms of Service \\\\ Anthropic","url":"https://www.anthropic.com/legal/commercial-terms","capturedAt":"2026-11-08T22:03:46Z","sha256":"fd27e69f48ba526cf6bad82a5e9d8b3fd73bf02289c79927697fa7b19eafb4d2"}}]},"license_to_provider":{"summary":"No license beyond what the Terms state. Anthropic disclaims rights it receives, may not train on content, may use feedback freely. Perpetuity and post-termination use not stated.","status":"stated","cites":[{"quote":"Anthropic disclaims any rights it receives to the Customer Content under these Terms.","source":{"doc":"commercial-terms","title":"Commercial Terms of Service \\\\ Anthropic","url":"https://www.anthropic.com/legal/commercial-terms","capturedAt":"2026-11-08T22:03:46Z","sha256":"fd27e69f48ba526cf6bad82a5e9d8b3fd73bf02289c79927697fa7b19eafb4d2"}},{"quote":"Except as expressly stated in these Terms, these Terms do not grant either party any rights to the other’s content or intellectual property, by implication or otherwise.","source":{"doc":"commercial-terms","title":"Commercial Terms of Service \\\\ Anthropic","url":"https://www.anthropic.com/legal/commercial-terms","capturedAt":"2026-11-08T22:03:46Z","sha256":"fd27e69f48ba526cf6bad82a5e9d8b3fd73bf02289c79927697fa7b19eafb4d2"}},{"quote":"If Customer provides (in its sole discretion) Anthropic with feedback regarding the Services, Anthropic may use that feedback at its own risk and without obligation to Customer.","source":{"doc":"commercial-terms","title":"Commercial Terms of Service \\\\ Anthropic","url":"https://www.anthropic.com/legal/commercial-terms","capturedAt":"2026-11-08T22:03:46Z","sha256":"fd27e69f48ba526cf6bad82a5e9d8b3fd73bf02289c79927697fa7b19eafb4d2"}}]},"third_party_sharing":{"summary":"DPA governs data. Content is confidential, shared only with need-to-know staff, agents and advisors. Anthropic may name the customer publicly unless it opts out. Subprocessors not covered.","status":"stated","cites":[{"quote":"Data submitted through the Services will be processed in accordance with the [Anthropic Data Processing Addendum](https://www.anthropic.com/legal/data-processing-addendum) (“**DPA**”), which is incorporated into these Terms by reference.","source":{"doc":"commercial-terms","title":"Commercial Terms of Service \\\\ Anthropic","url":"https://www.anthropic.com/legal/commercial-terms","capturedAt":"2026-11-08T22:03:46Z","sha256":"fd27e69f48ba526cf6bad82a5e9d8b3fd73bf02289c79927697fa7b19eafb4d2"}},{"quote":"Recipient may only share Discloser’s Confidential Information to Recipient’s employees, agents, and advisors that have a need to know such Confidential Information and who are bound to obligations of confidentiality at least as protective as those provided in these Terms (**\"Representatives\"**).","source":{"doc":"commercial-terms","title":"Commercial Terms of Service \\\\ Anthropic","url":"https://www.anthropic.com/legal/commercial-terms","capturedAt":"2026-11-08T22:03:46Z","sha256":"fd27e69f48ba526cf6bad82a5e9d8b3fd73bf02289c79927697fa7b19eafb4d2"}},{"quote":"Anthropic may use Customer’s name and logo to publicly identify Customer as a customer of the Services; provided that Customer may opt-out via [this request form](https://ea4l3.share.hsforms.com/2SPy6FrbrRAGnV6R81qaHnA).","source":{"doc":"commercial-terms","title":"Commercial Terms of Service \\\\ Anthropic","url":"https://www.anthropic.com/legal/commercial-terms","capturedAt":"2026-11-08T22:03:46Z","sha256":"fd27e69f48ba526cf6bad82a5e9d8b3fd73bf02289c79927697fa7b19eafb4d2"}}]},"data_location":{"summary":"The API captured policies give no processing location or residency option. The contracting entity depends on the customer's region, but that is not data location. The DPA would likely say.","status":"not_stated","cites":[]},"enterprise_controls":{"summary":"A DPA is built into the Terms, and ZDR or other retention terms can be agreed. SSO and audit logs are not mentioned in these captured policies.","status":"stated","cites":[{"quote":"Data submitted through the Services will be processed in accordance with the [Anthropic Data Processing Addendum](https://www.anthropic.com/legal/data-processing-addendum) (“**DPA**”), which is incorporated into these Terms by reference.","source":{"doc":"commercial-terms","title":"Commercial Terms of Service \\\\ Anthropic","url":"https://www.anthropic.com/legal/commercial-terms","capturedAt":"2026-11-08T22:03:46Z","sha256":"fd27e69f48ba526cf6bad82a5e9d8b3fd73bf02289c79927697fa7b19eafb4d2"}},{"quote":"When you and we have agreed otherwise (e.g. [zero data retention agreement](https://privacy.anthropic.com/en/articles/8956058-i-have-a-zero-retention-agreement-with-anthropic-what-products-does-it-apply-to))","source":{"doc":"help-commercial-retention","title":"How long do you store my organization\\u2019s data?","url":"https://privacy.claude.com/en/articles/7996866-how-long-do-you-store-my-organization-s-data","capturedAt":"2026-11-08T22:40:44Z","sha256":"d0f329d29dc1bc55f11b18f112d098636d809ceb66253f93f6d0225277e76d27"}}]}}}],"notes":[{"text":"Content flagged by automated trust and safety systems: inputs/outputs kept up to 2 years and classifier scores up to 7 years. This applies to both consumer and commercial products.","cites":[{"quote":"We retain inputs and outputs for up to 2 years and trust and safety classification scores for up to 7 years if your chat or session is flagged by our automated trust and safety systems as violating our [Usage Policy](https://www.anthropic.com/legal/aup).","source":{"doc":"help-how-long-store-data","title":"How long do you store my data?","url":"https://privacy.claude.com/en/articles/10023548-how-long-do-you-store-my-data","capturedAt":"2026-11-08T22:40:44Z","sha256":"903479788adb74ca8058679e077f4b368451df2545b3865868273f33fe227551"}},{"quote":"We retain inputs and outputs for up to 2 years and trust and safety classification scores for up to 7 years if your chat is flagged by our automated trust and safety systems as violating our [Usage Policy](https://www.anthropic.com/legal/aup).","source":{"doc":"help-commercial-retention","title":"How long do you store my organization\\u2019s data?","url":"https://privacy.claude.com/en/articles/7996866-how-long-do-you-store-my-organization-s-data","capturedAt":"2026-11-08T22:40:44Z","sha256":"d0f329d29dc1bc55f11b18f112d098636d809ceb66253f93f6d0225277e76d27"}}]},{"text":"Turning on consumer model training may stretch retention to up to 5 years (de-identified), for new or resumed chats only. Turning it off later doesn't remove data from training runs in progress or models already trained.","cites":[{"quote":"If you allow us to use your chats or coding sessions to improve Claude, we may retain your data in a de-identified format for up to 5 years in our model training pipelines.","source":{"doc":"help-how-long-store-data","title":"How long do you store my data?","url":"https://privacy.claude.com/en/articles/10023548-how-long-do-you-store-my-data","capturedAt":"2026-11-08T22:40:44Z","sha256":"903479788adb74ca8058679e077f4b368451df2545b3865868273f33fe227551"}},{"quote":"Your data will still be included in model training runs that are already in progress, or in models that have been trained.","source":{"doc":"help-how-long-store-data","title":"How long do you store my data?","url":"https://privacy.claude.com/en/articles/10023548-how-long-do-you-store-my-data","capturedAt":"2026-11-08T22:40:44Z","sha256":"903479788adb74ca8058679e077f4b368451df2545b3865868273f33fe227551"}}]},{"text":"The consumer opt-out has exceptions: safety-flagged conversations and submitted feedback are still used for training. Flagged content is unlinked from your user ID to train safety classifiers, but can be re-identified for enforcement.","cites":[{"quote":"Even if you opt-out, we will use Inputs and Outputs for model improvement when: (i) your conversations are flagged for safety review to improve our ability to detect harmful content, enforce our policies, or advance AI safety research, or (ii) you've explicitly reported the materials to us (for example via our feedback mechanisms).","source":{"doc":"privacy-policy","title":"Privacy Policy \\\\ Anthropic","url":"https://www.anthropic.com/legal/privacy","capturedAt":"2026-11-08T22:03:47Z","sha256":"44345247ed63cd20305fb8bdf6f9c53669e8fc38dfb1a758a1f6a85f86d7519f"}},{"quote":"If our systems flag Inputs or Outputs for harmful content or for potentially violating our policies, we disassociate the content from your user ID to train our trust and safety internal classification and generative models. However, we may re-identify the Inputs or Outputs to enforce our Terms of Service or Usage Policy with the responsible user if necessary.","source":{"doc":"privacy-policy","title":"Privacy Policy \\\\ Anthropic","url":"https://www.anthropic.com/legal/privacy","capturedAt":"2026-11-08T22:03:47Z","sha256":"44345247ed63cd20305fb8bdf6f9c53669e8fc38dfb1a758a1f6a85f86d7519f"}}]},{"text":"A thumbs up/down rating stores the whole conversation for up to 5 years, including on commercial plans.","cites":[{"quote":"When you provide us feedback via our thumbs up / down button, we will store the entire related conversation, including any content, custom styles, conversation preferences, or model settings, in our secured back-end for up to 5 years.","source":{"doc":"help-model-training","title":"Is my data used for model training?","url":"https://privacy.claude.com/en/articles/7996868-is-my-data-used-for-model-training","capturedAt":"2026-11-08T22:40:44Z","sha256":"60883081f6b60034613b8028dd7e4aa3f9d51ffe4840741d51926aa8b259b69e"}}]},{"text":"The sources differ on commercial training. The Commercial Terms say Anthropic may not train on Customer Content, but the help page says feedback, bug reports, or opting in can lead to training.","cites":[{"quote":"Anthropic may not train models on Customer Content from Services.","source":{"doc":"commercial-terms","title":"Commercial Terms of Service \\\\ Anthropic","url":"https://www.anthropic.com/legal/commercial-terms","capturedAt":"2026-11-08T22:03:46Z","sha256":"fd27e69f48ba526cf6bad82a5e9d8b3fd73bf02289c79927697fa7b19eafb4d2"}},{"quote":"If you explicitly report feedback or bugs to us (e.g. via our thumbs up/down feedback button), or otherwise choose to allow us to use your data, then we may use your chats and coding sessions to train our models.","source":{"doc":"help-model-training","title":"Is my data used for model training?","url":"https://privacy.claude.com/en/articles/7996868-is-my-data-used-for-model-training","capturedAt":"2026-11-08T22:40:44Z","sha256":"60883081f6b60034613b8028dd7e4aa3f9d51ffe4840741d51926aa8b259b69e"}}]},{"text":"The consumer retention article's 'Standard Retention Timeframe' heading is empty in the captured policy, so no default period is stated for chats you keep.","cites":[{"quote":"## Standard Retention Timeframe\n\n## Controlling Your Chats","source":{"doc":"help-how-long-store-data","title":"How long do you store my data?","url":"https://privacy.claude.com/en/articles/10023548-how-long-do-you-store-my-data","capturedAt":"2026-11-08T22:40:44Z","sha256":"903479788adb74ca8058679e077f4b368451df2545b3865868273f33fe227551"}}]},{"text":"The Privacy Policy does not cover content Anthropic processes for business customers. Customer agreements govern that content.","cites":[{"quote":"This Privacy Policy does not apply to content that we process on behalf of customers of our business offerings, such as our Enterprise accounts. Our use of that data is governed by our customer agreements covering access to and use of those offerings.","source":{"doc":"privacy-policy","title":"Privacy Policy \\\\ Anthropic","url":"https://www.anthropic.com/legal/privacy","capturedAt":"2026-11-08T22:03:47Z","sha256":"44345247ed63cd20305fb8bdf6f9c53669e8fc38dfb1a758a1f6a85f86d7519f"}}]},{"text":"Free consumer accounts inactive for over a year may be terminated after notice. On termination, Anthropic 'may at our option' delete account data.","cites":[{"quote":"We may also terminate your Account if you have been inactive for over a year and you do not have a paid Account.","source":{"doc":"consumer-terms","title":"Consumer Terms of Service \\\\ Anthropic","url":"https://www.anthropic.com/legal/consumer-terms","capturedAt":"2026-11-08T22:03:46Z","sha256":"371cb7e13e14d0584f0d176941c159aca72a354223364ed11197897e032ca008"}},{"quote":"Upon termination of these Terms, a Subscription, or your access to the Services, we may at our option delete any Materials or other data associated with your Account.","source":{"doc":"consumer-terms","title":"Consumer Terms of Service \\\\ Anthropic","url":"https://www.anthropic.com/legal/consumer-terms","capturedAt":"2026-11-08T22:03:46Z","sha256":"371cb7e13e14d0584f0d176941c159aca72a354223364ed11197897e032ca008"}}]},{"text":"Inputs and Outputs from users are listed as a training source, and so are materials flagged for safety, security or policy review.","cites":[{"quote":"Data that our users or crowd workers provide, including Inputs and Outputs from our Services (unless users opt out)","source":{"doc":"privacy-policy","title":"Privacy Policy \\\\ Anthropic","url":"https://www.anthropic.com/legal/privacy","capturedAt":"2026-11-08T22:03:47Z","sha256":"44345247ed63cd20305fb8bdf6f9c53669e8fc38dfb1a758a1f6a85f86d7519f"}},{"quote":"Materials flagged for safety, security, or policy review","source":{"doc":"privacy-policy","title":"Privacy Policy \\\\ Anthropic","url":"https://www.anthropic.com/legal/privacy","capturedAt":"2026-11-08T22:03:47Z","sha256":"44345247ed63cd20305fb8bdf6f9c53669e8fc38dfb1a758a1f6a85f86d7519f"}}]}],"gaps":["No captured policy shows an effective or last-updated date. The live privacy policy header and the 'Updates to our Privacy Policy' article would.","Default retention for consumer chats you don't delete: the 'Standard Retention Timeframe' section of privacy.claude.com article 10023548 is empty in the captured policy.","How long until data is gone after a consumer account is closed or terminated. Likely in a Privacy Center account-deletion article.","Who qualifies for zero data retention, how to get it, which products it covers, and whether flagged-content retention still applies. See privacy.claude.com article 8956058.","What 'Covered Models' are and what retention and review they require. See privacy.claude.com article 15425996.","Enterprise custom data retention controls (privacy.claude.com article 10440198), plus SSO and audit logs (Trust Center or Enterprise docs).","Whether and when Anthropic staff read conversations, and what triggers review. Likely in the Usage Policy and the Trust & Safety support center.","Memory feature: what it stores, and how to view or delete it. Likely in Claude help-center memory articles.","What happens to connector data after you disconnect, how long agent action logs are kept, and how credentials are stored. Likely in connector and integration help articles and the Consumer Health Data Privacy Policy.","Retention of consumer Incognito chats. See support article 12260368.","Data location and residency options for commercial customers, and the subprocessor list. See the DPA, the Trust Center and anthropic.com/subprocessors.","Whether the Commercial Terms govern Claude for Work Team and Enterprise, or a separate agreement does. See the Service Specific Terms and enterprise agreements."],"documents":[{"doc":"commercial-terms","title":"Commercial Terms of Service \\\\ Anthropic","url":"https://www.anthropic.com/legal/commercial-terms","capturedAt":"2026-11-08T22:03:46Z","sha256":"fd27e69f48ba526cf6bad82a5e9d8b3fd73bf02289c79927697fa7b19eafb4d2"},{"doc":"consumer-terms","title":"Consumer Terms of Service \\\\ Anthropic","url":"https://www.anthropic.com/legal/consumer-terms","capturedAt":"2026-11-08T22:03:46Z","sha256":"371cb7e13e14d0584f0d176941c159aca72a354223364ed11197897e032ca008"},{"doc":"help-how-long-store-data","title":"How long do you store my data?","url":"https://privacy.claude.com/en/articles/10023548-how-long-do-you-store-my-data","capturedAt":"2026-11-08T22:40:44Z","sha256":"903479788adb74ca8058679e077f4b368451df2545b3865868273f33fe227551"},{"doc":"help-commercial-retention","title":"How long do you store my organization\\u2019s data?","url":"https://privacy.claude.com/en/articles/7996866-how-long-do-you-store-my-organization-s-data","capturedAt":"2026-11-08T22:40:44Z","sha256":"d0f329d29dc1bc55f11b18f112d098636d809ceb66253f93f6d0225277e76d27"},{"doc":"help-model-training","title":"Is my data used for model training?","url":"https://privacy.claude.com/en/articles/7996868-is-my-data-used-for-model-training","capturedAt":"2026-11-08T22:40:44Z","sha256":"60883081f6b60034613b8028dd7e4aa3f9d51ffe4840741d51926aa8b259b69e"},{"doc":"privacy-policy","title":"Privacy Policy \\\\ Anthropic","url":"https://www.anthropic.com/legal/privacy","capturedAt":"2026-11-08T22:03:47Z","sha256":"44345247ed63cd20305fb8bdf6f9c53669e8fc38dfb1a758a1f6a85f86d7519f"}],"url":"https://gjalla.io/data-policies/anthropic/"},{"id":"aws","provider":"aws","name":"AWS Bedrock","category":"model-platform","checkedOn":"2026-11-08","products":[{"id":"bedrock","name":"Amazon Bedrock","surface":"api","facts":{"default_retention":{"summary":"Bedrock uses a 'zero operator access' model, storing or reviewing inputs and outputs only in listed cases. We infer most traffic isn't kept; the linked Data retention page wasn't captured.","status":"inferred","cites":[{"quote":"In certain limited circumstances described below, we may also store or review model inputs or outputs. Amazon Bedrock uses a zero operator access (ZOA) data security model, subject to the model-specific abuse and CSAM detection detailed below.","source":{"doc":"bedrock-abuse-detection","title":"Amazon Bedrock abuse detection","url":"https://docs.aws.amazon.com/bedrock/latest/userguide/abuse-detection.html","capturedAt":"2026-11-08T22:04:45Z","sha256":"0b2c87a70682c3576e1fdb43d8e0a48fbb6409ee390554e264a542b45e0e6d01"}}]},"deletion_window":{"summary":"The captured policies don't say how long data takes to be deleted after closing an account or deleting resources.","status":"not_stated","cites":[]},"retention_exceptions":{"summary":"OpenAI models (not gpt-oss): flagged traffic up to 30 days. Claude Fable 5/5.1: all traffic up to 30 days unless on temporary ZDR. Suspected CSAM may be stored and reported.","status":"stated","cites":[{"quote":"For all OpenAI models other than GPT OSS Safeguard 120B, GPT OSS Safeguard 20B, gpt-oss-120b, and gpt-oss-20b, classifier-flagged traffic will be retained for up to 30 days for automated offline abuse detection.","source":{"doc":"bedrock-abuse-detection","title":"Amazon Bedrock abuse detection","url":"https://docs.aws.amazon.com/bedrock/latest/userguide/abuse-detection.html","capturedAt":"2026-11-08T22:04:45Z","sha256":"0b2c87a70682c3576e1fdb43d8e0a48fbb6409ee390554e264a542b45e0e6d01"}},{"quote":"For Anthropic Claude Fable 5 and Claude Fable 5.1, all traffic will be retained for up to 30 days for automated offline abuse detection.","source":{"doc":"bedrock-abuse-detection","title":"Amazon Bedrock abuse detection","url":"https://docs.aws.amazon.com/bedrock/latest/userguide/abuse-detection.html","capturedAt":"2026-11-08T22:04:45Z","sha256":"0b2c87a70682c3576e1fdb43d8e0a48fbb6409ee390554e264a542b45e0e6d01"}},{"quote":"Amazon Bedrock may store and review the flagged input or output exclusively to determine if it is CSAM and may also file a report with the National Center for Missing and Exploited Children (NCMEC) or a relevant authority.","source":{"doc":"bedrock-abuse-detection","title":"Amazon Bedrock abuse detection","url":"https://docs.aws.amazon.com/bedrock/latest/userguide/abuse-detection.html","capturedAt":"2026-11-08T22:04:45Z","sha256":"0b2c87a70682c3576e1fdb43d8e0a48fbb6409ee390554e264a542b45e0e6d01"}},{"quote":"Any data that you enter into tags or free-form text fields used for names may be used for billing or diagnostic logs.","source":{"doc":"bedrock-data-protection","title":"Data protection","url":"https://docs.aws.amazon.com/bedrock/latest/userguide/data-protection.html","capturedAt":"2026-11-08T22:04:45Z","sha256":"4bc792e9e6b49d2379bceb9d275a0bbff7e8a1a12b0e1a8ae997505fb972d554"}}]},"zdr":{"summary":"Eligible customers may request full ZDR for OpenAI models via their AWS account team. Enterprise Frontier Safeguards-eligible customers get Claude Fable 5/5.1 ZDR only through December 31, 2026. Criteria unstated.","status":"stated","cites":[{"quote":"Eligible customers may request full ZDR through their AWS account team.","source":{"doc":"bedrock-abuse-detection","title":"Amazon Bedrock abuse detection","url":"https://docs.aws.amazon.com/bedrock/latest/userguide/abuse-detection.html","capturedAt":"2026-11-08T22:04:45Z","sha256":"0b2c87a70682c3576e1fdb43d8e0a48fbb6409ee390554e264a542b45e0e6d01"}},{"quote":"Customers that are eligible for the Enterprise Frontier Safeguards program will receive ZDR through December 31, 2026. After ZDR ends, all traffic will be retained for up to 30 days for automated offline abuse detection.","source":{"doc":"bedrock-abuse-detection","title":"Amazon Bedrock abuse detection","url":"https://docs.aws.amazon.com/bedrock/latest/userguide/abuse-detection.html","capturedAt":"2026-11-08T22:04:45Z","sha256":"0b2c87a70682c3576e1fdb43d8e0a48fbb6409ee390554e264a542b45e0e6d01"}}]},"training_default":{"summary":"No. AWS says your content isn't used to improve the base models and isn't shared with model providers.","status":"stated","cites":[{"quote":"With Amazon Bedrock, your content is not used to improve the base models and is not shared with any model providers.","source":{"doc":"bedrock-faqs","title":"Build Generative AI Applications with Foundation Models - Amazon Bedrock FAQs","url":"https://aws.amazon.com/bedrock/faqs/","capturedAt":"2026-11-08T22:28:08Z","sha256":"4d2450b6e12b53d764dcf0ae36bb8435349bb764de8a03ab2f52f930fd7a9ab1"}}]},"training_opt_out":{"summary":"No opt-out is described. We infer none is needed because content isn't used to improve base models. The answer to the FAQ question on training wasn't captured.","status":"inferred","cites":[{"quote":"With Amazon Bedrock, your content is not used to improve the base models","source":{"doc":"bedrock-faqs","title":"Build Generative AI Applications with Foundation Models - Amazon Bedrock FAQs","url":"https://aws.amazon.com/bedrock/faqs/","capturedAt":"2026-11-08T22:28:08Z","sha256":"4d2450b6e12b53d764dcf0ae36bb8435349bb764de8a03ab2f52f930fd7a9ab1"}}]},"human_review":{"summary":"Normally no operator access. Exceptions: AWS staff may review classifier-flagged Claude Fable 5/5.1 traffic, and may review suspected CSAM.","status":"stated","cites":[{"quote":"Classifier-flagged traffic will be subject to potential human review performed by AWS.","source":{"doc":"bedrock-abuse-detection","title":"Amazon Bedrock abuse detection","url":"https://docs.aws.amazon.com/bedrock/latest/userguide/abuse-detection.html","capturedAt":"2026-11-08T22:04:45Z","sha256":"0b2c87a70682c3576e1fdb43d8e0a48fbb6409ee390554e264a542b45e0e6d01"}},{"quote":"Amazon Bedrock may store and review the flagged input or output exclusively to determine if it is CSAM","source":{"doc":"bedrock-abuse-detection","title":"Amazon Bedrock abuse detection","url":"https://docs.aws.amazon.com/bedrock/latest/userguide/abuse-detection.html","capturedAt":"2026-11-08T22:04:45Z","sha256":"0b2c87a70682c3576e1fdb43d8e0a48fbb6409ee390554e264a542b45e0e6d01"}}]},"memory":{"summary":"The captured policies don't describe agent memory. The FAQ answers about Agents and AgentCore weren't captured.","status":"not_stated","cites":[]},"connector_data":{"summary":"Knowledge Bases can connect to your data sources, but the captured policies don't say what is stored or what happens when a source is disconnected.","status":"not_stated","cites":[]},"agent_actions":{"summary":"Agents can call your company systems and APIs, but logs of agent actions and stored credentials aren't described.","status":"not_stated","cites":[]},"input_ownership":{"summary":"Under the shared responsibility model you control your content, but the captured policies contain no ownership clause.","status":"not_stated","cites":[]},"output_ownership":{"summary":"Not stated. The FAQ asks about an IP indemnity for generative AI, but its answer wasn't captured.","status":"not_stated","cites":[]},"license_to_provider":{"summary":"The captured policies contain no license terms.","status":"not_stated","cites":[]},"third_party_sharing":{"summary":"Model providers can't access the AWS-run accounts hosting their models, so can't see your prompts, completions or logs. Abuse-detection data stays with AWS. CSAM may be reported to NCMEC.","status":"stated","cites":[{"quote":"Because the model providers don't have access to those accounts, they don't have access to Amazon Bedrock logs or to customer prompts and completions.","source":{"doc":"bedrock-data-protection","title":"Data protection","url":"https://docs.aws.amazon.com/bedrock/latest/userguide/data-protection.html","capturedAt":"2026-11-08T22:04:45Z","sha256":"4bc792e9e6b49d2379bceb9d275a0bbff7e8a1a12b0e1a8ae997505fb972d554"}},{"quote":"Retained inputs and outputs are stored and processed by AWS and are not shared with third-party model providers.","source":{"doc":"bedrock-abuse-detection","title":"Amazon Bedrock abuse detection","url":"https://docs.aws.amazon.com/bedrock/latest/userguide/abuse-detection.html","capturedAt":"2026-11-08T22:04:45Z","sha256":"0b2c87a70682c3576e1fdb43d8e0a48fbb6409ee390554e264a542b45e0e6d01"}},{"quote":"your content is not used to improve the base models and is not shared with any model providers.","source":{"doc":"bedrock-faqs","title":"Build Generative AI Applications with Foundation Models - Amazon Bedrock FAQs","url":"https://aws.amazon.com/bedrock/faqs/","capturedAt":"2026-11-08T22:28:08Z","sha256":"4d2450b6e12b53d764dcf0ae36bb8435349bb764de8a03ab2f52f930fd7a9ab1"}}]},"data_location":{"summary":"Models run in per-Region deployment accounts. With cross-region inference on, data kept for abuse detection is stored in the Region that processed the request. The FAQ answer on moving data out of a Region wasn't captured.","status":"stated","cites":[{"quote":"in each AWS Region where Amazon Bedrock is available, there is one such deployment account per model provider.","source":{"doc":"bedrock-data-protection","title":"Data protection","url":"https://docs.aws.amazon.com/bedrock/latest/userguide/data-protection.html","capturedAt":"2026-11-08T22:04:45Z","sha256":"4bc792e9e6b49d2379bceb9d275a0bbff7e8a1a12b0e1a8ae997505fb972d554"}},{"quote":"If cross-region inference is enabled for these models, retained inputs and outputs are stored in destination regions (i.e., the region where your inference request is processed).","source":{"doc":"bedrock-abuse-detection","title":"Amazon Bedrock abuse detection","url":"https://docs.aws.amazon.com/bedrock/latest/userguide/abuse-detection.html","capturedAt":"2026-11-08T22:04:45Z","sha256":"0b2c87a70682c3576e1fdb43d8e0a48fbb6409ee390554e264a542b45e0e6d01"}}]},"enterprise_controls":{"summary":"Controls include IAM/Identity Center, optional CloudTrail API activity logging, your own encryption keys, PrivateLink, FIPS endpoints, and SOC/ISO/HIPAA-eligible/GDPR/CSA STAR compliance. Customer keys and bring-your-own-bucket for abuse data are planned, not available yet.","status":"stated","cites":[{"quote":"Set up API and user activity logging with AWS CloudTrail.","source":{"doc":"bedrock-data-protection","title":"Data protection","url":"https://docs.aws.amazon.com/bedrock/latest/userguide/data-protection.html","capturedAt":"2026-11-08T22:04:45Z","sha256":"4bc792e9e6b49d2379bceb9d275a0bbff7e8a1a12b0e1a8ae997505fb972d554"}},{"quote":"we recommend that you protect AWS account credentials and set up individual users with AWS IAM Identity Center or AWS Identity and Access Management (IAM).","source":{"doc":"bedrock-data-protection","title":"Data protection","url":"https://docs.aws.amazon.com/bedrock/latest/userguide/data-protection.html","capturedAt":"2026-11-08T22:04:45Z","sha256":"4bc792e9e6b49d2379bceb9d275a0bbff7e8a1a12b0e1a8ae997505fb972d554"}},{"quote":"Your data in Amazon Bedrock is always encrypted in transit and at rest, and you can optionally encrypt the data using your own keys. You can use AWS PrivateLink with Amazon Bedrock to establish private connectivity between your FMs and your Amazon Virtual Private Cloud (Amazon VPC) without exposing your traffic to the Internet.","source":{"doc":"bedrock-faqs","title":"Build Generative AI Applications with Foundation Models - Amazon Bedrock FAQs","url":"https://aws.amazon.com/bedrock/faqs/","capturedAt":"2026-11-08T22:28:08Z","sha256":"4d2450b6e12b53d764dcf0ae36bb8435349bb764de8a03ab2f52f930fd7a9ab1"}},{"quote":"Amazon Bedrock is in scope for common compliance standards such as Service and Organization Control (SOC), International Organization for Standardization (ISO), is Health Insurance Portability and Accountability Act (HIPAA) eligible, and customers can use Amazon Bedrock in compliance with the General Data Protection Regulation (GDPR).","source":{"doc":"bedrock-faqs","title":"Build Generative AI Applications with Foundation Models - Amazon Bedrock FAQs","url":"https://aws.amazon.com/bedrock/faqs/","capturedAt":"2026-11-08T22:28:08Z","sha256":"4d2450b6e12b53d764dcf0ae36bb8435349bb764de8a03ab2f52f930fd7a9ab1"}},{"quote":"The Enterprise Frontier Safeguards program plans to enable customer-managed encryption keys and bring your own bucket for storage for automated offline abuse detection.","source":{"doc":"bedrock-abuse-detection","title":"Amazon Bedrock abuse detection","url":"https://docs.aws.amazon.com/bedrock/latest/userguide/abuse-detection.html","capturedAt":"2026-11-08T22:04:45Z","sha256":"0b2c87a70682c3576e1fdb43d8e0a48fbb6409ee390554e264a542b45e0e6d01"}}]}}}],"notes":[{"text":"Bedrock runs automated abuse detection against both AWS's policies and third-party model providers' policies.","cites":[{"quote":"As part of providing the Service, Amazon Bedrock may use automated abuse detection mechanisms to detect activity that violates our, or third-party model providers', terms of service or use policies.","source":{"doc":"bedrock-abuse-detection","title":"Amazon Bedrock abuse detection","url":"https://docs.aws.amazon.com/bedrock/latest/userguide/abuse-detection.html","capturedAt":"2026-11-08T22:04:45Z","sha256":"0b2c87a70682c3576e1fdb43d8e0a48fbb6409ee390554e264a542b45e0e6d01"}}]},{"text":"When abuse detection flags something, AWS may email the account's contact address asking about your usage, and may suspend access if you don't respond.","cites":[{"quote":"These requests are sent to the email address associated with your AWS account, so ensure that your account contact information is current and monitored. AWS may suspend your access to any model or Amazon Bedrock if you fail to comply with applicable terms or policies or are non-responsive.","source":{"doc":"bedrock-abuse-detection","title":"Amazon Bedrock abuse detection","url":"https://docs.aws.amazon.com/bedrock/latest/userguide/abuse-detection.html","capturedAt":"2026-11-08T22:04:45Z","sha256":"0b2c87a70682c3576e1fdb43d8e0a48fbb6409ee390554e264a542b45e0e6d01"}}]},{"text":"Models are deep-copied into AWS-owned deployment accounts that model providers cannot access.","cites":[{"quote":"These accounts are owned and operated by the Amazon Bedrock service team. Model providers don't have any access to those accounts.","source":{"doc":"bedrock-data-protection","title":"Data protection","url":"https://docs.aws.amazon.com/bedrock/latest/userguide/data-protection.html","capturedAt":"2026-11-08T22:04:45Z","sha256":"4bc792e9e6b49d2379bceb9d275a0bbff7e8a1a12b0e1a8ae997505fb972d554"}}]},{"text":"Suspected CSAM in image inputs or outputs may be blocked with a ValidationException error.","cites":[{"quote":"If Amazon Bedrock detects apparent CSAM in your image inputs or outputs, Amazon Bedrock may block the request and return a `ValidationException` (HTTP 400) error in the API response.","source":{"doc":"bedrock-abuse-detection","title":"Amazon Bedrock abuse detection","url":"https://docs.aws.amazon.com/bedrock/latest/userguide/abuse-detection.html","capturedAt":"2026-11-08T22:04:45Z","sha256":"0b2c87a70682c3576e1fdb43d8e0a48fbb6409ee390554e264a542b45e0e6d01"}}]}],"gaps":["The linked Bedrock 'Data retention' page (data-retention.html) wasn't captured. It would state default retention for ordinary traffic and related controls.","Optional model invocation logging (prompts and outputs sent to CloudWatch Logs or S3) isn't described. The only logging mentioned is CloudTrail API activity. The Bedrock 'model invocation logging' user-guide page would answer.","The FAQ captured policy holds only question headings for key security items (whether content leaves the Region, provider access, training, IP indemnity); the answer text wasn't captured.","Ownership of inputs and outputs, and any license to AWS, aren't covered. These would be in the AWS Customer Agreement and AWS Service Terms (Bedrock section).","Eligibility criteria for ZDR and the Enterprise Frontier Safeguards program aren't defined.","Storage of agent memory (Agents, AgentCore), Knowledge Base indexes, and fine-tuning data isn't covered. The relevant Bedrock user-guide pages would answer.","Deletion timelines after account closure, and DPA terms, aren't covered. The AWS GDPR DPA and the Data Privacy FAQ would answer."],"documents":[{"doc":"bedrock-abuse-detection","title":"Amazon Bedrock abuse detection","url":"https://docs.aws.amazon.com/bedrock/latest/userguide/abuse-detection.html","capturedAt":"2026-11-08T22:04:45Z","sha256":"0b2c87a70682c3576e1fdb43d8e0a48fbb6409ee390554e264a542b45e0e6d01"},{"doc":"bedrock-faqs","title":"Build Generative AI Applications with Foundation Models - Amazon Bedrock FAQs","url":"https://aws.amazon.com/bedrock/faqs/","capturedAt":"2026-11-08T22:28:08Z","sha256":"4d2450b6e12b53d764dcf0ae36bb8435349bb764de8a03ab2f52f930fd7a9ab1"},{"doc":"bedrock-data-protection","title":"Data protection","url":"https://docs.aws.amazon.com/bedrock/latest/userguide/data-protection.html","capturedAt":"2026-11-08T22:04:45Z","sha256":"4bc792e9e6b49d2379bceb9d275a0bbff7e8a1a12b0e1a8ae997505fb972d554"}],"url":"https://gjalla.io/data-policies/aws/"},{"id":"cohere","provider":"cohere","name":"Cohere","category":"frontier-lab","checkedOn":"2026-11-08","products":[{"id":"api-trial","name":"Cohere API / SaaS Platform: trial accounts (no payment method on file)","surface":"api","facts":{"default_retention":{"summary":"No retention period is given for trial inputs and outputs. The 30-day figure in the policies is stated only for Enterprise (paying) Users.","status":"not_stated","cites":[]},"deletion_window":{"summary":"You can self-delete your account, and email privacy@cohere.com to delete inputs that contain personal information. No timeframe is given for trial users.","status":"stated","cites":[{"quote":"You can delete your account at any time by selecting “Your Profile” in the Platform, navigating to the “Danger Zone” tab, and clicking on “Delete my Account”.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://cohere.com/privacy","capturedAt":"2026-11-08T22:28:04Z","sha256":"06e5517d57116dd4453bc0fe93553f14bd864244ccc9530ef9edd46d9359965b"}},{"quote":"If personal information is inadvertently included in an input, deletion can be requested by emailing privacy@cohere.com as set out below.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://cohere.com/privacy","capturedAt":"2026-11-08T22:28:04Z","sha256":"06e5517d57116dd4453bc0fe93553f14bd864244ccc9530ef9edd46d9359965b"}}]},"retention_exceptions":{"summary":"Data is kept as long as needed for business or legal reasons, including litigation holds, with no fixed periods. De-identified data can be kept and used for research.","status":"stated","cites":[{"quote":"We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, to meet business or legal requirements, and as otherwise permitted or required by applicable law, including litigation holds.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://cohere.com/privacy","capturedAt":"2026-11-08T22:28:04Z","sha256":"06e5517d57116dd4453bc0fe93553f14bd864244ccc9530ef9edd46d9359965b"}},{"quote":"there is not typically a fixed retention period that will always apply to a particular category of personal information.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://cohere.com/privacy","capturedAt":"2026-11-08T22:28:04Z","sha256":"06e5517d57116dd4453bc0fe93553f14bd864244ccc9530ef9edd46d9359965b"}},{"quote":"We may use De-Identified Information for the purposes described above, such as research, product development, marketing purposes","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://cohere.com/privacy","capturedAt":"2026-11-08T22:28:04Z","sha256":"06e5517d57116dd4453bc0fe93553f14bd864244ccc9530ef9edd46d9359965b"}}]},"zdr":{"summary":"Not available to trial users. Cohere offers ZDR only to enterprise customers who make extra commitments about their usage.","status":"stated","cites":[{"quote":"we only allow ZDR for enterprise customers who can make additional commitments about their usage of the Cohere Services.","source":{"doc":"enterprise-data-commitments","title":"Enterprise Data Commitments","url":"https://cohere.com/enterprise-data-commitments","capturedAt":"2026-11-08T21:39:28Z","sha256":"b8a7f1c67f1e0dcdef5e1d81fea4960c368e13794a6ecfa030da30490c4b0a42"}}]},"training_default":{"summary":"Yes in effect: Cohere may use de-identified trial inputs and outputs for research and to improve model performance and safety. For EU/UK users it relies on legitimate interests, not consent.","status":"stated","cites":[{"quote":"We may use this input and output data to conduct research and development. This includes analyzing usage trends and using inputs/outputs to improve the performance and safety of Cohere Products.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://cohere.com/privacy","capturedAt":"2026-11-08T22:28:04Z","sha256":"06e5517d57116dd4453bc0fe93553f14bd864244ccc9530ef9edd46d9359965b"}},{"quote":"Cohere takes steps to de-identify input and output data prior to any use for research and development purposes.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://cohere.com/privacy","capturedAt":"2026-11-08T22:28:04Z","sha256":"06e5517d57116dd4453bc0fe93553f14bd864244ccc9530ef9edd46d9359965b"}},{"quote":"Section 2.3 (Research and Model Improvement): Analyzing usage patterns and using Trial or Research User Inputs/Outputs to improve the performance and safety of our AI models.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://cohere.com/privacy","capturedAt":"2026-11-08T22:28:04Z","sha256":"06e5517d57116dd4453bc0fe93553f14bd864244ccc9530ef9edd46d9359965b"}},{"quote":"Legitimate Interests: We process your data based on our legitimate interests in operating, securing, and improving our business and AI technologies, including enhancing the performance, reliability, and safety of our AI models.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://cohere.com/privacy","capturedAt":"2026-11-08T22:28:04Z","sha256":"06e5517d57116dd4453bc0fe93553f14bd864244ccc9530ef9edd46d9359965b"}}]},"training_opt_out":{"summary":"No opt-out is described for trial users. The dashboard training toggle is documented in the Enterprise Data Commitments, which apply only to paying customers, so trial users may lack it.","status":"inferred","cites":[{"quote":"Our Enterprise Data Commitments apply to enterprise data of our commercial, paying customers. For the SaaS Platform, this means customers who have a credit card on file in their account.","source":{"doc":"enterprise-data-commitments","title":"Enterprise Data Commitments","url":"https://cohere.com/enterprise-data-commitments","capturedAt":"2026-11-08T21:39:28Z","sha256":"b8a7f1c67f1e0dcdef5e1d81fea4960c368e13794a6ecfa030da30490c4b0a42"}},{"quote":"Enterprise customers can access opt out toggle in the [Cohere dashboard settings.](https://dashboard.cohere.com/data-retention)","source":{"doc":"enterprise-data-commitments","title":"Enterprise Data Commitments","url":"https://cohere.com/enterprise-data-commitments","capturedAt":"2026-11-08T21:39:28Z","sha256":"b8a7f1c67f1e0dcdef5e1d81fea4960c368e13794a6ecfa030da30490c4b0a42"}}]},"human_review":{"summary":"The policies that cover trial users don't say whether people read prompts or outputs.","status":"not_stated","cites":[]},"memory":{"summary":"Not addressed in the captured policies.","status":"not_stated","cites":[]},"connector_data":{"summary":"Not addressed in the captured policies.","status":"not_stated","cites":[]},"agent_actions":{"summary":"Not addressed in the captured policies.","status":"not_stated","cites":[]},"input_ownership":{"summary":"Not said outright. You grant Cohere a license to what you submit, which implies you keep ownership, and you must only upload data you hold rights to.","status":"inferred","cites":[{"quote":"YOU GRANT US A NONEXCLUSIVE, WORLDWIDE, ROYALTY-FREE, IRREVOCABLE, SUBLICENSABLE, AND FULLY PAID-UP RIGHT TO ACCESS, COLLECT, USE, PROCESS, STORE, DISCLOSE AND TRANSMIT ANY DATA, INFORMATION, CONTENT, RECORDS OR FILES","source":{"doc":"terms-of-use","title":"Terms of Use","url":"https://cohere.com/terms-of-use","capturedAt":"2026-11-08T21:38:11Z","sha256":"5fb76d8f24f3c4e6ab557041dbf9ca621e595522ac55702f4e1cdb213673cfb7"}},{"quote":"upload and disseminate only data to which you own all required rights under law and do so only consistent with applicable law;","source":{"doc":"terms-of-use","title":"Terms of Use","url":"https://cohere.com/terms-of-use","capturedAt":"2026-11-08T21:38:11Z","sha256":"5fb76d8f24f3c4e6ab557041dbf9ca621e595522ac55702f4e1cdb213673cfb7"}}]},"output_ownership":{"summary":"The Terms of Use don't say who owns model outputs.","status":"not_stated","cites":[]},"license_to_provider":{"summary":"Irrevocable, worldwide, sublicensable, royalty-free license to everything you submit: to run the service, enforce terms, and improve Cohere's offerings, including sharing with third parties. Survives termination.","status":"stated","cites":[{"quote":"YOU GRANT US A NONEXCLUSIVE, WORLDWIDE, ROYALTY-FREE, IRREVOCABLE, SUBLICENSABLE, AND FULLY PAID-UP RIGHT TO ACCESS, COLLECT, USE, PROCESS, STORE, DISCLOSE AND TRANSMIT ANY DATA, INFORMATION, CONTENT, RECORDS OR FILES","source":{"doc":"terms-of-use","title":"Terms of Use","url":"https://cohere.com/terms-of-use","capturedAt":"2026-11-08T21:38:11Z","sha256":"5fb76d8f24f3c4e6ab557041dbf9ca621e595522ac55702f4e1cdb213673cfb7"}},{"quote":"(III) IMPROVE AND ENHANCE THE COHERE SOLUTION AND OUR OTHER OFFERINfGS AND BENCHMARK THE FOREGOING, INCLUDING BY SHARING API DATA AND FINETUNING DATA WITH THIRD PARTIES WHO MAY USE THE FINETUNING DATA AND API DATA TO PROVIDE SERVICES TO COHERE AND FOR OTHER PURPOSES PERMITTED UNDER THEIR TERMS AND CONDITIONS.","source":{"doc":"terms-of-use","title":"Terms of Use","url":"https://cohere.com/terms-of-use","capturedAt":"2026-11-08T21:38:11Z","sha256":"5fb76d8f24f3c4e6ab557041dbf9ca621e595522ac55702f4e1cdb213673cfb7"}},{"quote":"will survive expiration or termination of these Terms of Use for any reason: Sections 4 (Customer Data and Privacy)","source":{"doc":"terms-of-use","title":"Terms of Use","url":"https://cohere.com/terms-of-use","capturedAt":"2026-11-08T21:38:11Z","sha256":"5fb76d8f24f3c4e6ab557041dbf9ca621e595522ac55702f4e1cdb213673cfb7"}}]},"third_party_sharing":{"summary":"Cohere may share API and fine-tuning data with third parties whose terms may allow own-purpose use. Vendors include ad and analytics firms; cookies may count as a 'sale'.","status":"stated","cites":[{"quote":"(III) IMPROVE AND ENHANCE THE COHERE SOLUTION AND OUR OTHER OFFERINfGS AND BENCHMARK THE FOREGOING, INCLUDING BY SHARING API DATA AND FINETUNING DATA WITH THIRD PARTIES WHO MAY USE THE FINETUNING DATA AND API DATA TO PROVIDE SERVICES TO COHERE AND FOR OTHER PURPOSES PERMITTED UNDER THEIR TERMS AND CONDITIONS.","source":{"doc":"terms-of-use","title":"Terms of Use","url":"https://cohere.com/terms-of-use","capturedAt":"2026-11-08T21:38:11Z","sha256":"5fb76d8f24f3c4e6ab557041dbf9ca621e595522ac55702f4e1cdb213673cfb7"}},{"quote":"ANY FINETUNING DATA OR API DATA SHARED BY COHERE WITH THIRD PARTIES WILL BE ACCESSED, USED, AND OTHERWISE HANDLED BY SUCH THIRD PARTIES IN ACCORDANCE WITH THEIR TERMS AND CONDITIONS, WHICH MAY PERMIT SUCH THIRD PARTY TO USE FINETUNING DATA OR API DATA FOR ITS OWN PURPOSES.","source":{"doc":"terms-of-use","title":"Terms of Use","url":"https://cohere.com/terms-of-use","capturedAt":"2026-11-08T21:38:11Z","sha256":"5fb76d8f24f3c4e6ab557041dbf9ca621e595522ac55702f4e1cdb213673cfb7"}},{"quote":"We use vendors and service providers for services such as cloud computing and data storage, advertising and analytics; communications; and customer support and management.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://cohere.com/privacy","capturedAt":"2026-11-08T22:28:04Z","sha256":"06e5517d57116dd4453bc0fe93553f14bd864244ccc9530ef9edd46d9359965b"}},{"quote":"our disclosures of business contact information, device and online information, professional information and geolocation information (as described above) to our advertising, marketing, and related analytics providers or partners (via cookies and tracking technologies) may qualify a “sale” or “sharing” of personal information under the CCPA.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://cohere.com/privacy","capturedAt":"2026-11-08T22:28:04Z","sha256":"06e5517d57116dd4453bc0fe93553f14bd864244ccc9530ef9edd46d9359965b"}}]},"data_location":{"summary":"Data may be transferred to Canada, the US, the UK and other countries; cloud infrastructure includes GCP in the US. No residency option is described.","status":"stated","cites":[{"quote":"Examples of countries we transfer personal information to include, but are not limited to, Canada, the United States, and the United Kingdom.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://cohere.com/privacy","capturedAt":"2026-11-08T22:28:04Z","sha256":"06e5517d57116dd4453bc0fe93553f14bd864244ccc9530ef9edd46d9359965b"}},{"quote":"Our cloud infrastructure provided by GCP in the United States, for instance, is protected under the EU-US","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://cohere.com/privacy","capturedAt":"2026-11-08T22:28:04Z","sha256":"06e5517d57116dd4453bc0fe93553f14bd864244ccc9530ef9edd46d9359965b"}}]},"enterprise_controls":{"summary":"None for trial accounts. Cohere says to move to an enterprise tier with a commercial agreement and DPA if you need to include personal information.","status":"stated","cites":[{"quote":"If you need to include personal information in inputs to Cohere Products, consider moving to an enterprise tier and entering into a commercial agreement and DPA with Cohere.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://cohere.com/privacy","capturedAt":"2026-11-08T22:28:04Z","sha256":"06e5517d57116dd4453bc0fe93553f14bd864244ccc9530ef9edd46d9359965b"}}]}}},{"id":"saas-platform-paid","name":"Cohere SaaS Platform: paying and enterprise customers","surface":"business","facts":{"default_retention":{"summary":"Prompts and generations are logged and automatically deleted after 30 days, unless an exception applies.","status":"stated","cites":[{"quote":"We automatically delete logged prompts and generations after 30 days, unless we need it to comply with a legal requirement or customer contract, or unless your usage is flagged as potentially violating our terms, including our Usage Policy (e.g. abuse or misuse of our services).","source":{"doc":"enterprise-data-commitments","title":"Enterprise Data Commitments","url":"https://cohere.com/enterprise-data-commitments","capturedAt":"2026-11-08T21:39:28Z","sha256":"b8a7f1c67f1e0dcdef5e1d81fea4960c368e13794a6ecfa030da30490c4b0a42"}},{"quote":"Retention of inputs and outputs on the Platform is generally 30 days for Enterprise Users.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://cohere.com/privacy","capturedAt":"2026-11-08T22:28:04Z","sha256":"06e5517d57116dd4453bc0fe93553f14bd864244ccc9530ef9edd46d9359965b"}}]},"deletion_window":{"summary":"Account self-deletion is processed within 7 days (keys revoked, account data deleted). It does not delete prompts or generations, which expire at 30 days. No manual prompt deletion is described.","status":"stated","cites":[{"quote":"Account deletions are processed automatically within 7 days—your API keys will be revoked and account data (e.g. name, email, organization ID) will be deleted. Deleting your account does not delete prompts or generations, which are deleted automatically after 30 days unless exceptions apply.","source":{"doc":"enterprise-data-commitments","title":"Enterprise Data Commitments","url":"https://cohere.com/enterprise-data-commitments","capturedAt":"2026-11-08T21:39:28Z","sha256":"b8a7f1c67f1e0dcdef5e1d81fea4960c368e13794a6ecfa030da30490c4b0a42"}},{"quote":"For SaaS Platform customers, prompts and generations are deleted automatically after 30 days unless exceptions apply.","source":{"doc":"enterprise-data-commitments","title":"Enterprise Data Commitments","url":"https://cohere.com/enterprise-data-commitments","capturedAt":"2026-11-08T21:39:28Z","sha256":"b8a7f1c67f1e0dcdef5e1d81fea4960c368e13794a6ecfa030da30490c4b0a42"}}]},"retention_exceptions":{"summary":"Kept longer for legal or contract requirements and flagged misuse (prompts and logs may be retained and reviewed). Training-opted data is kept separately. No durations are given for any exception.","status":"stated","cites":[{"quote":"If your usage is flagged as potentially violating our terms, including the Usage Policy, we may retain and review the flagged user prompts and associated logs to enforce our policies.","source":{"doc":"enterprise-data-commitments","title":"Enterprise Data Commitments","url":"https://cohere.com/enterprise-data-commitments","capturedAt":"2026-11-08T21:39:28Z","sha256":"b8a7f1c67f1e0dcdef5e1d81fea4960c368e13794a6ecfa030da30490c4b0a42"}},{"quote":"Data you allow us to use for training purposes may be retained separately in accordance with our agreement with you.","source":{"doc":"enterprise-data-commitments","title":"Enterprise Data Commitments","url":"https://cohere.com/enterprise-data-commitments","capturedAt":"2026-11-08T21:39:28Z","sha256":"b8a7f1c67f1e0dcdef5e1d81fea4960c368e13794a6ecfa030da30490c4b0a42"}},{"quote":"Our safety team may also aggregate flagged prompts and generations after removing customer identifiers to evaluate our models’ ability to detect safety issues and enforce our Usage Policy.","source":{"doc":"enterprise-data-commitments","title":"Enterprise Data Commitments","url":"https://cohere.com/enterprise-data-commitments","capturedAt":"2026-11-08T21:39:28Z","sha256":"b8a7f1c67f1e0dcdef5e1d81fea4960c368e13794a6ecfa030da30490c4b0a42"}}]},"zdr":{"summary":"Enterprise customers who make extra usage commitments can request ZDR via support@cohere.com. Then no prompts or generations are logged, but usage data is still collected.","status":"stated","cites":[{"quote":"we only allow ZDR for enterprise customers who can make additional commitments about their usage of the Cohere Services.","source":{"doc":"enterprise-data-commitments","title":"Enterprise Data Commitments","url":"https://cohere.com/enterprise-data-commitments","capturedAt":"2026-11-08T21:39:28Z","sha256":"b8a7f1c67f1e0dcdef5e1d81fea4960c368e13794a6ecfa030da30490c4b0a42"}},{"quote":"ZDR does not affect usage data, which Cohere still receives. Contact support@cohere.com to make a ZDR request with a copy to your sales representative, if you have one.","source":{"doc":"enterprise-data-commitments","title":"Enterprise Data Commitments","url":"https://cohere.com/enterprise-data-commitments","capturedAt":"2026-11-08T21:39:28Z","sha256":"b8a7f1c67f1e0dcdef5e1d81fea4960c368e13794a6ecfa030da30490c4b0a42"}},{"quote":"If you have been approved for zero data retention, Cohere does not log any customer prompts or generations.","source":{"doc":"enterprise-data-commitments","title":"Enterprise Data Commitments","url":"https://cohere.com/enterprise-data-commitments","capturedAt":"2026-11-08T21:39:28Z","sha256":"b8a7f1c67f1e0dcdef5e1d81fea4960c368e13794a6ecfa030da30490c4b0a42"}}]},"training_default":{"summary":"Default not stated. 'Opt out' wording suggests training unless toggled off, but the training notice says 'Where a user has given Cohere permission', implying opt-in. Unresolved.","status":"inferred","cites":[{"quote":"You can opt out from your prompts and generations being used to train Cohere models in your dashboard settings at any time.","source":{"doc":"enterprise-data-commitments","title":"Enterprise Data Commitments","url":"https://cohere.com/enterprise-data-commitments","capturedAt":"2026-11-08T21:39:28Z","sha256":"b8a7f1c67f1e0dcdef5e1d81fea4960c368e13794a6ecfa030da30490c4b0a42"}},{"quote":"We filter and strip common types of personal information from prompts and generations before they are made available for possible use in training for Cohere models (if you are opted in).","source":{"doc":"enterprise-data-commitments","title":"Enterprise Data Commitments","url":"https://cohere.com/enterprise-data-commitments","capturedAt":"2026-11-08T21:39:28Z","sha256":"b8a7f1c67f1e0dcdef5e1d81fea4960c368e13794a6ecfa030da30490c4b0a42"}},{"quote":"Where a user has given Cohere permission to use inputs and outputs for model training, we take steps to de-identify and strip personal information that may appear in inputs or outputs prior to use in model training.","source":{"doc":"model-training-privacy-notice","title":"Model Training Privacy Notice","url":"https://cohere.com/model-training-privacy-notice","capturedAt":"2026-11-08T21:39:28Z","sha256":"46cbbbd31e39315324ed076081c6a4f24a0960c72e703ca8cd4182b04ecbfdb0"}}]},"training_opt_out":{"summary":"Switch the 'Data Controls' toggle off in settings. It applies only to data created after the change; your org's administrator may control access to the setting.","status":"stated","cites":[{"quote":"To verify and update your settings, select “Data Controls” under your Settings in the left hand menu bar of the Cohere Platform. Adjust the toggle to ‘Off’ to opt out.","source":{"doc":"enterprise-data-commitments","title":"Enterprise Data Commitments","url":"https://cohere.com/enterprise-data-commitments","capturedAt":"2026-11-08T21:39:28Z","sha256":"b8a7f1c67f1e0dcdef5e1d81fea4960c368e13794a6ecfa030da30490c4b0a42"}},{"quote":"Your change in settings will apply to data created after you make that change.","source":{"doc":"enterprise-data-commitments","title":"Enterprise Data Commitments","url":"https://cohere.com/enterprise-data-commitments","capturedAt":"2026-11-08T21:39:28Z","sha256":"b8a7f1c67f1e0dcdef5e1d81fea4960c368e13794a6ecfa030da30490c4b0a42"}},{"quote":"Check with your organization’s administrator if you do not have access to the settings page, or contact us at support@cohere.com.","source":{"doc":"enterprise-data-commitments","title":"Enterprise Data Commitments","url":"https://cohere.com/enterprise-data-commitments","capturedAt":"2026-11-08T21:39:28Z","sha256":"b8a7f1c67f1e0dcdef5e1d81fea4960c368e13794a6ecfa030da30490c4b0a42"}}]},"human_review":{"summary":"Safety and security teams may review prompts, generations and logs when misuse is suspected. Authorized employees and service providers can access logs for support, legal compliance and safety.","status":"stated","cites":[{"quote":"If we detect possible misuse of our SaaS Platform, our safety and security teams may review user prompts, generations, and logs to enforce our customer agreements, including our Usage Policy, and secure our services from misuse.","source":{"doc":"enterprise-data-commitments","title":"Enterprise Data Commitments","url":"https://cohere.com/enterprise-data-commitments","capturedAt":"2026-11-08T21:39:28Z","sha256":"b8a7f1c67f1e0dcdef5e1d81fea4960c368e13794a6ecfa030da30490c4b0a42"}},{"quote":"Access to logs containing prompts and generations is limited to authorized employees and service providers bound by confidentiality and security controls that require access for engineering support, legal compliance, and safety and security monitoring.","source":{"doc":"enterprise-data-commitments","title":"Enterprise Data Commitments","url":"https://cohere.com/enterprise-data-commitments","capturedAt":"2026-11-08T21:39:28Z","sha256":"b8a7f1c67f1e0dcdef5e1d81fea4960c368e13794a6ecfa030da30490c4b0a42"}}]},"memory":{"summary":"Not addressed in the captured policies.","status":"not_stated","cites":[]},"connector_data":{"summary":"Not addressed. North and Compass are named as products, but their handling of connected-account data is not described.","status":"not_stated","cites":[]},"agent_actions":{"summary":"Not addressed in the captured policies.","status":"not_stated","cites":[]},"input_ownership":{"summary":"Only a marketing line ('your data stays yours'). Customer Data is governed by the enterprise agreement, which is not in the captured policies.","status":"inferred","cites":[{"quote":"Opt out of model training at any time — your data stays yours.","source":{"doc":"security","title":"AI Security and Data Protection","url":"https://cohere.com/security","capturedAt":"2026-11-08T21:38:11Z","sha256":"d257b5a92d23af32f545e39b3837c0d33b320d3a87aa33418fbd89e35f7925f4"}},{"quote":"Cohere’s use of Customer Data is governed by the terms and conditions of the enterprise agreement and, where applicable, the Data Processing Addendum entered into between the parties.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://cohere.com/privacy","capturedAt":"2026-11-08T22:28:04Z","sha256":"06e5517d57116dd4453bc0fe93553f14bd864244ccc9530ef9edd46d9359965b"}}]},"output_ownership":{"summary":"Not addressed; the enterprise or subscription agreement that would cover it is not in the captured policies.","status":"not_stated","cites":[]},"license_to_provider":{"summary":"The Terms of Use's broad irrevocable license likely applies unless your Subscription or enterprise agreement overrides it. Those agreements aren't in the captured policies.","status":"inferred","cites":[{"quote":"YOU GRANT US A NONEXCLUSIVE, WORLDWIDE, ROYALTY-FREE, IRREVOCABLE, SUBLICENSABLE, AND FULLY PAID-UP RIGHT TO ACCESS, COLLECT, USE, PROCESS, STORE, DISCLOSE AND TRANSMIT ANY DATA, INFORMATION, CONTENT, RECORDS OR FILES","source":{"doc":"terms-of-use","title":"Terms of Use","url":"https://cohere.com/terms-of-use","capturedAt":"2026-11-08T21:38:11Z","sha256":"5fb76d8f24f3c4e6ab557041dbf9ca621e595522ac55702f4e1cdb213673cfb7"}},{"quote":"if there is a conflict or inconsistency between the terms and conditions of your Subscription Agreement and these Terms of Use, then the provisions of the Subscription Agreement will govern to the extent of such conflict or inconsistency.","source":{"doc":"terms-of-use","title":"Terms of Use","url":"https://cohere.com/terms-of-use","capturedAt":"2026-11-08T21:38:11Z","sha256":"5fb76d8f24f3c4e6ab557041dbf9ca621e595522ac55702f4e1cdb213673cfb7"}},{"quote":"This Policy does not apply to Customer Data (i.e. inputs and outputs) associated with the use of Cohere Products by Enterprise Users under an enterprise agreement.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://cohere.com/privacy","capturedAt":"2026-11-08T22:28:04Z","sha256":"06e5517d57116dd4453bc0fe93553f14bd864244ccc9530ef9edd46d9359965b"}}]},"third_party_sharing":{"summary":"Service providers and subprocessors (listed on the Trust Center) can access logs. CSAM is reported to authorities. Whether the Terms' third-party data-sharing clause applies to paid accounts isn't clear.","status":"stated","cites":[{"quote":"You can view a list of sub-processors by visiting Cohere’s [Trust Center](https://cohere-inc.secureframetrust.com/).","source":{"doc":"enterprise-data-commitments","title":"Enterprise Data Commitments","url":"https://cohere.com/enterprise-data-commitments","capturedAt":"2026-11-08T21:39:28Z","sha256":"b8a7f1c67f1e0dcdef5e1d81fea4960c368e13794a6ecfa030da30490c4b0a42"}},{"quote":"We use vendors and service providers for services such as cloud computing and data storage, advertising and analytics; communications; and customer support and management.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://cohere.com/privacy","capturedAt":"2026-11-08T22:28:04Z","sha256":"06e5517d57116dd4453bc0fe93553f14bd864244ccc9530ef9edd46d9359965b"}},{"quote":"We will report child sexual abuse material that we become aware of to competent authorities and other organizations as appropriate.","source":{"doc":"data-statement","title":"Data statement","url":"https://docs.cohere.com/docs/usage-policy","capturedAt":"2026-11-08T22:19:39Z","sha256":"56e58a8f8d0b806d4f19b7df8bc490e16d2c14c5711edf9df111db68c8b90977"}}]},"data_location":{"summary":"Data may be processed in Canada, the US, the UK and elsewhere, including GCP in the US. No SaaS residency option is described; private deployment is the alternative.","status":"stated","cites":[{"quote":"Examples of countries we transfer personal information to include, but are not limited to, Canada, the United States, and the United Kingdom.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://cohere.com/privacy","capturedAt":"2026-11-08T22:28:04Z","sha256":"06e5517d57116dd4453bc0fe93553f14bd864244ccc9530ef9edd46d9359965b"}},{"quote":"Our cloud infrastructure provided by GCP in the United States, for instance, is protected under the EU-US","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://cohere.com/privacy","capturedAt":"2026-11-08T22:28:04Z","sha256":"06e5517d57116dd4453bc0fe93553f14bd864244ccc9530ef9edd46d9359965b"}},{"quote":"Users of the Platform or Cohere APIs can consult our list of [*sub-processors*](https://trustcenter.cohere.com/subprocessors), which includes data processing locations.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://cohere.com/privacy","capturedAt":"2026-11-08T22:28:04Z","sha256":"06e5517d57116dd4453bc0fe93553f14bd864244ccc9530ef9edd46d9359965b"}}]},"enterprise_controls":{"summary":"DPA on request, training toggle, ZDR, SOC 2/ISO reports, just-in-time access. The security page claims customizable retention but gives no details. SSO and audit logs aren't mentioned.","status":"stated","cites":[{"quote":"Contact privacy@cohere.com if you are a SaaS Platform customer and need a Data Processing Addendum.","source":{"doc":"enterprise-data-commitments","title":"Enterprise Data Commitments","url":"https://cohere.com/enterprise-data-commitments","capturedAt":"2026-11-08T21:39:28Z","sha256":"b8a7f1c67f1e0dcdef5e1d81fea4960c368e13794a6ecfa030da30490c4b0a42"}},{"quote":"request a copy of our certifications (including ISO 27001 and ISO 42001) or of our SOC 2 Type II Report","source":{"doc":"enterprise-data-commitments","title":"Enterprise Data Commitments","url":"https://cohere.com/enterprise-data-commitments","capturedAt":"2026-11-08T21:39:28Z","sha256":"b8a7f1c67f1e0dcdef5e1d81fea4960c368e13794a6ecfa030da30490c4b0a42"}},{"quote":"Cohere relies on just-in-time (JIT) techniques to manage who has access to our system and implements role-based accesses based on the least privilege principle.","source":{"doc":"enterprise-data-commitments","title":"Enterprise Data Commitments","url":"https://cohere.com/enterprise-data-commitments","capturedAt":"2026-11-08T21:39:28Z","sha256":"b8a7f1c67f1e0dcdef5e1d81fea4960c368e13794a6ecfa030da30490c4b0a42"}},{"quote":"Maintain full control over your data with customizable handling and retention settings.","source":{"doc":"security","title":"AI Security and Data Protection","url":"https://cohere.com/security","capturedAt":"2026-11-08T21:38:11Z","sha256":"d257b5a92d23af32f545e39b3837c0d33b320d3a87aa33418fbd89e35f7925f4"}}]}}},{"id":"private-deployment","name":"Private and third-party cloud deployments (VPC, on-premises, Model Vault, OCI/Azure/AWS/GCP)","surface":"enterprise","facts":{"default_retention":{"summary":"Cohere says it receives no prompts or outputs, so retention is up to you or your cloud provider. It may still receive some usage data.","status":"stated","cites":[{"quote":"In third-party cloud AI/ML platforms and private deployment solutions, Cohere does not receive any customer inputs (prompts) or outputs (generations).","source":{"doc":"enterprise-data-commitments","title":"Enterprise Data Commitments","url":"https://cohere.com/enterprise-data-commitments","capturedAt":"2026-11-08T21:39:28Z","sha256":"b8a7f1c67f1e0dcdef5e1d81fea4960c368e13794a6ecfa030da30490c4b0a42"}},{"quote":"We may also receive certain usage data for third-party cloud AI/ML platform or private deployments, in accordance with our commercial agreements.","source":{"doc":"enterprise-data-commitments","title":"Enterprise Data Commitments","url":"https://cohere.com/enterprise-data-commitments","capturedAt":"2026-11-08T21:39:28Z","sha256":"b8a7f1c67f1e0dcdef5e1d81fea4960c368e13794a6ecfa030da30490c4b0a42"}}]},"deletion_window":{"summary":"Not addressed; Cohere says it holds no prompts or outputs for these deployments.","status":"not_stated","cites":[]},"retention_exceptions":{"summary":"Not addressed. How long Cohere keeps usage data it receives from these deployments is not stated.","status":"not_stated","cites":[]},"zdr":{"summary":"No ZDR setting is described; Cohere says it receives no prompts or outputs here and points customers with sensitive data to these deployments.","status":"stated","cites":[{"quote":"In third-party cloud AI/ML platforms and private deployment solutions, Cohere does not receive any customer inputs (prompts) or outputs (generations).","source":{"doc":"enterprise-data-commitments","title":"Enterprise Data Commitments","url":"https://cohere.com/enterprise-data-commitments","capturedAt":"2026-11-08T21:39:28Z","sha256":"b8a7f1c67f1e0dcdef5e1d81fea4960c368e13794a6ecfa030da30490c4b0a42"}},{"quote":"If you are dealing with sensitive data, you can also consider a third-party cloud AI/ML platform or private deployment.","source":{"doc":"enterprise-data-commitments","title":"Enterprise Data Commitments","url":"https://cohere.com/enterprise-data-commitments","capturedAt":"2026-11-08T21:39:28Z","sha256":"b8a7f1c67f1e0dcdef5e1d81fea4960c368e13794a6ecfa030da30490c4b0a42"}}]},"training_default":{"summary":"No. Cohere says data in these deployments is never accessible to it and it does not train on it.","status":"stated","cites":[{"quote":"The data remains within the enterprise customer’s or the third-party cloud provider’s controlled environment and is never accessible to or used by Cohere (for example, we do not train our models on it).","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://cohere.com/privacy","capturedAt":"2026-11-08T22:28:04Z","sha256":"06e5517d57116dd4453bc0fe93553f14bd864244ccc9530ef9edd46d9359965b"}}]},"training_opt_out":{"summary":"No opt-out is needed; Cohere says it has no access to data processed in these deployments.","status":"stated","cites":[{"quote":"Cohere does not have access to data processed in connection with the use of Cohere models or products in Private Deployments or Deployments on Third-Party Managed AI services (e.g. on AWS, Azure, or GCP).","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://cohere.com/privacy","capturedAt":"2026-11-08T22:28:04Z","sha256":"06e5517d57116dd4453bc0fe93553f14bd864244ccc9530ef9edd46d9359965b"}}]},"human_review":{"summary":"Cohere says it won't have access to your infrastructure or data, so Cohere staff don't review it.","status":"stated","cites":[{"quote":"We won’t have access to your computing infrastructure or data","source":{"doc":"security","title":"AI Security and Data Protection","url":"https://cohere.com/security","capturedAt":"2026-11-08T21:38:11Z","sha256":"d257b5a92d23af32f545e39b3837c0d33b320d3a87aa33418fbd89e35f7925f4"}}]},"memory":{"summary":"Not addressed in the captured policies.","status":"not_stated","cites":[]},"connector_data":{"summary":"Not addressed. North and Compass can run in private deployments, but their connector handling is not described.","status":"not_stated","cites":[]},"agent_actions":{"summary":"Not addressed in the captured policies.","status":"not_stated","cites":[]},"input_ownership":{"summary":"Not addressed; governed by commercial agreements not in the captured policies.","status":"not_stated","cites":[]},"output_ownership":{"summary":"Not addressed; governed by commercial agreements not in the captured policies.","status":"not_stated","cites":[]},"license_to_provider":{"summary":"Not addressed; governed by commercial agreements not in the captured policies.","status":"not_stated","cites":[]},"third_party_sharing":{"summary":"Data stays with you or your cloud provider (OCI, Azure, AWS, GCP), whose own security terms apply. Cohere may still receive usage data under the commercial agreement.","status":"stated","cites":[{"quote":"Our models run on any cloud AI/ML platform, including OCI, Azure, AWS, and Google CP","source":{"doc":"security","title":"AI Security and Data Protection","url":"https://cohere.com/security","capturedAt":"2026-11-08T21:38:11Z","sha256":"d257b5a92d23af32f545e39b3837c0d33b320d3a87aa33418fbd89e35f7925f4"}},{"quote":"You’ll benefit from third-party cloud security standards and certifications","source":{"doc":"security","title":"AI Security and Data Protection","url":"https://cohere.com/security","capturedAt":"2026-11-08T21:38:11Z","sha256":"d257b5a92d23af32f545e39b3837c0d33b320d3a87aa33418fbd89e35f7925f4"}},{"quote":"We may also receive certain usage data for third-party cloud AI/ML platform or private deployments, in accordance with our commercial agreements.","source":{"doc":"enterprise-data-commitments","title":"Enterprise Data Commitments","url":"https://cohere.com/enterprise-data-commitments","capturedAt":"2026-11-08T21:39:28Z","sha256":"b8a7f1c67f1e0dcdef5e1d81fea4960c368e13794a6ecfa030da30490c4b0a42"}}]},"data_location":{"summary":"Your choice: your VPC, on-premises, a third-party cloud, or a dedicated Cohere-managed 'Model Vault'.","status":"stated","cites":[{"quote":"We can bring our products and models to your infrastructure through virtual private cloud (VPC), on-premises deployments or Model Vault","source":{"doc":"security","title":"AI Security and Data Protection","url":"https://cohere.com/security","capturedAt":"2026-11-08T21:38:11Z","sha256":"d257b5a92d23af32f545e39b3837c0d33b320d3a87aa33418fbd89e35f7925f4"}},{"quote":"Deploy through your virtual private cloud (VPC), on-premises setup, or dedicated, Cohere-managed Model Vault.","source":{"doc":"security","title":"AI Security and Data Protection","url":"https://cohere.com/security","capturedAt":"2026-11-08T21:38:11Z","sha256":"d257b5a92d23af32f545e39b3837c0d33b320d3a87aa33418fbd89e35f7925f4"}}]},"enterprise_controls":{"summary":"You can customize security configurations and controls. Cohere says no DPA is needed because it receives no prompts or generations.","status":"stated","cites":[{"quote":"You can customize your security configurations and controls","source":{"doc":"security","title":"AI Security and Data Protection","url":"https://cohere.com/security","capturedAt":"2026-11-08T21:38:11Z","sha256":"d257b5a92d23af32f545e39b3837c0d33b320d3a87aa33418fbd89e35f7925f4"}},{"quote":"No DPA is required for private deployments and deployments on third-party cloud AI/ML platforms as Cohere will not receive any customer prompts/generations.","source":{"doc":"enterprise-data-commitments","title":"Enterprise Data Commitments","url":"https://cohere.com/enterprise-data-commitments","capturedAt":"2026-11-08T21:39:28Z","sha256":"b8a7f1c67f1e0dcdef5e1d81fea4960c368e13794a6ecfa030da30490c4b0a42"}}]}}}],"notes":[{"text":"The Terms of Use (last updated 2022) grant Cohere an irrevocable, sublicensable license to submitted data, including sharing API and fine-tuning data with third parties whose terms may let them use it for their own purposes. Section 4 survives termination.","cites":[{"quote":"(III) IMPROVE AND ENHANCE THE COHERE SOLUTION AND OUR OTHER OFFERINfGS AND BENCHMARK THE FOREGOING, INCLUDING BY SHARING API DATA AND FINETUNING DATA WITH THIRD PARTIES WHO MAY USE THE FINETUNING DATA AND API DATA TO PROVIDE SERVICES TO COHERE AND FOR OTHER PURPOSES PERMITTED UNDER THEIR TERMS AND CONDITIONS.","source":{"doc":"terms-of-use","title":"Terms of Use","url":"https://cohere.com/terms-of-use","capturedAt":"2026-11-08T21:38:11Z","sha256":"5fb76d8f24f3c4e6ab557041dbf9ca621e595522ac55702f4e1cdb213673cfb7"}},{"quote":"ANY FINETUNING DATA OR API DATA SHARED BY COHERE WITH THIRD PARTIES WILL BE ACCESSED, USED, AND OTHERWISE HANDLED BY SUCH THIRD PARTIES IN ACCORDANCE WITH THEIR TERMS AND CONDITIONS, WHICH MAY PERMIT SUCH THIRD PARTY TO USE FINETUNING DATA OR API DATA FOR ITS OWN PURPOSES.","source":{"doc":"terms-of-use","title":"Terms of Use","url":"https://cohere.com/terms-of-use","capturedAt":"2026-11-08T21:38:11Z","sha256":"5fb76d8f24f3c4e6ab557041dbf9ca621e595522ac55702f4e1cdb213673cfb7"}},{"quote":"will survive expiration or termination of these Terms of Use for any reason: Sections 4 (Customer Data and Privacy)","source":{"doc":"terms-of-use","title":"Terms of Use","url":"https://cohere.com/terms-of-use","capturedAt":"2026-11-08T21:38:11Z","sha256":"5fb76d8f24f3c4e6ab557041dbf9ca621e595522ac55702f4e1cdb213673cfb7"}}]},{"text":"On the paid SaaS Platform, deleting your account does not delete your prompts or generations; they expire on the 30-day schedule, or later if an exception applies.","cites":[{"quote":"Deleting your account does not delete prompts or generations, which are deleted automatically after 30 days unless exceptions apply.","source":{"doc":"enterprise-data-commitments","title":"Enterprise Data Commitments","url":"https://cohere.com/enterprise-data-commitments","capturedAt":"2026-11-08T21:39:28Z","sha256":"b8a7f1c67f1e0dcdef5e1d81fea4960c368e13794a6ecfa030da30490c4b0a42"}}]},{"text":"ZDR is enterprise-only and does not stop Cohere receiving usage data (frequency, features, token counts).","cites":[{"quote":"ZDR does not affect usage data, which Cohere still receives.","source":{"doc":"enterprise-data-commitments","title":"Enterprise Data Commitments","url":"https://cohere.com/enterprise-data-commitments","capturedAt":"2026-11-08T21:39:28Z","sha256":"b8a7f1c67f1e0dcdef5e1d81fea4960c368e13794a6ecfa030da30490c4b0a42"}},{"quote":"Usage data can include frequency and duration of usage, features accessed, user preferences, and aggregate counts of input prompt tokens.","source":{"doc":"enterprise-data-commitments","title":"Enterprise Data Commitments","url":"https://cohere.com/enterprise-data-commitments","capturedAt":"2026-11-08T21:39:28Z","sha256":"b8a7f1c67f1e0dcdef5e1d81fea4960c368e13794a6ecfa030da30490c4b0a42"}}]},{"text":"The security page lists 'Model Vault' among private deployments that Cohere 'won't have access to', but also describes it as Cohere-managed. The captured policies don't reconcile the two.","cites":[{"quote":"Deploy through your virtual private cloud (VPC), on-premises setup, or dedicated, Cohere-managed Model Vault.","source":{"doc":"security","title":"AI Security and Data Protection","url":"https://cohere.com/security","capturedAt":"2026-11-08T21:38:11Z","sha256":"d257b5a92d23af32f545e39b3837c0d33b320d3a87aa33418fbd89e35f7925f4"}},{"quote":"We won’t have access to your computing infrastructure or data","source":{"doc":"security","title":"AI Security and Data Protection","url":"https://cohere.com/security","capturedAt":"2026-11-08T21:38:11Z","sha256":"d257b5a92d23af32f545e39b3837c0d33b320d3a87aa33418fbd89e35f7925f4"}}]},{"text":"The Terms of Use never address output ownership. They define 'Content' broadly as materials provided through the service and bar users from distributing it, which could be read to cover outputs.","cites":[{"quote":"any text, pictures, media, data, information and other materials or content (collectively, the “**Content**”) contained on or provided through the foregoing (a) to (c)","source":{"doc":"terms-of-use","title":"Terms of Use","url":"https://cohere.com/terms-of-use","capturedAt":"2026-11-08T21:38:11Z","sha256":"5fb76d8f24f3c4e6ab557041dbf9ca621e595522ac55702f4e1cdb213673cfb7"}},{"quote":"publish, market, advertise or in any way distribute the Content;","source":{"doc":"terms-of-use","title":"Terms of Use","url":"https://cohere.com/terms-of-use","capturedAt":"2026-11-08T21:38:11Z","sha256":"5fb76d8f24f3c4e6ab557041dbf9ca621e595522ac55702f4e1cdb213673cfb7"}}]},{"text":"Cohere says its products are for business use only, not personal or household use. No consumer chat app is described in the captured policies.","cites":[{"quote":"you will not use the Cohere Solution for personal, family or household purposes","source":{"doc":"terms-of-use","title":"Terms of Use","url":"https://cohere.com/terms-of-use","capturedAt":"2026-11-08T21:38:11Z","sha256":"5fb76d8f24f3c4e6ab557041dbf9ca621e595522ac55702f4e1cdb213673cfb7"}},{"quote":"Cohere Products are not intended to be used by minors (children) and are not for personal or household use.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://cohere.com/privacy","capturedAt":"2026-11-08T22:28:04Z","sha256":"06e5517d57116dd4453bc0fe93553f14bd864244ccc9530ef9edd46d9359965b"}}]},{"text":"If you sign up for partner offers, Cohere may share your email and other authorized personal information with partners and be paid for it.","cites":[{"quote":"You understand that Cohere may receive financial remuneration in exchange for sharing your email address and other Personal Information you authorize with partners if you choose to sign up for an offer.","source":{"doc":"terms-of-use","title":"Terms of Use","url":"https://cohere.com/terms-of-use","capturedAt":"2026-11-08T21:38:11Z","sha256":"5fb76d8f24f3c4e6ab557041dbf9ca621e595522ac55702f4e1cdb213673cfb7"}}]},{"text":"The captured policy saved as 'data-statement' is actually Cohere's Usage Policy (docs.cohere.com/docs/usage-policy), not the data statement the Terms of Use incorporate.","cites":[{"quote":"Our Usage Policy applies to all Cohere products and services, including Cohere models, software, applications, and application programming interface","source":{"doc":"data-statement","title":"Data statement","url":"https://docs.cohere.com/docs/usage-policy","capturedAt":"2026-11-08T22:19:39Z","sha256":"56e58a8f8d0b806d4f19b7df8bc490e16d2c14c5711edf9df111db68c8b90977"}}]},{"text":"For EU/UK users, Cohere relies on legitimate interests, not consent, to use Trial or Research User inputs and outputs to improve its AI models. Security and compliance processing covers 'All relevant data'.","cites":[{"quote":"Section 2.3 (Research and Model Improvement): Analyzing usage patterns and using Trial or Research User Inputs/Outputs to improve the performance and safety of our AI models.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://cohere.com/privacy","capturedAt":"2026-11-08T22:28:04Z","sha256":"06e5517d57116dd4453bc0fe93553f14bd864244ccc9530ef9edd46d9359965b"}},{"quote":"Legitimate Interests: We process your data based on our legitimate interests in operating, securing, and improving our business and AI technologies, including enhancing the performance, reliability, and safety of our AI models.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://cohere.com/privacy","capturedAt":"2026-11-08T22:28:04Z","sha256":"06e5517d57116dd4453bc0fe93553f14bd864244ccc9530ef9edd46d9359965b"}},{"quote":"Section 2.6 (Security and Compliance): Detecting abuse and ensuring security of Cohere Products, investigating breaches of agreements or policies, complying with legal obligations.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://cohere.com/privacy","capturedAt":"2026-11-08T22:28:04Z","sha256":"06e5517d57116dd4453bc0fe93553f14bd864244ccc9530ef9edd46d9359965b"}}]},{"text":"The California table lists the categories Cohere collects (contact, payment, login, device, professional, geolocation, employment data) and says one use is advertising to enterprise customers. Prompts and outputs aren't listed, and the section excludes data Cohere handles as a service provider to enterprise customers.","cites":[{"quote":"Advertise our company and products to enterprise customers and their personnel.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://cohere.com/privacy","capturedAt":"2026-11-08T22:28:04Z","sha256":"06e5517d57116dd4453bc0fe93553f14bd864244ccc9530ef9edd46d9359965b"}},{"quote":"It does not cover personal information or practices that are exempt from the California Consumer Privacy Act (“**CCPA**”), and it does not cover personal information about individuals who reside outside of California. It also does not cover personal information that we handle as a service provider to our enterprise customers.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://cohere.com/privacy","capturedAt":"2026-11-08T22:28:04Z","sha256":"06e5517d57116dd4453bc0fe93553f14bd864244ccc9530ef9edd46d9359965b"}}]}],"gaps":["How long trial-account inputs and outputs are kept, and whether trial users can opt out of R&D use: not stated. Likely in API docs or the Trust Center.","Data handling for North and Compass (memory, connectors to email, calendar or drive, agent action logs): not covered. Likely in North product docs or its privacy notice.","Ownership of inputs and outputs and the license on paid or enterprise accounts: governed by Subscription and enterprise agreements and the DPA, none of which were captured.","How long flagged or legal-hold data and usage data are kept: no durations given. Likely in the DPA or Trust Center.","Subprocessors and processing locations: referenced but not captured (trustcenter.cohere.com/subprocessors).","The data statement the Terms of Use incorporate (docs.cohere.ai/data-statement) was not captured; the 'data-statement' captured policy is the Usage Policy.","The Terms of Use captured policy is dated September 7, 2022 and uses cohere.ai URLs. Check whether a newer Terms of Use or SaaS agreement replaces it.","SSO, audit logs and custom retention settings for SaaS customers: not described. Likely on the Trust Center or in enterprise docs."],"documents":[{"doc":"security","title":"AI Security and Data Protection","url":"https://cohere.com/security","capturedAt":"2026-11-08T21:38:11Z","sha256":"d257b5a92d23af32f545e39b3837c0d33b320d3a87aa33418fbd89e35f7925f4"},{"doc":"data-statement","title":"Data statement","url":"https://docs.cohere.com/docs/usage-policy","capturedAt":"2026-11-08T22:19:39Z","sha256":"56e58a8f8d0b806d4f19b7df8bc490e16d2c14c5711edf9df111db68c8b90977"},{"doc":"enterprise-data-commitments","title":"Enterprise Data Commitments","url":"https://cohere.com/enterprise-data-commitments","capturedAt":"2026-11-08T21:39:28Z","sha256":"b8a7f1c67f1e0dcdef5e1d81fea4960c368e13794a6ecfa030da30490c4b0a42"},{"doc":"model-training-privacy-notice","title":"Model Training Privacy Notice","url":"https://cohere.com/model-training-privacy-notice","capturedAt":"2026-11-08T21:39:28Z","sha256":"46cbbbd31e39315324ed076081c6a4f24a0960c72e703ca8cd4182b04ecbfdb0"},{"doc":"privacy-policy","title":"Privacy Policy","url":"https://cohere.com/privacy","capturedAt":"2026-11-08T22:28:04Z","sha256":"06e5517d57116dd4453bc0fe93553f14bd864244ccc9530ef9edd46d9359965b"},{"doc":"terms-of-use","title":"Terms of Use","url":"https://cohere.com/terms-of-use","capturedAt":"2026-11-08T21:38:11Z","sha256":"5fb76d8f24f3c4e6ab557041dbf9ca621e595522ac55702f4e1cdb213673cfb7"}],"url":"https://gjalla.io/data-policies/cohere/"},{"id":"deepseek","provider":"deepseek","name":"DeepSeek","category":"frontier-lab","checkedOn":"2026-11-08","products":[{"id":"app","name":"DeepSeek chat (app and website)","surface":"consumer","facts":{"default_retention":{"summary":"Inputs (prompts, files, chat history) and account data are kept for as long as you have an account. No fixed period in days is given.","status":"stated","cites":[{"quote":"For example, when we process your Personal Data to provide you with the Services, we keep this Personal Data for as long as you have an account. This Personal Data includes your account Personal Data, input and payment Personal Data.","source":{"doc":"privacy-policy","title":"DeepSeek Privacy Policy","url":"https://cdn.deepseek.com/policies/en-US/deepseek-privacy-policy.html","capturedAt":"2026-11-08T22:28:10Z","sha256":"9ed11d792dceb8aaf77bef2d8340fa8e518b3c1eefb51a71c8932f9999867172"}},{"quote":"We retain Personal Data for as long as necessary to provide our Services and for the other purposes set out in this Privacy Policy.","source":{"doc":"privacy-policy","title":"DeepSeek Privacy Policy","url":"https://cdn.deepseek.com/policies/en-US/deepseek-privacy-policy.html","capturedAt":"2026-11-08T22:28:10Z","sha256":"9ed11d792dceb8aaf77bef2d8340fa8e518b3c1eefb51a71c8932f9999867172"}}]},"deletion_window":{"summary":"You can delete chat history in settings, or delete your account (irreversible). No timeframe for actual erasure is stated, and some data may be kept after deletion.","status":"stated","cites":[{"quote":"Should you choose to do so, you may also copy or delete your chat history via your settings.","source":{"doc":"privacy-policy","title":"DeepSeek Privacy Policy","url":"https://cdn.deepseek.com/policies/en-US/deepseek-privacy-policy.html","capturedAt":"2026-11-08T22:28:10Z","sha256":"9ed11d792dceb8aaf77bef2d8340fa8e518b3c1eefb51a71c8932f9999867172"}},{"quote":"If you choose to delete your account, you will not be able to reactivate your account or retrieve any of the content or Personal Data in connection with your account.","source":{"doc":"privacy-policy","title":"DeepSeek Privacy Policy","url":"https://cdn.deepseek.com/policies/en-US/deepseek-privacy-policy.html","capturedAt":"2026-11-08T22:28:10Z","sha256":"9ed11d792dceb8aaf77bef2d8340fa8e518b3c1eefb51a71c8932f9999867172"}},{"quote":"However, even after the user deletes the account, we still have the right to:","source":{"doc":"terms-of-use","title":"DeepSeek Terms of Use","url":"https://cdn.deepseek.com/policies/en-US/deepseek-terms-of-use.html","capturedAt":"2026-11-08T22:05:25Z","sha256":"86d722a3c5344dd730a1218344700a104b3babee3bc5f0dfad0169a467d84491"}},{"quote":"Retain certain data of the user as required by laws and regulations.","source":{"doc":"terms-of-use","title":"DeepSeek Terms of Use","url":"https://cdn.deepseek.com/policies/en-US/deepseek-terms-of-use.html","capturedAt":"2026-11-08T22:05:25Z","sha256":"86d722a3c5344dd730a1218344700a104b3babee3bc5f0dfad0169a467d84491"}},{"quote":"When the Personal Data collected is no longer required by us, we and our service providers will perform the necessary procedures for destroying, deleting, erasing, or converting it into an anonymous form as permitted or required under applicable laws.","source":{"doc":"privacy-policy","title":"DeepSeek Privacy Policy","url":"https://cdn.deepseek.com/policies/en-US/deepseek-privacy-policy.html","capturedAt":"2026-11-08T22:28:10Z","sha256":"9ed11d792dceb8aaf77bef2d8340fa8e518b3c1eefb51a71c8932f9999867172"}}]},"retention_exceptions":{"summary":"Data may be kept longer for legal obligations, 'legitimate business interest' (including improving the service and safety), legal claims, and to handle rule violations. No durations are given.","status":"stated","cites":[{"quote":"We also retain Personal Data when necessary to comply with contractual and legal obligations, when we have a legitimate business interest to do so (such as improving and developing our Services and enhancing their safety, security and stability), and for the exercise or defense of legal claims.","source":{"doc":"privacy-policy","title":"DeepSeek Privacy Policy","url":"https://cdn.deepseek.com/policies/en-US/deepseek-privacy-policy.html","capturedAt":"2026-11-08T22:28:10Z","sha256":"9ed11d792dceb8aaf77bef2d8340fa8e518b3c1eefb51a71c8932f9999867172"}},{"quote":"If you violate any of our terms, policies or guidelines, we may keep your Personal Data as necessary to process the violation.","source":{"doc":"privacy-policy","title":"DeepSeek Privacy Policy","url":"https://cdn.deepseek.com/policies/en-US/deepseek-privacy-policy.html","capturedAt":"2026-11-08T22:28:10Z","sha256":"9ed11d792dceb8aaf77bef2d8340fa8e518b3c1eefb51a71c8932f9999867172"}},{"quote":"For behaviors suspected of violating laws and regulations or involving illegal activities, relevant records will be retained, and reports will be made to the competent authorities in accordance with the law, cooperating with their investigations.","source":{"doc":"terms-of-use","title":"DeepSeek Terms of Use","url":"https://cdn.deepseek.com/policies/en-US/deepseek-terms-of-use.html","capturedAt":"2026-11-08T22:05:25Z","sha256":"86d722a3c5344dd730a1218344700a104b3babee3bc5f0dfad0169a467d84491"}},{"quote":"Exercise the rights stipulated in these Terms for any illegal or violating behavior committed by the user during the use of the Services before deletion.","source":{"doc":"terms-of-use","title":"DeepSeek Terms of Use","url":"https://cdn.deepseek.com/policies/en-US/deepseek-terms-of-use.html","capturedAt":"2026-11-08T22:05:25Z","sha256":"86d722a3c5344dd730a1218344700a104b3babee3bc5f0dfad0169a467d84491"}}]},"zdr":{"summary":"The captured policies don't mention zero data retention for the chat app.","status":"not_stated","cites":[]},"training_default":{"summary":"Inferred on by default, since an opt-out exists. Inputs and outputs train models; the EU table lists User Input for training under legitimate interests, plus consent 'when we ask'.","status":"inferred","cites":[{"quote":"To improve and develop the Services and to train and improve our technology, such as our machine learning models and algorithms.","source":{"doc":"privacy-policy","title":"DeepSeek Privacy Policy","url":"https://cdn.deepseek.com/policies/en-US/deepseek-privacy-policy.html","capturedAt":"2026-11-08T22:28:10Z","sha256":"9ed11d792dceb8aaf77bef2d8340fa8e518b3c1eefb51a71c8932f9999867172"}},{"quote":"Under the premise of secure encryption technology processing, strict de-identification rendering, and irreversibility to identify specific individuals, we may, to a minimal extent, use Inputs and Outputs to provide, maintain, operate, develop or improve the Services or the underlying technologies supporting the Services.","source":{"doc":"terms-of-use","title":"DeepSeek Terms of Use","url":"https://cdn.deepseek.com/policies/en-US/deepseek-terms-of-use.html","capturedAt":"2026-11-08T22:05:25Z","sha256":"86d722a3c5344dd730a1218344700a104b3babee3bc5f0dfad0169a467d84491"}},{"quote":"To improve and develop the Services and to train and improve our technology, such as our machine learning models and algorithms.","source":{"doc":"privacy-policy","title":"DeepSeek Privacy Policy","url":"https://cdn.deepseek.com/policies/en-US/deepseek-privacy-policy.html","capturedAt":"2026-11-08T22:28:10Z","sha256":"9ed11d792dceb8aaf77bef2d8340fa8e518b3c1eefb51a71c8932f9999867172"}},{"quote":"Our legitimate interests to identify and resolve issues with the Platform and to improve the Platform; and to conduct research and protect Personal Data through aggregation or anonymization, consistent with data minimization and privacy by design principles.","source":{"doc":"privacy-policy","title":"DeepSeek Privacy Policy","url":"https://cdn.deepseek.com/policies/en-US/deepseek-privacy-policy.html","capturedAt":"2026-11-08T22:28:10Z","sha256":"9ed11d792dceb8aaf77bef2d8340fa8e518b3c1eefb51a71c8932f9999867172"}}]},"training_opt_out":{"summary":"Turn off \"Improve the model for everyone\"; opting out is also listed as a privacy right. The captured policies don't say what the opt-out excludes or whether it covers past data.","status":"stated","cites":[{"quote":"If you refuse to allow us to process the data in the manner described above, you can opt out by turning off \"Improve the model for everyone\".","source":{"doc":"terms-of-use","title":"DeepSeek Terms of Use","url":"https://cdn.deepseek.com/policies/en-US/deepseek-terms-of-use.html","capturedAt":"2026-11-08T22:05:25Z","sha256":"86d722a3c5344dd730a1218344700a104b3babee3bc5f0dfad0169a467d84491"}},{"quote":"the right to opt-out of using your Personal Data for training our models or optimizing our technologies.","source":{"doc":"privacy-policy","title":"DeepSeek Privacy Policy","url":"https://cdn.deepseek.com/policies/en-US/deepseek-privacy-policy.html","capturedAt":"2026-11-08T22:28:10Z","sha256":"9ed11d792dceb8aaf77bef2d8340fa8e518b3c1eefb51a71c8932f9999867172"}}]},"human_review":{"summary":"The captured policies don't say whether staff read conversations. They describe only automated review (risk filtering); see provider notes.","status":"not_stated","cites":[]},"memory":{"summary":"The captured policies describe no persistent memory or profile feature, only saved chat history, which you can copy or delete in settings.","status":"not_stated","cites":[]},"connector_data":{"summary":"The only mention: if you log in with or link a third-party service (e.g. Apple, Google), DeepSeek may collect data such as an access token. Email, calendar, or drive connectors and what happens on disconnect are not covered.","status":"stated","cites":[{"quote":"if you choose to sign-up or log-in to the Services using a third-party service such as Apple or Google, or link your account to a third-party service, we may collect Personal Data from the third-party service, such as access token.","source":{"doc":"privacy-policy","title":"DeepSeek Privacy Policy","url":"https://cdn.deepseek.com/policies/en-US/deepseek-privacy-policy.html","capturedAt":"2026-11-08T22:28:10Z","sha256":"9ed11d792dceb8aaf77bef2d8340fa8e518b3c1eefb51a71c8932f9999867172"}}]},"agent_actions":{"summary":"With Search on, your input keywords go to third-party search APIs. DeepSeek also logs which features you use and the actions you take. Agent action logs and stored credentials are not described.","status":"stated","cites":[{"quote":"We integrate third-party APIs to provide search services, and we will share your input keywords to provide these services.","source":{"doc":"privacy-policy","title":"DeepSeek Privacy Policy","url":"https://cdn.deepseek.com/policies/en-US/deepseek-privacy-policy.html","capturedAt":"2026-11-08T22:28:10Z","sha256":"9ed11d792dceb8aaf77bef2d8340fa8e518b3c1eefb51a71c8932f9999867172"}},{"quote":"We collect Personal Data regarding your use of the Services, such as the features you use and the actions you take.","source":{"doc":"privacy-policy","title":"DeepSeek Privacy Policy","url":"https://cdn.deepseek.com/policies/en-US/deepseek-privacy-policy.html","capturedAt":"2026-11-08T22:28:10Z","sha256":"9ed11d792dceb8aaf77bef2d8340fa8e518b3c1eefb51a71c8932f9999867172"}}]},"input_ownership":{"summary":"You keep whatever rights you have in your inputs.","status":"stated","cites":[{"quote":"(1) You retain any rights, title, and interests—if any—in the Inputs you submit;","source":{"doc":"terms-of-use","title":"DeepSeek Terms of Use","url":"https://cdn.deepseek.com/policies/en-US/deepseek-terms-of-use.html","capturedAt":"2026-11-08T22:05:25Z","sha256":"86d722a3c5344dd730a1218344700a104b3babee3bc5f0dfad0169a467d84491"}}]},"output_ownership":{"summary":"DeepSeek assigns you any rights it has in outputs. Outputs may not be unique, and you may use them broadly, including to train other models (distillation).","status":"stated","cites":[{"quote":"(2) We assign any rights, title, and interests—if any—in the Outputs of the Services to you. Due to the nature of our Services and artificial intelligence generally, Outputs may not be unique and other users may receive similar Outputs from our Services.","source":{"doc":"terms-of-use","title":"DeepSeek Terms of Use","url":"https://cdn.deepseek.com/policies/en-US/deepseek-terms-of-use.html","capturedAt":"2026-11-08T22:05:25Z","sha256":"86d722a3c5344dd730a1218344700a104b3babee3bc5f0dfad0169a467d84491"}},{"quote":"(3) You may apply the Inputs and Outputs of the Services to a wide range of use cases, including personal use, academic research, derivative product development, training other models (such as model distillation), etc., as long as such usage is legal and adhere to these Terms.","source":{"doc":"terms-of-use","title":"DeepSeek Terms of Use","url":"https://cdn.deepseek.com/policies/en-US/deepseek-terms-of-use.html","capturedAt":"2026-11-08T22:05:25Z","sha256":"86d722a3c5344dd730a1218344700a104b3babee3bc5f0dfad0169a467d84491"}}]},"license_to_provider":{"summary":"No explicit license clause. You warrant DeepSeek may process inputs; it may use de-identified inputs and outputs to improve services, and feedback without restriction. Duration and survival unstated.","status":"stated","cites":[{"quote":"By submitting Inputs to our Services, you represent and warrant that you have all rights, licenses, and permissions that are necessary for us to process the Inputs under our Terms.","source":{"doc":"terms-of-use","title":"DeepSeek Terms of Use","url":"https://cdn.deepseek.com/policies/en-US/deepseek-terms-of-use.html","capturedAt":"2026-11-08T22:05:25Z","sha256":"86d722a3c5344dd730a1218344700a104b3babee3bc5f0dfad0169a467d84491"}},{"quote":"We appreciate your feedback, and you agree that we may use it without restriction or compensation to you.","source":{"doc":"terms-of-use","title":"DeepSeek Terms of Use","url":"https://cdn.deepseek.com/policies/en-US/deepseek-terms-of-use.html","capturedAt":"2026-11-08T22:05:25Z","sha256":"86d722a3c5344dd730a1218344700a104b3babee3bc5f0dfad0169a467d84491"}}]},"third_party_sharing":{"summary":"Shared with service providers (search, analytics, safety), group companies (including for foundation model training), law enforcement, and in corporate deals. DeepSeek says it doesn't sell data or target ads.","status":"stated","cites":[{"quote":"These entities process the Personal Data You Provide, Automatically Collected Personal Data, and Personal Data from Other Sources for us, as necessary to provide certain functions, such as storage, content delivery, security, research and development, foundation model training and optimization, analytics, customer and technical support.","source":{"doc":"privacy-policy","title":"DeepSeek Privacy Policy","url":"https://cdn.deepseek.com/policies/en-US/deepseek-privacy-policy.html","capturedAt":"2026-11-08T22:28:10Z","sha256":"9ed11d792dceb8aaf77bef2d8340fa8e518b3c1eefb51a71c8932f9999867172"}},{"quote":"We use support and safety monitoring services providers to assist us in ensuring the safety of our Services.","source":{"doc":"privacy-policy","title":"DeepSeek Privacy Policy","url":"https://cdn.deepseek.com/policies/en-US/deepseek-privacy-policy.html","capturedAt":"2026-11-08T22:28:10Z","sha256":"9ed11d792dceb8aaf77bef2d8340fa8e518b3c1eefb51a71c8932f9999867172"}},{"quote":"comply with applicable law, legal process or government requests, as consistent with internationally recognized standards, in accordance with the due process prescribed by law;","source":{"doc":"privacy-policy","title":"DeepSeek Privacy Policy","url":"https://cdn.deepseek.com/policies/en-US/deepseek-privacy-policy.html","capturedAt":"2026-11-08T22:28:10Z","sha256":"9ed11d792dceb8aaf77bef2d8340fa8e518b3c1eefb51a71c8932f9999867172"}},{"quote":"NOTE WE DO NOT ENGAGE IN TARGETED ADVERTISING, “SELL” PERSONAL DATA OR USE PERSONAL DATA FOR “PROFILING”","source":{"doc":"privacy-policy","title":"DeepSeek Privacy Policy","url":"https://cdn.deepseek.com/policies/en-US/deepseek-privacy-policy.html","capturedAt":"2026-11-08T22:28:10Z","sha256":"9ed11d792dceb8aaf77bef2d8340fa8e518b3c1eefb51a71c8932f9999867172"}},{"quote":"This could include providing law enforcement agencies or emergency services with Personal Data in urgent situations to protect health or life.","source":{"doc":"privacy-policy","title":"DeepSeek Privacy Policy","url":"https://cdn.deepseek.com/policies/en-US/deepseek-privacy-policy.html","capturedAt":"2026-11-08T22:28:10Z","sha256":"9ed11d792dceb8aaf77bef2d8340fa8e518b3c1eefb51a71c8932f9999867172"}}]},"data_location":{"summary":"Data is collected, processed and stored in the People's Republic of China, including for EEA, Swiss and UK users. No data residency options are mentioned.","status":"stated","cites":[{"quote":"The Personal Data we collect from you may be stored on a server located outside of the country where you live. To provide you with our services, we directly collect, process and store your Personal Data in People's Republic of China.","source":{"doc":"privacy-policy","title":"DeepSeek Privacy Policy","url":"https://cdn.deepseek.com/policies/en-US/deepseek-privacy-policy.html","capturedAt":"2026-11-08T22:28:10Z","sha256":"9ed11d792dceb8aaf77bef2d8340fa8e518b3c1eefb51a71c8932f9999867172"}}]},"enterprise_controls":{"summary":"The captured policies describe no business or enterprise plan, DPA, SSO, audit logs, or custom retention for the chat app.","status":"not_stated","cites":[]}}},{"id":"api","name":"DeepSeek Open Platform (API)","surface":"api","facts":{"default_retention":{"summary":"The Open Platform Terms give no API retention period. We infer the privacy policy's 'while you have an account' rule covers developers' own data; end users' data falls outside it.","status":"inferred","cites":[{"quote":"We will collect and process the personal information you provide as the data subject in accordance with the \"[DeepSeek Privacy Policy](https://cdn.deepseek.com/policies/en-US/deepseek-privacy-policy.html)\".","source":{"doc":"open-platform-terms","title":"DeepSeek Open Platform Terms of Service","url":"https://cdn.deepseek.com/policies/en-US/deepseek-open-platform-terms-of-service.html","capturedAt":"2026-11-08T22:04:44Z","sha256":"256e4bc1b48fa1882f56dd2c0d17f8d0e71654320edbd3adefe767ba20706f5a"}},{"quote":"we keep this Personal Data for as long as you have an account. This Personal Data includes your account Personal Data, input and payment Personal Data.","source":{"doc":"privacy-policy","title":"DeepSeek Privacy Policy","url":"https://cdn.deepseek.com/policies/en-US/deepseek-privacy-policy.html","capturedAt":"2026-11-08T22:28:10Z","sha256":"9ed11d792dceb8aaf77bef2d8340fa8e518b3c1eefb51a71c8932f9999867172"}}]},"deletion_window":{"summary":"API and chat share one account, so we infer the general Terms' deletion rules apply: deletion is irreversible and some data may be kept as law requires. No timeframe stated.","status":"inferred","cites":[{"quote":"The Open Platform Service and the chat service use the same account.","source":{"doc":"open-platform-terms","title":"DeepSeek Open Platform Terms of Service","url":"https://cdn.deepseek.com/policies/en-US/deepseek-open-platform-terms-of-service.html","capturedAt":"2026-11-08T22:04:44Z","sha256":"256e4bc1b48fa1882f56dd2c0d17f8d0e71654320edbd3adefe767ba20706f5a"}},{"quote":"Retain certain data of the user as required by laws and regulations.","source":{"doc":"terms-of-use","title":"DeepSeek Terms of Use","url":"https://cdn.deepseek.com/policies/en-US/deepseek-terms-of-use.html","capturedAt":"2026-11-08T22:05:25Z","sha256":"86d722a3c5344dd730a1218344700a104b3babee3bc5f0dfad0169a467d84491"}}]},"retention_exceptions":{"summary":"Records of suspected illegal activity are kept and may be reported to authorities. No durations are given.","status":"stated","cites":[{"quote":"For behaviors suspected of violating laws and regulations or involving illegal activities, relevant records will be retained, and reports will be made to the competent authorities in accordance with the law, cooperating with their investigations.","source":{"doc":"open-platform-terms","title":"DeepSeek Open Platform Terms of Service","url":"https://cdn.deepseek.com/policies/en-US/deepseek-open-platform-terms-of-service.html","capturedAt":"2026-11-08T22:04:44Z","sha256":"256e4bc1b48fa1882f56dd2c0d17f8d0e71654320edbd3adefe767ba20706f5a"}}]},"zdr":{"summary":"The captured policies don't mention zero data retention for the API.","status":"not_stated","cites":[]},"training_default":{"summary":"The Open Platform Terms are silent on training. We infer the general Terms apply; they cover APIs and allow de-identified use of inputs and outputs to improve services.","status":"inferred","cites":[{"quote":"serves as a Specific Agreement to the \"[DeepSeek Terms of Use](https://cdn.deepseek.com/policies/en-US/deepseek-terms-of-use.html)\"","source":{"doc":"open-platform-terms","title":"DeepSeek Open Platform Terms of Service","url":"https://cdn.deepseek.com/policies/en-US/deepseek-open-platform-terms-of-service.html","capturedAt":"2026-11-08T22:04:44Z","sha256":"256e4bc1b48fa1882f56dd2c0d17f8d0e71654320edbd3adefe767ba20706f5a"}},{"quote":"application programming interfaces (APIs)","source":{"doc":"terms-of-use","title":"DeepSeek Terms of Use","url":"https://cdn.deepseek.com/policies/en-US/deepseek-terms-of-use.html","capturedAt":"2026-11-08T22:05:25Z","sha256":"86d722a3c5344dd730a1218344700a104b3babee3bc5f0dfad0169a467d84491"}},{"quote":"we may, to a minimal extent, use Inputs and Outputs to provide, maintain, operate, develop or improve the Services or the underlying technologies supporting the Services.","source":{"doc":"terms-of-use","title":"DeepSeek Terms of Use","url":"https://cdn.deepseek.com/policies/en-US/deepseek-terms-of-use.html","capturedAt":"2026-11-08T22:05:25Z","sha256":"86d722a3c5344dd730a1218344700a104b3babee3bc5f0dfad0169a467d84491"}}]},"training_opt_out":{"summary":"No API-specific opt-out is described. The captured policies don't say whether the \"Improve the model for everyone\" setting covers API traffic.","status":"not_stated","cites":[]},"human_review":{"summary":"The captured policies don't say whether people review API traffic.","status":"not_stated","cites":[]},"memory":{"summary":"No memory feature is described for the API.","status":"not_stated","cites":[]},"connector_data":{"summary":"No connectors are described for the API.","status":"not_stated","cites":[]},"agent_actions":{"summary":"No agent action logs or provider-stored credentials are described. Developers are responsible for keeping their API keys secret.","status":"not_stated","cites":[]},"input_ownership":{"summary":"Developers keep whatever rights they have in their inputs.","status":"stated","cites":[{"quote":"(1) You retain any rights, title, and interests—if any—in the Inputs you submit;","source":{"doc":"open-platform-terms","title":"DeepSeek Open Platform Terms of Service","url":"https://cdn.deepseek.com/policies/en-US/deepseek-open-platform-terms-of-service.html","capturedAt":"2026-11-08T22:04:44Z","sha256":"256e4bc1b48fa1882f56dd2c0d17f8d0e71654320edbd3adefe767ba20706f5a"}}]},"output_ownership":{"summary":"DeepSeek assigns developers any rights it has in outputs, and outputs may be used to train other models (distillation).","status":"stated","cites":[{"quote":"(2) We assign any rights, title, and interests—if any—in the Outputs of the Services to you; (3) You may apply the Inputs and Outputs of the Services to a wide range of use cases, including personal use, academic research, derivative product development, training other models (such as model distillation), etc.","source":{"doc":"open-platform-terms","title":"DeepSeek Open Platform Terms of Service","url":"https://cdn.deepseek.com/policies/en-US/deepseek-open-platform-terms-of-service.html","capturedAt":"2026-11-08T22:04:44Z","sha256":"256e4bc1b48fa1882f56dd2c0d17f8d0e71654320edbd3adefe767ba20706f5a"}}]},"license_to_provider":{"summary":"There is no explicit license grant. You warrant DeepSeek may process your inputs, and each party keeps its existing IP. Scope, duration and survival are not stated.","status":"stated","cites":[{"quote":"By submitting Inputs to our Services, you represent and warrant that you have all rights, licenses, and permissions that are necessary for us to process the Inputs under our Terms.","source":{"doc":"open-platform-terms","title":"DeepSeek Open Platform Terms of Service","url":"https://cdn.deepseek.com/policies/en-US/deepseek-open-platform-terms-of-service.html","capturedAt":"2026-11-08T22:04:44Z","sha256":"256e4bc1b48fa1882f56dd2c0d17f8d0e71654320edbd3adefe767ba20706f5a"}},{"quote":"Each party retains ownership of their intellectual property as it stood prior to using the Services. Neither party's rights will be transferred to the other, nor will they become jointly owned, as a result of fulfilling this Terms.","source":{"doc":"open-platform-terms","title":"DeepSeek Open Platform Terms of Service","url":"https://cdn.deepseek.com/policies/en-US/deepseek-open-platform-terms-of-service.html","capturedAt":"2026-11-08T22:04:44Z","sha256":"256e4bc1b48fa1882f56dd2c0d17f8d0e71654320edbd3adefe767ba20706f5a"}}]},"third_party_sharing":{"summary":"Developers control end-user data and must get consent before passing it to DeepSeek. The privacy policy's sharing rules cover developers' own data; end-user data sharing isn't separately stated.","status":"stated","cites":[{"quote":"You shall obtain the consent of end users or have other legal basis for the collection, processing of personal information, and delegation of personal information processing to us.","source":{"doc":"open-platform-terms","title":"DeepSeek Open Platform Terms of Service","url":"https://cdn.deepseek.com/policies/en-US/deepseek-open-platform-terms-of-service.html","capturedAt":"2026-11-08T22:04:44Z","sha256":"256e4bc1b48fa1882f56dd2c0d17f8d0e71654320edbd3adefe767ba20706f5a"}},{"quote":"However, when your end users access downstream systems, applications, or functions that you've developed based on the open platform, the processing rules for their collected personal information are not covered by this privacy policy.","source":{"doc":"open-platform-terms","title":"DeepSeek Open Platform Terms of Service","url":"https://cdn.deepseek.com/policies/en-US/deepseek-open-platform-terms-of-service.html","capturedAt":"2026-11-08T22:04:44Z","sha256":"256e4bc1b48fa1882f56dd2c0d17f8d0e71654320edbd3adefe767ba20706f5a"}}]},"data_location":{"summary":"The Open Platform Terms don't say. The privacy policy, which covers developers' data, says data is stored in the PRC, so we infer API data is too. No residency options are mentioned.","status":"inferred","cites":[{"quote":"To provide you with our services, we directly collect, process and store your Personal Data in People's Republic of China.","source":{"doc":"privacy-policy","title":"DeepSeek Privacy Policy","url":"https://cdn.deepseek.com/policies/en-US/deepseek-privacy-policy.html","capturedAt":"2026-11-08T22:28:10Z","sha256":"9ed11d792dceb8aaf77bef2d8340fa8e518b3c1eefb51a71c8932f9999867172"}}]},"enterprise_controls":{"summary":"Enterprise developers are mentioned, but no DPA, SSO, audit logs or custom retention are described. Developers must set up their own security measures.","status":"not_stated","cites":[]}}}],"notes":[{"text":"The data controller is a Chinese company, and disputes fall under mainland PRC law and Hangzhou courts.","cites":[{"quote":"The Services are provided and controlled by **Hangzhou DeepSeek Artificial Intelligence Co., Ltd.,** with its registered address in China","source":{"doc":"privacy-policy","title":"DeepSeek Privacy Policy","url":"https://cdn.deepseek.com/policies/en-US/deepseek-privacy-policy.html","capturedAt":"2026-11-08T22:28:10Z","sha256":"9ed11d792dceb8aaf77bef2d8340fa8e518b3c1eefb51a71c8932f9999867172"}},{"quote":"The establishment, execution, interpretation, and resolution of disputes under these Terms shall be governed by the laws of the People's Republic of China in the mainland.","source":{"doc":"terms-of-use","title":"DeepSeek Terms of Use","url":"https://cdn.deepseek.com/policies/en-US/deepseek-terms-of-use.html","capturedAt":"2026-11-08T22:05:25Z","sha256":"86d722a3c5344dd730a1218344700a104b3babee3bc5f0dfad0169a467d84491"}},{"quote":"either party has the right to file a lawsuit with a court having jurisdiction over the location of the registered office of Hangzhou DeepSeek Artificial Intelligence Co., Ltd.","source":{"doc":"terms-of-use","title":"DeepSeek Terms of Use","url":"https://cdn.deepseek.com/policies/en-US/deepseek-terms-of-use.html","capturedAt":"2026-11-08T22:05:25Z","sha256":"86d722a3c5344dd730a1218344700a104b3babee3bc5f0dfad0169a467d84491"}}]},{"text":"DeepSeek reviews user behavior by automated means, including risk filters and databases of illegal-content features.","cites":[{"quote":"To fulfill legal and compliance requirements, DeepSeek has the right to use technical means to review the behavior of users using the Services, including but not limited to establishing risk filtering mechanisms, and creating databases for illegal content features.","source":{"doc":"terms-of-use","title":"DeepSeek Terms of Use","url":"https://cdn.deepseek.com/policies/en-US/deepseek-terms-of-use.html","capturedAt":"2026-11-08T22:05:25Z","sha256":"86d722a3c5344dd730a1218344700a104b3babee3bc5f0dfad0169a467d84491"}}]},{"text":"Publicly available data from online sources is also used to train models.","cites":[{"quote":"We may obtain publicly available Personal Data via online sources to train our models and provide Services.","source":{"doc":"privacy-policy","title":"DeepSeek Privacy Policy","url":"https://cdn.deepseek.com/policies/en-US/deepseek-privacy-policy.html","capturedAt":"2026-11-08T22:28:10Z","sha256":"9ed11d792dceb8aaf77bef2d8340fa8e518b3c1eefb51a71c8932f9999867172"}}]},{"text":"Anyone with a shared-conversation link can view it, and DeepSeek warns that shared chats may be scraped despite its robots.txt protection.","cites":[{"quote":"Anyone who has access to a shared link can view the linked Dialogues.","source":{"doc":"terms-of-use","title":"DeepSeek Terms of Use","url":"https://cdn.deepseek.com/policies/en-US/deepseek-terms-of-use.html","capturedAt":"2026-11-08T22:05:25Z","sha256":"86d722a3c5344dd730a1218344700a104b3babee3bc5f0dfad0169a467d84491"}},{"quote":"However, due to the technical limitations commonly existing within the industry, such risks cannot be entirely eliminated.","source":{"doc":"terms-of-use","title":"DeepSeek Terms of Use","url":"https://cdn.deepseek.com/policies/en-US/deepseek-terms-of-use.html","capturedAt":"2026-11-08T22:05:25Z","sha256":"86d722a3c5344dd730a1218344700a104b3babee3bc5f0dfad0169a467d84491"}}]},{"text":"DeepSeek's EU legal-bases table lists User Input, device, log and location data for every main purpose, including model training (legitimate interests, plus consent 'when we ask'), legal compliance and safety research.","cites":[{"quote":"To improve and develop the Services and to train and improve our technology, such as our machine learning models and algorithms.","source":{"doc":"privacy-policy","title":"DeepSeek Privacy Policy","url":"https://cdn.deepseek.com/policies/en-US/deepseek-privacy-policy.html","capturedAt":"2026-11-08T22:28:10Z","sha256":"9ed11d792dceb8aaf77bef2d8340fa8e518b3c1eefb51a71c8932f9999867172"}},{"quote":"Our legitimate interests to identify and resolve issues with the Platform and to improve the Platform; and to conduct research and protect Personal Data through aggregation or anonymization, consistent with data minimization and privacy by design principles.","source":{"doc":"privacy-policy","title":"DeepSeek Privacy Policy","url":"https://cdn.deepseek.com/policies/en-US/deepseek-privacy-policy.html","capturedAt":"2026-11-08T22:28:10Z","sha256":"9ed11d792dceb8aaf77bef2d8340fa8e518b3c1eefb51a71c8932f9999867172"}},{"quote":"Your consent when we ask for it to process your Personal Data for a specific purpose to provide services.","source":{"doc":"privacy-policy","title":"DeepSeek Privacy Policy","url":"https://cdn.deepseek.com/policies/en-US/deepseek-privacy-policy.html","capturedAt":"2026-11-08T22:28:10Z","sha256":"9ed11d792dceb8aaf77bef2d8340fa8e518b3c1eefb51a71c8932f9999867172"}},{"quote":"To promote the safety, security, and stability of the Platform, such as by preventing and detecting abuse, fraud, and illegal activity on the Platform and by conducting troubleshooting, data analysis, testing, and research.","source":{"doc":"privacy-policy","title":"DeepSeek Privacy Policy","url":"https://cdn.deepseek.com/policies/en-US/deepseek-privacy-policy.html","capturedAt":"2026-11-08T22:28:10Z","sha256":"9ed11d792dceb8aaf77bef2d8340fa8e518b3c1eefb51a71c8932f9999867172"}}]},{"text":"For users aged 14 to 17, DeepSeek says it may rely on legitimate interests instead of contract to process their data.","cites":[{"quote":"If you are 14 or older but under the age of 18, with a limited ability to enter into an enforceable contract only, where we may be unable to process your Personal Data on the grounds of contractual necessity, we rely on legitimate interests","source":{"doc":"privacy-policy","title":"DeepSeek Privacy Policy","url":"https://cdn.deepseek.com/policies/en-US/deepseek-privacy-policy.html","capturedAt":"2026-11-08T22:28:10Z","sha256":"9ed11d792dceb8aaf77bef2d8340fa8e518b3c1eefb51a71c8932f9999867172"}}]}],"gaps":["No specific retention period (in days) for chat logs or API inputs, and no timeline for erasure after deleting a chat or account. A data-retention or help-center page would likely say.","The linked 'Model Mechanism and Training Methods of DeepSeek' page (model-algorithm-disclosure.html) was not captured. It likely explains what training data is used and how the opt-out works.","Whether API traffic is used for training, and whether the 'Improve the model for everyone' toggle covers the API. API docs or an Open Platform FAQ would likely answer.","Whether staff read conversations, and under what conditions, is not addressed.","No ZDR, DPA, enterprise, or data-residency terms in any captured policy. An enterprise or sales agreement would likely cover these.","The Cookies Policy linked from the privacy policy was not captured."],"documents":[{"doc":"open-platform-terms","title":"DeepSeek Open Platform Terms of Service","url":"https://cdn.deepseek.com/policies/en-US/deepseek-open-platform-terms-of-service.html","capturedAt":"2026-11-08T22:04:44Z","sha256":"256e4bc1b48fa1882f56dd2c0d17f8d0e71654320edbd3adefe767ba20706f5a"},{"doc":"privacy-policy","title":"DeepSeek Privacy Policy","url":"https://cdn.deepseek.com/policies/en-US/deepseek-privacy-policy.html","capturedAt":"2026-11-08T22:28:10Z","sha256":"9ed11d792dceb8aaf77bef2d8340fa8e518b3c1eefb51a71c8932f9999867172"},{"doc":"terms-of-use","title":"DeepSeek Terms of Use","url":"https://cdn.deepseek.com/policies/en-US/deepseek-terms-of-use.html","capturedAt":"2026-11-08T22:05:25Z","sha256":"86d722a3c5344dd730a1218344700a104b3babee3bc5f0dfad0169a467d84491"}],"url":"https://gjalla.io/data-policies/deepseek/"},{"id":"google","provider":"google","name":"Google (Gemini)","category":"frontier-lab","checkedOn":"2026-11-08","products":[{"id":"gemini-app-consumer","name":"Gemini Apps (consumer, signed in)","surface":"consumer","facts":{"default_retention":{"summary":"Saved activity auto-deletes after 18 months by default (changeable to 3 or 36 months, or never). Temporary chats and chats with Keep Activity off are kept 72 hours.","status":"stated","cites":[{"quote":"You can [change your auto-delete setting](/gemini?p=pn_auto_delete) in Gemini Apps Activity from the default of 18 months to 3 months, 36 months, or indefinite.","source":{"doc":"gemini-apps-privacy-hub","title":"Gemini Apps Privacy Hub","url":"https://support.google.com/gemini/answer/13594961?hl=en#zippy=%2Cwhat-data-is-collected%2Chow-your-data-is-used%2Chow-gemini-apps-get-help-from-google-services%2Chow-gemini-apps-work-with-connected-apps%2Caudio-features%2Ccanvas%2Cconfiguring-your-settings%2Chow-long-we-retain-your-data%2Crequesting-content-removal-and-exporting-your-information%2Cother-things-to-know%2Crespect-others-rights%2Cwhat-are-gemini-apps%2Chow-can-i-object-to-the-processing-of-my-data-or-ask-for-inaccurate-data-in-gemini-apps-responses-to-be-corrected%2Cwhat-are-googles-legal-bases-of-processing-gemini-apps-data-under-european-union-eu-or-united-kingdom-uk-data-protection-law%2Cdo-you-use-my-gemini-apps-chats-to-show-me-ads%2Cwho-has-access-to-my-chats-and-how-does-human-review-improve-gemini-for-everyone%2Chow-long-does-google-retain-my-temporary-chats-and-chats-i-have-when-keep-activity-is-off-and-what-does-google-do-with-this-data%2Chow-does-google-use-my-feedback%2Cwhat-does-the-keep-activity-setting-control%2Cwhat-does-the-memory-summary-setting-control%2Chow-can-i-control-whether-google-uses-my-audio-and-gemini-live-videos-screenshares-to-improve-its-services%2Chow-do-i-manage-what-gemini-remembers-about-me-and-customize-my-responses%2Chow-can-i-control-whether-gemini-apps-use-my-past-chats-to-personalize-my-experience%2Chow-does-google-handle-my-data-when-i-use-gemini-apps-while-signed-out%2Cwhat-location-information-do-gemini-apps-collect-why-and-how-is-it-used%2Chow-do-i-know-if-gemini-apps-have-access-to-and-are-using-my-precise-location%2Chow-do-i-manage-my-mobile-permissions-when-gemini-is-my-device-assistant%2Cwhat-do-the-browser-app-permission-choices-mean%2Chow-does-google-work-with-my-uploaded-images%2Cwhat-happens-when-i-share-a-photo-or-video-from-a-media-gallery-connected-app-with-gemini-apps%2Cwhat-happens-with-my-data-that-gemini-connected-apps-and-other-services-exchange%2Chow-can-i-allow-gemini-to-personalize-my-experience-with-my-data-from-connected-apps%2Chow-is-my-data-used-to-make-calls-send-messages-with-connected-apps-in-gemini%2Chow-does-gemini-use-my-data-with-the-remote-browser-and-remote-computer%2Cwhat-happens-when-you-turn-off-task-mode%2Chow-does-google-work-with-gemini-live-data%2Cwhat-happens-to-my-data-when-i-use-gemini-in-chrome%2Cwhat-happens-with-my-data-when-gemini-uses-screen-automation-to-help-me-get-tasks-done-in-android-apps%2Cwhat-happens-to-my-data-when-i-use-geminis-agentic-calling-capability%2Cwhat-happens-to-my-data-when-i-add-items-to-the-google-shopping-cart-from-gemini%2Cwhat-happens-to-my-data-when-i-use-google-pay-in-gemini%2Cwhat-happens-to-my-data-when-i-interact-with-gems-from-google-labs%2Cwhat-happens-to-my-data-when-i-import-memory-or-chats-from-other-ai-platforms%2Cwhat-happens-to-my-data-when-i-use-notebooks-in-gemini%2Cwhat-happens-to-my-data-when-i-create-an-avatar-in-gemini-apps%2Cwhat-happens-to-my-data-when-i-share-my-avatar-with-other-users%2Cwhat-happens-to-my-data-when-i-interact-with-canvas-web-apps%2Cwhat-happens-when-i-interact-with-speak-to-window-on-gemini-for-macos%2Cwhat-terms-apply-to-use-of-gemini-apps","capturedAt":"2026-11-08T22:28:03Z","sha256":"e1e866ccdbaf192a25cd6823496389ad27321566852ad82a4a59583741d7ae44"}},{"quote":"Your activity is auto-deleted after 18 months. You can change this to 3 or 36 months, or choose not to auto-delete.","source":{"doc":"gemini-apps-privacy-hub","title":"Gemini Apps Privacy Hub","url":"https://support.google.com/gemini/answer/13594961?hl=en#zippy=%2Cwhat-data-is-collected%2Chow-your-data-is-used%2Chow-gemini-apps-get-help-from-google-services%2Chow-gemini-apps-work-with-connected-apps%2Caudio-features%2Ccanvas%2Cconfiguring-your-settings%2Chow-long-we-retain-your-data%2Crequesting-content-removal-and-exporting-your-information%2Cother-things-to-know%2Crespect-others-rights%2Cwhat-are-gemini-apps%2Chow-can-i-object-to-the-processing-of-my-data-or-ask-for-inaccurate-data-in-gemini-apps-responses-to-be-corrected%2Cwhat-are-googles-legal-bases-of-processing-gemini-apps-data-under-european-union-eu-or-united-kingdom-uk-data-protection-law%2Cdo-you-use-my-gemini-apps-chats-to-show-me-ads%2Cwho-has-access-to-my-chats-and-how-does-human-review-improve-gemini-for-everyone%2Chow-long-does-google-retain-my-temporary-chats-and-chats-i-have-when-keep-activity-is-off-and-what-does-google-do-with-this-data%2Chow-does-google-use-my-feedback%2Cwhat-does-the-keep-activity-setting-control%2Cwhat-does-the-memory-summary-setting-control%2Chow-can-i-control-whether-google-uses-my-audio-and-gemini-live-videos-screenshares-to-improve-its-services%2Chow-do-i-manage-what-gemini-remembers-about-me-and-customize-my-responses%2Chow-can-i-control-whether-gemini-apps-use-my-past-chats-to-personalize-my-experience%2Chow-does-google-handle-my-data-when-i-use-gemini-apps-while-signed-out%2Cwhat-location-information-do-gemini-apps-collect-why-and-how-is-it-used%2Chow-do-i-know-if-gemini-apps-have-access-to-and-are-using-my-precise-location%2Chow-do-i-manage-my-mobile-permissions-when-gemini-is-my-device-assistant%2Cwhat-do-the-browser-app-permission-choices-mean%2Chow-does-google-work-with-my-uploaded-images%2Cwhat-happens-when-i-share-a-photo-or-video-from-a-media-gallery-connected-app-with-gemini-apps%2Cwhat-happens-with-my-data-that-gemini-connected-apps-and-other-services-exchange%2Chow-can-i-allow-gemini-to-personalize-my-experience-with-my-data-from-connected-apps%2Chow-is-my-data-used-to-make-calls-send-messages-with-connected-apps-in-gemini%2Chow-does-gemini-use-my-data-with-the-remote-browser-and-remote-computer%2Cwhat-happens-when-you-turn-off-task-mode%2Chow-does-google-work-with-gemini-live-data%2Cwhat-happens-to-my-data-when-i-use-gemini-in-chrome%2Cwhat-happens-with-my-data-when-gemini-uses-screen-automation-to-help-me-get-tasks-done-in-android-apps%2Cwhat-happens-to-my-data-when-i-use-geminis-agentic-calling-capability%2Cwhat-happens-to-my-data-when-i-add-items-to-the-google-shopping-cart-from-gemini%2Cwhat-happens-to-my-data-when-i-use-google-pay-in-gemini%2Cwhat-happens-to-my-data-when-i-interact-with-gems-from-google-labs%2Cwhat-happens-to-my-data-when-i-import-memory-or-chats-from-other-ai-platforms%2Cwhat-happens-to-my-data-when-i-use-notebooks-in-gemini%2Cwhat-happens-to-my-data-when-i-create-an-avatar-in-gemini-apps%2Cwhat-happens-to-my-data-when-i-share-my-avatar-with-other-users%2Cwhat-happens-to-my-data-when-i-interact-with-canvas-web-apps%2Cwhat-happens-when-i-interact-with-speak-to-window-on-gemini-for-macos%2Cwhat-terms-apply-to-use-of-gemini-apps","capturedAt":"2026-11-08T22:28:03Z","sha256":"e1e866ccdbaf192a25cd6823496389ad27321566852ad82a4a59583741d7ae44"}},{"quote":"Temporary chats and chats you have when [Keep Activity](https://myactivity.google.com/product/gemini?utm_source=help) is off are retained with your account for 72 hours","source":{"doc":"gemini-apps-privacy-hub","title":"Gemini Apps Privacy Hub","url":"https://support.google.com/gemini/answer/13594961?hl=en#zippy=%2Cwhat-data-is-collected%2Chow-your-data-is-used%2Chow-gemini-apps-get-help-from-google-services%2Chow-gemini-apps-work-with-connected-apps%2Caudio-features%2Ccanvas%2Cconfiguring-your-settings%2Chow-long-we-retain-your-data%2Crequesting-content-removal-and-exporting-your-information%2Cother-things-to-know%2Crespect-others-rights%2Cwhat-are-gemini-apps%2Chow-can-i-object-to-the-processing-of-my-data-or-ask-for-inaccurate-data-in-gemini-apps-responses-to-be-corrected%2Cwhat-are-googles-legal-bases-of-processing-gemini-apps-data-under-european-union-eu-or-united-kingdom-uk-data-protection-law%2Cdo-you-use-my-gemini-apps-chats-to-show-me-ads%2Cwho-has-access-to-my-chats-and-how-does-human-review-improve-gemini-for-everyone%2Chow-long-does-google-retain-my-temporary-chats-and-chats-i-have-when-keep-activity-is-off-and-what-does-google-do-with-this-data%2Chow-does-google-use-my-feedback%2Cwhat-does-the-keep-activity-setting-control%2Cwhat-does-the-memory-summary-setting-control%2Chow-can-i-control-whether-google-uses-my-audio-and-gemini-live-videos-screenshares-to-improve-its-services%2Chow-do-i-manage-what-gemini-remembers-about-me-and-customize-my-responses%2Chow-can-i-control-whether-gemini-apps-use-my-past-chats-to-personalize-my-experience%2Chow-does-google-handle-my-data-when-i-use-gemini-apps-while-signed-out%2Cwhat-location-information-do-gemini-apps-collect-why-and-how-is-it-used%2Chow-do-i-know-if-gemini-apps-have-access-to-and-are-using-my-precise-location%2Chow-do-i-manage-my-mobile-permissions-when-gemini-is-my-device-assistant%2Cwhat-do-the-browser-app-permission-choices-mean%2Chow-does-google-work-with-my-uploaded-images%2Cwhat-happens-when-i-share-a-photo-or-video-from-a-media-gallery-connected-app-with-gemini-apps%2Cwhat-happens-with-my-data-that-gemini-connected-apps-and-other-services-exchange%2Chow-can-i-allow-gemini-to-personalize-my-experience-with-my-data-from-connected-apps%2Chow-is-my-data-used-to-make-calls-send-messages-with-connected-apps-in-gemini%2Chow-does-gemini-use-my-data-with-the-remote-browser-and-remote-computer%2Cwhat-happens-when-you-turn-off-task-mode%2Chow-does-google-work-with-gemini-live-data%2Cwhat-happens-to-my-data-when-i-use-gemini-in-chrome%2Cwhat-happens-with-my-data-when-gemini-uses-screen-automation-to-help-me-get-tasks-done-in-android-apps%2Cwhat-happens-to-my-data-when-i-use-geminis-agentic-calling-capability%2Cwhat-happens-to-my-data-when-i-add-items-to-the-google-shopping-cart-from-gemini%2Cwhat-happens-to-my-data-when-i-use-google-pay-in-gemini%2Cwhat-happens-to-my-data-when-i-interact-with-gems-from-google-labs%2Cwhat-happens-to-my-data-when-i-import-memory-or-chats-from-other-ai-platforms%2Cwhat-happens-to-my-data-when-i-use-notebooks-in-gemini%2Cwhat-happens-to-my-data-when-i-create-an-avatar-in-gemini-apps%2Cwhat-happens-to-my-data-when-i-share-my-avatar-with-other-users%2Cwhat-happens-to-my-data-when-i-interact-with-canvas-web-apps%2Cwhat-happens-when-i-interact-with-speak-to-window-on-gemini-for-macos%2Cwhat-terms-apply-to-use-of-gemini-apps","capturedAt":"2026-11-08T22:28:03Z","sha256":"e1e866ccdbaf192a25cd6823496389ad27321566852ad82a4a59583741d7ae44"}}]},"deletion_window":{"summary":"You can delete chats anytime, but human-reviewed chats aren't deleted, and some usage data stays until account deletion. No deletion timeframe is given; backup copies may lag.","status":"stated","cites":[{"quote":"You can also [manually delete](/gemini?p=pn_delete_activity) your Gemini Apps chats anytime.","source":{"doc":"gemini-apps-privacy-hub","title":"Gemini Apps Privacy Hub","url":"https://support.google.com/gemini/answer/13594961?hl=en#zippy=%2Cwhat-data-is-collected%2Chow-your-data-is-used%2Chow-gemini-apps-get-help-from-google-services%2Chow-gemini-apps-work-with-connected-apps%2Caudio-features%2Ccanvas%2Cconfiguring-your-settings%2Chow-long-we-retain-your-data%2Crequesting-content-removal-and-exporting-your-information%2Cother-things-to-know%2Crespect-others-rights%2Cwhat-are-gemini-apps%2Chow-can-i-object-to-the-processing-of-my-data-or-ask-for-inaccurate-data-in-gemini-apps-responses-to-be-corrected%2Cwhat-are-googles-legal-bases-of-processing-gemini-apps-data-under-european-union-eu-or-united-kingdom-uk-data-protection-law%2Cdo-you-use-my-gemini-apps-chats-to-show-me-ads%2Cwho-has-access-to-my-chats-and-how-does-human-review-improve-gemini-for-everyone%2Chow-long-does-google-retain-my-temporary-chats-and-chats-i-have-when-keep-activity-is-off-and-what-does-google-do-with-this-data%2Chow-does-google-use-my-feedback%2Cwhat-does-the-keep-activity-setting-control%2Cwhat-does-the-memory-summary-setting-control%2Chow-can-i-control-whether-google-uses-my-audio-and-gemini-live-videos-screenshares-to-improve-its-services%2Chow-do-i-manage-what-gemini-remembers-about-me-and-customize-my-responses%2Chow-can-i-control-whether-gemini-apps-use-my-past-chats-to-personalize-my-experience%2Chow-does-google-handle-my-data-when-i-use-gemini-apps-while-signed-out%2Cwhat-location-information-do-gemini-apps-collect-why-and-how-is-it-used%2Chow-do-i-know-if-gemini-apps-have-access-to-and-are-using-my-precise-location%2Chow-do-i-manage-my-mobile-permissions-when-gemini-is-my-device-assistant%2Cwhat-do-the-browser-app-permission-choices-mean%2Chow-does-google-work-with-my-uploaded-images%2Cwhat-happens-when-i-share-a-photo-or-video-from-a-media-gallery-connected-app-with-gemini-apps%2Cwhat-happens-with-my-data-that-gemini-connected-apps-and-other-services-exchange%2Chow-can-i-allow-gemini-to-personalize-my-experience-with-my-data-from-connected-apps%2Chow-is-my-data-used-to-make-calls-send-messages-with-connected-apps-in-gemini%2Chow-does-gemini-use-my-data-with-the-remote-browser-and-remote-computer%2Cwhat-happens-when-you-turn-off-task-mode%2Chow-does-google-work-with-gemini-live-data%2Cwhat-happens-to-my-data-when-i-use-gemini-in-chrome%2Cwhat-happens-with-my-data-when-gemini-uses-screen-automation-to-help-me-get-tasks-done-in-android-apps%2Cwhat-happens-to-my-data-when-i-use-geminis-agentic-calling-capability%2Cwhat-happens-to-my-data-when-i-add-items-to-the-google-shopping-cart-from-gemini%2Cwhat-happens-to-my-data-when-i-use-google-pay-in-gemini%2Cwhat-happens-to-my-data-when-i-interact-with-gems-from-google-labs%2Cwhat-happens-to-my-data-when-i-import-memory-or-chats-from-other-ai-platforms%2Cwhat-happens-to-my-data-when-i-use-notebooks-in-gemini%2Cwhat-happens-to-my-data-when-i-create-an-avatar-in-gemini-apps%2Cwhat-happens-to-my-data-when-i-share-my-avatar-with-other-users%2Cwhat-happens-to-my-data-when-i-interact-with-canvas-web-apps%2Cwhat-happens-when-i-interact-with-speak-to-window-on-gemini-for-macos%2Cwhat-terms-apply-to-use-of-gemini-apps","capturedAt":"2026-11-08T22:28:03Z","sha256":"e1e866ccdbaf192a25cd6823496389ad27321566852ad82a4a59583741d7ae44"}},{"quote":"Chats reviewed by human reviewers (and related data like your language, device type, location info, or feedback) are not deleted when you delete your activity.","source":{"doc":"gemini-apps-privacy-hub","title":"Gemini Apps Privacy Hub","url":"https://support.google.com/gemini/answer/13594961?hl=en#zippy=%2Cwhat-data-is-collected%2Chow-your-data-is-used%2Chow-gemini-apps-get-help-from-google-services%2Chow-gemini-apps-work-with-connected-apps%2Caudio-features%2Ccanvas%2Cconfiguring-your-settings%2Chow-long-we-retain-your-data%2Crequesting-content-removal-and-exporting-your-information%2Cother-things-to-know%2Crespect-others-rights%2Cwhat-are-gemini-apps%2Chow-can-i-object-to-the-processing-of-my-data-or-ask-for-inaccurate-data-in-gemini-apps-responses-to-be-corrected%2Cwhat-are-googles-legal-bases-of-processing-gemini-apps-data-under-european-union-eu-or-united-kingdom-uk-data-protection-law%2Cdo-you-use-my-gemini-apps-chats-to-show-me-ads%2Cwho-has-access-to-my-chats-and-how-does-human-review-improve-gemini-for-everyone%2Chow-long-does-google-retain-my-temporary-chats-and-chats-i-have-when-keep-activity-is-off-and-what-does-google-do-with-this-data%2Chow-does-google-use-my-feedback%2Cwhat-does-the-keep-activity-setting-control%2Cwhat-does-the-memory-summary-setting-control%2Chow-can-i-control-whether-google-uses-my-audio-and-gemini-live-videos-screenshares-to-improve-its-services%2Chow-do-i-manage-what-gemini-remembers-about-me-and-customize-my-responses%2Chow-can-i-control-whether-gemini-apps-use-my-past-chats-to-personalize-my-experience%2Chow-does-google-handle-my-data-when-i-use-gemini-apps-while-signed-out%2Cwhat-location-information-do-gemini-apps-collect-why-and-how-is-it-used%2Chow-do-i-know-if-gemini-apps-have-access-to-and-are-using-my-precise-location%2Chow-do-i-manage-my-mobile-permissions-when-gemini-is-my-device-assistant%2Cwhat-do-the-browser-app-permission-choices-mean%2Chow-does-google-work-with-my-uploaded-images%2Cwhat-happens-when-i-share-a-photo-or-video-from-a-media-gallery-connected-app-with-gemini-apps%2Cwhat-happens-with-my-data-that-gemini-connected-apps-and-other-services-exchange%2Chow-can-i-allow-gemini-to-personalize-my-experience-with-my-data-from-connected-apps%2Chow-is-my-data-used-to-make-calls-send-messages-with-connected-apps-in-gemini%2Chow-does-gemini-use-my-data-with-the-remote-browser-and-remote-computer%2Cwhat-happens-when-you-turn-off-task-mode%2Chow-does-google-work-with-gemini-live-data%2Cwhat-happens-to-my-data-when-i-use-gemini-in-chrome%2Cwhat-happens-with-my-data-when-gemini-uses-screen-automation-to-help-me-get-tasks-done-in-android-apps%2Cwhat-happens-to-my-data-when-i-use-geminis-agentic-calling-capability%2Cwhat-happens-to-my-data-when-i-add-items-to-the-google-shopping-cart-from-gemini%2Cwhat-happens-to-my-data-when-i-use-google-pay-in-gemini%2Cwhat-happens-to-my-data-when-i-interact-with-gems-from-google-labs%2Cwhat-happens-to-my-data-when-i-import-memory-or-chats-from-other-ai-platforms%2Cwhat-happens-to-my-data-when-i-use-notebooks-in-gemini%2Cwhat-happens-to-my-data-when-i-create-an-avatar-in-gemini-apps%2Cwhat-happens-to-my-data-when-i-share-my-avatar-with-other-users%2Cwhat-happens-to-my-data-when-i-interact-with-canvas-web-apps%2Cwhat-happens-when-i-interact-with-speak-to-window-on-gemini-for-macos%2Cwhat-terms-apply-to-use-of-gemini-apps","capturedAt":"2026-11-08T22:28:03Z","sha256":"e1e866ccdbaf192a25cd6823496389ad27321566852ad82a4a59583741d7ae44"}},{"quote":"We keep some data until you delete your Google Account, such as information about how often you use Gemini Apps.","source":{"doc":"gemini-apps-privacy-hub","title":"Gemini Apps Privacy Hub","url":"https://support.google.com/gemini/answer/13594961?hl=en#zippy=%2Cwhat-data-is-collected%2Chow-your-data-is-used%2Chow-gemini-apps-get-help-from-google-services%2Chow-gemini-apps-work-with-connected-apps%2Caudio-features%2Ccanvas%2Cconfiguring-your-settings%2Chow-long-we-retain-your-data%2Crequesting-content-removal-and-exporting-your-information%2Cother-things-to-know%2Crespect-others-rights%2Cwhat-are-gemini-apps%2Chow-can-i-object-to-the-processing-of-my-data-or-ask-for-inaccurate-data-in-gemini-apps-responses-to-be-corrected%2Cwhat-are-googles-legal-bases-of-processing-gemini-apps-data-under-european-union-eu-or-united-kingdom-uk-data-protection-law%2Cdo-you-use-my-gemini-apps-chats-to-show-me-ads%2Cwho-has-access-to-my-chats-and-how-does-human-review-improve-gemini-for-everyone%2Chow-long-does-google-retain-my-temporary-chats-and-chats-i-have-when-keep-activity-is-off-and-what-does-google-do-with-this-data%2Chow-does-google-use-my-feedback%2Cwhat-does-the-keep-activity-setting-control%2Cwhat-does-the-memory-summary-setting-control%2Chow-can-i-control-whether-google-uses-my-audio-and-gemini-live-videos-screenshares-to-improve-its-services%2Chow-do-i-manage-what-gemini-remembers-about-me-and-customize-my-responses%2Chow-can-i-control-whether-gemini-apps-use-my-past-chats-to-personalize-my-experience%2Chow-does-google-handle-my-data-when-i-use-gemini-apps-while-signed-out%2Cwhat-location-information-do-gemini-apps-collect-why-and-how-is-it-used%2Chow-do-i-know-if-gemini-apps-have-access-to-and-are-using-my-precise-location%2Chow-do-i-manage-my-mobile-permissions-when-gemini-is-my-device-assistant%2Cwhat-do-the-browser-app-permission-choices-mean%2Chow-does-google-work-with-my-uploaded-images%2Cwhat-happens-when-i-share-a-photo-or-video-from-a-media-gallery-connected-app-with-gemini-apps%2Cwhat-happens-with-my-data-that-gemini-connected-apps-and-other-services-exchange%2Chow-can-i-allow-gemini-to-personalize-my-experience-with-my-data-from-connected-apps%2Chow-is-my-data-used-to-make-calls-send-messages-with-connected-apps-in-gemini%2Chow-does-gemini-use-my-data-with-the-remote-browser-and-remote-computer%2Cwhat-happens-when-you-turn-off-task-mode%2Chow-does-google-work-with-gemini-live-data%2Cwhat-happens-to-my-data-when-i-use-gemini-in-chrome%2Cwhat-happens-with-my-data-when-gemini-uses-screen-automation-to-help-me-get-tasks-done-in-android-apps%2Cwhat-happens-to-my-data-when-i-use-geminis-agentic-calling-capability%2Cwhat-happens-to-my-data-when-i-add-items-to-the-google-shopping-cart-from-gemini%2Cwhat-happens-to-my-data-when-i-use-google-pay-in-gemini%2Cwhat-happens-to-my-data-when-i-interact-with-gems-from-google-labs%2Cwhat-happens-to-my-data-when-i-import-memory-or-chats-from-other-ai-platforms%2Cwhat-happens-to-my-data-when-i-use-notebooks-in-gemini%2Cwhat-happens-to-my-data-when-i-create-an-avatar-in-gemini-apps%2Cwhat-happens-to-my-data-when-i-share-my-avatar-with-other-users%2Cwhat-happens-to-my-data-when-i-interact-with-canvas-web-apps%2Cwhat-happens-when-i-interact-with-speak-to-window-on-gemini-for-macos%2Cwhat-terms-apply-to-use-of-gemini-apps","capturedAt":"2026-11-08T22:28:03Z","sha256":"e1e866ccdbaf192a25cd6823496389ad27321566852ad82a4a59583741d7ae44"}},{"quote":"When you delete data, we follow a deletion process to make sure that your data is safely and completely removed from our servers or retained only in anonymized form.","source":{"doc":"privacy-policy","title":"Privacy Policy \\u2013 Privacy & Terms \\u2013 Google","url":"https://policies.google.com/privacy?hl=en-US","capturedAt":"2026-11-08T22:04:22Z","sha256":"450d30d71dd38b3096ec447da0b6cf51e2b8e63e8d6da3e89e4366bbd337814f"}},{"quote":"Because of this, there may be delays between when you delete something and when copies are deleted from our active and backup systems.","source":{"doc":"privacy-policy","title":"Privacy Policy \\u2013 Privacy & Terms \\u2013 Google","url":"https://policies.google.com/privacy?hl=en-US","capturedAt":"2026-11-08T22:04:22Z","sha256":"450d30d71dd38b3096ec447da0b6cf51e2b8e63e8d6da3e89e4366bbd337814f"}}]},"retention_exceptions":{"summary":"Human-reviewed chats and reviewed feedback are kept up to 3 years, unlinked from you. Some data is kept longer for security, abuse or legal reasons (no duration given).","status":"stated","cites":[{"quote":"Chats reviewed by human reviewers (and related data like your language, device type, location info, or feedback) are not deleted when you delete your activity. Instead, they are retained for up to three years.","source":{"doc":"gemini-apps-privacy-hub","title":"Gemini Apps Privacy Hub","url":"https://support.google.com/gemini/answer/13594961?hl=en#zippy=%2Cwhat-data-is-collected%2Chow-your-data-is-used%2Chow-gemini-apps-get-help-from-google-services%2Chow-gemini-apps-work-with-connected-apps%2Caudio-features%2Ccanvas%2Cconfiguring-your-settings%2Chow-long-we-retain-your-data%2Crequesting-content-removal-and-exporting-your-information%2Cother-things-to-know%2Crespect-others-rights%2Cwhat-are-gemini-apps%2Chow-can-i-object-to-the-processing-of-my-data-or-ask-for-inaccurate-data-in-gemini-apps-responses-to-be-corrected%2Cwhat-are-googles-legal-bases-of-processing-gemini-apps-data-under-european-union-eu-or-united-kingdom-uk-data-protection-law%2Cdo-you-use-my-gemini-apps-chats-to-show-me-ads%2Cwho-has-access-to-my-chats-and-how-does-human-review-improve-gemini-for-everyone%2Chow-long-does-google-retain-my-temporary-chats-and-chats-i-have-when-keep-activity-is-off-and-what-does-google-do-with-this-data%2Chow-does-google-use-my-feedback%2Cwhat-does-the-keep-activity-setting-control%2Cwhat-does-the-memory-summary-setting-control%2Chow-can-i-control-whether-google-uses-my-audio-and-gemini-live-videos-screenshares-to-improve-its-services%2Chow-do-i-manage-what-gemini-remembers-about-me-and-customize-my-responses%2Chow-can-i-control-whether-gemini-apps-use-my-past-chats-to-personalize-my-experience%2Chow-does-google-handle-my-data-when-i-use-gemini-apps-while-signed-out%2Cwhat-location-information-do-gemini-apps-collect-why-and-how-is-it-used%2Chow-do-i-know-if-gemini-apps-have-access-to-and-are-using-my-precise-location%2Chow-do-i-manage-my-mobile-permissions-when-gemini-is-my-device-assistant%2Cwhat-do-the-browser-app-permission-choices-mean%2Chow-does-google-work-with-my-uploaded-images%2Cwhat-happens-when-i-share-a-photo-or-video-from-a-media-gallery-connected-app-with-gemini-apps%2Cwhat-happens-with-my-data-that-gemini-connected-apps-and-other-services-exchange%2Chow-can-i-allow-gemini-to-personalize-my-experience-with-my-data-from-connected-apps%2Chow-is-my-data-used-to-make-calls-send-messages-with-connected-apps-in-gemini%2Chow-does-gemini-use-my-data-with-the-remote-browser-and-remote-computer%2Cwhat-happens-when-you-turn-off-task-mode%2Chow-does-google-work-with-gemini-live-data%2Cwhat-happens-to-my-data-when-i-use-gemini-in-chrome%2Cwhat-happens-with-my-data-when-gemini-uses-screen-automation-to-help-me-get-tasks-done-in-android-apps%2Cwhat-happens-to-my-data-when-i-use-geminis-agentic-calling-capability%2Cwhat-happens-to-my-data-when-i-add-items-to-the-google-shopping-cart-from-gemini%2Cwhat-happens-to-my-data-when-i-use-google-pay-in-gemini%2Cwhat-happens-to-my-data-when-i-interact-with-gems-from-google-labs%2Cwhat-happens-to-my-data-when-i-import-memory-or-chats-from-other-ai-platforms%2Cwhat-happens-to-my-data-when-i-use-notebooks-in-gemini%2Cwhat-happens-to-my-data-when-i-create-an-avatar-in-gemini-apps%2Cwhat-happens-to-my-data-when-i-share-my-avatar-with-other-users%2Cwhat-happens-to-my-data-when-i-interact-with-canvas-web-apps%2Cwhat-happens-when-i-interact-with-speak-to-window-on-gemini-for-macos%2Cwhat-terms-apply-to-use-of-gemini-apps","capturedAt":"2026-11-08T22:28:03Z","sha256":"e1e866ccdbaf192a25cd6823496389ad27321566852ad82a4a59583741d7ae44"}},{"quote":"Reviewed feedback, associated conversations, and related data are retained for up to 3 years, disconnected from your Google Account.","source":{"doc":"gemini-apps-privacy-hub","title":"Gemini Apps Privacy Hub","url":"https://support.google.com/gemini/answer/13594961?hl=en#zippy=%2Cwhat-data-is-collected%2Chow-your-data-is-used%2Chow-gemini-apps-get-help-from-google-services%2Chow-gemini-apps-work-with-connected-apps%2Caudio-features%2Ccanvas%2Cconfiguring-your-settings%2Chow-long-we-retain-your-data%2Crequesting-content-removal-and-exporting-your-information%2Cother-things-to-know%2Crespect-others-rights%2Cwhat-are-gemini-apps%2Chow-can-i-object-to-the-processing-of-my-data-or-ask-for-inaccurate-data-in-gemini-apps-responses-to-be-corrected%2Cwhat-are-googles-legal-bases-of-processing-gemini-apps-data-under-european-union-eu-or-united-kingdom-uk-data-protection-law%2Cdo-you-use-my-gemini-apps-chats-to-show-me-ads%2Cwho-has-access-to-my-chats-and-how-does-human-review-improve-gemini-for-everyone%2Chow-long-does-google-retain-my-temporary-chats-and-chats-i-have-when-keep-activity-is-off-and-what-does-google-do-with-this-data%2Chow-does-google-use-my-feedback%2Cwhat-does-the-keep-activity-setting-control%2Cwhat-does-the-memory-summary-setting-control%2Chow-can-i-control-whether-google-uses-my-audio-and-gemini-live-videos-screenshares-to-improve-its-services%2Chow-do-i-manage-what-gemini-remembers-about-me-and-customize-my-responses%2Chow-can-i-control-whether-gemini-apps-use-my-past-chats-to-personalize-my-experience%2Chow-does-google-handle-my-data-when-i-use-gemini-apps-while-signed-out%2Cwhat-location-information-do-gemini-apps-collect-why-and-how-is-it-used%2Chow-do-i-know-if-gemini-apps-have-access-to-and-are-using-my-precise-location%2Chow-do-i-manage-my-mobile-permissions-when-gemini-is-my-device-assistant%2Cwhat-do-the-browser-app-permission-choices-mean%2Chow-does-google-work-with-my-uploaded-images%2Cwhat-happens-when-i-share-a-photo-or-video-from-a-media-gallery-connected-app-with-gemini-apps%2Cwhat-happens-with-my-data-that-gemini-connected-apps-and-other-services-exchange%2Chow-can-i-allow-gemini-to-personalize-my-experience-with-my-data-from-connected-apps%2Chow-is-my-data-used-to-make-calls-send-messages-with-connected-apps-in-gemini%2Chow-does-gemini-use-my-data-with-the-remote-browser-and-remote-computer%2Cwhat-happens-when-you-turn-off-task-mode%2Chow-does-google-work-with-gemini-live-data%2Cwhat-happens-to-my-data-when-i-use-gemini-in-chrome%2Cwhat-happens-with-my-data-when-gemini-uses-screen-automation-to-help-me-get-tasks-done-in-android-apps%2Cwhat-happens-to-my-data-when-i-use-geminis-agentic-calling-capability%2Cwhat-happens-to-my-data-when-i-add-items-to-the-google-shopping-cart-from-gemini%2Cwhat-happens-to-my-data-when-i-use-google-pay-in-gemini%2Cwhat-happens-to-my-data-when-i-interact-with-gems-from-google-labs%2Cwhat-happens-to-my-data-when-i-import-memory-or-chats-from-other-ai-platforms%2Cwhat-happens-to-my-data-when-i-use-notebooks-in-gemini%2Cwhat-happens-to-my-data-when-i-create-an-avatar-in-gemini-apps%2Cwhat-happens-to-my-data-when-i-share-my-avatar-with-other-users%2Cwhat-happens-to-my-data-when-i-interact-with-canvas-web-apps%2Cwhat-happens-when-i-interact-with-speak-to-window-on-gemini-for-macos%2Cwhat-terms-apply-to-use-of-gemini-apps","capturedAt":"2026-11-08T22:28:03Z","sha256":"e1e866ccdbaf192a25cd6823496389ad27321566852ad82a4a59583741d7ae44"}},{"quote":"We retain some data for longer when necessary for legitimate business or legal purposes, such as security, fraud and abuse prevention, or financial record-keeping.","source":{"doc":"gemini-apps-privacy-hub","title":"Gemini Apps Privacy Hub","url":"https://support.google.com/gemini/answer/13594961?hl=en#zippy=%2Cwhat-data-is-collected%2Chow-your-data-is-used%2Chow-gemini-apps-get-help-from-google-services%2Chow-gemini-apps-work-with-connected-apps%2Caudio-features%2Ccanvas%2Cconfiguring-your-settings%2Chow-long-we-retain-your-data%2Crequesting-content-removal-and-exporting-your-information%2Cother-things-to-know%2Crespect-others-rights%2Cwhat-are-gemini-apps%2Chow-can-i-object-to-the-processing-of-my-data-or-ask-for-inaccurate-data-in-gemini-apps-responses-to-be-corrected%2Cwhat-are-googles-legal-bases-of-processing-gemini-apps-data-under-european-union-eu-or-united-kingdom-uk-data-protection-law%2Cdo-you-use-my-gemini-apps-chats-to-show-me-ads%2Cwho-has-access-to-my-chats-and-how-does-human-review-improve-gemini-for-everyone%2Chow-long-does-google-retain-my-temporary-chats-and-chats-i-have-when-keep-activity-is-off-and-what-does-google-do-with-this-data%2Chow-does-google-use-my-feedback%2Cwhat-does-the-keep-activity-setting-control%2Cwhat-does-the-memory-summary-setting-control%2Chow-can-i-control-whether-google-uses-my-audio-and-gemini-live-videos-screenshares-to-improve-its-services%2Chow-do-i-manage-what-gemini-remembers-about-me-and-customize-my-responses%2Chow-can-i-control-whether-gemini-apps-use-my-past-chats-to-personalize-my-experience%2Chow-does-google-handle-my-data-when-i-use-gemini-apps-while-signed-out%2Cwhat-location-information-do-gemini-apps-collect-why-and-how-is-it-used%2Chow-do-i-know-if-gemini-apps-have-access-to-and-are-using-my-precise-location%2Chow-do-i-manage-my-mobile-permissions-when-gemini-is-my-device-assistant%2Cwhat-do-the-browser-app-permission-choices-mean%2Chow-does-google-work-with-my-uploaded-images%2Cwhat-happens-when-i-share-a-photo-or-video-from-a-media-gallery-connected-app-with-gemini-apps%2Cwhat-happens-with-my-data-that-gemini-connected-apps-and-other-services-exchange%2Chow-can-i-allow-gemini-to-personalize-my-experience-with-my-data-from-connected-apps%2Chow-is-my-data-used-to-make-calls-send-messages-with-connected-apps-in-gemini%2Chow-does-gemini-use-my-data-with-the-remote-browser-and-remote-computer%2Cwhat-happens-when-you-turn-off-task-mode%2Chow-does-google-work-with-gemini-live-data%2Cwhat-happens-to-my-data-when-i-use-gemini-in-chrome%2Cwhat-happens-with-my-data-when-gemini-uses-screen-automation-to-help-me-get-tasks-done-in-android-apps%2Cwhat-happens-to-my-data-when-i-use-geminis-agentic-calling-capability%2Cwhat-happens-to-my-data-when-i-add-items-to-the-google-shopping-cart-from-gemini%2Cwhat-happens-to-my-data-when-i-use-google-pay-in-gemini%2Cwhat-happens-to-my-data-when-i-interact-with-gems-from-google-labs%2Cwhat-happens-to-my-data-when-i-import-memory-or-chats-from-other-ai-platforms%2Cwhat-happens-to-my-data-when-i-use-notebooks-in-gemini%2Cwhat-happens-to-my-data-when-i-create-an-avatar-in-gemini-apps%2Cwhat-happens-to-my-data-when-i-share-my-avatar-with-other-users%2Cwhat-happens-to-my-data-when-i-interact-with-canvas-web-apps%2Cwhat-happens-when-i-interact-with-speak-to-window-on-gemini-for-macos%2Cwhat-terms-apply-to-use-of-gemini-apps","capturedAt":"2026-11-08T22:28:03Z","sha256":"e1e866ccdbaf192a25cd6823496389ad27321566852ad82a4a59583741d7ae44"}},{"quote":"Deleting your Gemini Apps activity does not delete data saved in those other services.","source":{"doc":"gemini-apps-privacy-hub","title":"Gemini Apps Privacy Hub","url":"https://support.google.com/gemini/answer/13594961?hl=en#zippy=%2Cwhat-data-is-collected%2Chow-your-data-is-used%2Chow-gemini-apps-get-help-from-google-services%2Chow-gemini-apps-work-with-connected-apps%2Caudio-features%2Ccanvas%2Cconfiguring-your-settings%2Chow-long-we-retain-your-data%2Crequesting-content-removal-and-exporting-your-information%2Cother-things-to-know%2Crespect-others-rights%2Cwhat-are-gemini-apps%2Chow-can-i-object-to-the-processing-of-my-data-or-ask-for-inaccurate-data-in-gemini-apps-responses-to-be-corrected%2Cwhat-are-googles-legal-bases-of-processing-gemini-apps-data-under-european-union-eu-or-united-kingdom-uk-data-protection-law%2Cdo-you-use-my-gemini-apps-chats-to-show-me-ads%2Cwho-has-access-to-my-chats-and-how-does-human-review-improve-gemini-for-everyone%2Chow-long-does-google-retain-my-temporary-chats-and-chats-i-have-when-keep-activity-is-off-and-what-does-google-do-with-this-data%2Chow-does-google-use-my-feedback%2Cwhat-does-the-keep-activity-setting-control%2Cwhat-does-the-memory-summary-setting-control%2Chow-can-i-control-whether-google-uses-my-audio-and-gemini-live-videos-screenshares-to-improve-its-services%2Chow-do-i-manage-what-gemini-remembers-about-me-and-customize-my-responses%2Chow-can-i-control-whether-gemini-apps-use-my-past-chats-to-personalize-my-experience%2Chow-does-google-handle-my-data-when-i-use-gemini-apps-while-signed-out%2Cwhat-location-information-do-gemini-apps-collect-why-and-how-is-it-used%2Chow-do-i-know-if-gemini-apps-have-access-to-and-are-using-my-precise-location%2Chow-do-i-manage-my-mobile-permissions-when-gemini-is-my-device-assistant%2Cwhat-do-the-browser-app-permission-choices-mean%2Chow-does-google-work-with-my-uploaded-images%2Cwhat-happens-when-i-share-a-photo-or-video-from-a-media-gallery-connected-app-with-gemini-apps%2Cwhat-happens-with-my-data-that-gemini-connected-apps-and-other-services-exchange%2Chow-can-i-allow-gemini-to-personalize-my-experience-with-my-data-from-connected-apps%2Chow-is-my-data-used-to-make-calls-send-messages-with-connected-apps-in-gemini%2Chow-does-gemini-use-my-data-with-the-remote-browser-and-remote-computer%2Cwhat-happens-when-you-turn-off-task-mode%2Chow-does-google-work-with-gemini-live-data%2Cwhat-happens-to-my-data-when-i-use-gemini-in-chrome%2Cwhat-happens-with-my-data-when-gemini-uses-screen-automation-to-help-me-get-tasks-done-in-android-apps%2Cwhat-happens-to-my-data-when-i-use-geminis-agentic-calling-capability%2Cwhat-happens-to-my-data-when-i-add-items-to-the-google-shopping-cart-from-gemini%2Cwhat-happens-to-my-data-when-i-use-google-pay-in-gemini%2Cwhat-happens-to-my-data-when-i-interact-with-gems-from-google-labs%2Cwhat-happens-to-my-data-when-i-import-memory-or-chats-from-other-ai-platforms%2Cwhat-happens-to-my-data-when-i-use-notebooks-in-gemini%2Cwhat-happens-to-my-data-when-i-create-an-avatar-in-gemini-apps%2Cwhat-happens-to-my-data-when-i-share-my-avatar-with-other-users%2Cwhat-happens-to-my-data-when-i-interact-with-canvas-web-apps%2Cwhat-happens-when-i-interact-with-speak-to-window-on-gemini-for-macos%2Cwhat-terms-apply-to-use-of-gemini-apps","capturedAt":"2026-11-08T22:28:03Z","sha256":"e1e866ccdbaf192a25cd6823496389ad27321566852ad82a4a59583741d7ae44"}}]},"zdr":{"summary":"Inferred: no zero-retention option exists. Even temporary chats and chats with Keep Activity off are kept 72 hours with your account and may be human-reviewed for safety.","status":"inferred","cites":[{"quote":"Temporary chats and chats you have when [Keep Activity](https://myactivity.google.com/product/gemini?utm_source=help) is off are retained with your account for 72 hours and used to:","source":{"doc":"gemini-apps-privacy-hub","title":"Gemini Apps Privacy Hub","url":"https://support.google.com/gemini/answer/13594961?hl=en#zippy=%2Cwhat-data-is-collected%2Chow-your-data-is-used%2Chow-gemini-apps-get-help-from-google-services%2Chow-gemini-apps-work-with-connected-apps%2Caudio-features%2Ccanvas%2Cconfiguring-your-settings%2Chow-long-we-retain-your-data%2Crequesting-content-removal-and-exporting-your-information%2Cother-things-to-know%2Crespect-others-rights%2Cwhat-are-gemini-apps%2Chow-can-i-object-to-the-processing-of-my-data-or-ask-for-inaccurate-data-in-gemini-apps-responses-to-be-corrected%2Cwhat-are-googles-legal-bases-of-processing-gemini-apps-data-under-european-union-eu-or-united-kingdom-uk-data-protection-law%2Cdo-you-use-my-gemini-apps-chats-to-show-me-ads%2Cwho-has-access-to-my-chats-and-how-does-human-review-improve-gemini-for-everyone%2Chow-long-does-google-retain-my-temporary-chats-and-chats-i-have-when-keep-activity-is-off-and-what-does-google-do-with-this-data%2Chow-does-google-use-my-feedback%2Cwhat-does-the-keep-activity-setting-control%2Cwhat-does-the-memory-summary-setting-control%2Chow-can-i-control-whether-google-uses-my-audio-and-gemini-live-videos-screenshares-to-improve-its-services%2Chow-do-i-manage-what-gemini-remembers-about-me-and-customize-my-responses%2Chow-can-i-control-whether-gemini-apps-use-my-past-chats-to-personalize-my-experience%2Chow-does-google-handle-my-data-when-i-use-gemini-apps-while-signed-out%2Cwhat-location-information-do-gemini-apps-collect-why-and-how-is-it-used%2Chow-do-i-know-if-gemini-apps-have-access-to-and-are-using-my-precise-location%2Chow-do-i-manage-my-mobile-permissions-when-gemini-is-my-device-assistant%2Cwhat-do-the-browser-app-permission-choices-mean%2Chow-does-google-work-with-my-uploaded-images%2Cwhat-happens-when-i-share-a-photo-or-video-from-a-media-gallery-connected-app-with-gemini-apps%2Cwhat-happens-with-my-data-that-gemini-connected-apps-and-other-services-exchange%2Chow-can-i-allow-gemini-to-personalize-my-experience-with-my-data-from-connected-apps%2Chow-is-my-data-used-to-make-calls-send-messages-with-connected-apps-in-gemini%2Chow-does-gemini-use-my-data-with-the-remote-browser-and-remote-computer%2Cwhat-happens-when-you-turn-off-task-mode%2Chow-does-google-work-with-gemini-live-data%2Cwhat-happens-to-my-data-when-i-use-gemini-in-chrome%2Cwhat-happens-with-my-data-when-gemini-uses-screen-automation-to-help-me-get-tasks-done-in-android-apps%2Cwhat-happens-to-my-data-when-i-use-geminis-agentic-calling-capability%2Cwhat-happens-to-my-data-when-i-add-items-to-the-google-shopping-cart-from-gemini%2Cwhat-happens-to-my-data-when-i-use-google-pay-in-gemini%2Cwhat-happens-to-my-data-when-i-interact-with-gems-from-google-labs%2Cwhat-happens-to-my-data-when-i-import-memory-or-chats-from-other-ai-platforms%2Cwhat-happens-to-my-data-when-i-use-notebooks-in-gemini%2Cwhat-happens-to-my-data-when-i-create-an-avatar-in-gemini-apps%2Cwhat-happens-to-my-data-when-i-share-my-avatar-with-other-users%2Cwhat-happens-to-my-data-when-i-interact-with-canvas-web-apps%2Cwhat-happens-when-i-interact-with-speak-to-window-on-gemini-for-macos%2Cwhat-terms-apply-to-use-of-gemini-apps","capturedAt":"2026-11-08T22:28:03Z","sha256":"e1e866ccdbaf192a25cd6823496389ad27321566852ad82a4a59583741d7ae44"}},{"quote":"Even if your Keep Activity setting is off or you use temporary chats, Google still uses your chats to respond to you and help protect Google, our users, and the public, including with help from human reviewers.","source":{"doc":"gemini-apps-privacy-hub","title":"Gemini Apps Privacy Hub","url":"https://support.google.com/gemini/answer/13594961?hl=en#zippy=%2Cwhat-data-is-collected%2Chow-your-data-is-used%2Chow-gemini-apps-get-help-from-google-services%2Chow-gemini-apps-work-with-connected-apps%2Caudio-features%2Ccanvas%2Cconfiguring-your-settings%2Chow-long-we-retain-your-data%2Crequesting-content-removal-and-exporting-your-information%2Cother-things-to-know%2Crespect-others-rights%2Cwhat-are-gemini-apps%2Chow-can-i-object-to-the-processing-of-my-data-or-ask-for-inaccurate-data-in-gemini-apps-responses-to-be-corrected%2Cwhat-are-googles-legal-bases-of-processing-gemini-apps-data-under-european-union-eu-or-united-kingdom-uk-data-protection-law%2Cdo-you-use-my-gemini-apps-chats-to-show-me-ads%2Cwho-has-access-to-my-chats-and-how-does-human-review-improve-gemini-for-everyone%2Chow-long-does-google-retain-my-temporary-chats-and-chats-i-have-when-keep-activity-is-off-and-what-does-google-do-with-this-data%2Chow-does-google-use-my-feedback%2Cwhat-does-the-keep-activity-setting-control%2Cwhat-does-the-memory-summary-setting-control%2Chow-can-i-control-whether-google-uses-my-audio-and-gemini-live-videos-screenshares-to-improve-its-services%2Chow-do-i-manage-what-gemini-remembers-about-me-and-customize-my-responses%2Chow-can-i-control-whether-gemini-apps-use-my-past-chats-to-personalize-my-experience%2Chow-does-google-handle-my-data-when-i-use-gemini-apps-while-signed-out%2Cwhat-location-information-do-gemini-apps-collect-why-and-how-is-it-used%2Chow-do-i-know-if-gemini-apps-have-access-to-and-are-using-my-precise-location%2Chow-do-i-manage-my-mobile-permissions-when-gemini-is-my-device-assistant%2Cwhat-do-the-browser-app-permission-choices-mean%2Chow-does-google-work-with-my-uploaded-images%2Cwhat-happens-when-i-share-a-photo-or-video-from-a-media-gallery-connected-app-with-gemini-apps%2Cwhat-happens-with-my-data-that-gemini-connected-apps-and-other-services-exchange%2Chow-can-i-allow-gemini-to-personalize-my-experience-with-my-data-from-connected-apps%2Chow-is-my-data-used-to-make-calls-send-messages-with-connected-apps-in-gemini%2Chow-does-gemini-use-my-data-with-the-remote-browser-and-remote-computer%2Cwhat-happens-when-you-turn-off-task-mode%2Chow-does-google-work-with-gemini-live-data%2Cwhat-happens-to-my-data-when-i-use-gemini-in-chrome%2Cwhat-happens-with-my-data-when-gemini-uses-screen-automation-to-help-me-get-tasks-done-in-android-apps%2Cwhat-happens-to-my-data-when-i-use-geminis-agentic-calling-capability%2Cwhat-happens-to-my-data-when-i-add-items-to-the-google-shopping-cart-from-gemini%2Cwhat-happens-to-my-data-when-i-use-google-pay-in-gemini%2Cwhat-happens-to-my-data-when-i-interact-with-gems-from-google-labs%2Cwhat-happens-to-my-data-when-i-import-memory-or-chats-from-other-ai-platforms%2Cwhat-happens-to-my-data-when-i-use-notebooks-in-gemini%2Cwhat-happens-to-my-data-when-i-create-an-avatar-in-gemini-apps%2Cwhat-happens-to-my-data-when-i-share-my-avatar-with-other-users%2Cwhat-happens-to-my-data-when-i-interact-with-canvas-web-apps%2Cwhat-happens-when-i-interact-with-speak-to-window-on-gemini-for-macos%2Cwhat-terms-apply-to-use-of-gemini-apps","capturedAt":"2026-11-08T22:28:03Z","sha256":"e1e866ccdbaf192a25cd6823496389ad27321566852ad82a4a59583741d7ae44"}}]},"training_default":{"summary":"Inferred: with Keep Activity on, chats train Google's generative AI models; the hub never says outright that it's on by default. Audio and Live video/screenshares are excluded by default.","status":"inferred","cites":[{"quote":"Google uses your activity to provide, develop, and improve its services (including training generative AI models), as well as to protect Google, its users, and the public with the help of human reviewers.","source":{"doc":"gemini-apps-privacy-hub","title":"Gemini Apps Privacy Hub","url":"https://support.google.com/gemini/answer/13594961?hl=en#zippy=%2Cwhat-data-is-collected%2Chow-your-data-is-used%2Chow-gemini-apps-get-help-from-google-services%2Chow-gemini-apps-work-with-connected-apps%2Caudio-features%2Ccanvas%2Cconfiguring-your-settings%2Chow-long-we-retain-your-data%2Crequesting-content-removal-and-exporting-your-information%2Cother-things-to-know%2Crespect-others-rights%2Cwhat-are-gemini-apps%2Chow-can-i-object-to-the-processing-of-my-data-or-ask-for-inaccurate-data-in-gemini-apps-responses-to-be-corrected%2Cwhat-are-googles-legal-bases-of-processing-gemini-apps-data-under-european-union-eu-or-united-kingdom-uk-data-protection-law%2Cdo-you-use-my-gemini-apps-chats-to-show-me-ads%2Cwho-has-access-to-my-chats-and-how-does-human-review-improve-gemini-for-everyone%2Chow-long-does-google-retain-my-temporary-chats-and-chats-i-have-when-keep-activity-is-off-and-what-does-google-do-with-this-data%2Chow-does-google-use-my-feedback%2Cwhat-does-the-keep-activity-setting-control%2Cwhat-does-the-memory-summary-setting-control%2Chow-can-i-control-whether-google-uses-my-audio-and-gemini-live-videos-screenshares-to-improve-its-services%2Chow-do-i-manage-what-gemini-remembers-about-me-and-customize-my-responses%2Chow-can-i-control-whether-gemini-apps-use-my-past-chats-to-personalize-my-experience%2Chow-does-google-handle-my-data-when-i-use-gemini-apps-while-signed-out%2Cwhat-location-information-do-gemini-apps-collect-why-and-how-is-it-used%2Chow-do-i-know-if-gemini-apps-have-access-to-and-are-using-my-precise-location%2Chow-do-i-manage-my-mobile-permissions-when-gemini-is-my-device-assistant%2Cwhat-do-the-browser-app-permission-choices-mean%2Chow-does-google-work-with-my-uploaded-images%2Cwhat-happens-when-i-share-a-photo-or-video-from-a-media-gallery-connected-app-with-gemini-apps%2Cwhat-happens-with-my-data-that-gemini-connected-apps-and-other-services-exchange%2Chow-can-i-allow-gemini-to-personalize-my-experience-with-my-data-from-connected-apps%2Chow-is-my-data-used-to-make-calls-send-messages-with-connected-apps-in-gemini%2Chow-does-gemini-use-my-data-with-the-remote-browser-and-remote-computer%2Cwhat-happens-when-you-turn-off-task-mode%2Chow-does-google-work-with-gemini-live-data%2Cwhat-happens-to-my-data-when-i-use-gemini-in-chrome%2Cwhat-happens-with-my-data-when-gemini-uses-screen-automation-to-help-me-get-tasks-done-in-android-apps%2Cwhat-happens-to-my-data-when-i-use-geminis-agentic-calling-capability%2Cwhat-happens-to-my-data-when-i-add-items-to-the-google-shopping-cart-from-gemini%2Cwhat-happens-to-my-data-when-i-use-google-pay-in-gemini%2Cwhat-happens-to-my-data-when-i-interact-with-gems-from-google-labs%2Cwhat-happens-to-my-data-when-i-import-memory-or-chats-from-other-ai-platforms%2Cwhat-happens-to-my-data-when-i-use-notebooks-in-gemini%2Cwhat-happens-to-my-data-when-i-create-an-avatar-in-gemini-apps%2Cwhat-happens-to-my-data-when-i-share-my-avatar-with-other-users%2Cwhat-happens-to-my-data-when-i-interact-with-canvas-web-apps%2Cwhat-happens-when-i-interact-with-speak-to-window-on-gemini-for-macos%2Cwhat-terms-apply-to-use-of-gemini-apps","capturedAt":"2026-11-08T22:28:03Z","sha256":"e1e866ccdbaf192a25cd6823496389ad27321566852ad82a4a59583741d7ae44"}},{"quote":"Your audio and Gemini Live videos and screenshares aren’t used to improve Google services by default.","source":{"doc":"gemini-apps-privacy-hub","title":"Gemini Apps Privacy Hub","url":"https://support.google.com/gemini/answer/13594961?hl=en#zippy=%2Cwhat-data-is-collected%2Chow-your-data-is-used%2Chow-gemini-apps-get-help-from-google-services%2Chow-gemini-apps-work-with-connected-apps%2Caudio-features%2Ccanvas%2Cconfiguring-your-settings%2Chow-long-we-retain-your-data%2Crequesting-content-removal-and-exporting-your-information%2Cother-things-to-know%2Crespect-others-rights%2Cwhat-are-gemini-apps%2Chow-can-i-object-to-the-processing-of-my-data-or-ask-for-inaccurate-data-in-gemini-apps-responses-to-be-corrected%2Cwhat-are-googles-legal-bases-of-processing-gemini-apps-data-under-european-union-eu-or-united-kingdom-uk-data-protection-law%2Cdo-you-use-my-gemini-apps-chats-to-show-me-ads%2Cwho-has-access-to-my-chats-and-how-does-human-review-improve-gemini-for-everyone%2Chow-long-does-google-retain-my-temporary-chats-and-chats-i-have-when-keep-activity-is-off-and-what-does-google-do-with-this-data%2Chow-does-google-use-my-feedback%2Cwhat-does-the-keep-activity-setting-control%2Cwhat-does-the-memory-summary-setting-control%2Chow-can-i-control-whether-google-uses-my-audio-and-gemini-live-videos-screenshares-to-improve-its-services%2Chow-do-i-manage-what-gemini-remembers-about-me-and-customize-my-responses%2Chow-can-i-control-whether-gemini-apps-use-my-past-chats-to-personalize-my-experience%2Chow-does-google-handle-my-data-when-i-use-gemini-apps-while-signed-out%2Cwhat-location-information-do-gemini-apps-collect-why-and-how-is-it-used%2Chow-do-i-know-if-gemini-apps-have-access-to-and-are-using-my-precise-location%2Chow-do-i-manage-my-mobile-permissions-when-gemini-is-my-device-assistant%2Cwhat-do-the-browser-app-permission-choices-mean%2Chow-does-google-work-with-my-uploaded-images%2Cwhat-happens-when-i-share-a-photo-or-video-from-a-media-gallery-connected-app-with-gemini-apps%2Cwhat-happens-with-my-data-that-gemini-connected-apps-and-other-services-exchange%2Chow-can-i-allow-gemini-to-personalize-my-experience-with-my-data-from-connected-apps%2Chow-is-my-data-used-to-make-calls-send-messages-with-connected-apps-in-gemini%2Chow-does-gemini-use-my-data-with-the-remote-browser-and-remote-computer%2Cwhat-happens-when-you-turn-off-task-mode%2Chow-does-google-work-with-gemini-live-data%2Cwhat-happens-to-my-data-when-i-use-gemini-in-chrome%2Cwhat-happens-with-my-data-when-gemini-uses-screen-automation-to-help-me-get-tasks-done-in-android-apps%2Cwhat-happens-to-my-data-when-i-use-geminis-agentic-calling-capability%2Cwhat-happens-to-my-data-when-i-add-items-to-the-google-shopping-cart-from-gemini%2Cwhat-happens-to-my-data-when-i-use-google-pay-in-gemini%2Cwhat-happens-to-my-data-when-i-interact-with-gems-from-google-labs%2Cwhat-happens-to-my-data-when-i-import-memory-or-chats-from-other-ai-platforms%2Cwhat-happens-to-my-data-when-i-use-notebooks-in-gemini%2Cwhat-happens-to-my-data-when-i-create-an-avatar-in-gemini-apps%2Cwhat-happens-to-my-data-when-i-share-my-avatar-with-other-users%2Cwhat-happens-to-my-data-when-i-interact-with-canvas-web-apps%2Cwhat-happens-when-i-interact-with-speak-to-window-on-gemini-for-macos%2Cwhat-terms-apply-to-use-of-gemini-apps","capturedAt":"2026-11-08T22:28:03Z","sha256":"e1e866ccdbaf192a25cd6823496389ad27321566852ad82a4a59583741d7ae44"}},{"quote":"These uses extend to the generative AI models and other machine-learning technologies powering our services.","source":{"doc":"gemini-apps-privacy-hub","title":"Gemini Apps Privacy Hub","url":"https://support.google.com/gemini/answer/13594961?hl=en#zippy=%2Cwhat-data-is-collected%2Chow-your-data-is-used%2Chow-gemini-apps-get-help-from-google-services%2Chow-gemini-apps-work-with-connected-apps%2Caudio-features%2Ccanvas%2Cconfiguring-your-settings%2Chow-long-we-retain-your-data%2Crequesting-content-removal-and-exporting-your-information%2Cother-things-to-know%2Crespect-others-rights%2Cwhat-are-gemini-apps%2Chow-can-i-object-to-the-processing-of-my-data-or-ask-for-inaccurate-data-in-gemini-apps-responses-to-be-corrected%2Cwhat-are-googles-legal-bases-of-processing-gemini-apps-data-under-european-union-eu-or-united-kingdom-uk-data-protection-law%2Cdo-you-use-my-gemini-apps-chats-to-show-me-ads%2Cwho-has-access-to-my-chats-and-how-does-human-review-improve-gemini-for-everyone%2Chow-long-does-google-retain-my-temporary-chats-and-chats-i-have-when-keep-activity-is-off-and-what-does-google-do-with-this-data%2Chow-does-google-use-my-feedback%2Cwhat-does-the-keep-activity-setting-control%2Cwhat-does-the-memory-summary-setting-control%2Chow-can-i-control-whether-google-uses-my-audio-and-gemini-live-videos-screenshares-to-improve-its-services%2Chow-do-i-manage-what-gemini-remembers-about-me-and-customize-my-responses%2Chow-can-i-control-whether-gemini-apps-use-my-past-chats-to-personalize-my-experience%2Chow-does-google-handle-my-data-when-i-use-gemini-apps-while-signed-out%2Cwhat-location-information-do-gemini-apps-collect-why-and-how-is-it-used%2Chow-do-i-know-if-gemini-apps-have-access-to-and-are-using-my-precise-location%2Chow-do-i-manage-my-mobile-permissions-when-gemini-is-my-device-assistant%2Cwhat-do-the-browser-app-permission-choices-mean%2Chow-does-google-work-with-my-uploaded-images%2Cwhat-happens-when-i-share-a-photo-or-video-from-a-media-gallery-connected-app-with-gemini-apps%2Cwhat-happens-with-my-data-that-gemini-connected-apps-and-other-services-exchange%2Chow-can-i-allow-gemini-to-personalize-my-experience-with-my-data-from-connected-apps%2Chow-is-my-data-used-to-make-calls-send-messages-with-connected-apps-in-gemini%2Chow-does-gemini-use-my-data-with-the-remote-browser-and-remote-computer%2Cwhat-happens-when-you-turn-off-task-mode%2Chow-does-google-work-with-gemini-live-data%2Cwhat-happens-to-my-data-when-i-use-gemini-in-chrome%2Cwhat-happens-with-my-data-when-gemini-uses-screen-automation-to-help-me-get-tasks-done-in-android-apps%2Cwhat-happens-to-my-data-when-i-use-geminis-agentic-calling-capability%2Cwhat-happens-to-my-data-when-i-add-items-to-the-google-shopping-cart-from-gemini%2Cwhat-happens-to-my-data-when-i-use-google-pay-in-gemini%2Cwhat-happens-to-my-data-when-i-interact-with-gems-from-google-labs%2Cwhat-happens-to-my-data-when-i-import-memory-or-chats-from-other-ai-platforms%2Cwhat-happens-to-my-data-when-i-use-notebooks-in-gemini%2Cwhat-happens-to-my-data-when-i-create-an-avatar-in-gemini-apps%2Cwhat-happens-to-my-data-when-i-share-my-avatar-with-other-users%2Cwhat-happens-to-my-data-when-i-interact-with-canvas-web-apps%2Cwhat-happens-when-i-interact-with-speak-to-window-on-gemini-for-macos%2Cwhat-terms-apply-to-use-of-gemini-apps","capturedAt":"2026-11-08T22:28:03Z","sha256":"e1e866ccdbaf192a25cd6823496389ad27321566852ad82a4a59583741d7ae44"}}]},"training_opt_out":{"summary":"Turn off Keep Activity or use temporary chats. Not covered: feedback you send, chats already reviewed, and anonymized data Google makes from chats. Audio/Live training is a separate opt-in.","status":"stated","cites":[{"quote":"Your future chats won’t appear in your Activity, and won’t be used to train our AI models, unless you choose to send Google feedback.","source":{"doc":"gemini-apps-privacy-hub","title":"Gemini Apps Privacy Hub","url":"https://support.google.com/gemini/answer/13594961?hl=en#zippy=%2Cwhat-data-is-collected%2Chow-your-data-is-used%2Chow-gemini-apps-get-help-from-google-services%2Chow-gemini-apps-work-with-connected-apps%2Caudio-features%2Ccanvas%2Cconfiguring-your-settings%2Chow-long-we-retain-your-data%2Crequesting-content-removal-and-exporting-your-information%2Cother-things-to-know%2Crespect-others-rights%2Cwhat-are-gemini-apps%2Chow-can-i-object-to-the-processing-of-my-data-or-ask-for-inaccurate-data-in-gemini-apps-responses-to-be-corrected%2Cwhat-are-googles-legal-bases-of-processing-gemini-apps-data-under-european-union-eu-or-united-kingdom-uk-data-protection-law%2Cdo-you-use-my-gemini-apps-chats-to-show-me-ads%2Cwho-has-access-to-my-chats-and-how-does-human-review-improve-gemini-for-everyone%2Chow-long-does-google-retain-my-temporary-chats-and-chats-i-have-when-keep-activity-is-off-and-what-does-google-do-with-this-data%2Chow-does-google-use-my-feedback%2Cwhat-does-the-keep-activity-setting-control%2Cwhat-does-the-memory-summary-setting-control%2Chow-can-i-control-whether-google-uses-my-audio-and-gemini-live-videos-screenshares-to-improve-its-services%2Chow-do-i-manage-what-gemini-remembers-about-me-and-customize-my-responses%2Chow-can-i-control-whether-gemini-apps-use-my-past-chats-to-personalize-my-experience%2Chow-does-google-handle-my-data-when-i-use-gemini-apps-while-signed-out%2Cwhat-location-information-do-gemini-apps-collect-why-and-how-is-it-used%2Chow-do-i-know-if-gemini-apps-have-access-to-and-are-using-my-precise-location%2Chow-do-i-manage-my-mobile-permissions-when-gemini-is-my-device-assistant%2Cwhat-do-the-browser-app-permission-choices-mean%2Chow-does-google-work-with-my-uploaded-images%2Cwhat-happens-when-i-share-a-photo-or-video-from-a-media-gallery-connected-app-with-gemini-apps%2Cwhat-happens-with-my-data-that-gemini-connected-apps-and-other-services-exchange%2Chow-can-i-allow-gemini-to-personalize-my-experience-with-my-data-from-connected-apps%2Chow-is-my-data-used-to-make-calls-send-messages-with-connected-apps-in-gemini%2Chow-does-gemini-use-my-data-with-the-remote-browser-and-remote-computer%2Cwhat-happens-when-you-turn-off-task-mode%2Chow-does-google-work-with-gemini-live-data%2Cwhat-happens-to-my-data-when-i-use-gemini-in-chrome%2Cwhat-happens-with-my-data-when-gemini-uses-screen-automation-to-help-me-get-tasks-done-in-android-apps%2Cwhat-happens-to-my-data-when-i-use-geminis-agentic-calling-capability%2Cwhat-happens-to-my-data-when-i-add-items-to-the-google-shopping-cart-from-gemini%2Cwhat-happens-to-my-data-when-i-use-google-pay-in-gemini%2Cwhat-happens-to-my-data-when-i-interact-with-gems-from-google-labs%2Cwhat-happens-to-my-data-when-i-import-memory-or-chats-from-other-ai-platforms%2Cwhat-happens-to-my-data-when-i-use-notebooks-in-gemini%2Cwhat-happens-to-my-data-when-i-create-an-avatar-in-gemini-apps%2Cwhat-happens-to-my-data-when-i-share-my-avatar-with-other-users%2Cwhat-happens-to-my-data-when-i-interact-with-canvas-web-apps%2Cwhat-happens-when-i-interact-with-speak-to-window-on-gemini-for-macos%2Cwhat-terms-apply-to-use-of-gemini-apps","capturedAt":"2026-11-08T22:28:03Z","sha256":"e1e866ccdbaf192a25cd6823496389ad27321566852ad82a4a59583741d7ae44"}},{"quote":"Temporary chats are not used to train Google’s AI models.","source":{"doc":"gemini-apps-privacy-hub","title":"Gemini Apps Privacy Hub","url":"https://support.google.com/gemini/answer/13594961?hl=en#zippy=%2Cwhat-data-is-collected%2Chow-your-data-is-used%2Chow-gemini-apps-get-help-from-google-services%2Chow-gemini-apps-work-with-connected-apps%2Caudio-features%2Ccanvas%2Cconfiguring-your-settings%2Chow-long-we-retain-your-data%2Crequesting-content-removal-and-exporting-your-information%2Cother-things-to-know%2Crespect-others-rights%2Cwhat-are-gemini-apps%2Chow-can-i-object-to-the-processing-of-my-data-or-ask-for-inaccurate-data-in-gemini-apps-responses-to-be-corrected%2Cwhat-are-googles-legal-bases-of-processing-gemini-apps-data-under-european-union-eu-or-united-kingdom-uk-data-protection-law%2Cdo-you-use-my-gemini-apps-chats-to-show-me-ads%2Cwho-has-access-to-my-chats-and-how-does-human-review-improve-gemini-for-everyone%2Chow-long-does-google-retain-my-temporary-chats-and-chats-i-have-when-keep-activity-is-off-and-what-does-google-do-with-this-data%2Chow-does-google-use-my-feedback%2Cwhat-does-the-keep-activity-setting-control%2Cwhat-does-the-memory-summary-setting-control%2Chow-can-i-control-whether-google-uses-my-audio-and-gemini-live-videos-screenshares-to-improve-its-services%2Chow-do-i-manage-what-gemini-remembers-about-me-and-customize-my-responses%2Chow-can-i-control-whether-gemini-apps-use-my-past-chats-to-personalize-my-experience%2Chow-does-google-handle-my-data-when-i-use-gemini-apps-while-signed-out%2Cwhat-location-information-do-gemini-apps-collect-why-and-how-is-it-used%2Chow-do-i-know-if-gemini-apps-have-access-to-and-are-using-my-precise-location%2Chow-do-i-manage-my-mobile-permissions-when-gemini-is-my-device-assistant%2Cwhat-do-the-browser-app-permission-choices-mean%2Chow-does-google-work-with-my-uploaded-images%2Cwhat-happens-when-i-share-a-photo-or-video-from-a-media-gallery-connected-app-with-gemini-apps%2Cwhat-happens-with-my-data-that-gemini-connected-apps-and-other-services-exchange%2Chow-can-i-allow-gemini-to-personalize-my-experience-with-my-data-from-connected-apps%2Chow-is-my-data-used-to-make-calls-send-messages-with-connected-apps-in-gemini%2Chow-does-gemini-use-my-data-with-the-remote-browser-and-remote-computer%2Cwhat-happens-when-you-turn-off-task-mode%2Chow-does-google-work-with-gemini-live-data%2Cwhat-happens-to-my-data-when-i-use-gemini-in-chrome%2Cwhat-happens-with-my-data-when-gemini-uses-screen-automation-to-help-me-get-tasks-done-in-android-apps%2Cwhat-happens-to-my-data-when-i-use-geminis-agentic-calling-capability%2Cwhat-happens-to-my-data-when-i-add-items-to-the-google-shopping-cart-from-gemini%2Cwhat-happens-to-my-data-when-i-use-google-pay-in-gemini%2Cwhat-happens-to-my-data-when-i-interact-with-gems-from-google-labs%2Cwhat-happens-to-my-data-when-i-import-memory-or-chats-from-other-ai-platforms%2Cwhat-happens-to-my-data-when-i-use-notebooks-in-gemini%2Cwhat-happens-to-my-data-when-i-create-an-avatar-in-gemini-apps%2Cwhat-happens-to-my-data-when-i-share-my-avatar-with-other-users%2Cwhat-happens-to-my-data-when-i-interact-with-canvas-web-apps%2Cwhat-happens-when-i-interact-with-speak-to-window-on-gemini-for-macos%2Cwhat-terms-apply-to-use-of-gemini-apps","capturedAt":"2026-11-08T22:28:03Z","sha256":"e1e866ccdbaf192a25cd6823496389ad27321566852ad82a4a59583741d7ae44"}},{"quote":"Your Gemini settings don’t control processing of your chats to create anonymized data to improve Google services.","source":{"doc":"gemini-apps-privacy-hub","title":"Gemini Apps Privacy Hub","url":"https://support.google.com/gemini/answer/13594961?hl=en#zippy=%2Cwhat-data-is-collected%2Chow-your-data-is-used%2Chow-gemini-apps-get-help-from-google-services%2Chow-gemini-apps-work-with-connected-apps%2Caudio-features%2Ccanvas%2Cconfiguring-your-settings%2Chow-long-we-retain-your-data%2Crequesting-content-removal-and-exporting-your-information%2Cother-things-to-know%2Crespect-others-rights%2Cwhat-are-gemini-apps%2Chow-can-i-object-to-the-processing-of-my-data-or-ask-for-inaccurate-data-in-gemini-apps-responses-to-be-corrected%2Cwhat-are-googles-legal-bases-of-processing-gemini-apps-data-under-european-union-eu-or-united-kingdom-uk-data-protection-law%2Cdo-you-use-my-gemini-apps-chats-to-show-me-ads%2Cwho-has-access-to-my-chats-and-how-does-human-review-improve-gemini-for-everyone%2Chow-long-does-google-retain-my-temporary-chats-and-chats-i-have-when-keep-activity-is-off-and-what-does-google-do-with-this-data%2Chow-does-google-use-my-feedback%2Cwhat-does-the-keep-activity-setting-control%2Cwhat-does-the-memory-summary-setting-control%2Chow-can-i-control-whether-google-uses-my-audio-and-gemini-live-videos-screenshares-to-improve-its-services%2Chow-do-i-manage-what-gemini-remembers-about-me-and-customize-my-responses%2Chow-can-i-control-whether-gemini-apps-use-my-past-chats-to-personalize-my-experience%2Chow-does-google-handle-my-data-when-i-use-gemini-apps-while-signed-out%2Cwhat-location-information-do-gemini-apps-collect-why-and-how-is-it-used%2Chow-do-i-know-if-gemini-apps-have-access-to-and-are-using-my-precise-location%2Chow-do-i-manage-my-mobile-permissions-when-gemini-is-my-device-assistant%2Cwhat-do-the-browser-app-permission-choices-mean%2Chow-does-google-work-with-my-uploaded-images%2Cwhat-happens-when-i-share-a-photo-or-video-from-a-media-gallery-connected-app-with-gemini-apps%2Cwhat-happens-with-my-data-that-gemini-connected-apps-and-other-services-exchange%2Chow-can-i-allow-gemini-to-personalize-my-experience-with-my-data-from-connected-apps%2Chow-is-my-data-used-to-make-calls-send-messages-with-connected-apps-in-gemini%2Chow-does-gemini-use-my-data-with-the-remote-browser-and-remote-computer%2Cwhat-happens-when-you-turn-off-task-mode%2Chow-does-google-work-with-gemini-live-data%2Cwhat-happens-to-my-data-when-i-use-gemini-in-chrome%2Cwhat-happens-with-my-data-when-gemini-uses-screen-automation-to-help-me-get-tasks-done-in-android-apps%2Cwhat-happens-to-my-data-when-i-use-geminis-agentic-calling-capability%2Cwhat-happens-to-my-data-when-i-add-items-to-the-google-shopping-cart-from-gemini%2Cwhat-happens-to-my-data-when-i-use-google-pay-in-gemini%2Cwhat-happens-to-my-data-when-i-interact-with-gems-from-google-labs%2Cwhat-happens-to-my-data-when-i-import-memory-or-chats-from-other-ai-platforms%2Cwhat-happens-to-my-data-when-i-use-notebooks-in-gemini%2Cwhat-happens-to-my-data-when-i-create-an-avatar-in-gemini-apps%2Cwhat-happens-to-my-data-when-i-share-my-avatar-with-other-users%2Cwhat-happens-to-my-data-when-i-interact-with-canvas-web-apps%2Cwhat-happens-when-i-interact-with-speak-to-window-on-gemini-for-macos%2Cwhat-terms-apply-to-use-of-gemini-apps","capturedAt":"2026-11-08T22:28:03Z","sha256":"e1e866ccdbaf192a25cd6823496389ad27321566852ad82a4a59583741d7ae44"}},{"quote":"If you delete your activity, past chats already reviewed by service providers aren’t deleted because they aren’t connected to your Google Account.","source":{"doc":"gemini-apps-privacy-hub","title":"Gemini Apps Privacy Hub","url":"https://support.google.com/gemini/answer/13594961?hl=en#zippy=%2Cwhat-data-is-collected%2Chow-your-data-is-used%2Chow-gemini-apps-get-help-from-google-services%2Chow-gemini-apps-work-with-connected-apps%2Caudio-features%2Ccanvas%2Cconfiguring-your-settings%2Chow-long-we-retain-your-data%2Crequesting-content-removal-and-exporting-your-information%2Cother-things-to-know%2Crespect-others-rights%2Cwhat-are-gemini-apps%2Chow-can-i-object-to-the-processing-of-my-data-or-ask-for-inaccurate-data-in-gemini-apps-responses-to-be-corrected%2Cwhat-are-googles-legal-bases-of-processing-gemini-apps-data-under-european-union-eu-or-united-kingdom-uk-data-protection-law%2Cdo-you-use-my-gemini-apps-chats-to-show-me-ads%2Cwho-has-access-to-my-chats-and-how-does-human-review-improve-gemini-for-everyone%2Chow-long-does-google-retain-my-temporary-chats-and-chats-i-have-when-keep-activity-is-off-and-what-does-google-do-with-this-data%2Chow-does-google-use-my-feedback%2Cwhat-does-the-keep-activity-setting-control%2Cwhat-does-the-memory-summary-setting-control%2Chow-can-i-control-whether-google-uses-my-audio-and-gemini-live-videos-screenshares-to-improve-its-services%2Chow-do-i-manage-what-gemini-remembers-about-me-and-customize-my-responses%2Chow-can-i-control-whether-gemini-apps-use-my-past-chats-to-personalize-my-experience%2Chow-does-google-handle-my-data-when-i-use-gemini-apps-while-signed-out%2Cwhat-location-information-do-gemini-apps-collect-why-and-how-is-it-used%2Chow-do-i-know-if-gemini-apps-have-access-to-and-are-using-my-precise-location%2Chow-do-i-manage-my-mobile-permissions-when-gemini-is-my-device-assistant%2Cwhat-do-the-browser-app-permission-choices-mean%2Chow-does-google-work-with-my-uploaded-images%2Cwhat-happens-when-i-share-a-photo-or-video-from-a-media-gallery-connected-app-with-gemini-apps%2Cwhat-happens-with-my-data-that-gemini-connected-apps-and-other-services-exchange%2Chow-can-i-allow-gemini-to-personalize-my-experience-with-my-data-from-connected-apps%2Chow-is-my-data-used-to-make-calls-send-messages-with-connected-apps-in-gemini%2Chow-does-gemini-use-my-data-with-the-remote-browser-and-remote-computer%2Cwhat-happens-when-you-turn-off-task-mode%2Chow-does-google-work-with-gemini-live-data%2Cwhat-happens-to-my-data-when-i-use-gemini-in-chrome%2Cwhat-happens-with-my-data-when-gemini-uses-screen-automation-to-help-me-get-tasks-done-in-android-apps%2Cwhat-happens-to-my-data-when-i-use-geminis-agentic-calling-capability%2Cwhat-happens-to-my-data-when-i-add-items-to-the-google-shopping-cart-from-gemini%2Cwhat-happens-to-my-data-when-i-use-google-pay-in-gemini%2Cwhat-happens-to-my-data-when-i-interact-with-gems-from-google-labs%2Cwhat-happens-to-my-data-when-i-import-memory-or-chats-from-other-ai-platforms%2Cwhat-happens-to-my-data-when-i-use-notebooks-in-gemini%2Cwhat-happens-to-my-data-when-i-create-an-avatar-in-gemini-apps%2Cwhat-happens-to-my-data-when-i-share-my-avatar-with-other-users%2Cwhat-happens-to-my-data-when-i-interact-with-canvas-web-apps%2Cwhat-happens-when-i-interact-with-speak-to-window-on-gemini-for-macos%2Cwhat-terms-apply-to-use-of-gemini-apps","capturedAt":"2026-11-08T22:28:03Z","sha256":"e1e866ccdbaf192a25cd6823496389ad27321566852ad82a4a59583741d7ae44"}},{"quote":"You can choose to let Google use your audio and Gemini Live videos and screenshares to improve its services for everyone in [Gemini Apps Activity](https://myactivity.google.com/product/gemini?utm_source=help).","source":{"doc":"gemini-apps-privacy-hub","title":"Gemini Apps Privacy Hub","url":"https://support.google.com/gemini/answer/13594961?hl=en#zippy=%2Cwhat-data-is-collected%2Chow-your-data-is-used%2Chow-gemini-apps-get-help-from-google-services%2Chow-gemini-apps-work-with-connected-apps%2Caudio-features%2Ccanvas%2Cconfiguring-your-settings%2Chow-long-we-retain-your-data%2Crequesting-content-removal-and-exporting-your-information%2Cother-things-to-know%2Crespect-others-rights%2Cwhat-are-gemini-apps%2Chow-can-i-object-to-the-processing-of-my-data-or-ask-for-inaccurate-data-in-gemini-apps-responses-to-be-corrected%2Cwhat-are-googles-legal-bases-of-processing-gemini-apps-data-under-european-union-eu-or-united-kingdom-uk-data-protection-law%2Cdo-you-use-my-gemini-apps-chats-to-show-me-ads%2Cwho-has-access-to-my-chats-and-how-does-human-review-improve-gemini-for-everyone%2Chow-long-does-google-retain-my-temporary-chats-and-chats-i-have-when-keep-activity-is-off-and-what-does-google-do-with-this-data%2Chow-does-google-use-my-feedback%2Cwhat-does-the-keep-activity-setting-control%2Cwhat-does-the-memory-summary-setting-control%2Chow-can-i-control-whether-google-uses-my-audio-and-gemini-live-videos-screenshares-to-improve-its-services%2Chow-do-i-manage-what-gemini-remembers-about-me-and-customize-my-responses%2Chow-can-i-control-whether-gemini-apps-use-my-past-chats-to-personalize-my-experience%2Chow-does-google-handle-my-data-when-i-use-gemini-apps-while-signed-out%2Cwhat-location-information-do-gemini-apps-collect-why-and-how-is-it-used%2Chow-do-i-know-if-gemini-apps-have-access-to-and-are-using-my-precise-location%2Chow-do-i-manage-my-mobile-permissions-when-gemini-is-my-device-assistant%2Cwhat-do-the-browser-app-permission-choices-mean%2Chow-does-google-work-with-my-uploaded-images%2Cwhat-happens-when-i-share-a-photo-or-video-from-a-media-gallery-connected-app-with-gemini-apps%2Cwhat-happens-with-my-data-that-gemini-connected-apps-and-other-services-exchange%2Chow-can-i-allow-gemini-to-personalize-my-experience-with-my-data-from-connected-apps%2Chow-is-my-data-used-to-make-calls-send-messages-with-connected-apps-in-gemini%2Chow-does-gemini-use-my-data-with-the-remote-browser-and-remote-computer%2Cwhat-happens-when-you-turn-off-task-mode%2Chow-does-google-work-with-gemini-live-data%2Cwhat-happens-to-my-data-when-i-use-gemini-in-chrome%2Cwhat-happens-with-my-data-when-gemini-uses-screen-automation-to-help-me-get-tasks-done-in-android-apps%2Cwhat-happens-to-my-data-when-i-use-geminis-agentic-calling-capability%2Cwhat-happens-to-my-data-when-i-add-items-to-the-google-shopping-cart-from-gemini%2Cwhat-happens-to-my-data-when-i-use-google-pay-in-gemini%2Cwhat-happens-to-my-data-when-i-interact-with-gems-from-google-labs%2Cwhat-happens-to-my-data-when-i-import-memory-or-chats-from-other-ai-platforms%2Cwhat-happens-to-my-data-when-i-use-notebooks-in-gemini%2Cwhat-happens-to-my-data-when-i-create-an-avatar-in-gemini-apps%2Cwhat-happens-to-my-data-when-i-share-my-avatar-with-other-users%2Cwhat-happens-to-my-data-when-i-interact-with-canvas-web-apps%2Cwhat-happens-when-i-interact-with-speak-to-window-on-gemini-for-macos%2Cwhat-terms-apply-to-use-of-gemini-apps","capturedAt":"2026-11-08T22:28:03Z","sha256":"e1e866ccdbaf192a25cd6823496389ad27321566852ad82a4a59583741d7ae44"}}]},"human_review":{"summary":"Yes. Reviewers, including service providers, read a subset of chats unlinked from your account, kept up to 3 years. Safety review continues with Keep Activity off or temporary chats.","status":"stated","cites":[{"quote":"A subset of chats are reviewed by human reviewers (including Google’s trained service providers) to help improve Google services.","source":{"doc":"gemini-apps-privacy-hub","title":"Gemini Apps Privacy Hub","url":"https://support.google.com/gemini/answer/13594961?hl=en#zippy=%2Cwhat-data-is-collected%2Chow-your-data-is-used%2Chow-gemini-apps-get-help-from-google-services%2Chow-gemini-apps-work-with-connected-apps%2Caudio-features%2Ccanvas%2Cconfiguring-your-settings%2Chow-long-we-retain-your-data%2Crequesting-content-removal-and-exporting-your-information%2Cother-things-to-know%2Crespect-others-rights%2Cwhat-are-gemini-apps%2Chow-can-i-object-to-the-processing-of-my-data-or-ask-for-inaccurate-data-in-gemini-apps-responses-to-be-corrected%2Cwhat-are-googles-legal-bases-of-processing-gemini-apps-data-under-european-union-eu-or-united-kingdom-uk-data-protection-law%2Cdo-you-use-my-gemini-apps-chats-to-show-me-ads%2Cwho-has-access-to-my-chats-and-how-does-human-review-improve-gemini-for-everyone%2Chow-long-does-google-retain-my-temporary-chats-and-chats-i-have-when-keep-activity-is-off-and-what-does-google-do-with-this-data%2Chow-does-google-use-my-feedback%2Cwhat-does-the-keep-activity-setting-control%2Cwhat-does-the-memory-summary-setting-control%2Chow-can-i-control-whether-google-uses-my-audio-and-gemini-live-videos-screenshares-to-improve-its-services%2Chow-do-i-manage-what-gemini-remembers-about-me-and-customize-my-responses%2Chow-can-i-control-whether-gemini-apps-use-my-past-chats-to-personalize-my-experience%2Chow-does-google-handle-my-data-when-i-use-gemini-apps-while-signed-out%2Cwhat-location-information-do-gemini-apps-collect-why-and-how-is-it-used%2Chow-do-i-know-if-gemini-apps-have-access-to-and-are-using-my-precise-location%2Chow-do-i-manage-my-mobile-permissions-when-gemini-is-my-device-assistant%2Cwhat-do-the-browser-app-permission-choices-mean%2Chow-does-google-work-with-my-uploaded-images%2Cwhat-happens-when-i-share-a-photo-or-video-from-a-media-gallery-connected-app-with-gemini-apps%2Cwhat-happens-with-my-data-that-gemini-connected-apps-and-other-services-exchange%2Chow-can-i-allow-gemini-to-personalize-my-experience-with-my-data-from-connected-apps%2Chow-is-my-data-used-to-make-calls-send-messages-with-connected-apps-in-gemini%2Chow-does-gemini-use-my-data-with-the-remote-browser-and-remote-computer%2Cwhat-happens-when-you-turn-off-task-mode%2Chow-does-google-work-with-gemini-live-data%2Cwhat-happens-to-my-data-when-i-use-gemini-in-chrome%2Cwhat-happens-with-my-data-when-gemini-uses-screen-automation-to-help-me-get-tasks-done-in-android-apps%2Cwhat-happens-to-my-data-when-i-use-geminis-agentic-calling-capability%2Cwhat-happens-to-my-data-when-i-add-items-to-the-google-shopping-cart-from-gemini%2Cwhat-happens-to-my-data-when-i-use-google-pay-in-gemini%2Cwhat-happens-to-my-data-when-i-interact-with-gems-from-google-labs%2Cwhat-happens-to-my-data-when-i-import-memory-or-chats-from-other-ai-platforms%2Cwhat-happens-to-my-data-when-i-use-notebooks-in-gemini%2Cwhat-happens-to-my-data-when-i-create-an-avatar-in-gemini-apps%2Cwhat-happens-to-my-data-when-i-share-my-avatar-with-other-users%2Cwhat-happens-to-my-data-when-i-interact-with-canvas-web-apps%2Cwhat-happens-when-i-interact-with-speak-to-window-on-gemini-for-macos%2Cwhat-terms-apply-to-use-of-gemini-apps","capturedAt":"2026-11-08T22:28:03Z","sha256":"e1e866ccdbaf192a25cd6823496389ad27321566852ad82a4a59583741d7ae44"}},{"quote":"Chats are disconnected from your account before being sent to service providers.","source":{"doc":"gemini-apps-privacy-hub","title":"Gemini Apps Privacy Hub","url":"https://support.google.com/gemini/answer/13594961?hl=en#zippy=%2Cwhat-data-is-collected%2Chow-your-data-is-used%2Chow-gemini-apps-get-help-from-google-services%2Chow-gemini-apps-work-with-connected-apps%2Caudio-features%2Ccanvas%2Cconfiguring-your-settings%2Chow-long-we-retain-your-data%2Crequesting-content-removal-and-exporting-your-information%2Cother-things-to-know%2Crespect-others-rights%2Cwhat-are-gemini-apps%2Chow-can-i-object-to-the-processing-of-my-data-or-ask-for-inaccurate-data-in-gemini-apps-responses-to-be-corrected%2Cwhat-are-googles-legal-bases-of-processing-gemini-apps-data-under-european-union-eu-or-united-kingdom-uk-data-protection-law%2Cdo-you-use-my-gemini-apps-chats-to-show-me-ads%2Cwho-has-access-to-my-chats-and-how-does-human-review-improve-gemini-for-everyone%2Chow-long-does-google-retain-my-temporary-chats-and-chats-i-have-when-keep-activity-is-off-and-what-does-google-do-with-this-data%2Chow-does-google-use-my-feedback%2Cwhat-does-the-keep-activity-setting-control%2Cwhat-does-the-memory-summary-setting-control%2Chow-can-i-control-whether-google-uses-my-audio-and-gemini-live-videos-screenshares-to-improve-its-services%2Chow-do-i-manage-what-gemini-remembers-about-me-and-customize-my-responses%2Chow-can-i-control-whether-gemini-apps-use-my-past-chats-to-personalize-my-experience%2Chow-does-google-handle-my-data-when-i-use-gemini-apps-while-signed-out%2Cwhat-location-information-do-gemini-apps-collect-why-and-how-is-it-used%2Chow-do-i-know-if-gemini-apps-have-access-to-and-are-using-my-precise-location%2Chow-do-i-manage-my-mobile-permissions-when-gemini-is-my-device-assistant%2Cwhat-do-the-browser-app-permission-choices-mean%2Chow-does-google-work-with-my-uploaded-images%2Cwhat-happens-when-i-share-a-photo-or-video-from-a-media-gallery-connected-app-with-gemini-apps%2Cwhat-happens-with-my-data-that-gemini-connected-apps-and-other-services-exchange%2Chow-can-i-allow-gemini-to-personalize-my-experience-with-my-data-from-connected-apps%2Chow-is-my-data-used-to-make-calls-send-messages-with-connected-apps-in-gemini%2Chow-does-gemini-use-my-data-with-the-remote-browser-and-remote-computer%2Cwhat-happens-when-you-turn-off-task-mode%2Chow-does-google-work-with-gemini-live-data%2Cwhat-happens-to-my-data-when-i-use-gemini-in-chrome%2Cwhat-happens-with-my-data-when-gemini-uses-screen-automation-to-help-me-get-tasks-done-in-android-apps%2Cwhat-happens-to-my-data-when-i-use-geminis-agentic-calling-capability%2Cwhat-happens-to-my-data-when-i-add-items-to-the-google-shopping-cart-from-gemini%2Cwhat-happens-to-my-data-when-i-use-google-pay-in-gemini%2Cwhat-happens-to-my-data-when-i-interact-with-gems-from-google-labs%2Cwhat-happens-to-my-data-when-i-import-memory-or-chats-from-other-ai-platforms%2Cwhat-happens-to-my-data-when-i-use-notebooks-in-gemini%2Cwhat-happens-to-my-data-when-i-create-an-avatar-in-gemini-apps%2Cwhat-happens-to-my-data-when-i-share-my-avatar-with-other-users%2Cwhat-happens-to-my-data-when-i-interact-with-canvas-web-apps%2Cwhat-happens-when-i-interact-with-speak-to-window-on-gemini-for-macos%2Cwhat-terms-apply-to-use-of-gemini-apps","capturedAt":"2026-11-08T22:28:03Z","sha256":"e1e866ccdbaf192a25cd6823496389ad27321566852ad82a4a59583741d7ae44"}},{"quote":"Reviewed chats are retained for up to three years.","source":{"doc":"gemini-apps-privacy-hub","title":"Gemini Apps Privacy Hub","url":"https://support.google.com/gemini/answer/13594961?hl=en#zippy=%2Cwhat-data-is-collected%2Chow-your-data-is-used%2Chow-gemini-apps-get-help-from-google-services%2Chow-gemini-apps-work-with-connected-apps%2Caudio-features%2Ccanvas%2Cconfiguring-your-settings%2Chow-long-we-retain-your-data%2Crequesting-content-removal-and-exporting-your-information%2Cother-things-to-know%2Crespect-others-rights%2Cwhat-are-gemini-apps%2Chow-can-i-object-to-the-processing-of-my-data-or-ask-for-inaccurate-data-in-gemini-apps-responses-to-be-corrected%2Cwhat-are-googles-legal-bases-of-processing-gemini-apps-data-under-european-union-eu-or-united-kingdom-uk-data-protection-law%2Cdo-you-use-my-gemini-apps-chats-to-show-me-ads%2Cwho-has-access-to-my-chats-and-how-does-human-review-improve-gemini-for-everyone%2Chow-long-does-google-retain-my-temporary-chats-and-chats-i-have-when-keep-activity-is-off-and-what-does-google-do-with-this-data%2Chow-does-google-use-my-feedback%2Cwhat-does-the-keep-activity-setting-control%2Cwhat-does-the-memory-summary-setting-control%2Chow-can-i-control-whether-google-uses-my-audio-and-gemini-live-videos-screenshares-to-improve-its-services%2Chow-do-i-manage-what-gemini-remembers-about-me-and-customize-my-responses%2Chow-can-i-control-whether-gemini-apps-use-my-past-chats-to-personalize-my-experience%2Chow-does-google-handle-my-data-when-i-use-gemini-apps-while-signed-out%2Cwhat-location-information-do-gemini-apps-collect-why-and-how-is-it-used%2Chow-do-i-know-if-gemini-apps-have-access-to-and-are-using-my-precise-location%2Chow-do-i-manage-my-mobile-permissions-when-gemini-is-my-device-assistant%2Cwhat-do-the-browser-app-permission-choices-mean%2Chow-does-google-work-with-my-uploaded-images%2Cwhat-happens-when-i-share-a-photo-or-video-from-a-media-gallery-connected-app-with-gemini-apps%2Cwhat-happens-with-my-data-that-gemini-connected-apps-and-other-services-exchange%2Chow-can-i-allow-gemini-to-personalize-my-experience-with-my-data-from-connected-apps%2Chow-is-my-data-used-to-make-calls-send-messages-with-connected-apps-in-gemini%2Chow-does-gemini-use-my-data-with-the-remote-browser-and-remote-computer%2Cwhat-happens-when-you-turn-off-task-mode%2Chow-does-google-work-with-gemini-live-data%2Cwhat-happens-to-my-data-when-i-use-gemini-in-chrome%2Cwhat-happens-with-my-data-when-gemini-uses-screen-automation-to-help-me-get-tasks-done-in-android-apps%2Cwhat-happens-to-my-data-when-i-use-geminis-agentic-calling-capability%2Cwhat-happens-to-my-data-when-i-add-items-to-the-google-shopping-cart-from-gemini%2Cwhat-happens-to-my-data-when-i-use-google-pay-in-gemini%2Cwhat-happens-to-my-data-when-i-interact-with-gems-from-google-labs%2Cwhat-happens-to-my-data-when-i-import-memory-or-chats-from-other-ai-platforms%2Cwhat-happens-to-my-data-when-i-use-notebooks-in-gemini%2Cwhat-happens-to-my-data-when-i-create-an-avatar-in-gemini-apps%2Cwhat-happens-to-my-data-when-i-share-my-avatar-with-other-users%2Cwhat-happens-to-my-data-when-i-interact-with-canvas-web-apps%2Cwhat-happens-when-i-interact-with-speak-to-window-on-gemini-for-macos%2Cwhat-terms-apply-to-use-of-gemini-apps","capturedAt":"2026-11-08T22:28:03Z","sha256":"e1e866ccdbaf192a25cd6823496389ad27321566852ad82a4a59583741d7ae44"}},{"quote":"Even if your Keep Activity setting is off or you use temporary chats, Google still uses your chats to respond to you and help protect Google, our users, and the public, including with help from human reviewers.","source":{"doc":"gemini-apps-privacy-hub","title":"Gemini Apps Privacy Hub","url":"https://support.google.com/gemini/answer/13594961?hl=en#zippy=%2Cwhat-data-is-collected%2Chow-your-data-is-used%2Chow-gemini-apps-get-help-from-google-services%2Chow-gemini-apps-work-with-connected-apps%2Caudio-features%2Ccanvas%2Cconfiguring-your-settings%2Chow-long-we-retain-your-data%2Crequesting-content-removal-and-exporting-your-information%2Cother-things-to-know%2Crespect-others-rights%2Cwhat-are-gemini-apps%2Chow-can-i-object-to-the-processing-of-my-data-or-ask-for-inaccurate-data-in-gemini-apps-responses-to-be-corrected%2Cwhat-are-googles-legal-bases-of-processing-gemini-apps-data-under-european-union-eu-or-united-kingdom-uk-data-protection-law%2Cdo-you-use-my-gemini-apps-chats-to-show-me-ads%2Cwho-has-access-to-my-chats-and-how-does-human-review-improve-gemini-for-everyone%2Chow-long-does-google-retain-my-temporary-chats-and-chats-i-have-when-keep-activity-is-off-and-what-does-google-do-with-this-data%2Chow-does-google-use-my-feedback%2Cwhat-does-the-keep-activity-setting-control%2Cwhat-does-the-memory-summary-setting-control%2Chow-can-i-control-whether-google-uses-my-audio-and-gemini-live-videos-screenshares-to-improve-its-services%2Chow-do-i-manage-what-gemini-remembers-about-me-and-customize-my-responses%2Chow-can-i-control-whether-gemini-apps-use-my-past-chats-to-personalize-my-experience%2Chow-does-google-handle-my-data-when-i-use-gemini-apps-while-signed-out%2Cwhat-location-information-do-gemini-apps-collect-why-and-how-is-it-used%2Chow-do-i-know-if-gemini-apps-have-access-to-and-are-using-my-precise-location%2Chow-do-i-manage-my-mobile-permissions-when-gemini-is-my-device-assistant%2Cwhat-do-the-browser-app-permission-choices-mean%2Chow-does-google-work-with-my-uploaded-images%2Cwhat-happens-when-i-share-a-photo-or-video-from-a-media-gallery-connected-app-with-gemini-apps%2Cwhat-happens-with-my-data-that-gemini-connected-apps-and-other-services-exchange%2Chow-can-i-allow-gemini-to-personalize-my-experience-with-my-data-from-connected-apps%2Chow-is-my-data-used-to-make-calls-send-messages-with-connected-apps-in-gemini%2Chow-does-gemini-use-my-data-with-the-remote-browser-and-remote-computer%2Cwhat-happens-when-you-turn-off-task-mode%2Chow-does-google-work-with-gemini-live-data%2Cwhat-happens-to-my-data-when-i-use-gemini-in-chrome%2Cwhat-happens-with-my-data-when-gemini-uses-screen-automation-to-help-me-get-tasks-done-in-android-apps%2Cwhat-happens-to-my-data-when-i-use-geminis-agentic-calling-capability%2Cwhat-happens-to-my-data-when-i-add-items-to-the-google-shopping-cart-from-gemini%2Cwhat-happens-to-my-data-when-i-use-google-pay-in-gemini%2Cwhat-happens-to-my-data-when-i-interact-with-gems-from-google-labs%2Cwhat-happens-to-my-data-when-i-import-memory-or-chats-from-other-ai-platforms%2Cwhat-happens-to-my-data-when-i-use-notebooks-in-gemini%2Cwhat-happens-to-my-data-when-i-create-an-avatar-in-gemini-apps%2Cwhat-happens-to-my-data-when-i-share-my-avatar-with-other-users%2Cwhat-happens-to-my-data-when-i-interact-with-canvas-web-apps%2Cwhat-happens-when-i-interact-with-speak-to-window-on-gemini-for-macos%2Cwhat-terms-apply-to-use-of-gemini-apps","capturedAt":"2026-11-08T22:28:03Z","sha256":"e1e866ccdbaf192a25cd6823496389ad27321566852ad82a4a59583741d7ae44"}},{"quote":"Human review is necessary to help identify, address, and report potential problems raised in feedback.","source":{"doc":"gemini-apps-privacy-hub","title":"Gemini Apps Privacy Hub","url":"https://support.google.com/gemini/answer/13594961?hl=en#zippy=%2Cwhat-data-is-collected%2Chow-your-data-is-used%2Chow-gemini-apps-get-help-from-google-services%2Chow-gemini-apps-work-with-connected-apps%2Caudio-features%2Ccanvas%2Cconfiguring-your-settings%2Chow-long-we-retain-your-data%2Crequesting-content-removal-and-exporting-your-information%2Cother-things-to-know%2Crespect-others-rights%2Cwhat-are-gemini-apps%2Chow-can-i-object-to-the-processing-of-my-data-or-ask-for-inaccurate-data-in-gemini-apps-responses-to-be-corrected%2Cwhat-are-googles-legal-bases-of-processing-gemini-apps-data-under-european-union-eu-or-united-kingdom-uk-data-protection-law%2Cdo-you-use-my-gemini-apps-chats-to-show-me-ads%2Cwho-has-access-to-my-chats-and-how-does-human-review-improve-gemini-for-everyone%2Chow-long-does-google-retain-my-temporary-chats-and-chats-i-have-when-keep-activity-is-off-and-what-does-google-do-with-this-data%2Chow-does-google-use-my-feedback%2Cwhat-does-the-keep-activity-setting-control%2Cwhat-does-the-memory-summary-setting-control%2Chow-can-i-control-whether-google-uses-my-audio-and-gemini-live-videos-screenshares-to-improve-its-services%2Chow-do-i-manage-what-gemini-remembers-about-me-and-customize-my-responses%2Chow-can-i-control-whether-gemini-apps-use-my-past-chats-to-personalize-my-experience%2Chow-does-google-handle-my-data-when-i-use-gemini-apps-while-signed-out%2Cwhat-location-information-do-gemini-apps-collect-why-and-how-is-it-used%2Chow-do-i-know-if-gemini-apps-have-access-to-and-are-using-my-precise-location%2Chow-do-i-manage-my-mobile-permissions-when-gemini-is-my-device-assistant%2Cwhat-do-the-browser-app-permission-choices-mean%2Chow-does-google-work-with-my-uploaded-images%2Cwhat-happens-when-i-share-a-photo-or-video-from-a-media-gallery-connected-app-with-gemini-apps%2Cwhat-happens-with-my-data-that-gemini-connected-apps-and-other-services-exchange%2Chow-can-i-allow-gemini-to-personalize-my-experience-with-my-data-from-connected-apps%2Chow-is-my-data-used-to-make-calls-send-messages-with-connected-apps-in-gemini%2Chow-does-gemini-use-my-data-with-the-remote-browser-and-remote-computer%2Cwhat-happens-when-you-turn-off-task-mode%2Chow-does-google-work-with-gemini-live-data%2Cwhat-happens-to-my-data-when-i-use-gemini-in-chrome%2Cwhat-happens-with-my-data-when-gemini-uses-screen-automation-to-help-me-get-tasks-done-in-android-apps%2Cwhat-happens-to-my-data-when-i-use-geminis-agentic-calling-capability%2Cwhat-happens-to-my-data-when-i-add-items-to-the-google-shopping-cart-from-gemini%2Cwhat-happens-to-my-data-when-i-use-google-pay-in-gemini%2Cwhat-happens-to-my-data-when-i-interact-with-gems-from-google-labs%2Cwhat-happens-to-my-data-when-i-import-memory-or-chats-from-other-ai-platforms%2Cwhat-happens-to-my-data-when-i-use-notebooks-in-gemini%2Cwhat-happens-to-my-data-when-i-create-an-avatar-in-gemini-apps%2Cwhat-happens-to-my-data-when-i-share-my-avatar-with-other-users%2Cwhat-happens-to-my-data-when-i-interact-with-canvas-web-apps%2Cwhat-happens-when-i-interact-with-speak-to-window-on-gemini-for-macos%2Cwhat-terms-apply-to-use-of-gemini-apps","capturedAt":"2026-11-08T22:28:03Z","sha256":"e1e866ccdbaf192a25cd6823496389ad27321566852ad82a4a59583741d7ae44"}}]},"memory":{"summary":"Gemini remembers facts and past chats; you can view, edit, delete or turn off Memory summary. Saved instructions persist until deleted. Imported memory and chats are used for training.","status":"stated","cites":[{"quote":"Depending on eligibility and your settings, you can use memory summary to view, edit, and delete what Gemini Apps understands about you.","source":{"doc":"gemini-apps-privacy-hub","title":"Gemini Apps Privacy Hub","url":"https://support.google.com/gemini/answer/13594961?hl=en#zippy=%2Cwhat-data-is-collected%2Chow-your-data-is-used%2Chow-gemini-apps-get-help-from-google-services%2Chow-gemini-apps-work-with-connected-apps%2Caudio-features%2Ccanvas%2Cconfiguring-your-settings%2Chow-long-we-retain-your-data%2Crequesting-content-removal-and-exporting-your-information%2Cother-things-to-know%2Crespect-others-rights%2Cwhat-are-gemini-apps%2Chow-can-i-object-to-the-processing-of-my-data-or-ask-for-inaccurate-data-in-gemini-apps-responses-to-be-corrected%2Cwhat-are-googles-legal-bases-of-processing-gemini-apps-data-under-european-union-eu-or-united-kingdom-uk-data-protection-law%2Cdo-you-use-my-gemini-apps-chats-to-show-me-ads%2Cwho-has-access-to-my-chats-and-how-does-human-review-improve-gemini-for-everyone%2Chow-long-does-google-retain-my-temporary-chats-and-chats-i-have-when-keep-activity-is-off-and-what-does-google-do-with-this-data%2Chow-does-google-use-my-feedback%2Cwhat-does-the-keep-activity-setting-control%2Cwhat-does-the-memory-summary-setting-control%2Chow-can-i-control-whether-google-uses-my-audio-and-gemini-live-videos-screenshares-to-improve-its-services%2Chow-do-i-manage-what-gemini-remembers-about-me-and-customize-my-responses%2Chow-can-i-control-whether-gemini-apps-use-my-past-chats-to-personalize-my-experience%2Chow-does-google-handle-my-data-when-i-use-gemini-apps-while-signed-out%2Cwhat-location-information-do-gemini-apps-collect-why-and-how-is-it-used%2Chow-do-i-know-if-gemini-apps-have-access-to-and-are-using-my-precise-location%2Chow-do-i-manage-my-mobile-permissions-when-gemini-is-my-device-assistant%2Cwhat-do-the-browser-app-permission-choices-mean%2Chow-does-google-work-with-my-uploaded-images%2Cwhat-happens-when-i-share-a-photo-or-video-from-a-media-gallery-connected-app-with-gemini-apps%2Cwhat-happens-with-my-data-that-gemini-connected-apps-and-other-services-exchange%2Chow-can-i-allow-gemini-to-personalize-my-experience-with-my-data-from-connected-apps%2Chow-is-my-data-used-to-make-calls-send-messages-with-connected-apps-in-gemini%2Chow-does-gemini-use-my-data-with-the-remote-browser-and-remote-computer%2Cwhat-happens-when-you-turn-off-task-mode%2Chow-does-google-work-with-gemini-live-data%2Cwhat-happens-to-my-data-when-i-use-gemini-in-chrome%2Cwhat-happens-with-my-data-when-gemini-uses-screen-automation-to-help-me-get-tasks-done-in-android-apps%2Cwhat-happens-to-my-data-when-i-use-geminis-agentic-calling-capability%2Cwhat-happens-to-my-data-when-i-add-items-to-the-google-shopping-cart-from-gemini%2Cwhat-happens-to-my-data-when-i-use-google-pay-in-gemini%2Cwhat-happens-to-my-data-when-i-interact-with-gems-from-google-labs%2Cwhat-happens-to-my-data-when-i-import-memory-or-chats-from-other-ai-platforms%2Cwhat-happens-to-my-data-when-i-use-notebooks-in-gemini%2Cwhat-happens-to-my-data-when-i-create-an-avatar-in-gemini-apps%2Cwhat-happens-to-my-data-when-i-share-my-avatar-with-other-users%2Cwhat-happens-to-my-data-when-i-interact-with-canvas-web-apps%2Cwhat-happens-when-i-interact-with-speak-to-window-on-gemini-for-macos%2Cwhat-terms-apply-to-use-of-gemini-apps","capturedAt":"2026-11-08T22:28:03Z","sha256":"e1e866ccdbaf192a25cd6823496389ad27321566852ad82a4a59583741d7ae44"}},{"quote":"You can also turn memory Summary on or off at any time.","source":{"doc":"gemini-apps-privacy-hub","title":"Gemini Apps Privacy Hub","url":"https://support.google.com/gemini/answer/13594961?hl=en#zippy=%2Cwhat-data-is-collected%2Chow-your-data-is-used%2Chow-gemini-apps-get-help-from-google-services%2Chow-gemini-apps-work-with-connected-apps%2Caudio-features%2Ccanvas%2Cconfiguring-your-settings%2Chow-long-we-retain-your-data%2Crequesting-content-removal-and-exporting-your-information%2Cother-things-to-know%2Crespect-others-rights%2Cwhat-are-gemini-apps%2Chow-can-i-object-to-the-processing-of-my-data-or-ask-for-inaccurate-data-in-gemini-apps-responses-to-be-corrected%2Cwhat-are-googles-legal-bases-of-processing-gemini-apps-data-under-european-union-eu-or-united-kingdom-uk-data-protection-law%2Cdo-you-use-my-gemini-apps-chats-to-show-me-ads%2Cwho-has-access-to-my-chats-and-how-does-human-review-improve-gemini-for-everyone%2Chow-long-does-google-retain-my-temporary-chats-and-chats-i-have-when-keep-activity-is-off-and-what-does-google-do-with-this-data%2Chow-does-google-use-my-feedback%2Cwhat-does-the-keep-activity-setting-control%2Cwhat-does-the-memory-summary-setting-control%2Chow-can-i-control-whether-google-uses-my-audio-and-gemini-live-videos-screenshares-to-improve-its-services%2Chow-do-i-manage-what-gemini-remembers-about-me-and-customize-my-responses%2Chow-can-i-control-whether-gemini-apps-use-my-past-chats-to-personalize-my-experience%2Chow-does-google-handle-my-data-when-i-use-gemini-apps-while-signed-out%2Cwhat-location-information-do-gemini-apps-collect-why-and-how-is-it-used%2Chow-do-i-know-if-gemini-apps-have-access-to-and-are-using-my-precise-location%2Chow-do-i-manage-my-mobile-permissions-when-gemini-is-my-device-assistant%2Cwhat-do-the-browser-app-permission-choices-mean%2Chow-does-google-work-with-my-uploaded-images%2Cwhat-happens-when-i-share-a-photo-or-video-from-a-media-gallery-connected-app-with-gemini-apps%2Cwhat-happens-with-my-data-that-gemini-connected-apps-and-other-services-exchange%2Chow-can-i-allow-gemini-to-personalize-my-experience-with-my-data-from-connected-apps%2Chow-is-my-data-used-to-make-calls-send-messages-with-connected-apps-in-gemini%2Chow-does-gemini-use-my-data-with-the-remote-browser-and-remote-computer%2Cwhat-happens-when-you-turn-off-task-mode%2Chow-does-google-work-with-gemini-live-data%2Cwhat-happens-to-my-data-when-i-use-gemini-in-chrome%2Cwhat-happens-with-my-data-when-gemini-uses-screen-automation-to-help-me-get-tasks-done-in-android-apps%2Cwhat-happens-to-my-data-when-i-use-geminis-agentic-calling-capability%2Cwhat-happens-to-my-data-when-i-add-items-to-the-google-shopping-cart-from-gemini%2Cwhat-happens-to-my-data-when-i-use-google-pay-in-gemini%2Cwhat-happens-to-my-data-when-i-interact-with-gems-from-google-labs%2Cwhat-happens-to-my-data-when-i-import-memory-or-chats-from-other-ai-platforms%2Cwhat-happens-to-my-data-when-i-use-notebooks-in-gemini%2Cwhat-happens-to-my-data-when-i-create-an-avatar-in-gemini-apps%2Cwhat-happens-to-my-data-when-i-share-my-avatar-with-other-users%2Cwhat-happens-to-my-data-when-i-interact-with-canvas-web-apps%2Cwhat-happens-when-i-interact-with-speak-to-window-on-gemini-for-macos%2Cwhat-terms-apply-to-use-of-gemini-apps","capturedAt":"2026-11-08T22:28:03Z","sha256":"e1e866ccdbaf192a25cd6823496389ad27321566852ad82a4a59583741d7ae44"}},{"quote":"Gemini Apps use your instructions (\"Saved info\" in some regions) to customize your experience and help you get things done, like completing scheduled actions and tasks. This data remains saved until you choose to delete it.","source":{"doc":"gemini-apps-privacy-hub","title":"Gemini Apps Privacy Hub","url":"https://support.google.com/gemini/answer/13594961?hl=en#zippy=%2Cwhat-data-is-collected%2Chow-your-data-is-used%2Chow-gemini-apps-get-help-from-google-services%2Chow-gemini-apps-work-with-connected-apps%2Caudio-features%2Ccanvas%2Cconfiguring-your-settings%2Chow-long-we-retain-your-data%2Crequesting-content-removal-and-exporting-your-information%2Cother-things-to-know%2Crespect-others-rights%2Cwhat-are-gemini-apps%2Chow-can-i-object-to-the-processing-of-my-data-or-ask-for-inaccurate-data-in-gemini-apps-responses-to-be-corrected%2Cwhat-are-googles-legal-bases-of-processing-gemini-apps-data-under-european-union-eu-or-united-kingdom-uk-data-protection-law%2Cdo-you-use-my-gemini-apps-chats-to-show-me-ads%2Cwho-has-access-to-my-chats-and-how-does-human-review-improve-gemini-for-everyone%2Chow-long-does-google-retain-my-temporary-chats-and-chats-i-have-when-keep-activity-is-off-and-what-does-google-do-with-this-data%2Chow-does-google-use-my-feedback%2Cwhat-does-the-keep-activity-setting-control%2Cwhat-does-the-memory-summary-setting-control%2Chow-can-i-control-whether-google-uses-my-audio-and-gemini-live-videos-screenshares-to-improve-its-services%2Chow-do-i-manage-what-gemini-remembers-about-me-and-customize-my-responses%2Chow-can-i-control-whether-gemini-apps-use-my-past-chats-to-personalize-my-experience%2Chow-does-google-handle-my-data-when-i-use-gemini-apps-while-signed-out%2Cwhat-location-information-do-gemini-apps-collect-why-and-how-is-it-used%2Chow-do-i-know-if-gemini-apps-have-access-to-and-are-using-my-precise-location%2Chow-do-i-manage-my-mobile-permissions-when-gemini-is-my-device-assistant%2Cwhat-do-the-browser-app-permission-choices-mean%2Chow-does-google-work-with-my-uploaded-images%2Cwhat-happens-when-i-share-a-photo-or-video-from-a-media-gallery-connected-app-with-gemini-apps%2Cwhat-happens-with-my-data-that-gemini-connected-apps-and-other-services-exchange%2Chow-can-i-allow-gemini-to-personalize-my-experience-with-my-data-from-connected-apps%2Chow-is-my-data-used-to-make-calls-send-messages-with-connected-apps-in-gemini%2Chow-does-gemini-use-my-data-with-the-remote-browser-and-remote-computer%2Cwhat-happens-when-you-turn-off-task-mode%2Chow-does-google-work-with-gemini-live-data%2Cwhat-happens-to-my-data-when-i-use-gemini-in-chrome%2Cwhat-happens-with-my-data-when-gemini-uses-screen-automation-to-help-me-get-tasks-done-in-android-apps%2Cwhat-happens-to-my-data-when-i-use-geminis-agentic-calling-capability%2Cwhat-happens-to-my-data-when-i-add-items-to-the-google-shopping-cart-from-gemini%2Cwhat-happens-to-my-data-when-i-use-google-pay-in-gemini%2Cwhat-happens-to-my-data-when-i-interact-with-gems-from-google-labs%2Cwhat-happens-to-my-data-when-i-import-memory-or-chats-from-other-ai-platforms%2Cwhat-happens-to-my-data-when-i-use-notebooks-in-gemini%2Cwhat-happens-to-my-data-when-i-create-an-avatar-in-gemini-apps%2Cwhat-happens-to-my-data-when-i-share-my-avatar-with-other-users%2Cwhat-happens-to-my-data-when-i-interact-with-canvas-web-apps%2Cwhat-happens-when-i-interact-with-speak-to-window-on-gemini-for-macos%2Cwhat-terms-apply-to-use-of-gemini-apps","capturedAt":"2026-11-08T22:28:03Z","sha256":"e1e866ccdbaf192a25cd6823496389ad27321566852ad82a4a59583741d7ae44"}},{"quote":"Gemini may use sensitive info you provided in your chats to personalize your experience.","source":{"doc":"gemini-apps-privacy-hub","title":"Gemini Apps Privacy Hub","url":"https://support.google.com/gemini/answer/13594961?hl=en#zippy=%2Cwhat-data-is-collected%2Chow-your-data-is-used%2Chow-gemini-apps-get-help-from-google-services%2Chow-gemini-apps-work-with-connected-apps%2Caudio-features%2Ccanvas%2Cconfiguring-your-settings%2Chow-long-we-retain-your-data%2Crequesting-content-removal-and-exporting-your-information%2Cother-things-to-know%2Crespect-others-rights%2Cwhat-are-gemini-apps%2Chow-can-i-object-to-the-processing-of-my-data-or-ask-for-inaccurate-data-in-gemini-apps-responses-to-be-corrected%2Cwhat-are-googles-legal-bases-of-processing-gemini-apps-data-under-european-union-eu-or-united-kingdom-uk-data-protection-law%2Cdo-you-use-my-gemini-apps-chats-to-show-me-ads%2Cwho-has-access-to-my-chats-and-how-does-human-review-improve-gemini-for-everyone%2Chow-long-does-google-retain-my-temporary-chats-and-chats-i-have-when-keep-activity-is-off-and-what-does-google-do-with-this-data%2Chow-does-google-use-my-feedback%2Cwhat-does-the-keep-activity-setting-control%2Cwhat-does-the-memory-summary-setting-control%2Chow-can-i-control-whether-google-uses-my-audio-and-gemini-live-videos-screenshares-to-improve-its-services%2Chow-do-i-manage-what-gemini-remembers-about-me-and-customize-my-responses%2Chow-can-i-control-whether-gemini-apps-use-my-past-chats-to-personalize-my-experience%2Chow-does-google-handle-my-data-when-i-use-gemini-apps-while-signed-out%2Cwhat-location-information-do-gemini-apps-collect-why-and-how-is-it-used%2Chow-do-i-know-if-gemini-apps-have-access-to-and-are-using-my-precise-location%2Chow-do-i-manage-my-mobile-permissions-when-gemini-is-my-device-assistant%2Cwhat-do-the-browser-app-permission-choices-mean%2Chow-does-google-work-with-my-uploaded-images%2Cwhat-happens-when-i-share-a-photo-or-video-from-a-media-gallery-connected-app-with-gemini-apps%2Cwhat-happens-with-my-data-that-gemini-connected-apps-and-other-services-exchange%2Chow-can-i-allow-gemini-to-personalize-my-experience-with-my-data-from-connected-apps%2Chow-is-my-data-used-to-make-calls-send-messages-with-connected-apps-in-gemini%2Chow-does-gemini-use-my-data-with-the-remote-browser-and-remote-computer%2Cwhat-happens-when-you-turn-off-task-mode%2Chow-does-google-work-with-gemini-live-data%2Cwhat-happens-to-my-data-when-i-use-gemini-in-chrome%2Cwhat-happens-with-my-data-when-gemini-uses-screen-automation-to-help-me-get-tasks-done-in-android-apps%2Cwhat-happens-to-my-data-when-i-use-geminis-agentic-calling-capability%2Cwhat-happens-to-my-data-when-i-add-items-to-the-google-shopping-cart-from-gemini%2Cwhat-happens-to-my-data-when-i-use-google-pay-in-gemini%2Cwhat-happens-to-my-data-when-i-interact-with-gems-from-google-labs%2Cwhat-happens-to-my-data-when-i-import-memory-or-chats-from-other-ai-platforms%2Cwhat-happens-to-my-data-when-i-use-notebooks-in-gemini%2Cwhat-happens-to-my-data-when-i-create-an-avatar-in-gemini-apps%2Cwhat-happens-to-my-data-when-i-share-my-avatar-with-other-users%2Cwhat-happens-to-my-data-when-i-interact-with-canvas-web-apps%2Cwhat-happens-when-i-interact-with-speak-to-window-on-gemini-for-macos%2Cwhat-terms-apply-to-use-of-gemini-apps","capturedAt":"2026-11-08T22:28:03Z","sha256":"e1e866ccdbaf192a25cd6823496389ad27321566852ad82a4a59583741d7ae44"}},{"quote":"To stop Gemini from personalizing your experience using info from a past chat, [delete that chat](/gemini/answer/13278892).","source":{"doc":"gemini-apps-privacy-hub","title":"Gemini Apps Privacy Hub","url":"https://support.google.com/gemini/answer/13594961?hl=en#zippy=%2Cwhat-data-is-collected%2Chow-your-data-is-used%2Chow-gemini-apps-get-help-from-google-services%2Chow-gemini-apps-work-with-connected-apps%2Caudio-features%2Ccanvas%2Cconfiguring-your-settings%2Chow-long-we-retain-your-data%2Crequesting-content-removal-and-exporting-your-information%2Cother-things-to-know%2Crespect-others-rights%2Cwhat-are-gemini-apps%2Chow-can-i-object-to-the-processing-of-my-data-or-ask-for-inaccurate-data-in-gemini-apps-responses-to-be-corrected%2Cwhat-are-googles-legal-bases-of-processing-gemini-apps-data-under-european-union-eu-or-united-kingdom-uk-data-protection-law%2Cdo-you-use-my-gemini-apps-chats-to-show-me-ads%2Cwho-has-access-to-my-chats-and-how-does-human-review-improve-gemini-for-everyone%2Chow-long-does-google-retain-my-temporary-chats-and-chats-i-have-when-keep-activity-is-off-and-what-does-google-do-with-this-data%2Chow-does-google-use-my-feedback%2Cwhat-does-the-keep-activity-setting-control%2Cwhat-does-the-memory-summary-setting-control%2Chow-can-i-control-whether-google-uses-my-audio-and-gemini-live-videos-screenshares-to-improve-its-services%2Chow-do-i-manage-what-gemini-remembers-about-me-and-customize-my-responses%2Chow-can-i-control-whether-gemini-apps-use-my-past-chats-to-personalize-my-experience%2Chow-does-google-handle-my-data-when-i-use-gemini-apps-while-signed-out%2Cwhat-location-information-do-gemini-apps-collect-why-and-how-is-it-used%2Chow-do-i-know-if-gemini-apps-have-access-to-and-are-using-my-precise-location%2Chow-do-i-manage-my-mobile-permissions-when-gemini-is-my-device-assistant%2Cwhat-do-the-browser-app-permission-choices-mean%2Chow-does-google-work-with-my-uploaded-images%2Cwhat-happens-when-i-share-a-photo-or-video-from-a-media-gallery-connected-app-with-gemini-apps%2Cwhat-happens-with-my-data-that-gemini-connected-apps-and-other-services-exchange%2Chow-can-i-allow-gemini-to-personalize-my-experience-with-my-data-from-connected-apps%2Chow-is-my-data-used-to-make-calls-send-messages-with-connected-apps-in-gemini%2Chow-does-gemini-use-my-data-with-the-remote-browser-and-remote-computer%2Cwhat-happens-when-you-turn-off-task-mode%2Chow-does-google-work-with-gemini-live-data%2Cwhat-happens-to-my-data-when-i-use-gemini-in-chrome%2Cwhat-happens-with-my-data-when-gemini-uses-screen-automation-to-help-me-get-tasks-done-in-android-apps%2Cwhat-happens-to-my-data-when-i-use-geminis-agentic-calling-capability%2Cwhat-happens-to-my-data-when-i-add-items-to-the-google-shopping-cart-from-gemini%2Cwhat-happens-to-my-data-when-i-use-google-pay-in-gemini%2Cwhat-happens-to-my-data-when-i-interact-with-gems-from-google-labs%2Cwhat-happens-to-my-data-when-i-import-memory-or-chats-from-other-ai-platforms%2Cwhat-happens-to-my-data-when-i-use-notebooks-in-gemini%2Cwhat-happens-to-my-data-when-i-create-an-avatar-in-gemini-apps%2Cwhat-happens-to-my-data-when-i-share-my-avatar-with-other-users%2Cwhat-happens-to-my-data-when-i-interact-with-canvas-web-apps%2Cwhat-happens-when-i-interact-with-speak-to-window-on-gemini-for-macos%2Cwhat-terms-apply-to-use-of-gemini-apps","capturedAt":"2026-11-08T22:28:03Z","sha256":"e1e866ccdbaf192a25cd6823496389ad27321566852ad82a4a59583741d7ae44"}},{"quote":"Data (memory and chats) that you import from other AI platforms is saved in your Activity. This data is used consistently with your Gemini Apps activity, including to improve our services (including training generative AI models), and to protect Google, our users and the public.","source":{"doc":"gemini-apps-privacy-hub","title":"Gemini Apps Privacy Hub","url":"https://support.google.com/gemini/answer/13594961?hl=en#zippy=%2Cwhat-data-is-collected%2Chow-your-data-is-used%2Chow-gemini-apps-get-help-from-google-services%2Chow-gemini-apps-work-with-connected-apps%2Caudio-features%2Ccanvas%2Cconfiguring-your-settings%2Chow-long-we-retain-your-data%2Crequesting-content-removal-and-exporting-your-information%2Cother-things-to-know%2Crespect-others-rights%2Cwhat-are-gemini-apps%2Chow-can-i-object-to-the-processing-of-my-data-or-ask-for-inaccurate-data-in-gemini-apps-responses-to-be-corrected%2Cwhat-are-googles-legal-bases-of-processing-gemini-apps-data-under-european-union-eu-or-united-kingdom-uk-data-protection-law%2Cdo-you-use-my-gemini-apps-chats-to-show-me-ads%2Cwho-has-access-to-my-chats-and-how-does-human-review-improve-gemini-for-everyone%2Chow-long-does-google-retain-my-temporary-chats-and-chats-i-have-when-keep-activity-is-off-and-what-does-google-do-with-this-data%2Chow-does-google-use-my-feedback%2Cwhat-does-the-keep-activity-setting-control%2Cwhat-does-the-memory-summary-setting-control%2Chow-can-i-control-whether-google-uses-my-audio-and-gemini-live-videos-screenshares-to-improve-its-services%2Chow-do-i-manage-what-gemini-remembers-about-me-and-customize-my-responses%2Chow-can-i-control-whether-gemini-apps-use-my-past-chats-to-personalize-my-experience%2Chow-does-google-handle-my-data-when-i-use-gemini-apps-while-signed-out%2Cwhat-location-information-do-gemini-apps-collect-why-and-how-is-it-used%2Chow-do-i-know-if-gemini-apps-have-access-to-and-are-using-my-precise-location%2Chow-do-i-manage-my-mobile-permissions-when-gemini-is-my-device-assistant%2Cwhat-do-the-browser-app-permission-choices-mean%2Chow-does-google-work-with-my-uploaded-images%2Cwhat-happens-when-i-share-a-photo-or-video-from-a-media-gallery-connected-app-with-gemini-apps%2Cwhat-happens-with-my-data-that-gemini-connected-apps-and-other-services-exchange%2Chow-can-i-allow-gemini-to-personalize-my-experience-with-my-data-from-connected-apps%2Chow-is-my-data-used-to-make-calls-send-messages-with-connected-apps-in-gemini%2Chow-does-gemini-use-my-data-with-the-remote-browser-and-remote-computer%2Cwhat-happens-when-you-turn-off-task-mode%2Chow-does-google-work-with-gemini-live-data%2Cwhat-happens-to-my-data-when-i-use-gemini-in-chrome%2Cwhat-happens-with-my-data-when-gemini-uses-screen-automation-to-help-me-get-tasks-done-in-android-apps%2Cwhat-happens-to-my-data-when-i-use-geminis-agentic-calling-capability%2Cwhat-happens-to-my-data-when-i-add-items-to-the-google-shopping-cart-from-gemini%2Cwhat-happens-to-my-data-when-i-use-google-pay-in-gemini%2Cwhat-happens-to-my-data-when-i-interact-with-gems-from-google-labs%2Cwhat-happens-to-my-data-when-i-import-memory-or-chats-from-other-ai-platforms%2Cwhat-happens-to-my-data-when-i-use-notebooks-in-gemini%2Cwhat-happens-to-my-data-when-i-create-an-avatar-in-gemini-apps%2Cwhat-happens-to-my-data-when-i-share-my-avatar-with-other-users%2Cwhat-happens-to-my-data-when-i-interact-with-canvas-web-apps%2Cwhat-happens-when-i-interact-with-speak-to-window-on-gemini-for-macos%2Cwhat-terms-apply-to-use-of-gemini-apps","capturedAt":"2026-11-08T22:28:03Z","sha256":"e1e866ccdbaf192a25cd6823496389ad27321566852ad82a4a59583741d7ae44"}}]},"connector_data":{"summary":"Gemini saves and uses Connected App content (emails, files, photos), including to improve Gemini. Disconnecting doesn't delete it from Gemini Apps Activity. Google doesn't monitor or secure custom MCP apps.","status":"stated","cites":[{"quote":"Gemini saves and uses info from Connected Apps according to this notice, including to provide and improve Gemini Apps.","source":{"doc":"gemini-apps-privacy-hub","title":"Gemini Apps Privacy Hub","url":"https://support.google.com/gemini/answer/13594961?hl=en#zippy=%2Cwhat-data-is-collected%2Chow-your-data-is-used%2Chow-gemini-apps-get-help-from-google-services%2Chow-gemini-apps-work-with-connected-apps%2Caudio-features%2Ccanvas%2Cconfiguring-your-settings%2Chow-long-we-retain-your-data%2Crequesting-content-removal-and-exporting-your-information%2Cother-things-to-know%2Crespect-others-rights%2Cwhat-are-gemini-apps%2Chow-can-i-object-to-the-processing-of-my-data-or-ask-for-inaccurate-data-in-gemini-apps-responses-to-be-corrected%2Cwhat-are-googles-legal-bases-of-processing-gemini-apps-data-under-european-union-eu-or-united-kingdom-uk-data-protection-law%2Cdo-you-use-my-gemini-apps-chats-to-show-me-ads%2Cwho-has-access-to-my-chats-and-how-does-human-review-improve-gemini-for-everyone%2Chow-long-does-google-retain-my-temporary-chats-and-chats-i-have-when-keep-activity-is-off-and-what-does-google-do-with-this-data%2Chow-does-google-use-my-feedback%2Cwhat-does-the-keep-activity-setting-control%2Cwhat-does-the-memory-summary-setting-control%2Chow-can-i-control-whether-google-uses-my-audio-and-gemini-live-videos-screenshares-to-improve-its-services%2Chow-do-i-manage-what-gemini-remembers-about-me-and-customize-my-responses%2Chow-can-i-control-whether-gemini-apps-use-my-past-chats-to-personalize-my-experience%2Chow-does-google-handle-my-data-when-i-use-gemini-apps-while-signed-out%2Cwhat-location-information-do-gemini-apps-collect-why-and-how-is-it-used%2Chow-do-i-know-if-gemini-apps-have-access-to-and-are-using-my-precise-location%2Chow-do-i-manage-my-mobile-permissions-when-gemini-is-my-device-assistant%2Cwhat-do-the-browser-app-permission-choices-mean%2Chow-does-google-work-with-my-uploaded-images%2Cwhat-happens-when-i-share-a-photo-or-video-from-a-media-gallery-connected-app-with-gemini-apps%2Cwhat-happens-with-my-data-that-gemini-connected-apps-and-other-services-exchange%2Chow-can-i-allow-gemini-to-personalize-my-experience-with-my-data-from-connected-apps%2Chow-is-my-data-used-to-make-calls-send-messages-with-connected-apps-in-gemini%2Chow-does-gemini-use-my-data-with-the-remote-browser-and-remote-computer%2Cwhat-happens-when-you-turn-off-task-mode%2Chow-does-google-work-with-gemini-live-data%2Cwhat-happens-to-my-data-when-i-use-gemini-in-chrome%2Cwhat-happens-with-my-data-when-gemini-uses-screen-automation-to-help-me-get-tasks-done-in-android-apps%2Cwhat-happens-to-my-data-when-i-use-geminis-agentic-calling-capability%2Cwhat-happens-to-my-data-when-i-add-items-to-the-google-shopping-cart-from-gemini%2Cwhat-happens-to-my-data-when-i-use-google-pay-in-gemini%2Cwhat-happens-to-my-data-when-i-interact-with-gems-from-google-labs%2Cwhat-happens-to-my-data-when-i-import-memory-or-chats-from-other-ai-platforms%2Cwhat-happens-to-my-data-when-i-use-notebooks-in-gemini%2Cwhat-happens-to-my-data-when-i-create-an-avatar-in-gemini-apps%2Cwhat-happens-to-my-data-when-i-share-my-avatar-with-other-users%2Cwhat-happens-to-my-data-when-i-interact-with-canvas-web-apps%2Cwhat-happens-when-i-interact-with-speak-to-window-on-gemini-for-macos%2Cwhat-terms-apply-to-use-of-gemini-apps","capturedAt":"2026-11-08T22:28:03Z","sha256":"e1e866ccdbaf192a25cd6823496389ad27321566852ad82a4a59583741d7ae44"}},{"quote":"Info and content from your Connected Apps (like emails, files, events, photos, and videos)","source":{"doc":"gemini-apps-privacy-hub","title":"Gemini Apps Privacy Hub","url":"https://support.google.com/gemini/answer/13594961?hl=en#zippy=%2Cwhat-data-is-collected%2Chow-your-data-is-used%2Chow-gemini-apps-get-help-from-google-services%2Chow-gemini-apps-work-with-connected-apps%2Caudio-features%2Ccanvas%2Cconfiguring-your-settings%2Chow-long-we-retain-your-data%2Crequesting-content-removal-and-exporting-your-information%2Cother-things-to-know%2Crespect-others-rights%2Cwhat-are-gemini-apps%2Chow-can-i-object-to-the-processing-of-my-data-or-ask-for-inaccurate-data-in-gemini-apps-responses-to-be-corrected%2Cwhat-are-googles-legal-bases-of-processing-gemini-apps-data-under-european-union-eu-or-united-kingdom-uk-data-protection-law%2Cdo-you-use-my-gemini-apps-chats-to-show-me-ads%2Cwho-has-access-to-my-chats-and-how-does-human-review-improve-gemini-for-everyone%2Chow-long-does-google-retain-my-temporary-chats-and-chats-i-have-when-keep-activity-is-off-and-what-does-google-do-with-this-data%2Chow-does-google-use-my-feedback%2Cwhat-does-the-keep-activity-setting-control%2Cwhat-does-the-memory-summary-setting-control%2Chow-can-i-control-whether-google-uses-my-audio-and-gemini-live-videos-screenshares-to-improve-its-services%2Chow-do-i-manage-what-gemini-remembers-about-me-and-customize-my-responses%2Chow-can-i-control-whether-gemini-apps-use-my-past-chats-to-personalize-my-experience%2Chow-does-google-handle-my-data-when-i-use-gemini-apps-while-signed-out%2Cwhat-location-information-do-gemini-apps-collect-why-and-how-is-it-used%2Chow-do-i-know-if-gemini-apps-have-access-to-and-are-using-my-precise-location%2Chow-do-i-manage-my-mobile-permissions-when-gemini-is-my-device-assistant%2Cwhat-do-the-browser-app-permission-choices-mean%2Chow-does-google-work-with-my-uploaded-images%2Cwhat-happens-when-i-share-a-photo-or-video-from-a-media-gallery-connected-app-with-gemini-apps%2Cwhat-happens-with-my-data-that-gemini-connected-apps-and-other-services-exchange%2Chow-can-i-allow-gemini-to-personalize-my-experience-with-my-data-from-connected-apps%2Chow-is-my-data-used-to-make-calls-send-messages-with-connected-apps-in-gemini%2Chow-does-gemini-use-my-data-with-the-remote-browser-and-remote-computer%2Cwhat-happens-when-you-turn-off-task-mode%2Chow-does-google-work-with-gemini-live-data%2Cwhat-happens-to-my-data-when-i-use-gemini-in-chrome%2Cwhat-happens-with-my-data-when-gemini-uses-screen-automation-to-help-me-get-tasks-done-in-android-apps%2Cwhat-happens-to-my-data-when-i-use-geminis-agentic-calling-capability%2Cwhat-happens-to-my-data-when-i-add-items-to-the-google-shopping-cart-from-gemini%2Cwhat-happens-to-my-data-when-i-use-google-pay-in-gemini%2Cwhat-happens-to-my-data-when-i-interact-with-gems-from-google-labs%2Cwhat-happens-to-my-data-when-i-import-memory-or-chats-from-other-ai-platforms%2Cwhat-happens-to-my-data-when-i-use-notebooks-in-gemini%2Cwhat-happens-to-my-data-when-i-create-an-avatar-in-gemini-apps%2Cwhat-happens-to-my-data-when-i-share-my-avatar-with-other-users%2Cwhat-happens-to-my-data-when-i-interact-with-canvas-web-apps%2Cwhat-happens-when-i-interact-with-speak-to-window-on-gemini-for-macos%2Cwhat-terms-apply-to-use-of-gemini-apps","capturedAt":"2026-11-08T22:28:03Z","sha256":"e1e866ccdbaf192a25cd6823496389ad27321566852ad82a4a59583741d7ae44"}},{"quote":"Disconnecting an app or deleting data in a connected app doesn’t delete any data from [Gemini Apps Activity](https://myactivity.google.com/product/gemini?utm_source=help).","source":{"doc":"gemini-apps-privacy-hub","title":"Gemini Apps Privacy Hub","url":"https://support.google.com/gemini/answer/13594961?hl=en#zippy=%2Cwhat-data-is-collected%2Chow-your-data-is-used%2Chow-gemini-apps-get-help-from-google-services%2Chow-gemini-apps-work-with-connected-apps%2Caudio-features%2Ccanvas%2Cconfiguring-your-settings%2Chow-long-we-retain-your-data%2Crequesting-content-removal-and-exporting-your-information%2Cother-things-to-know%2Crespect-others-rights%2Cwhat-are-gemini-apps%2Chow-can-i-object-to-the-processing-of-my-data-or-ask-for-inaccurate-data-in-gemini-apps-responses-to-be-corrected%2Cwhat-are-googles-legal-bases-of-processing-gemini-apps-data-under-european-union-eu-or-united-kingdom-uk-data-protection-law%2Cdo-you-use-my-gemini-apps-chats-to-show-me-ads%2Cwho-has-access-to-my-chats-and-how-does-human-review-improve-gemini-for-everyone%2Chow-long-does-google-retain-my-temporary-chats-and-chats-i-have-when-keep-activity-is-off-and-what-does-google-do-with-this-data%2Chow-does-google-use-my-feedback%2Cwhat-does-the-keep-activity-setting-control%2Cwhat-does-the-memory-summary-setting-control%2Chow-can-i-control-whether-google-uses-my-audio-and-gemini-live-videos-screenshares-to-improve-its-services%2Chow-do-i-manage-what-gemini-remembers-about-me-and-customize-my-responses%2Chow-can-i-control-whether-gemini-apps-use-my-past-chats-to-personalize-my-experience%2Chow-does-google-handle-my-data-when-i-use-gemini-apps-while-signed-out%2Cwhat-location-information-do-gemini-apps-collect-why-and-how-is-it-used%2Chow-do-i-know-if-gemini-apps-have-access-to-and-are-using-my-precise-location%2Chow-do-i-manage-my-mobile-permissions-when-gemini-is-my-device-assistant%2Cwhat-do-the-browser-app-permission-choices-mean%2Chow-does-google-work-with-my-uploaded-images%2Cwhat-happens-when-i-share-a-photo-or-video-from-a-media-gallery-connected-app-with-gemini-apps%2Cwhat-happens-with-my-data-that-gemini-connected-apps-and-other-services-exchange%2Chow-can-i-allow-gemini-to-personalize-my-experience-with-my-data-from-connected-apps%2Chow-is-my-data-used-to-make-calls-send-messages-with-connected-apps-in-gemini%2Chow-does-gemini-use-my-data-with-the-remote-browser-and-remote-computer%2Cwhat-happens-when-you-turn-off-task-mode%2Chow-does-google-work-with-gemini-live-data%2Cwhat-happens-to-my-data-when-i-use-gemini-in-chrome%2Cwhat-happens-with-my-data-when-gemini-uses-screen-automation-to-help-me-get-tasks-done-in-android-apps%2Cwhat-happens-to-my-data-when-i-use-geminis-agentic-calling-capability%2Cwhat-happens-to-my-data-when-i-add-items-to-the-google-shopping-cart-from-gemini%2Cwhat-happens-to-my-data-when-i-use-google-pay-in-gemini%2Cwhat-happens-to-my-data-when-i-interact-with-gems-from-google-labs%2Cwhat-happens-to-my-data-when-i-import-memory-or-chats-from-other-ai-platforms%2Cwhat-happens-to-my-data-when-i-use-notebooks-in-gemini%2Cwhat-happens-to-my-data-when-i-create-an-avatar-in-gemini-apps%2Cwhat-happens-to-my-data-when-i-share-my-avatar-with-other-users%2Cwhat-happens-to-my-data-when-i-interact-with-canvas-web-apps%2Cwhat-happens-when-i-interact-with-speak-to-window-on-gemini-for-macos%2Cwhat-terms-apply-to-use-of-gemini-apps","capturedAt":"2026-11-08T22:28:03Z","sha256":"e1e866ccdbaf192a25cd6823496389ad27321566852ad82a4a59583741d7ae44"}},{"quote":"Apps retain data that Gemini shares with them subject to their own policies. Deleting data in Gemini Apps Activity doesn’t delete data that other apps have received from Gemini.","source":{"doc":"gemini-apps-privacy-hub","title":"Gemini Apps Privacy Hub","url":"https://support.google.com/gemini/answer/13594961?hl=en#zippy=%2Cwhat-data-is-collected%2Chow-your-data-is-used%2Chow-gemini-apps-get-help-from-google-services%2Chow-gemini-apps-work-with-connected-apps%2Caudio-features%2Ccanvas%2Cconfiguring-your-settings%2Chow-long-we-retain-your-data%2Crequesting-content-removal-and-exporting-your-information%2Cother-things-to-know%2Crespect-others-rights%2Cwhat-are-gemini-apps%2Chow-can-i-object-to-the-processing-of-my-data-or-ask-for-inaccurate-data-in-gemini-apps-responses-to-be-corrected%2Cwhat-are-googles-legal-bases-of-processing-gemini-apps-data-under-european-union-eu-or-united-kingdom-uk-data-protection-law%2Cdo-you-use-my-gemini-apps-chats-to-show-me-ads%2Cwho-has-access-to-my-chats-and-how-does-human-review-improve-gemini-for-everyone%2Chow-long-does-google-retain-my-temporary-chats-and-chats-i-have-when-keep-activity-is-off-and-what-does-google-do-with-this-data%2Chow-does-google-use-my-feedback%2Cwhat-does-the-keep-activity-setting-control%2Cwhat-does-the-memory-summary-setting-control%2Chow-can-i-control-whether-google-uses-my-audio-and-gemini-live-videos-screenshares-to-improve-its-services%2Chow-do-i-manage-what-gemini-remembers-about-me-and-customize-my-responses%2Chow-can-i-control-whether-gemini-apps-use-my-past-chats-to-personalize-my-experience%2Chow-does-google-handle-my-data-when-i-use-gemini-apps-while-signed-out%2Cwhat-location-information-do-gemini-apps-collect-why-and-how-is-it-used%2Chow-do-i-know-if-gemini-apps-have-access-to-and-are-using-my-precise-location%2Chow-do-i-manage-my-mobile-permissions-when-gemini-is-my-device-assistant%2Cwhat-do-the-browser-app-permission-choices-mean%2Chow-does-google-work-with-my-uploaded-images%2Cwhat-happens-when-i-share-a-photo-or-video-from-a-media-gallery-connected-app-with-gemini-apps%2Cwhat-happens-with-my-data-that-gemini-connected-apps-and-other-services-exchange%2Chow-can-i-allow-gemini-to-personalize-my-experience-with-my-data-from-connected-apps%2Chow-is-my-data-used-to-make-calls-send-messages-with-connected-apps-in-gemini%2Chow-does-gemini-use-my-data-with-the-remote-browser-and-remote-computer%2Cwhat-happens-when-you-turn-off-task-mode%2Chow-does-google-work-with-gemini-live-data%2Cwhat-happens-to-my-data-when-i-use-gemini-in-chrome%2Cwhat-happens-with-my-data-when-gemini-uses-screen-automation-to-help-me-get-tasks-done-in-android-apps%2Cwhat-happens-to-my-data-when-i-use-geminis-agentic-calling-capability%2Cwhat-happens-to-my-data-when-i-add-items-to-the-google-shopping-cart-from-gemini%2Cwhat-happens-to-my-data-when-i-use-google-pay-in-gemini%2Cwhat-happens-to-my-data-when-i-interact-with-gems-from-google-labs%2Cwhat-happens-to-my-data-when-i-import-memory-or-chats-from-other-ai-platforms%2Cwhat-happens-to-my-data-when-i-use-notebooks-in-gemini%2Cwhat-happens-to-my-data-when-i-create-an-avatar-in-gemini-apps%2Cwhat-happens-to-my-data-when-i-share-my-avatar-with-other-users%2Cwhat-happens-to-my-data-when-i-interact-with-canvas-web-apps%2Cwhat-happens-when-i-interact-with-speak-to-window-on-gemini-for-macos%2Cwhat-terms-apply-to-use-of-gemini-apps","capturedAt":"2026-11-08T22:28:03Z","sha256":"e1e866ccdbaf192a25cd6823496389ad27321566852ad82a4a59583741d7ae44"}},{"quote":"Google does not monitor or secure data from custom third-party Connected Apps.","source":{"doc":"gemini-apps-privacy-hub","title":"Gemini Apps Privacy Hub","url":"https://support.google.com/gemini/answer/13594961?hl=en#zippy=%2Cwhat-data-is-collected%2Chow-your-data-is-used%2Chow-gemini-apps-get-help-from-google-services%2Chow-gemini-apps-work-with-connected-apps%2Caudio-features%2Ccanvas%2Cconfiguring-your-settings%2Chow-long-we-retain-your-data%2Crequesting-content-removal-and-exporting-your-information%2Cother-things-to-know%2Crespect-others-rights%2Cwhat-are-gemini-apps%2Chow-can-i-object-to-the-processing-of-my-data-or-ask-for-inaccurate-data-in-gemini-apps-responses-to-be-corrected%2Cwhat-are-googles-legal-bases-of-processing-gemini-apps-data-under-european-union-eu-or-united-kingdom-uk-data-protection-law%2Cdo-you-use-my-gemini-apps-chats-to-show-me-ads%2Cwho-has-access-to-my-chats-and-how-does-human-review-improve-gemini-for-everyone%2Chow-long-does-google-retain-my-temporary-chats-and-chats-i-have-when-keep-activity-is-off-and-what-does-google-do-with-this-data%2Chow-does-google-use-my-feedback%2Cwhat-does-the-keep-activity-setting-control%2Cwhat-does-the-memory-summary-setting-control%2Chow-can-i-control-whether-google-uses-my-audio-and-gemini-live-videos-screenshares-to-improve-its-services%2Chow-do-i-manage-what-gemini-remembers-about-me-and-customize-my-responses%2Chow-can-i-control-whether-gemini-apps-use-my-past-chats-to-personalize-my-experience%2Chow-does-google-handle-my-data-when-i-use-gemini-apps-while-signed-out%2Cwhat-location-information-do-gemini-apps-collect-why-and-how-is-it-used%2Chow-do-i-know-if-gemini-apps-have-access-to-and-are-using-my-precise-location%2Chow-do-i-manage-my-mobile-permissions-when-gemini-is-my-device-assistant%2Cwhat-do-the-browser-app-permission-choices-mean%2Chow-does-google-work-with-my-uploaded-images%2Cwhat-happens-when-i-share-a-photo-or-video-from-a-media-gallery-connected-app-with-gemini-apps%2Cwhat-happens-with-my-data-that-gemini-connected-apps-and-other-services-exchange%2Chow-can-i-allow-gemini-to-personalize-my-experience-with-my-data-from-connected-apps%2Chow-is-my-data-used-to-make-calls-send-messages-with-connected-apps-in-gemini%2Chow-does-gemini-use-my-data-with-the-remote-browser-and-remote-computer%2Cwhat-happens-when-you-turn-off-task-mode%2Chow-does-google-work-with-gemini-live-data%2Cwhat-happens-to-my-data-when-i-use-gemini-in-chrome%2Cwhat-happens-with-my-data-when-gemini-uses-screen-automation-to-help-me-get-tasks-done-in-android-apps%2Cwhat-happens-to-my-data-when-i-use-geminis-agentic-calling-capability%2Cwhat-happens-to-my-data-when-i-add-items-to-the-google-shopping-cart-from-gemini%2Cwhat-happens-to-my-data-when-i-use-google-pay-in-gemini%2Cwhat-happens-to-my-data-when-i-interact-with-gems-from-google-labs%2Cwhat-happens-to-my-data-when-i-import-memory-or-chats-from-other-ai-platforms%2Cwhat-happens-to-my-data-when-i-use-notebooks-in-gemini%2Cwhat-happens-to-my-data-when-i-create-an-avatar-in-gemini-apps%2Cwhat-happens-to-my-data-when-i-share-my-avatar-with-other-users%2Cwhat-happens-to-my-data-when-i-interact-with-canvas-web-apps%2Cwhat-happens-when-i-interact-with-speak-to-window-on-gemini-for-macos%2Cwhat-terms-apply-to-use-of-gemini-apps","capturedAt":"2026-11-08T22:28:03Z","sha256":"e1e866ccdbaf192a25cd6823496389ad27321566852ad82a4a59583741d7ae44"}},{"quote":"You may choose to allow certain Google services, including services like Search or Gemini Apps, to access data from other Google services you use, such as Google Photos and Workspace apps like Gmail and Drive, in order to provide you with a more personalized experience, subject to the policies and settings of the accessing service.","source":{"doc":"privacy-policy","title":"Privacy Policy \\u2013 Privacy & Terms \\u2013 Google","url":"https://policies.google.com/privacy?hl=en-US","capturedAt":"2026-11-08T22:04:22Z","sha256":"450d30d71dd38b3096ec447da0b6cf51e2b8e63e8d6da3e89e4366bbd337814f"}}]},"agent_actions":{"summary":"Remote browser keeps login cookies; remote computer keeps files and code. Delete them in Task settings or by turning off task mode; Keep Activity doesn't. Screen-automation screenshots may be human-reviewed.","status":"stated","cites":[{"quote":"**Remote browser:** Gemini processes information from your browser session, like cookies that contain your website authentication info, and page content.","source":{"doc":"gemini-apps-privacy-hub","title":"Gemini Apps Privacy Hub","url":"https://support.google.com/gemini/answer/13594961?hl=en#zippy=%2Cwhat-data-is-collected%2Chow-your-data-is-used%2Chow-gemini-apps-get-help-from-google-services%2Chow-gemini-apps-work-with-connected-apps%2Caudio-features%2Ccanvas%2Cconfiguring-your-settings%2Chow-long-we-retain-your-data%2Crequesting-content-removal-and-exporting-your-information%2Cother-things-to-know%2Crespect-others-rights%2Cwhat-are-gemini-apps%2Chow-can-i-object-to-the-processing-of-my-data-or-ask-for-inaccurate-data-in-gemini-apps-responses-to-be-corrected%2Cwhat-are-googles-legal-bases-of-processing-gemini-apps-data-under-european-union-eu-or-united-kingdom-uk-data-protection-law%2Cdo-you-use-my-gemini-apps-chats-to-show-me-ads%2Cwho-has-access-to-my-chats-and-how-does-human-review-improve-gemini-for-everyone%2Chow-long-does-google-retain-my-temporary-chats-and-chats-i-have-when-keep-activity-is-off-and-what-does-google-do-with-this-data%2Chow-does-google-use-my-feedback%2Cwhat-does-the-keep-activity-setting-control%2Cwhat-does-the-memory-summary-setting-control%2Chow-can-i-control-whether-google-uses-my-audio-and-gemini-live-videos-screenshares-to-improve-its-services%2Chow-do-i-manage-what-gemini-remembers-about-me-and-customize-my-responses%2Chow-can-i-control-whether-gemini-apps-use-my-past-chats-to-personalize-my-experience%2Chow-does-google-handle-my-data-when-i-use-gemini-apps-while-signed-out%2Cwhat-location-information-do-gemini-apps-collect-why-and-how-is-it-used%2Chow-do-i-know-if-gemini-apps-have-access-to-and-are-using-my-precise-location%2Chow-do-i-manage-my-mobile-permissions-when-gemini-is-my-device-assistant%2Cwhat-do-the-browser-app-permission-choices-mean%2Chow-does-google-work-with-my-uploaded-images%2Cwhat-happens-when-i-share-a-photo-or-video-from-a-media-gallery-connected-app-with-gemini-apps%2Cwhat-happens-with-my-data-that-gemini-connected-apps-and-other-services-exchange%2Chow-can-i-allow-gemini-to-personalize-my-experience-with-my-data-from-connected-apps%2Chow-is-my-data-used-to-make-calls-send-messages-with-connected-apps-in-gemini%2Chow-does-gemini-use-my-data-with-the-remote-browser-and-remote-computer%2Cwhat-happens-when-you-turn-off-task-mode%2Chow-does-google-work-with-gemini-live-data%2Cwhat-happens-to-my-data-when-i-use-gemini-in-chrome%2Cwhat-happens-with-my-data-when-gemini-uses-screen-automation-to-help-me-get-tasks-done-in-android-apps%2Cwhat-happens-to-my-data-when-i-use-geminis-agentic-calling-capability%2Cwhat-happens-to-my-data-when-i-add-items-to-the-google-shopping-cart-from-gemini%2Cwhat-happens-to-my-data-when-i-use-google-pay-in-gemini%2Cwhat-happens-to-my-data-when-i-interact-with-gems-from-google-labs%2Cwhat-happens-to-my-data-when-i-import-memory-or-chats-from-other-ai-platforms%2Cwhat-happens-to-my-data-when-i-use-notebooks-in-gemini%2Cwhat-happens-to-my-data-when-i-create-an-avatar-in-gemini-apps%2Cwhat-happens-to-my-data-when-i-share-my-avatar-with-other-users%2Cwhat-happens-to-my-data-when-i-interact-with-canvas-web-apps%2Cwhat-happens-when-i-interact-with-speak-to-window-on-gemini-for-macos%2Cwhat-terms-apply-to-use-of-gemini-apps","capturedAt":"2026-11-08T22:28:03Z","sha256":"e1e866ccdbaf192a25cd6823496389ad27321566852ad82a4a59583741d7ae44"}},{"quote":"**Remote computer:** Gemini saves and executes .md files, code, and other information related to your tasks.","source":{"doc":"gemini-apps-privacy-hub","title":"Gemini Apps Privacy Hub","url":"https://support.google.com/gemini/answer/13594961?hl=en#zippy=%2Cwhat-data-is-collected%2Chow-your-data-is-used%2Chow-gemini-apps-get-help-from-google-services%2Chow-gemini-apps-work-with-connected-apps%2Caudio-features%2Ccanvas%2Cconfiguring-your-settings%2Chow-long-we-retain-your-data%2Crequesting-content-removal-and-exporting-your-information%2Cother-things-to-know%2Crespect-others-rights%2Cwhat-are-gemini-apps%2Chow-can-i-object-to-the-processing-of-my-data-or-ask-for-inaccurate-data-in-gemini-apps-responses-to-be-corrected%2Cwhat-are-googles-legal-bases-of-processing-gemini-apps-data-under-european-union-eu-or-united-kingdom-uk-data-protection-law%2Cdo-you-use-my-gemini-apps-chats-to-show-me-ads%2Cwho-has-access-to-my-chats-and-how-does-human-review-improve-gemini-for-everyone%2Chow-long-does-google-retain-my-temporary-chats-and-chats-i-have-when-keep-activity-is-off-and-what-does-google-do-with-this-data%2Chow-does-google-use-my-feedback%2Cwhat-does-the-keep-activity-setting-control%2Cwhat-does-the-memory-summary-setting-control%2Chow-can-i-control-whether-google-uses-my-audio-and-gemini-live-videos-screenshares-to-improve-its-services%2Chow-do-i-manage-what-gemini-remembers-about-me-and-customize-my-responses%2Chow-can-i-control-whether-gemini-apps-use-my-past-chats-to-personalize-my-experience%2Chow-does-google-handle-my-data-when-i-use-gemini-apps-while-signed-out%2Cwhat-location-information-do-gemini-apps-collect-why-and-how-is-it-used%2Chow-do-i-know-if-gemini-apps-have-access-to-and-are-using-my-precise-location%2Chow-do-i-manage-my-mobile-permissions-when-gemini-is-my-device-assistant%2Cwhat-do-the-browser-app-permission-choices-mean%2Chow-does-google-work-with-my-uploaded-images%2Cwhat-happens-when-i-share-a-photo-or-video-from-a-media-gallery-connected-app-with-gemini-apps%2Cwhat-happens-with-my-data-that-gemini-connected-apps-and-other-services-exchange%2Chow-can-i-allow-gemini-to-personalize-my-experience-with-my-data-from-connected-apps%2Chow-is-my-data-used-to-make-calls-send-messages-with-connected-apps-in-gemini%2Chow-does-gemini-use-my-data-with-the-remote-browser-and-remote-computer%2Cwhat-happens-when-you-turn-off-task-mode%2Chow-does-google-work-with-gemini-live-data%2Cwhat-happens-to-my-data-when-i-use-gemini-in-chrome%2Cwhat-happens-with-my-data-when-gemini-uses-screen-automation-to-help-me-get-tasks-done-in-android-apps%2Cwhat-happens-to-my-data-when-i-use-geminis-agentic-calling-capability%2Cwhat-happens-to-my-data-when-i-add-items-to-the-google-shopping-cart-from-gemini%2Cwhat-happens-to-my-data-when-i-use-google-pay-in-gemini%2Cwhat-happens-to-my-data-when-i-interact-with-gems-from-google-labs%2Cwhat-happens-to-my-data-when-i-import-memory-or-chats-from-other-ai-platforms%2Cwhat-happens-to-my-data-when-i-use-notebooks-in-gemini%2Cwhat-happens-to-my-data-when-i-create-an-avatar-in-gemini-apps%2Cwhat-happens-to-my-data-when-i-share-my-avatar-with-other-users%2Cwhat-happens-to-my-data-when-i-interact-with-canvas-web-apps%2Cwhat-happens-when-i-interact-with-speak-to-window-on-gemini-for-macos%2Cwhat-terms-apply-to-use-of-gemini-apps","capturedAt":"2026-11-08T22:28:03Z","sha256":"e1e866ccdbaf192a25cd6823496389ad27321566852ad82a4a59583741d7ae44"}},{"quote":"You can delete this data at any time in [your Task settings in Gemini](https://gemini.google.com/gemini-spark).","source":{"doc":"gemini-apps-privacy-hub","title":"Gemini Apps Privacy Hub","url":"https://support.google.com/gemini/answer/13594961?hl=en#zippy=%2Cwhat-data-is-collected%2Chow-your-data-is-used%2Chow-gemini-apps-get-help-from-google-services%2Chow-gemini-apps-work-with-connected-apps%2Caudio-features%2Ccanvas%2Cconfiguring-your-settings%2Chow-long-we-retain-your-data%2Crequesting-content-removal-and-exporting-your-information%2Cother-things-to-know%2Crespect-others-rights%2Cwhat-are-gemini-apps%2Chow-can-i-object-to-the-processing-of-my-data-or-ask-for-inaccurate-data-in-gemini-apps-responses-to-be-corrected%2Cwhat-are-googles-legal-bases-of-processing-gemini-apps-data-under-european-union-eu-or-united-kingdom-uk-data-protection-law%2Cdo-you-use-my-gemini-apps-chats-to-show-me-ads%2Cwho-has-access-to-my-chats-and-how-does-human-review-improve-gemini-for-everyone%2Chow-long-does-google-retain-my-temporary-chats-and-chats-i-have-when-keep-activity-is-off-and-what-does-google-do-with-this-data%2Chow-does-google-use-my-feedback%2Cwhat-does-the-keep-activity-setting-control%2Cwhat-does-the-memory-summary-setting-control%2Chow-can-i-control-whether-google-uses-my-audio-and-gemini-live-videos-screenshares-to-improve-its-services%2Chow-do-i-manage-what-gemini-remembers-about-me-and-customize-my-responses%2Chow-can-i-control-whether-gemini-apps-use-my-past-chats-to-personalize-my-experience%2Chow-does-google-handle-my-data-when-i-use-gemini-apps-while-signed-out%2Cwhat-location-information-do-gemini-apps-collect-why-and-how-is-it-used%2Chow-do-i-know-if-gemini-apps-have-access-to-and-are-using-my-precise-location%2Chow-do-i-manage-my-mobile-permissions-when-gemini-is-my-device-assistant%2Cwhat-do-the-browser-app-permission-choices-mean%2Chow-does-google-work-with-my-uploaded-images%2Cwhat-happens-when-i-share-a-photo-or-video-from-a-media-gallery-connected-app-with-gemini-apps%2Cwhat-happens-with-my-data-that-gemini-connected-apps-and-other-services-exchange%2Chow-can-i-allow-gemini-to-personalize-my-experience-with-my-data-from-connected-apps%2Chow-is-my-data-used-to-make-calls-send-messages-with-connected-apps-in-gemini%2Chow-does-gemini-use-my-data-with-the-remote-browser-and-remote-computer%2Cwhat-happens-when-you-turn-off-task-mode%2Chow-does-google-work-with-gemini-live-data%2Cwhat-happens-to-my-data-when-i-use-gemini-in-chrome%2Cwhat-happens-with-my-data-when-gemini-uses-screen-automation-to-help-me-get-tasks-done-in-android-apps%2Cwhat-happens-to-my-data-when-i-use-geminis-agentic-calling-capability%2Cwhat-happens-to-my-data-when-i-add-items-to-the-google-shopping-cart-from-gemini%2Cwhat-happens-to-my-data-when-i-use-google-pay-in-gemini%2Cwhat-happens-to-my-data-when-i-interact-with-gems-from-google-labs%2Cwhat-happens-to-my-data-when-i-import-memory-or-chats-from-other-ai-platforms%2Cwhat-happens-to-my-data-when-i-use-notebooks-in-gemini%2Cwhat-happens-to-my-data-when-i-create-an-avatar-in-gemini-apps%2Cwhat-happens-to-my-data-when-i-share-my-avatar-with-other-users%2Cwhat-happens-to-my-data-when-i-interact-with-canvas-web-apps%2Cwhat-happens-when-i-interact-with-speak-to-window-on-gemini-for-macos%2Cwhat-terms-apply-to-use-of-gemini-apps","capturedAt":"2026-11-08T22:28:03Z","sha256":"e1e866ccdbaf192a25cd6823496389ad27321566852ad82a4a59583741d7ae44"}},{"quote":"Turning off Keep Activity or deleting Gemini Apps activity doesn’t impact [your remote browser and remote computer data and settings](https://gemini.google.com/gemini-spark).","source":{"doc":"gemini-apps-privacy-hub","title":"Gemini Apps Privacy Hub","url":"https://support.google.com/gemini/answer/13594961?hl=en#zippy=%2Cwhat-data-is-collected%2Chow-your-data-is-used%2Chow-gemini-apps-get-help-from-google-services%2Chow-gemini-apps-work-with-connected-apps%2Caudio-features%2Ccanvas%2Cconfiguring-your-settings%2Chow-long-we-retain-your-data%2Crequesting-content-removal-and-exporting-your-information%2Cother-things-to-know%2Crespect-others-rights%2Cwhat-are-gemini-apps%2Chow-can-i-object-to-the-processing-of-my-data-or-ask-for-inaccurate-data-in-gemini-apps-responses-to-be-corrected%2Cwhat-are-googles-legal-bases-of-processing-gemini-apps-data-under-european-union-eu-or-united-kingdom-uk-data-protection-law%2Cdo-you-use-my-gemini-apps-chats-to-show-me-ads%2Cwho-has-access-to-my-chats-and-how-does-human-review-improve-gemini-for-everyone%2Chow-long-does-google-retain-my-temporary-chats-and-chats-i-have-when-keep-activity-is-off-and-what-does-google-do-with-this-data%2Chow-does-google-use-my-feedback%2Cwhat-does-the-keep-activity-setting-control%2Cwhat-does-the-memory-summary-setting-control%2Chow-can-i-control-whether-google-uses-my-audio-and-gemini-live-videos-screenshares-to-improve-its-services%2Chow-do-i-manage-what-gemini-remembers-about-me-and-customize-my-responses%2Chow-can-i-control-whether-gemini-apps-use-my-past-chats-to-personalize-my-experience%2Chow-does-google-handle-my-data-when-i-use-gemini-apps-while-signed-out%2Cwhat-location-information-do-gemini-apps-collect-why-and-how-is-it-used%2Chow-do-i-know-if-gemini-apps-have-access-to-and-are-using-my-precise-location%2Chow-do-i-manage-my-mobile-permissions-when-gemini-is-my-device-assistant%2Cwhat-do-the-browser-app-permission-choices-mean%2Chow-does-google-work-with-my-uploaded-images%2Cwhat-happens-when-i-share-a-photo-or-video-from-a-media-gallery-connected-app-with-gemini-apps%2Cwhat-happens-with-my-data-that-gemini-connected-apps-and-other-services-exchange%2Chow-can-i-allow-gemini-to-personalize-my-experience-with-my-data-from-connected-apps%2Chow-is-my-data-used-to-make-calls-send-messages-with-connected-apps-in-gemini%2Chow-does-gemini-use-my-data-with-the-remote-browser-and-remote-computer%2Cwhat-happens-when-you-turn-off-task-mode%2Chow-does-google-work-with-gemini-live-data%2Cwhat-happens-to-my-data-when-i-use-gemini-in-chrome%2Cwhat-happens-with-my-data-when-gemini-uses-screen-automation-to-help-me-get-tasks-done-in-android-apps%2Cwhat-happens-to-my-data-when-i-use-geminis-agentic-calling-capability%2Cwhat-happens-to-my-data-when-i-add-items-to-the-google-shopping-cart-from-gemini%2Cwhat-happens-to-my-data-when-i-use-google-pay-in-gemini%2Cwhat-happens-to-my-data-when-i-interact-with-gems-from-google-labs%2Cwhat-happens-to-my-data-when-i-import-memory-or-chats-from-other-ai-platforms%2Cwhat-happens-to-my-data-when-i-use-notebooks-in-gemini%2Cwhat-happens-to-my-data-when-i-create-an-avatar-in-gemini-apps%2Cwhat-happens-to-my-data-when-i-share-my-avatar-with-other-users%2Cwhat-happens-to-my-data-when-i-interact-with-canvas-web-apps%2Cwhat-happens-when-i-interact-with-speak-to-window-on-gemini-for-macos%2Cwhat-terms-apply-to-use-of-gemini-apps","capturedAt":"2026-11-08T22:28:03Z","sha256":"e1e866ccdbaf192a25cd6823496389ad27321566852ad82a4a59583741d7ae44"}},{"quote":"Your [remote browser data and remote computer data](https://gemini.google.com/gemini-spark) is deleted.","source":{"doc":"gemini-apps-privacy-hub","title":"Gemini Apps Privacy Hub","url":"https://support.google.com/gemini/answer/13594961?hl=en#zippy=%2Cwhat-data-is-collected%2Chow-your-data-is-used%2Chow-gemini-apps-get-help-from-google-services%2Chow-gemini-apps-work-with-connected-apps%2Caudio-features%2Ccanvas%2Cconfiguring-your-settings%2Chow-long-we-retain-your-data%2Crequesting-content-removal-and-exporting-your-information%2Cother-things-to-know%2Crespect-others-rights%2Cwhat-are-gemini-apps%2Chow-can-i-object-to-the-processing-of-my-data-or-ask-for-inaccurate-data-in-gemini-apps-responses-to-be-corrected%2Cwhat-are-googles-legal-bases-of-processing-gemini-apps-data-under-european-union-eu-or-united-kingdom-uk-data-protection-law%2Cdo-you-use-my-gemini-apps-chats-to-show-me-ads%2Cwho-has-access-to-my-chats-and-how-does-human-review-improve-gemini-for-everyone%2Chow-long-does-google-retain-my-temporary-chats-and-chats-i-have-when-keep-activity-is-off-and-what-does-google-do-with-this-data%2Chow-does-google-use-my-feedback%2Cwhat-does-the-keep-activity-setting-control%2Cwhat-does-the-memory-summary-setting-control%2Chow-can-i-control-whether-google-uses-my-audio-and-gemini-live-videos-screenshares-to-improve-its-services%2Chow-do-i-manage-what-gemini-remembers-about-me-and-customize-my-responses%2Chow-can-i-control-whether-gemini-apps-use-my-past-chats-to-personalize-my-experience%2Chow-does-google-handle-my-data-when-i-use-gemini-apps-while-signed-out%2Cwhat-location-information-do-gemini-apps-collect-why-and-how-is-it-used%2Chow-do-i-know-if-gemini-apps-have-access-to-and-are-using-my-precise-location%2Chow-do-i-manage-my-mobile-permissions-when-gemini-is-my-device-assistant%2Cwhat-do-the-browser-app-permission-choices-mean%2Chow-does-google-work-with-my-uploaded-images%2Cwhat-happens-when-i-share-a-photo-or-video-from-a-media-gallery-connected-app-with-gemini-apps%2Cwhat-happens-with-my-data-that-gemini-connected-apps-and-other-services-exchange%2Chow-can-i-allow-gemini-to-personalize-my-experience-with-my-data-from-connected-apps%2Chow-is-my-data-used-to-make-calls-send-messages-with-connected-apps-in-gemini%2Chow-does-gemini-use-my-data-with-the-remote-browser-and-remote-computer%2Cwhat-happens-when-you-turn-off-task-mode%2Chow-does-google-work-with-gemini-live-data%2Cwhat-happens-to-my-data-when-i-use-gemini-in-chrome%2Cwhat-happens-with-my-data-when-gemini-uses-screen-automation-to-help-me-get-tasks-done-in-android-apps%2Cwhat-happens-to-my-data-when-i-use-geminis-agentic-calling-capability%2Cwhat-happens-to-my-data-when-i-add-items-to-the-google-shopping-cart-from-gemini%2Cwhat-happens-to-my-data-when-i-use-google-pay-in-gemini%2Cwhat-happens-to-my-data-when-i-interact-with-gems-from-google-labs%2Cwhat-happens-to-my-data-when-i-import-memory-or-chats-from-other-ai-platforms%2Cwhat-happens-to-my-data-when-i-use-notebooks-in-gemini%2Cwhat-happens-to-my-data-when-i-create-an-avatar-in-gemini-apps%2Cwhat-happens-to-my-data-when-i-share-my-avatar-with-other-users%2Cwhat-happens-to-my-data-when-i-interact-with-canvas-web-apps%2Cwhat-happens-when-i-interact-with-speak-to-window-on-gemini-for-macos%2Cwhat-terms-apply-to-use-of-gemini-apps","capturedAt":"2026-11-08T22:28:03Z","sha256":"e1e866ccdbaf192a25cd6823496389ad27321566852ad82a4a59583741d7ae44"}},{"quote":"Screenshots are reviewed by trained reviewers and used to improve Google services if [Keep Activity](https://myactivity.google.com/product/gemini?utm_source=help) is on.","source":{"doc":"gemini-apps-privacy-hub","title":"Gemini Apps Privacy Hub","url":"https://support.google.com/gemini/answer/13594961?hl=en#zippy=%2Cwhat-data-is-collected%2Chow-your-data-is-used%2Chow-gemini-apps-get-help-from-google-services%2Chow-gemini-apps-work-with-connected-apps%2Caudio-features%2Ccanvas%2Cconfiguring-your-settings%2Chow-long-we-retain-your-data%2Crequesting-content-removal-and-exporting-your-information%2Cother-things-to-know%2Crespect-others-rights%2Cwhat-are-gemini-apps%2Chow-can-i-object-to-the-processing-of-my-data-or-ask-for-inaccurate-data-in-gemini-apps-responses-to-be-corrected%2Cwhat-are-googles-legal-bases-of-processing-gemini-apps-data-under-european-union-eu-or-united-kingdom-uk-data-protection-law%2Cdo-you-use-my-gemini-apps-chats-to-show-me-ads%2Cwho-has-access-to-my-chats-and-how-does-human-review-improve-gemini-for-everyone%2Chow-long-does-google-retain-my-temporary-chats-and-chats-i-have-when-keep-activity-is-off-and-what-does-google-do-with-this-data%2Chow-does-google-use-my-feedback%2Cwhat-does-the-keep-activity-setting-control%2Cwhat-does-the-memory-summary-setting-control%2Chow-can-i-control-whether-google-uses-my-audio-and-gemini-live-videos-screenshares-to-improve-its-services%2Chow-do-i-manage-what-gemini-remembers-about-me-and-customize-my-responses%2Chow-can-i-control-whether-gemini-apps-use-my-past-chats-to-personalize-my-experience%2Chow-does-google-handle-my-data-when-i-use-gemini-apps-while-signed-out%2Cwhat-location-information-do-gemini-apps-collect-why-and-how-is-it-used%2Chow-do-i-know-if-gemini-apps-have-access-to-and-are-using-my-precise-location%2Chow-do-i-manage-my-mobile-permissions-when-gemini-is-my-device-assistant%2Cwhat-do-the-browser-app-permission-choices-mean%2Chow-does-google-work-with-my-uploaded-images%2Cwhat-happens-when-i-share-a-photo-or-video-from-a-media-gallery-connected-app-with-gemini-apps%2Cwhat-happens-with-my-data-that-gemini-connected-apps-and-other-services-exchange%2Chow-can-i-allow-gemini-to-personalize-my-experience-with-my-data-from-connected-apps%2Chow-is-my-data-used-to-make-calls-send-messages-with-connected-apps-in-gemini%2Chow-does-gemini-use-my-data-with-the-remote-browser-and-remote-computer%2Cwhat-happens-when-you-turn-off-task-mode%2Chow-does-google-work-with-gemini-live-data%2Cwhat-happens-to-my-data-when-i-use-gemini-in-chrome%2Cwhat-happens-with-my-data-when-gemini-uses-screen-automation-to-help-me-get-tasks-done-in-android-apps%2Cwhat-happens-to-my-data-when-i-use-geminis-agentic-calling-capability%2Cwhat-happens-to-my-data-when-i-add-items-to-the-google-shopping-cart-from-gemini%2Cwhat-happens-to-my-data-when-i-use-google-pay-in-gemini%2Cwhat-happens-to-my-data-when-i-interact-with-gems-from-google-labs%2Cwhat-happens-to-my-data-when-i-import-memory-or-chats-from-other-ai-platforms%2Cwhat-happens-to-my-data-when-i-use-notebooks-in-gemini%2Cwhat-happens-to-my-data-when-i-create-an-avatar-in-gemini-apps%2Cwhat-happens-to-my-data-when-i-share-my-avatar-with-other-users%2Cwhat-happens-to-my-data-when-i-interact-with-canvas-web-apps%2Cwhat-happens-when-i-interact-with-speak-to-window-on-gemini-for-macos%2Cwhat-terms-apply-to-use-of-gemini-apps","capturedAt":"2026-11-08T22:28:03Z","sha256":"e1e866ccdbaf192a25cd6823496389ad27321566852ad82a4a59583741d7ae44"}},{"quote":"We don’t use these audio recordings or transcripts to train Google's AI models.","source":{"doc":"gemini-apps-privacy-hub","title":"Gemini Apps Privacy Hub","url":"https://support.google.com/gemini/answer/13594961?hl=en#zippy=%2Cwhat-data-is-collected%2Chow-your-data-is-used%2Chow-gemini-apps-get-help-from-google-services%2Chow-gemini-apps-work-with-connected-apps%2Caudio-features%2Ccanvas%2Cconfiguring-your-settings%2Chow-long-we-retain-your-data%2Crequesting-content-removal-and-exporting-your-information%2Cother-things-to-know%2Crespect-others-rights%2Cwhat-are-gemini-apps%2Chow-can-i-object-to-the-processing-of-my-data-or-ask-for-inaccurate-data-in-gemini-apps-responses-to-be-corrected%2Cwhat-are-googles-legal-bases-of-processing-gemini-apps-data-under-european-union-eu-or-united-kingdom-uk-data-protection-law%2Cdo-you-use-my-gemini-apps-chats-to-show-me-ads%2Cwho-has-access-to-my-chats-and-how-does-human-review-improve-gemini-for-everyone%2Chow-long-does-google-retain-my-temporary-chats-and-chats-i-have-when-keep-activity-is-off-and-what-does-google-do-with-this-data%2Chow-does-google-use-my-feedback%2Cwhat-does-the-keep-activity-setting-control%2Cwhat-does-the-memory-summary-setting-control%2Chow-can-i-control-whether-google-uses-my-audio-and-gemini-live-videos-screenshares-to-improve-its-services%2Chow-do-i-manage-what-gemini-remembers-about-me-and-customize-my-responses%2Chow-can-i-control-whether-gemini-apps-use-my-past-chats-to-personalize-my-experience%2Chow-does-google-handle-my-data-when-i-use-gemini-apps-while-signed-out%2Cwhat-location-information-do-gemini-apps-collect-why-and-how-is-it-used%2Chow-do-i-know-if-gemini-apps-have-access-to-and-are-using-my-precise-location%2Chow-do-i-manage-my-mobile-permissions-when-gemini-is-my-device-assistant%2Cwhat-do-the-browser-app-permission-choices-mean%2Chow-does-google-work-with-my-uploaded-images%2Cwhat-happens-when-i-share-a-photo-or-video-from-a-media-gallery-connected-app-with-gemini-apps%2Cwhat-happens-with-my-data-that-gemini-connected-apps-and-other-services-exchange%2Chow-can-i-allow-gemini-to-personalize-my-experience-with-my-data-from-connected-apps%2Chow-is-my-data-used-to-make-calls-send-messages-with-connected-apps-in-gemini%2Chow-does-gemini-use-my-data-with-the-remote-browser-and-remote-computer%2Cwhat-happens-when-you-turn-off-task-mode%2Chow-does-google-work-with-gemini-live-data%2Cwhat-happens-to-my-data-when-i-use-gemini-in-chrome%2Cwhat-happens-with-my-data-when-gemini-uses-screen-automation-to-help-me-get-tasks-done-in-android-apps%2Cwhat-happens-to-my-data-when-i-use-geminis-agentic-calling-capability%2Cwhat-happens-to-my-data-when-i-add-items-to-the-google-shopping-cart-from-gemini%2Cwhat-happens-to-my-data-when-i-use-google-pay-in-gemini%2Cwhat-happens-to-my-data-when-i-interact-with-gems-from-google-labs%2Cwhat-happens-to-my-data-when-i-import-memory-or-chats-from-other-ai-platforms%2Cwhat-happens-to-my-data-when-i-use-notebooks-in-gemini%2Cwhat-happens-to-my-data-when-i-create-an-avatar-in-gemini-apps%2Cwhat-happens-to-my-data-when-i-share-my-avatar-with-other-users%2Cwhat-happens-to-my-data-when-i-interact-with-canvas-web-apps%2Cwhat-happens-when-i-interact-with-speak-to-window-on-gemini-for-macos%2Cwhat-terms-apply-to-use-of-gemini-apps","capturedAt":"2026-11-08T22:28:03Z","sha256":"e1e866ccdbaf192a25cd6823496389ad27321566852ad82a4a59583741d7ae44"}},{"quote":"Transcripts are sent to and securely stored on Google servers. Google does not store your audio recordings on its servers.","source":{"doc":"gemini-apps-privacy-hub","title":"Gemini Apps Privacy Hub","url":"https://support.google.com/gemini/answer/13594961?hl=en#zippy=%2Cwhat-data-is-collected%2Chow-your-data-is-used%2Chow-gemini-apps-get-help-from-google-services%2Chow-gemini-apps-work-with-connected-apps%2Caudio-features%2Ccanvas%2Cconfiguring-your-settings%2Chow-long-we-retain-your-data%2Crequesting-content-removal-and-exporting-your-information%2Cother-things-to-know%2Crespect-others-rights%2Cwhat-are-gemini-apps%2Chow-can-i-object-to-the-processing-of-my-data-or-ask-for-inaccurate-data-in-gemini-apps-responses-to-be-corrected%2Cwhat-are-googles-legal-bases-of-processing-gemini-apps-data-under-european-union-eu-or-united-kingdom-uk-data-protection-law%2Cdo-you-use-my-gemini-apps-chats-to-show-me-ads%2Cwho-has-access-to-my-chats-and-how-does-human-review-improve-gemini-for-everyone%2Chow-long-does-google-retain-my-temporary-chats-and-chats-i-have-when-keep-activity-is-off-and-what-does-google-do-with-this-data%2Chow-does-google-use-my-feedback%2Cwhat-does-the-keep-activity-setting-control%2Cwhat-does-the-memory-summary-setting-control%2Chow-can-i-control-whether-google-uses-my-audio-and-gemini-live-videos-screenshares-to-improve-its-services%2Chow-do-i-manage-what-gemini-remembers-about-me-and-customize-my-responses%2Chow-can-i-control-whether-gemini-apps-use-my-past-chats-to-personalize-my-experience%2Chow-does-google-handle-my-data-when-i-use-gemini-apps-while-signed-out%2Cwhat-location-information-do-gemini-apps-collect-why-and-how-is-it-used%2Chow-do-i-know-if-gemini-apps-have-access-to-and-are-using-my-precise-location%2Chow-do-i-manage-my-mobile-permissions-when-gemini-is-my-device-assistant%2Cwhat-do-the-browser-app-permission-choices-mean%2Chow-does-google-work-with-my-uploaded-images%2Cwhat-happens-when-i-share-a-photo-or-video-from-a-media-gallery-connected-app-with-gemini-apps%2Cwhat-happens-with-my-data-that-gemini-connected-apps-and-other-services-exchange%2Chow-can-i-allow-gemini-to-personalize-my-experience-with-my-data-from-connected-apps%2Chow-is-my-data-used-to-make-calls-send-messages-with-connected-apps-in-gemini%2Chow-does-gemini-use-my-data-with-the-remote-browser-and-remote-computer%2Cwhat-happens-when-you-turn-off-task-mode%2Chow-does-google-work-with-gemini-live-data%2Cwhat-happens-to-my-data-when-i-use-gemini-in-chrome%2Cwhat-happens-with-my-data-when-gemini-uses-screen-automation-to-help-me-get-tasks-done-in-android-apps%2Cwhat-happens-to-my-data-when-i-use-geminis-agentic-calling-capability%2Cwhat-happens-to-my-data-when-i-add-items-to-the-google-shopping-cart-from-gemini%2Cwhat-happens-to-my-data-when-i-use-google-pay-in-gemini%2Cwhat-happens-to-my-data-when-i-interact-with-gems-from-google-labs%2Cwhat-happens-to-my-data-when-i-import-memory-or-chats-from-other-ai-platforms%2Cwhat-happens-to-my-data-when-i-use-notebooks-in-gemini%2Cwhat-happens-to-my-data-when-i-create-an-avatar-in-gemini-apps%2Cwhat-happens-to-my-data-when-i-share-my-avatar-with-other-users%2Cwhat-happens-to-my-data-when-i-interact-with-canvas-web-apps%2Cwhat-happens-when-i-interact-with-speak-to-window-on-gemini-for-macos%2Cwhat-terms-apply-to-use-of-gemini-apps","capturedAt":"2026-11-08T22:28:03Z","sha256":"e1e866ccdbaf192a25cd6823496389ad27321566852ad82a4a59583741d7ae44"}},{"quote":"Page content will be logged to your Google Account temporarily and will not appear in your Gemini Apps Activity.","source":{"doc":"gemini-apps-privacy-hub","title":"Gemini Apps Privacy Hub","url":"https://support.google.com/gemini/answer/13594961?hl=en#zippy=%2Cwhat-data-is-collected%2Chow-your-data-is-used%2Chow-gemini-apps-get-help-from-google-services%2Chow-gemini-apps-work-with-connected-apps%2Caudio-features%2Ccanvas%2Cconfiguring-your-settings%2Chow-long-we-retain-your-data%2Crequesting-content-removal-and-exporting-your-information%2Cother-things-to-know%2Crespect-others-rights%2Cwhat-are-gemini-apps%2Chow-can-i-object-to-the-processing-of-my-data-or-ask-for-inaccurate-data-in-gemini-apps-responses-to-be-corrected%2Cwhat-are-googles-legal-bases-of-processing-gemini-apps-data-under-european-union-eu-or-united-kingdom-uk-data-protection-law%2Cdo-you-use-my-gemini-apps-chats-to-show-me-ads%2Cwho-has-access-to-my-chats-and-how-does-human-review-improve-gemini-for-everyone%2Chow-long-does-google-retain-my-temporary-chats-and-chats-i-have-when-keep-activity-is-off-and-what-does-google-do-with-this-data%2Chow-does-google-use-my-feedback%2Cwhat-does-the-keep-activity-setting-control%2Cwhat-does-the-memory-summary-setting-control%2Chow-can-i-control-whether-google-uses-my-audio-and-gemini-live-videos-screenshares-to-improve-its-services%2Chow-do-i-manage-what-gemini-remembers-about-me-and-customize-my-responses%2Chow-can-i-control-whether-gemini-apps-use-my-past-chats-to-personalize-my-experience%2Chow-does-google-handle-my-data-when-i-use-gemini-apps-while-signed-out%2Cwhat-location-information-do-gemini-apps-collect-why-and-how-is-it-used%2Chow-do-i-know-if-gemini-apps-have-access-to-and-are-using-my-precise-location%2Chow-do-i-manage-my-mobile-permissions-when-gemini-is-my-device-assistant%2Cwhat-do-the-browser-app-permission-choices-mean%2Chow-does-google-work-with-my-uploaded-images%2Cwhat-happens-when-i-share-a-photo-or-video-from-a-media-gallery-connected-app-with-gemini-apps%2Cwhat-happens-with-my-data-that-gemini-connected-apps-and-other-services-exchange%2Chow-can-i-allow-gemini-to-personalize-my-experience-with-my-data-from-connected-apps%2Chow-is-my-data-used-to-make-calls-send-messages-with-connected-apps-in-gemini%2Chow-does-gemini-use-my-data-with-the-remote-browser-and-remote-computer%2Cwhat-happens-when-you-turn-off-task-mode%2Chow-does-google-work-with-gemini-live-data%2Cwhat-happens-to-my-data-when-i-use-gemini-in-chrome%2Cwhat-happens-with-my-data-when-gemini-uses-screen-automation-to-help-me-get-tasks-done-in-android-apps%2Cwhat-happens-to-my-data-when-i-use-geminis-agentic-calling-capability%2Cwhat-happens-to-my-data-when-i-add-items-to-the-google-shopping-cart-from-gemini%2Cwhat-happens-to-my-data-when-i-use-google-pay-in-gemini%2Cwhat-happens-to-my-data-when-i-interact-with-gems-from-google-labs%2Cwhat-happens-to-my-data-when-i-import-memory-or-chats-from-other-ai-platforms%2Cwhat-happens-to-my-data-when-i-use-notebooks-in-gemini%2Cwhat-happens-to-my-data-when-i-create-an-avatar-in-gemini-apps%2Cwhat-happens-to-my-data-when-i-share-my-avatar-with-other-users%2Cwhat-happens-to-my-data-when-i-interact-with-canvas-web-apps%2Cwhat-happens-when-i-interact-with-speak-to-window-on-gemini-for-macos%2Cwhat-terms-apply-to-use-of-gemini-apps","capturedAt":"2026-11-08T22:28:03Z","sha256":"e1e866ccdbaf192a25cd6823496389ad27321566852ad82a4a59583741d7ae44"}}]},"input_ownership":{"summary":"The hub says the Google Terms of Service apply to Gemini Apps, but those terms weren't captured, so this isn't stated.","status":"not_stated","cites":[]},"output_ownership":{"summary":"The hub says the Google Terms of Service apply to Gemini Apps, but those terms weren't captured, so this isn't stated.","status":"not_stated","cites":[]},"license_to_provider":{"summary":"The hub says the Google Terms of Service apply to Gemini Apps, but those terms weren't captured, so this isn't stated.","status":"not_stated","cites":[]},"third_party_sharing":{"summary":"Chats aren't used for ads; personal info isn't sold. Reviewed chats go to service providers unlinked from you. Tasks share needed data with third parties. Shopping-cart data may feed ads.","status":"stated","cites":[{"quote":"Your Gemini Apps chats are not being used to show you ads. If this changes, we will clearly communicate it to you.","source":{"doc":"gemini-apps-privacy-hub","title":"Gemini Apps Privacy Hub","url":"https://support.google.com/gemini/answer/13594961?hl=en#zippy=%2Cwhat-data-is-collected%2Chow-your-data-is-used%2Chow-gemini-apps-get-help-from-google-services%2Chow-gemini-apps-work-with-connected-apps%2Caudio-features%2Ccanvas%2Cconfiguring-your-settings%2Chow-long-we-retain-your-data%2Crequesting-content-removal-and-exporting-your-information%2Cother-things-to-know%2Crespect-others-rights%2Cwhat-are-gemini-apps%2Chow-can-i-object-to-the-processing-of-my-data-or-ask-for-inaccurate-data-in-gemini-apps-responses-to-be-corrected%2Cwhat-are-googles-legal-bases-of-processing-gemini-apps-data-under-european-union-eu-or-united-kingdom-uk-data-protection-law%2Cdo-you-use-my-gemini-apps-chats-to-show-me-ads%2Cwho-has-access-to-my-chats-and-how-does-human-review-improve-gemini-for-everyone%2Chow-long-does-google-retain-my-temporary-chats-and-chats-i-have-when-keep-activity-is-off-and-what-does-google-do-with-this-data%2Chow-does-google-use-my-feedback%2Cwhat-does-the-keep-activity-setting-control%2Cwhat-does-the-memory-summary-setting-control%2Chow-can-i-control-whether-google-uses-my-audio-and-gemini-live-videos-screenshares-to-improve-its-services%2Chow-do-i-manage-what-gemini-remembers-about-me-and-customize-my-responses%2Chow-can-i-control-whether-gemini-apps-use-my-past-chats-to-personalize-my-experience%2Chow-does-google-handle-my-data-when-i-use-gemini-apps-while-signed-out%2Cwhat-location-information-do-gemini-apps-collect-why-and-how-is-it-used%2Chow-do-i-know-if-gemini-apps-have-access-to-and-are-using-my-precise-location%2Chow-do-i-manage-my-mobile-permissions-when-gemini-is-my-device-assistant%2Cwhat-do-the-browser-app-permission-choices-mean%2Chow-does-google-work-with-my-uploaded-images%2Cwhat-happens-when-i-share-a-photo-or-video-from-a-media-gallery-connected-app-with-gemini-apps%2Cwhat-happens-with-my-data-that-gemini-connected-apps-and-other-services-exchange%2Chow-can-i-allow-gemini-to-personalize-my-experience-with-my-data-from-connected-apps%2Chow-is-my-data-used-to-make-calls-send-messages-with-connected-apps-in-gemini%2Chow-does-gemini-use-my-data-with-the-remote-browser-and-remote-computer%2Cwhat-happens-when-you-turn-off-task-mode%2Chow-does-google-work-with-gemini-live-data%2Cwhat-happens-to-my-data-when-i-use-gemini-in-chrome%2Cwhat-happens-with-my-data-when-gemini-uses-screen-automation-to-help-me-get-tasks-done-in-android-apps%2Cwhat-happens-to-my-data-when-i-use-geminis-agentic-calling-capability%2Cwhat-happens-to-my-data-when-i-add-items-to-the-google-shopping-cart-from-gemini%2Cwhat-happens-to-my-data-when-i-use-google-pay-in-gemini%2Cwhat-happens-to-my-data-when-i-interact-with-gems-from-google-labs%2Cwhat-happens-to-my-data-when-i-import-memory-or-chats-from-other-ai-platforms%2Cwhat-happens-to-my-data-when-i-use-notebooks-in-gemini%2Cwhat-happens-to-my-data-when-i-create-an-avatar-in-gemini-apps%2Cwhat-happens-to-my-data-when-i-share-my-avatar-with-other-users%2Cwhat-happens-to-my-data-when-i-interact-with-canvas-web-apps%2Cwhat-happens-when-i-interact-with-speak-to-window-on-gemini-for-macos%2Cwhat-terms-apply-to-use-of-gemini-apps","capturedAt":"2026-11-08T22:28:03Z","sha256":"e1e866ccdbaf192a25cd6823496389ad27321566852ad82a4a59583741d7ae44"}},{"quote":"We take your privacy seriously, and we do not sell your personal information to anyone.","source":{"doc":"gemini-apps-privacy-hub","title":"Gemini Apps Privacy Hub","url":"https://support.google.com/gemini/answer/13594961?hl=en#zippy=%2Cwhat-data-is-collected%2Chow-your-data-is-used%2Chow-gemini-apps-get-help-from-google-services%2Chow-gemini-apps-work-with-connected-apps%2Caudio-features%2Ccanvas%2Cconfiguring-your-settings%2Chow-long-we-retain-your-data%2Crequesting-content-removal-and-exporting-your-information%2Cother-things-to-know%2Crespect-others-rights%2Cwhat-are-gemini-apps%2Chow-can-i-object-to-the-processing-of-my-data-or-ask-for-inaccurate-data-in-gemini-apps-responses-to-be-corrected%2Cwhat-are-googles-legal-bases-of-processing-gemini-apps-data-under-european-union-eu-or-united-kingdom-uk-data-protection-law%2Cdo-you-use-my-gemini-apps-chats-to-show-me-ads%2Cwho-has-access-to-my-chats-and-how-does-human-review-improve-gemini-for-everyone%2Chow-long-does-google-retain-my-temporary-chats-and-chats-i-have-when-keep-activity-is-off-and-what-does-google-do-with-this-data%2Chow-does-google-use-my-feedback%2Cwhat-does-the-keep-activity-setting-control%2Cwhat-does-the-memory-summary-setting-control%2Chow-can-i-control-whether-google-uses-my-audio-and-gemini-live-videos-screenshares-to-improve-its-services%2Chow-do-i-manage-what-gemini-remembers-about-me-and-customize-my-responses%2Chow-can-i-control-whether-gemini-apps-use-my-past-chats-to-personalize-my-experience%2Chow-does-google-handle-my-data-when-i-use-gemini-apps-while-signed-out%2Cwhat-location-information-do-gemini-apps-collect-why-and-how-is-it-used%2Chow-do-i-know-if-gemini-apps-have-access-to-and-are-using-my-precise-location%2Chow-do-i-manage-my-mobile-permissions-when-gemini-is-my-device-assistant%2Cwhat-do-the-browser-app-permission-choices-mean%2Chow-does-google-work-with-my-uploaded-images%2Cwhat-happens-when-i-share-a-photo-or-video-from-a-media-gallery-connected-app-with-gemini-apps%2Cwhat-happens-with-my-data-that-gemini-connected-apps-and-other-services-exchange%2Chow-can-i-allow-gemini-to-personalize-my-experience-with-my-data-from-connected-apps%2Chow-is-my-data-used-to-make-calls-send-messages-with-connected-apps-in-gemini%2Chow-does-gemini-use-my-data-with-the-remote-browser-and-remote-computer%2Cwhat-happens-when-you-turn-off-task-mode%2Chow-does-google-work-with-gemini-live-data%2Cwhat-happens-to-my-data-when-i-use-gemini-in-chrome%2Cwhat-happens-with-my-data-when-gemini-uses-screen-automation-to-help-me-get-tasks-done-in-android-apps%2Cwhat-happens-to-my-data-when-i-use-geminis-agentic-calling-capability%2Cwhat-happens-to-my-data-when-i-add-items-to-the-google-shopping-cart-from-gemini%2Cwhat-happens-to-my-data-when-i-use-google-pay-in-gemini%2Cwhat-happens-to-my-data-when-i-interact-with-gems-from-google-labs%2Cwhat-happens-to-my-data-when-i-import-memory-or-chats-from-other-ai-platforms%2Cwhat-happens-to-my-data-when-i-use-notebooks-in-gemini%2Cwhat-happens-to-my-data-when-i-create-an-avatar-in-gemini-apps%2Cwhat-happens-to-my-data-when-i-share-my-avatar-with-other-users%2Cwhat-happens-to-my-data-when-i-interact-with-canvas-web-apps%2Cwhat-happens-when-i-interact-with-speak-to-window-on-gemini-for-macos%2Cwhat-terms-apply-to-use-of-gemini-apps","capturedAt":"2026-11-08T22:28:03Z","sha256":"e1e866ccdbaf192a25cd6823496389ad27321566852ad82a4a59583741d7ae44"}},{"quote":"Chats are disconnected from your account before being sent to service providers.","source":{"doc":"gemini-apps-privacy-hub","title":"Gemini Apps Privacy Hub","url":"https://support.google.com/gemini/answer/13594961?hl=en#zippy=%2Cwhat-data-is-collected%2Chow-your-data-is-used%2Chow-gemini-apps-get-help-from-google-services%2Chow-gemini-apps-work-with-connected-apps%2Caudio-features%2Ccanvas%2Cconfiguring-your-settings%2Chow-long-we-retain-your-data%2Crequesting-content-removal-and-exporting-your-information%2Cother-things-to-know%2Crespect-others-rights%2Cwhat-are-gemini-apps%2Chow-can-i-object-to-the-processing-of-my-data-or-ask-for-inaccurate-data-in-gemini-apps-responses-to-be-corrected%2Cwhat-are-googles-legal-bases-of-processing-gemini-apps-data-under-european-union-eu-or-united-kingdom-uk-data-protection-law%2Cdo-you-use-my-gemini-apps-chats-to-show-me-ads%2Cwho-has-access-to-my-chats-and-how-does-human-review-improve-gemini-for-everyone%2Chow-long-does-google-retain-my-temporary-chats-and-chats-i-have-when-keep-activity-is-off-and-what-does-google-do-with-this-data%2Chow-does-google-use-my-feedback%2Cwhat-does-the-keep-activity-setting-control%2Cwhat-does-the-memory-summary-setting-control%2Chow-can-i-control-whether-google-uses-my-audio-and-gemini-live-videos-screenshares-to-improve-its-services%2Chow-do-i-manage-what-gemini-remembers-about-me-and-customize-my-responses%2Chow-can-i-control-whether-gemini-apps-use-my-past-chats-to-personalize-my-experience%2Chow-does-google-handle-my-data-when-i-use-gemini-apps-while-signed-out%2Cwhat-location-information-do-gemini-apps-collect-why-and-how-is-it-used%2Chow-do-i-know-if-gemini-apps-have-access-to-and-are-using-my-precise-location%2Chow-do-i-manage-my-mobile-permissions-when-gemini-is-my-device-assistant%2Cwhat-do-the-browser-app-permission-choices-mean%2Chow-does-google-work-with-my-uploaded-images%2Cwhat-happens-when-i-share-a-photo-or-video-from-a-media-gallery-connected-app-with-gemini-apps%2Cwhat-happens-with-my-data-that-gemini-connected-apps-and-other-services-exchange%2Chow-can-i-allow-gemini-to-personalize-my-experience-with-my-data-from-connected-apps%2Chow-is-my-data-used-to-make-calls-send-messages-with-connected-apps-in-gemini%2Chow-does-gemini-use-my-data-with-the-remote-browser-and-remote-computer%2Cwhat-happens-when-you-turn-off-task-mode%2Chow-does-google-work-with-gemini-live-data%2Cwhat-happens-to-my-data-when-i-use-gemini-in-chrome%2Cwhat-happens-with-my-data-when-gemini-uses-screen-automation-to-help-me-get-tasks-done-in-android-apps%2Cwhat-happens-to-my-data-when-i-use-geminis-agentic-calling-capability%2Cwhat-happens-to-my-data-when-i-add-items-to-the-google-shopping-cart-from-gemini%2Cwhat-happens-to-my-data-when-i-use-google-pay-in-gemini%2Cwhat-happens-to-my-data-when-i-interact-with-gems-from-google-labs%2Cwhat-happens-to-my-data-when-i-import-memory-or-chats-from-other-ai-platforms%2Cwhat-happens-to-my-data-when-i-use-notebooks-in-gemini%2Cwhat-happens-to-my-data-when-i-create-an-avatar-in-gemini-apps%2Cwhat-happens-to-my-data-when-i-share-my-avatar-with-other-users%2Cwhat-happens-to-my-data-when-i-interact-with-canvas-web-apps%2Cwhat-happens-when-i-interact-with-speak-to-window-on-gemini-for-macos%2Cwhat-terms-apply-to-use-of-gemini-apps","capturedAt":"2026-11-08T22:28:03Z","sha256":"e1e866ccdbaf192a25cd6823496389ad27321566852ad82a4a59583741d7ae44"}},{"quote":"When you ask Gemini to do things for you, Gemini shares necessary data with others on your behalf to help complete your tasks. Third-party apps use data from Gemini consistent with their own privacy policies and terms.","source":{"doc":"gemini-apps-privacy-hub","title":"Gemini Apps Privacy Hub","url":"https://support.google.com/gemini/answer/13594961?hl=en#zippy=%2Cwhat-data-is-collected%2Chow-your-data-is-used%2Chow-gemini-apps-get-help-from-google-services%2Chow-gemini-apps-work-with-connected-apps%2Caudio-features%2Ccanvas%2Cconfiguring-your-settings%2Chow-long-we-retain-your-data%2Crequesting-content-removal-and-exporting-your-information%2Cother-things-to-know%2Crespect-others-rights%2Cwhat-are-gemini-apps%2Chow-can-i-object-to-the-processing-of-my-data-or-ask-for-inaccurate-data-in-gemini-apps-responses-to-be-corrected%2Cwhat-are-googles-legal-bases-of-processing-gemini-apps-data-under-european-union-eu-or-united-kingdom-uk-data-protection-law%2Cdo-you-use-my-gemini-apps-chats-to-show-me-ads%2Cwho-has-access-to-my-chats-and-how-does-human-review-improve-gemini-for-everyone%2Chow-long-does-google-retain-my-temporary-chats-and-chats-i-have-when-keep-activity-is-off-and-what-does-google-do-with-this-data%2Chow-does-google-use-my-feedback%2Cwhat-does-the-keep-activity-setting-control%2Cwhat-does-the-memory-summary-setting-control%2Chow-can-i-control-whether-google-uses-my-audio-and-gemini-live-videos-screenshares-to-improve-its-services%2Chow-do-i-manage-what-gemini-remembers-about-me-and-customize-my-responses%2Chow-can-i-control-whether-gemini-apps-use-my-past-chats-to-personalize-my-experience%2Chow-does-google-handle-my-data-when-i-use-gemini-apps-while-signed-out%2Cwhat-location-information-do-gemini-apps-collect-why-and-how-is-it-used%2Chow-do-i-know-if-gemini-apps-have-access-to-and-are-using-my-precise-location%2Chow-do-i-manage-my-mobile-permissions-when-gemini-is-my-device-assistant%2Cwhat-do-the-browser-app-permission-choices-mean%2Chow-does-google-work-with-my-uploaded-images%2Cwhat-happens-when-i-share-a-photo-or-video-from-a-media-gallery-connected-app-with-gemini-apps%2Cwhat-happens-with-my-data-that-gemini-connected-apps-and-other-services-exchange%2Chow-can-i-allow-gemini-to-personalize-my-experience-with-my-data-from-connected-apps%2Chow-is-my-data-used-to-make-calls-send-messages-with-connected-apps-in-gemini%2Chow-does-gemini-use-my-data-with-the-remote-browser-and-remote-computer%2Cwhat-happens-when-you-turn-off-task-mode%2Chow-does-google-work-with-gemini-live-data%2Cwhat-happens-to-my-data-when-i-use-gemini-in-chrome%2Cwhat-happens-with-my-data-when-gemini-uses-screen-automation-to-help-me-get-tasks-done-in-android-apps%2Cwhat-happens-to-my-data-when-i-use-geminis-agentic-calling-capability%2Cwhat-happens-to-my-data-when-i-add-items-to-the-google-shopping-cart-from-gemini%2Cwhat-happens-to-my-data-when-i-use-google-pay-in-gemini%2Cwhat-happens-to-my-data-when-i-interact-with-gems-from-google-labs%2Cwhat-happens-to-my-data-when-i-import-memory-or-chats-from-other-ai-platforms%2Cwhat-happens-to-my-data-when-i-use-notebooks-in-gemini%2Cwhat-happens-to-my-data-when-i-create-an-avatar-in-gemini-apps%2Cwhat-happens-to-my-data-when-i-share-my-avatar-with-other-users%2Cwhat-happens-to-my-data-when-i-interact-with-canvas-web-apps%2Cwhat-happens-when-i-interact-with-speak-to-window-on-gemini-for-macos%2Cwhat-terms-apply-to-use-of-gemini-apps","capturedAt":"2026-11-08T22:28:03Z","sha256":"e1e866ccdbaf192a25cd6823496389ad27321566852ad82a4a59583741d7ae44"}},{"quote":"This data is used in accordance with the Google Terms and Privacy Policy, and your Wallet settings, including for personalization and ads (depending on your settings).","source":{"doc":"gemini-apps-privacy-hub","title":"Gemini Apps Privacy Hub","url":"https://support.google.com/gemini/answer/13594961?hl=en#zippy=%2Cwhat-data-is-collected%2Chow-your-data-is-used%2Chow-gemini-apps-get-help-from-google-services%2Chow-gemini-apps-work-with-connected-apps%2Caudio-features%2Ccanvas%2Cconfiguring-your-settings%2Chow-long-we-retain-your-data%2Crequesting-content-removal-and-exporting-your-information%2Cother-things-to-know%2Crespect-others-rights%2Cwhat-are-gemini-apps%2Chow-can-i-object-to-the-processing-of-my-data-or-ask-for-inaccurate-data-in-gemini-apps-responses-to-be-corrected%2Cwhat-are-googles-legal-bases-of-processing-gemini-apps-data-under-european-union-eu-or-united-kingdom-uk-data-protection-law%2Cdo-you-use-my-gemini-apps-chats-to-show-me-ads%2Cwho-has-access-to-my-chats-and-how-does-human-review-improve-gemini-for-everyone%2Chow-long-does-google-retain-my-temporary-chats-and-chats-i-have-when-keep-activity-is-off-and-what-does-google-do-with-this-data%2Chow-does-google-use-my-feedback%2Cwhat-does-the-keep-activity-setting-control%2Cwhat-does-the-memory-summary-setting-control%2Chow-can-i-control-whether-google-uses-my-audio-and-gemini-live-videos-screenshares-to-improve-its-services%2Chow-do-i-manage-what-gemini-remembers-about-me-and-customize-my-responses%2Chow-can-i-control-whether-gemini-apps-use-my-past-chats-to-personalize-my-experience%2Chow-does-google-handle-my-data-when-i-use-gemini-apps-while-signed-out%2Cwhat-location-information-do-gemini-apps-collect-why-and-how-is-it-used%2Chow-do-i-know-if-gemini-apps-have-access-to-and-are-using-my-precise-location%2Chow-do-i-manage-my-mobile-permissions-when-gemini-is-my-device-assistant%2Cwhat-do-the-browser-app-permission-choices-mean%2Chow-does-google-work-with-my-uploaded-images%2Cwhat-happens-when-i-share-a-photo-or-video-from-a-media-gallery-connected-app-with-gemini-apps%2Cwhat-happens-with-my-data-that-gemini-connected-apps-and-other-services-exchange%2Chow-can-i-allow-gemini-to-personalize-my-experience-with-my-data-from-connected-apps%2Chow-is-my-data-used-to-make-calls-send-messages-with-connected-apps-in-gemini%2Chow-does-gemini-use-my-data-with-the-remote-browser-and-remote-computer%2Cwhat-happens-when-you-turn-off-task-mode%2Chow-does-google-work-with-gemini-live-data%2Cwhat-happens-to-my-data-when-i-use-gemini-in-chrome%2Cwhat-happens-with-my-data-when-gemini-uses-screen-automation-to-help-me-get-tasks-done-in-android-apps%2Cwhat-happens-to-my-data-when-i-use-geminis-agentic-calling-capability%2Cwhat-happens-to-my-data-when-i-add-items-to-the-google-shopping-cart-from-gemini%2Cwhat-happens-to-my-data-when-i-use-google-pay-in-gemini%2Cwhat-happens-to-my-data-when-i-interact-with-gems-from-google-labs%2Cwhat-happens-to-my-data-when-i-import-memory-or-chats-from-other-ai-platforms%2Cwhat-happens-to-my-data-when-i-use-notebooks-in-gemini%2Cwhat-happens-to-my-data-when-i-create-an-avatar-in-gemini-apps%2Cwhat-happens-to-my-data-when-i-share-my-avatar-with-other-users%2Cwhat-happens-to-my-data-when-i-interact-with-canvas-web-apps%2Cwhat-happens-when-i-interact-with-speak-to-window-on-gemini-for-macos%2Cwhat-terms-apply-to-use-of-gemini-apps","capturedAt":"2026-11-08T22:28:03Z","sha256":"e1e866ccdbaf192a25cd6823496389ad27321566852ad82a4a59583741d7ae44"}},{"quote":"We do not share your personal information with companies, organizations, or individuals outside of Google except in the following cases:","source":{"doc":"privacy-policy","title":"Privacy Policy \\u2013 Privacy & Terms \\u2013 Google","url":"https://policies.google.com/privacy?hl=en-US","capturedAt":"2026-11-08T22:04:22Z","sha256":"450d30d71dd38b3096ec447da0b6cf51e2b8e63e8d6da3e89e4366bbd337814f"}},{"quote":"We provide personal information to our [affiliates](/privacy?hl=en-US#footnote-affiliates) and other trusted businesses or persons to process it for us, based on our instructions and in compliance with our Privacy Policy and any other appropriate confidentiality and security measures.","source":{"doc":"privacy-policy","title":"Privacy Policy \\u2013 Privacy & Terms \\u2013 Google","url":"https://policies.google.com/privacy?hl=en-US","capturedAt":"2026-11-08T22:04:22Z","sha256":"450d30d71dd38b3096ec447da0b6cf51e2b8e63e8d6da3e89e4366bbd337814f"}},{"quote":"We don’t share information that personally identifies you with advertisers, such as your name or email, unless you ask us to.","source":{"doc":"privacy-policy","title":"Privacy Policy \\u2013 Privacy & Terms \\u2013 Google","url":"https://policies.google.com/privacy?hl=en-US","capturedAt":"2026-11-08T22:04:22Z","sha256":"450d30d71dd38b3096ec447da0b6cf51e2b8e63e8d6da3e89e4366bbd337814f"}}]},"data_location":{"summary":"Data may be processed on Google servers worldwide, outside your country. No residency option is described. Google Ireland provides the app in the EEA and Switzerland.","status":"stated","cites":[{"quote":"We maintain [servers around the world](/privacy?hl=en-US#footnote-servers) and your information may be processed on servers located outside of the country where you live.","source":{"doc":"privacy-policy","title":"Privacy Policy \\u2013 Privacy & Terms \\u2013 Google","url":"https://policies.google.com/privacy?hl=en-US","capturedAt":"2026-11-08T22:04:22Z","sha256":"450d30d71dd38b3096ec447da0b6cf51e2b8e63e8d6da3e89e4366bbd337814f"}},{"quote":"Gemini Apps are provided by Google Ireland Limited in the European Economic Area and Switzerland and by Google LLC everywhere else.","source":{"doc":"gemini-apps-privacy-hub","title":"Gemini Apps Privacy Hub","url":"https://support.google.com/gemini/answer/13594961?hl=en#zippy=%2Cwhat-data-is-collected%2Chow-your-data-is-used%2Chow-gemini-apps-get-help-from-google-services%2Chow-gemini-apps-work-with-connected-apps%2Caudio-features%2Ccanvas%2Cconfiguring-your-settings%2Chow-long-we-retain-your-data%2Crequesting-content-removal-and-exporting-your-information%2Cother-things-to-know%2Crespect-others-rights%2Cwhat-are-gemini-apps%2Chow-can-i-object-to-the-processing-of-my-data-or-ask-for-inaccurate-data-in-gemini-apps-responses-to-be-corrected%2Cwhat-are-googles-legal-bases-of-processing-gemini-apps-data-under-european-union-eu-or-united-kingdom-uk-data-protection-law%2Cdo-you-use-my-gemini-apps-chats-to-show-me-ads%2Cwho-has-access-to-my-chats-and-how-does-human-review-improve-gemini-for-everyone%2Chow-long-does-google-retain-my-temporary-chats-and-chats-i-have-when-keep-activity-is-off-and-what-does-google-do-with-this-data%2Chow-does-google-use-my-feedback%2Cwhat-does-the-keep-activity-setting-control%2Cwhat-does-the-memory-summary-setting-control%2Chow-can-i-control-whether-google-uses-my-audio-and-gemini-live-videos-screenshares-to-improve-its-services%2Chow-do-i-manage-what-gemini-remembers-about-me-and-customize-my-responses%2Chow-can-i-control-whether-gemini-apps-use-my-past-chats-to-personalize-my-experience%2Chow-does-google-handle-my-data-when-i-use-gemini-apps-while-signed-out%2Cwhat-location-information-do-gemini-apps-collect-why-and-how-is-it-used%2Chow-do-i-know-if-gemini-apps-have-access-to-and-are-using-my-precise-location%2Chow-do-i-manage-my-mobile-permissions-when-gemini-is-my-device-assistant%2Cwhat-do-the-browser-app-permission-choices-mean%2Chow-does-google-work-with-my-uploaded-images%2Cwhat-happens-when-i-share-a-photo-or-video-from-a-media-gallery-connected-app-with-gemini-apps%2Cwhat-happens-with-my-data-that-gemini-connected-apps-and-other-services-exchange%2Chow-can-i-allow-gemini-to-personalize-my-experience-with-my-data-from-connected-apps%2Chow-is-my-data-used-to-make-calls-send-messages-with-connected-apps-in-gemini%2Chow-does-gemini-use-my-data-with-the-remote-browser-and-remote-computer%2Cwhat-happens-when-you-turn-off-task-mode%2Chow-does-google-work-with-gemini-live-data%2Cwhat-happens-to-my-data-when-i-use-gemini-in-chrome%2Cwhat-happens-with-my-data-when-gemini-uses-screen-automation-to-help-me-get-tasks-done-in-android-apps%2Cwhat-happens-to-my-data-when-i-use-geminis-agentic-calling-capability%2Cwhat-happens-to-my-data-when-i-add-items-to-the-google-shopping-cart-from-gemini%2Cwhat-happens-to-my-data-when-i-use-google-pay-in-gemini%2Cwhat-happens-to-my-data-when-i-interact-with-gems-from-google-labs%2Cwhat-happens-to-my-data-when-i-import-memory-or-chats-from-other-ai-platforms%2Cwhat-happens-to-my-data-when-i-use-notebooks-in-gemini%2Cwhat-happens-to-my-data-when-i-create-an-avatar-in-gemini-apps%2Cwhat-happens-to-my-data-when-i-share-my-avatar-with-other-users%2Cwhat-happens-to-my-data-when-i-interact-with-canvas-web-apps%2Cwhat-happens-when-i-interact-with-speak-to-window-on-gemini-for-macos%2Cwhat-terms-apply-to-use-of-gemini-apps","capturedAt":"2026-11-08T22:28:03Z","sha256":"e1e866ccdbaf192a25cd6823496389ad27321566852ad82a4a59583741d7ae44"}}]},"enterprise_controls":{"summary":"Not applicable to the consumer app. The hub says work or school accounts may have different data terms, described in the Workspace privacy hub (not captured).","status":"not_stated","cites":[]}}},{"id":"gemini-api-unpaid","name":"Gemini API and Google AI Studio, Unpaid Services (free tier)","surface":"api","facts":{"default_retention":{"summary":"No general retention period is stated for free-tier prompts. Grounding with Search or Maps keeps prompts and output 30 days. Tuning data is kept with the tuned model.","status":"stated","cites":[{"quote":"when using Grounding with Google Search, Google will store prompts, contextual information that you may provide, and output for thirty (30) days for the purposes of creating Grounded Results and Search Suggestions","source":{"doc":"gemini-api-terms","title":"Gemini api terms","url":"https://aistudio.google.com/docs/terms","capturedAt":"2026-11-08T22:19:40Z","sha256":"5ee6fee1cd1153ac041b662b68573dfc655c0f7e34955b904b63d69f0c7f06fa"}},{"quote":"You acknowledge that it is reasonably necessary for Google to store prompts, contextual information that you may provide, and generated content for thirty (30) days for the purposes of creating Google Maps Grounded Results","source":{"doc":"gemini-api-terms","title":"Gemini api terms","url":"https://aistudio.google.com/docs/terms","capturedAt":"2026-11-08T22:19:40Z","sha256":"5ee6fee1cd1153ac041b662b68573dfc655c0f7e34955b904b63d69f0c7f06fa"}},{"quote":"Tuning content may be retained in connection with your tuned models for purposes of re-tuning when supported models change.","source":{"doc":"gemini-api-terms","title":"Gemini api terms","url":"https://aistudio.google.com/docs/terms","capturedAt":"2026-11-08T22:19:40Z","sha256":"5ee6fee1cd1153ac041b662b68573dfc655c0f7e34955b904b63d69f0c7f06fa"}}]},"deletion_window":{"summary":"Deleting a tuned model also deletes its tuning content. No deletion timeframe is stated for prompts or responses.","status":"stated","cites":[{"quote":"When you delete a tuned model, the related tuning content is also deleted.","source":{"doc":"gemini-api-terms","title":"Gemini api terms","url":"https://aistudio.google.com/docs/terms","capturedAt":"2026-11-08T22:19:40Z","sha256":"5ee6fee1cd1153ac041b662b68573dfc655c0f7e34955b904b63d69f0c7f06fa"}}]},"retention_exceptions":{"summary":"Grounding data (30 days) may be used for debugging and testing. Human reviewers may read prompts and outputs; how long reviewed data is kept is not stated.","status":"stated","cites":[{"quote":"the stored information can be used for debugging and testing of systems that support Grounding with Google Search","source":{"doc":"gemini-api-terms","title":"Gemini api terms","url":"https://aistudio.google.com/docs/terms","capturedAt":"2026-11-08T22:19:40Z","sha256":"5ee6fee1cd1153ac041b662b68573dfc655c0f7e34955b904b63d69f0c7f06fa"}},{"quote":"To help with quality and improve our products, human reviewers may read, annotate, and process your API input and output.","source":{"doc":"gemini-api-terms","title":"Gemini api terms","url":"https://aistudio.google.com/docs/terms","capturedAt":"2026-11-08T22:19:40Z","sha256":"5ee6fee1cd1153ac041b662b68573dfc655c0f7e34955b904b63d69f0c7f06fa"}}]},"zdr":{"summary":"The Gemini API terms describe no zero-data-retention option for the free tier.","status":"not_stated","cites":[]},"training_default":{"summary":"Yes. Free AI Studio and free-quota API prompts and responses are used to improve Google products and machine learning. EEA, Swiss and UK users get paid-tier terms instead.","status":"stated","cites":[{"quote":"When you use Unpaid Services, including, for example, Google AI Studio and the unpaid quota on Gemini API, Google uses the content you submit to the Services and any generated responses to provide, improve, and develop Google products and services and machine learning technologies, including Google's enterprise features, products, and services, consistent with our [Privacy Policy](https://policies.google.com/privacy).","source":{"doc":"gemini-api-terms","title":"Gemini api terms","url":"https://aistudio.google.com/docs/terms","capturedAt":"2026-11-08T22:19:40Z","sha256":"5ee6fee1cd1153ac041b662b68573dfc655c0f7e34955b904b63d69f0c7f06fa"}},{"quote":"If you're in the European Economic Area, Switzerland, or the United Kingdom, the terms under \"[How Google uses Your Data](https://aistudio.google.com/docs/terms#data-use-paid)\" in \"[Paid Services](https://aistudio.google.com/docs/terms#paid-services)\" apply to all Services, including Google AI Studio and unpaid quota in the Gemini API, even though they are offered free of charge.","source":{"doc":"gemini-api-terms","title":"Gemini api terms","url":"https://aistudio.google.com/docs/terms","capturedAt":"2026-11-08T22:19:40Z","sha256":"5ee6fee1cd1153ac041b662b68573dfc655c0f7e34955b904b63d69f0c7f06fa"}}]},"training_opt_out":{"summary":"Inferred: no free-tier opt-out is offered. Switching to a paid service stops it: active Cloud billing (API), or billing or a Workspace enterprise account (AI Studio).","status":"inferred","cites":[{"quote":"Your access to Gemini API is a \"Paid Service\" only when accessing the API through a Cloud Project associated with an active billing account.","source":{"doc":"gemini-api-terms","title":"Gemini api terms","url":"https://aistudio.google.com/docs/terms","capturedAt":"2026-11-08T22:19:40Z","sha256":"5ee6fee1cd1153ac041b662b68573dfc655c0f7e34955b904b63d69f0c7f06fa"}},{"quote":"Your access to Google AI Studio is a \"Paid Service\" even when it is offered free of charge, as long as the account you are using to access Google AI Studio has access to a Cloud Project with an associated and active [Cloud Billing account](https://cloud.google.com/billing/docs/concepts) or is a Workspace enterprise account.","source":{"doc":"gemini-api-terms","title":"Gemini api terms","url":"https://aistudio.google.com/docs/terms","capturedAt":"2026-11-08T22:19:40Z","sha256":"5ee6fee1cd1153ac041b662b68573dfc655c0f7e34955b904b63d69f0c7f06fa"}},{"quote":"Google only uses content that you import or upload to our model tuning feature for that express purpose.","source":{"doc":"gemini-api-terms","title":"Gemini api terms","url":"https://aistudio.google.com/docs/terms","capturedAt":"2026-11-08T22:19:40Z","sha256":"5ee6fee1cd1153ac041b662b68573dfc655c0f7e34955b904b63d69f0c7f06fa"}}]},"human_review":{"summary":"Yes. Reviewers may read free-tier input and output after it's disconnected from your account, key and project. Don't submit sensitive data. Review retention length not stated.","status":"stated","cites":[{"quote":"To help with quality and improve our products, human reviewers may read, annotate, and process your API input and output.","source":{"doc":"gemini-api-terms","title":"Gemini api terms","url":"https://aistudio.google.com/docs/terms","capturedAt":"2026-11-08T22:19:40Z","sha256":"5ee6fee1cd1153ac041b662b68573dfc655c0f7e34955b904b63d69f0c7f06fa"}},{"quote":"This includes disconnecting this data from your Google Account, API key, and Cloud project before reviewers see or annotate it.","source":{"doc":"gemini-api-terms","title":"Gemini api terms","url":"https://aistudio.google.com/docs/terms","capturedAt":"2026-11-08T22:19:40Z","sha256":"5ee6fee1cd1153ac041b662b68573dfc655c0f7e34955b904b63d69f0c7f06fa"}},{"quote":"**Do not submit sensitive, confidential, or personal information to the Unpaid Services.**","source":{"doc":"gemini-api-terms","title":"Gemini api terms","url":"https://aistudio.google.com/docs/terms","capturedAt":"2026-11-08T22:19:40Z","sha256":"5ee6fee1cd1153ac041b662b68573dfc655c0f7e34955b904b63d69f0c7f06fa"}}]},"memory":{"summary":"The captured policies are silent on this.","status":"not_stated","cites":[]},"connector_data":{"summary":"The captured policies are silent on this.","status":"not_stated","cites":[]},"agent_actions":{"summary":"For agentic services such as the Computer Use API, the developer is solely responsible for the agent's actions and data access. Action logging and credential storage are not described.","status":"stated","cites":[{"quote":"When using agentic services, including the Computer Use API, you are solely responsible for the actions and tasks performed by the service, such as determining whether the service is appropriate for your use case, authorizing the service's access and connection to data, applications, and systems, and exercising judgment and supervision when and if the service is used in production environments.","source":{"doc":"gemini-api-terms","title":"Gemini api terms","url":"https://aistudio.google.com/docs/terms","capturedAt":"2026-11-08T22:19:40Z","sha256":"5ee6fee1cd1153ac041b662b68573dfc655c0f7e34955b904b63d69f0c7f06fa"}}]},"input_ownership":{"summary":"The terms don't address ownership of your inputs. They only describe the license you grant (see license_to_provider).","status":"not_stated","cites":[]},"output_ownership":{"summary":"Google won't claim ownership of generated content, but it may generate the same or similar content for others. You're responsible for how it's used.","status":"stated","cites":[{"quote":"Some of our Services allow you to generate original content. Google won't claim ownership over that content. You acknowledge that Google may generate the same or similar content for others and that we reserve all rights to do so.","source":{"doc":"gemini-api-terms","title":"Gemini api terms","url":"https://aistudio.google.com/docs/terms","capturedAt":"2026-11-08T22:19:40Z","sha256":"5ee6fee1cd1153ac041b662b68573dfc655c0f7e34955b904b63d69f0c7f06fa"}},{"quote":"You're responsible for your use of generated content, and for the use of that content by anyone you share it with.","source":{"doc":"gemini-api-terms","title":"Gemini api terms","url":"https://aistudio.google.com/docs/terms","capturedAt":"2026-11-08T22:19:40Z","sha256":"5ee6fee1cd1153ac041b662b68573dfc655c0f7e34955b904b63d69f0c7f06fa"}}]},"license_to_provider":{"summary":"For free services, the Google APIs Terms license extends to your prompts, files and responses 'to the extent required under applicable law'. Duration and perpetuity aren't in the captured policy.","status":"stated","cites":[{"quote":"The license you grant to Google under the \"[Submission of Content](https://developers.google.com/terms#b_submission_of_content)\" section in the API Terms also extends, to the extent required under applicable law for our use, to any content (e.g., prompts, including associated system instructions, cached content, and files such as images, videos, or documents) you submit to the Services and to any generated responses.","source":{"doc":"gemini-api-terms","title":"Gemini api terms","url":"https://aistudio.google.com/docs/terms","capturedAt":"2026-11-08T22:19:40Z","sha256":"5ee6fee1cd1153ac041b662b68573dfc655c0f7e34955b904b63d69f0c7f06fa"}}]},"third_party_sharing":{"summary":"Inferred: free-tier data use follows the Google Privacy Policy, which lets affiliates and trusted processors handle data for Google. No API-specific subprocessor list is given.","status":"inferred","cites":[{"quote":"consistent with our [Privacy Policy](https://policies.google.com/privacy)","source":{"doc":"gemini-api-terms","title":"Gemini api terms","url":"https://aistudio.google.com/docs/terms","capturedAt":"2026-11-08T22:19:40Z","sha256":"5ee6fee1cd1153ac041b662b68573dfc655c0f7e34955b904b63d69f0c7f06fa"}},{"quote":"We provide personal information to our [affiliates](/privacy?hl=en-US#footnote-affiliates) and other trusted businesses or persons to process it for us, based on our instructions and in compliance with our Privacy Policy and any other appropriate confidentiality and security measures.","source":{"doc":"privacy-policy","title":"Privacy Policy \\u2013 Privacy & Terms \\u2013 Google","url":"https://policies.google.com/privacy?hl=en-US","capturedAt":"2026-11-08T22:04:22Z","sha256":"450d30d71dd38b3096ec447da0b6cf51e2b8e63e8d6da3e89e4366bbd337814f"}}]},"data_location":{"summary":"Inferred via the Privacy Policy: data may be processed on servers worldwide. Apps serving EEA, Swiss or UK users must use paid services only.","status":"inferred","cites":[{"quote":"We maintain [servers around the world](/privacy?hl=en-US#footnote-servers) and your information may be processed on servers located outside of the country where you live.","source":{"doc":"privacy-policy","title":"Privacy Policy \\u2013 Privacy & Terms \\u2013 Google","url":"https://policies.google.com/privacy?hl=en-US","capturedAt":"2026-11-08T22:04:22Z","sha256":"450d30d71dd38b3096ec447da0b6cf51e2b8e63e8d6da3e89e4366bbd337814f"}},{"quote":"**You may use only Paid Services when making API Clients available to users in the European Economic Area, Switzerland, or the United Kingdom.**","source":{"doc":"gemini-api-terms","title":"Gemini api terms","url":"https://aistudio.google.com/docs/terms","capturedAt":"2026-11-08T22:19:40Z","sha256":"5ee6fee1cd1153ac041b662b68573dfc655c0f7e34955b904b63d69f0c7f06fa"}}]},"enterprise_controls":{"summary":"The captured policies describe no DPA, custom retention or admin controls for the free tier.","status":"not_stated","cites":[]}}},{"id":"gemini-api-paid","name":"Gemini API and Google AI Studio, Paid Services (Cloud billing)","surface":"api","facts":{"default_retention":{"summary":"Prompts and responses are logged for a 'limited period' (length not stated) only for abuse detection and legal disclosures. Grounding with Search or Maps keeps data 30 days.","status":"stated","cites":[{"quote":"For Paid Services, Google logs prompts and responses for a limited period of time, solely for detecting and preventing violations of the [Prohibited Use Policy](https://policies.google.com/terms/generative-ai/use-policy) to maintain the safety and security of the Services, and any required legal or regulatory disclosures.","source":{"doc":"gemini-api-terms","title":"Gemini api terms","url":"https://aistudio.google.com/docs/terms","capturedAt":"2026-11-08T22:19:40Z","sha256":"5ee6fee1cd1153ac041b662b68573dfc655c0f7e34955b904b63d69f0c7f06fa"}},{"quote":"when using Grounding with Google Search, Google will store prompts, contextual information that you may provide, and output for thirty (30) days for the purposes of creating Grounded Results and Search Suggestions","source":{"doc":"gemini-api-terms","title":"Gemini api terms","url":"https://aistudio.google.com/docs/terms","capturedAt":"2026-11-08T22:19:40Z","sha256":"5ee6fee1cd1153ac041b662b68573dfc655c0f7e34955b904b63d69f0c7f06fa"}}]},"deletion_window":{"summary":"The paid-service terms give no deletion timeframe.","status":"not_stated","cites":[]},"retention_exceptions":{"summary":"Abuse-monitoring logs (period unstated) and legal or regulatory disclosures. 30-day grounding data may be used for debugging and testing, under the processor DPA.","status":"stated","cites":[{"quote":"For Paid Services, Google logs prompts and responses for a limited period of time, solely for detecting and preventing violations of the [Prohibited Use Policy](https://policies.google.com/terms/generative-ai/use-policy) to maintain the safety and security of the Services, and any required legal or regulatory disclosures.","source":{"doc":"gemini-api-terms","title":"Gemini api terms","url":"https://aistudio.google.com/docs/terms","capturedAt":"2026-11-08T22:19:40Z","sha256":"5ee6fee1cd1153ac041b662b68573dfc655c0f7e34955b904b63d69f0c7f06fa"}},{"quote":"When using Grounding with Google Maps via paid quota of Gemini API, this processing for debugging and testing of systems is in accordance with the [Data Processing Addendum for Products Where Google is a Data Processor](https://business.safety.google/processorterms/).","source":{"doc":"gemini-api-terms","title":"Gemini api terms","url":"https://aistudio.google.com/docs/terms","capturedAt":"2026-11-08T22:19:40Z","sha256":"5ee6fee1cd1153ac041b662b68573dfc655c0f7e34955b904b63d69f0c7f06fa"}}]},"zdr":{"summary":"The Gemini API terms describe no zero-data-retention option. (The Agent Platform page covers ZDR for Cloud customers; see vertex-enterprise.)","status":"not_stated","cites":[]},"training_default":{"summary":"No. On paid services Google doesn't use your prompts, files or responses to improve its products, and processes them as a data processor under the DPA.","status":"stated","cites":[{"quote":"When you use Paid Services, including, for example, the paid quota of the Gemini API, Google doesn't use your prompts (including associated system instructions, cached content, and files such as images, videos, or documents) or responses to improve our products, and will process your prompts and responses in accordance with the [Data Processing Addendum for Products Where Google is a Data Processor](https://business.safety.google/processorterms/).","source":{"doc":"gemini-api-terms","title":"Gemini api terms","url":"https://aistudio.google.com/docs/terms","capturedAt":"2026-11-08T22:19:40Z","sha256":"5ee6fee1cd1153ac041b662b68573dfc655c0f7e34955b904b63d69f0c7f06fa"}}]},"training_opt_out":{"summary":"No opt-out is needed for prompts and responses. Account, billing, feedback and usage data are not covered by this and stay under Google's controller terms and Privacy Policy.","status":"stated","cites":[{"quote":"Google doesn't use your prompts (including associated system instructions, cached content, and files such as images, videos, or documents) or responses to improve our products","source":{"doc":"gemini-api-terms","title":"Gemini api terms","url":"https://aistudio.google.com/docs/terms","capturedAt":"2026-11-08T22:19:40Z","sha256":"5ee6fee1cd1153ac041b662b68573dfc655c0f7e34955b904b63d69f0c7f06fa"}},{"quote":"Other data we collect while providing the Paid Services to you, such as account information and settings, billing history, direct communications and feedback, and usage details","source":{"doc":"gemini-api-terms","title":"Gemini api terms","url":"https://aistudio.google.com/docs/terms","capturedAt":"2026-11-08T22:19:40Z","sha256":"5ee6fee1cd1153ac041b662b68573dfc655c0f7e34955b904b63d69f0c7f06fa"}},{"quote":"remains subject to the [Google Controller-Controller Data Protection Terms](https://business.safety.google/controllerterms/) and [Google Privacy Policy](https://policies.google.com/privacy) referenced in the API Terms.","source":{"doc":"gemini-api-terms","title":"Gemini api terms","url":"https://aistudio.google.com/docs/terms","capturedAt":"2026-11-08T22:19:40Z","sha256":"5ee6fee1cd1153ac041b662b68573dfc655c0f7e34955b904b63d69f0c7f06fa"}}]},"human_review":{"summary":"The paid section doesn't mention human reviewers. Abuse-monitoring logs exist, but whether people read them isn't stated.","status":"not_stated","cites":[]},"memory":{"summary":"The captured policies are silent on this.","status":"not_stated","cites":[]},"connector_data":{"summary":"The captured policies are silent on this.","status":"not_stated","cites":[]},"agent_actions":{"summary":"For agentic services such as the Computer Use API, the developer is solely responsible for the agent's actions and data access. Action logging and credential storage are not described.","status":"stated","cites":[{"quote":"When using agentic services, including the Computer Use API, you are solely responsible for the actions and tasks performed by the service, such as determining whether the service is appropriate for your use case, authorizing the service's access and connection to data, applications, and systems, and exercising judgment and supervision when and if the service is used in production environments.","source":{"doc":"gemini-api-terms","title":"Gemini api terms","url":"https://aistudio.google.com/docs/terms","capturedAt":"2026-11-08T22:19:40Z","sha256":"5ee6fee1cd1153ac041b662b68573dfc655c0f7e34955b904b63d69f0c7f06fa"}}]},"input_ownership":{"summary":"The terms don't address ownership of your inputs.","status":"not_stated","cites":[]},"output_ownership":{"summary":"Google won't claim ownership of generated content, but it may generate the same or similar content for others.","status":"stated","cites":[{"quote":"Some of our Services allow you to generate original content. Google won't claim ownership over that content. You acknowledge that Google may generate the same or similar content for others and that we reserve all rights to do so.","source":{"doc":"gemini-api-terms","title":"Gemini api terms","url":"https://aistudio.google.com/docs/terms","capturedAt":"2026-11-08T22:19:40Z","sha256":"5ee6fee1cd1153ac041b662b68573dfc655c0f7e34955b904b63d69f0c7f06fa"}}]},"license_to_provider":{"summary":"The extended content license appears only in the Unpaid Services section. The paid-tier license is in the Google APIs Terms, which weren't captured.","status":"not_stated","cites":[]},"third_party_sharing":{"summary":"Inferred: prompts and responses are handled under Google's processor DPA and may be cached wherever Google 'or its agents' have facilities. No subprocessor list is in the captured policy.","status":"inferred","cites":[{"quote":"This data may be stored transiently or cached in any country in which Google or its agents maintain facilities.","source":{"doc":"gemini-api-terms","title":"Gemini api terms","url":"https://aistudio.google.com/docs/terms","capturedAt":"2026-11-08T22:19:40Z","sha256":"5ee6fee1cd1153ac041b662b68573dfc655c0f7e34955b904b63d69f0c7f06fa"}}]},"data_location":{"summary":"No residency guarantee: paid-tier logged data may be stored transiently or cached in any country where Google or its agents have facilities.","status":"stated","cites":[{"quote":"This data may be stored transiently or cached in any country in which Google or its agents maintain facilities.","source":{"doc":"gemini-api-terms","title":"Gemini api terms","url":"https://aistudio.google.com/docs/terms","capturedAt":"2026-11-08T22:19:40Z","sha256":"5ee6fee1cd1153ac041b662b68573dfc655c0f7e34955b904b63d69f0c7f06fa"}}]},"enterprise_controls":{"summary":"Prompts and responses are processed under Google's Data Processing Addendum (Google as processor). Billing runs through Google Cloud. No SSO, audit-log or custom-retention controls are described.","status":"stated","cites":[{"quote":"will process your prompts and responses in accordance with the [Data Processing Addendum for Products Where Google is a Data Processor](https://business.safety.google/processorterms/)","source":{"doc":"gemini-api-terms","title":"Gemini api terms","url":"https://aistudio.google.com/docs/terms","capturedAt":"2026-11-08T22:19:40Z","sha256":"5ee6fee1cd1153ac041b662b68573dfc655c0f7e34955b904b63d69f0c7f06fa"}},{"quote":"Billing and payments for Paid Services are handled by [Cloud Billing](https://cloud.google.com/billing/docs/concepts) in the Google Cloud Platform.","source":{"doc":"gemini-api-terms","title":"Gemini api terms","url":"https://aistudio.google.com/docs/terms","capturedAt":"2026-11-08T22:19:40Z","sha256":"5ee6fee1cd1153ac041b662b68573dfc655c0f7e34955b904b63d69f0c7f06fa"}}]}}},{"id":"vertex-enterprise","name":"Gemini Enterprise Agent Platform (formerly Vertex AI) on Google Cloud","surface":"enterprise","facts":{"default_retention":{"summary":"No single default. Data is kept for limited periods in listed cases. Gemini models cache data by default (deleted within 24h). Interactions API stores prompts and conversation state by default.","status":"stated","cites":[{"quote":"Customer data is retained in Gemini Enterprise Agent Platform for Models as a Service (MaaS) for limited periods of time in the following scenarios and conditions.","source":{"doc":"vertex-data-governance","title":"Gemini Enterprise Agent Platform and zero data retention \\u00a0","url":"https://docs.cloud.google.com/gemini-enterprise-agent-platform/resources/zero-data-retention","capturedAt":"2026-11-08T22:04:23Z","sha256":"57859a011b5d0892f6f5b0dc8422cd7789a1f572892292841a4e36e7a76d5605"}},{"quote":"By default, Google's published Gemini models cache Customer Data to reduce latency and accelerate responses.","source":{"doc":"vertex-data-governance","title":"Gemini Enterprise Agent Platform and zero data retention \\u00a0","url":"https://docs.cloud.google.com/gemini-enterprise-agent-platform/resources/zero-data-retention","capturedAt":"2026-11-08T22:04:23Z","sha256":"57859a011b5d0892f6f5b0dc8422cd7789a1f572892292841a4e36e7a76d5605"}},{"quote":"It's deleted no later than 24 hours after it's written.","source":{"doc":"vertex-data-governance","title":"Gemini Enterprise Agent Platform and zero data retention \\u00a0","url":"https://docs.cloud.google.com/gemini-enterprise-agent-platform/resources/zero-data-retention","capturedAt":"2026-11-08T22:04:23Z","sha256":"57859a011b5d0892f6f5b0dc8422cd7789a1f572892292841a4e36e7a76d5605"}},{"quote":"If you do not specify a value for `store`, it defaults to `true` for all models.","source":{"doc":"vertex-data-governance","title":"Gemini Enterprise Agent Platform and zero data retention \\u00a0","url":"https://docs.cloud.google.com/gemini-enterprise-agent-platform/resources/zero-data-retention","capturedAt":"2026-11-08T22:04:23Z","sha256":"57859a011b5d0892f6f5b0dc8422cd7789a1f572892292841a4e36e7a76d5605"}}]},"deletion_window":{"summary":"Cache data is deleted within 24 hours. Agent sessions (CodeMender, Deep Research) auto-delete at a 7-day TTL and can be deleted sooner. No account-closure timeline is given.","status":"stated","cites":[{"quote":"It's deleted no later than 24 hours after it's written, and is often evicted sooner.","source":{"doc":"vertex-data-governance","title":"Gemini Enterprise Agent Platform and zero data retention \\u00a0","url":"https://docs.cloud.google.com/gemini-enterprise-agent-platform/resources/zero-data-retention","capturedAt":"2026-11-08T22:04:23Z","sha256":"57859a011b5d0892f6f5b0dc8422cd7789a1f572892292841a4e36e7a76d5605"}},{"quote":"When a session reaches a terminal state, source code and related content are cleared within seconds; the remaining session record is deleted automatically at the seven-day TTL.","source":{"doc":"vertex-data-governance","title":"Gemini Enterprise Agent Platform and zero data retention \\u00a0","url":"https://docs.cloud.google.com/gemini-enterprise-agent-platform/resources/zero-data-retention","capturedAt":"2026-11-08T22:04:23Z","sha256":"57859a011b5d0892f6f5b0dc8422cd7789a1f572892292841a4e36e7a76d5605"}},{"quote":"Customers can delete a session (removing all associated data) before the TTL expires.","source":{"doc":"vertex-data-governance","title":"Gemini Enterprise Agent Platform and zero data retention \\u00a0","url":"https://docs.cloud.google.com/gemini-enterprise-agent-platform/resources/zero-data-retention","capturedAt":"2026-11-08T22:04:23Z","sha256":"57859a011b5d0892f6f5b0dc8422cd7789a1f572892292841a4e36e7a76d5605"}}]},"retention_exceptions":{"summary":"Abuse-monitoring prompt logging (duration not stated here). Search grounding queries up to 3 days, Maps grounding 30 days, neither can be disabled. OpenAI models: logs up to 30 days.","status":"stated","cites":[{"quote":"Google may log prompts to detect potential abuse and violations of its [Acceptable Use Policy](https://cloud.google.com/terms/aup) and [Prohibited Use Policy](https://policies.google.com/terms/generative-ai/use-policy) as part of providing generative AI services to customers.","source":{"doc":"vertex-data-governance","title":"Gemini Enterprise Agent Platform and zero data retention \\u00a0","url":"https://docs.cloud.google.com/gemini-enterprise-agent-platform/resources/zero-data-retention","capturedAt":"2026-11-08T22:04:23Z","sha256":"57859a011b5d0892f6f5b0dc8422cd7789a1f572892292841a4e36e7a76d5605"}},{"quote":"queries derived from End User prompts and contextual information that Customer may provide along with the prompts that are not associated with any Customer or its End Users for up to three (3) days","source":{"doc":"vertex-data-governance","title":"Gemini Enterprise Agent Platform and zero data retention \\u00a0","url":"https://docs.cloud.google.com/gemini-enterprise-agent-platform/resources/zero-data-retention","capturedAt":"2026-11-08T22:04:23Z","sha256":"57859a011b5d0892f6f5b0dc8422cd7789a1f572892292841a4e36e7a76d5605"}},{"quote":"Google stores prompts and contextual information that customers may provide, and generated output for thirty (30) days for the purposes of creating grounded results","source":{"doc":"vertex-data-governance","title":"Gemini Enterprise Agent Platform and zero data retention \\u00a0","url":"https://docs.cloud.google.com/gemini-enterprise-agent-platform/resources/zero-data-retention","capturedAt":"2026-11-08T22:04:23Z","sha256":"57859a011b5d0892f6f5b0dc8422cd7789a1f572892292841a4e36e7a76d5605"}},{"quote":"By default, Google Cloud logs prompts, file inputs, and responses for up to 30 days in Google-owned storage in the `us` multi-region for safety and abuse monitoring.","source":{"doc":"vertex-data-governance","title":"Gemini Enterprise Agent Platform and zero data retention \\u00a0","url":"https://docs.cloud.google.com/gemini-enterprise-agent-platform/resources/zero-data-retention","capturedAt":"2026-11-08T22:04:23Z","sha256":"57859a011b5d0892f6f5b0dc8422cd7789a1f572892292841a4e36e7a76d5605"}}]},"zdr":{"summary":"Requires your action: no request-response logging, store=false, no grounding, Deep Research or Sandbox captured policies, caching off. May be impossible with some Advanced AI features; OpenAI models need approval.","status":"stated","cites":[{"quote":"To achieve zero data retention, customers must take specific actions within each of these areas:","source":{"doc":"vertex-data-governance","title":"Gemini Enterprise Agent Platform and zero data retention \\u00a0","url":"https://docs.cloud.google.com/gemini-enterprise-agent-platform/resources/zero-data-retention","capturedAt":"2026-11-08T22:04:23Z","sha256":"57859a011b5d0892f6f5b0dc8422cd7789a1f572892292841a4e36e7a76d5605"}},{"quote":"To achieve zero data retention, explicitly set `store = false` in your API requests.","source":{"doc":"vertex-data-governance","title":"Gemini Enterprise Agent Platform and zero data retention \\u00a0","url":"https://docs.cloud.google.com/gemini-enterprise-agent-platform/resources/zero-data-retention","capturedAt":"2026-11-08T22:04:23Z","sha256":"57859a011b5d0892f6f5b0dc8422cd7789a1f572892292841a4e36e7a76d5605"}},{"quote":"Zero data retention may not be possible when using some Advanced AI features. Please contact your account team for clarification.","source":{"doc":"vertex-data-governance","title":"Gemini Enterprise Agent Platform and zero data retention \\u00a0","url":"https://docs.cloud.google.com/gemini-enterprise-agent-platform/resources/zero-data-retention","capturedAt":"2026-11-08T22:04:23Z","sha256":"57859a011b5d0892f6f5b0dc8422cd7789a1f572892292841a4e36e7a76d5605"}},{"quote":"Zero Data Retention (ZDR) is available for OpenAI flagship models on an approved project basis, but is disabled by default.","source":{"doc":"vertex-data-governance","title":"Gemini Enterprise Agent Platform and zero data retention \\u00a0","url":"https://docs.cloud.google.com/gemini-enterprise-agent-platform/resources/zero-data-retention","capturedAt":"2026-11-08T22:04:23Z","sha256":"57859a011b5d0892f6f5b0dc8422cd7789a1f572892292841a4e36e7a76d5605"}},{"quote":"Your account team submits the ZDR request for OpenAI review and approval.","source":{"doc":"vertex-data-governance","title":"Gemini Enterprise Agent Platform and zero data retention \\u00a0","url":"https://docs.cloud.google.com/gemini-enterprise-agent-platform/resources/zero-data-retention","capturedAt":"2026-11-08T22:04:23Z","sha256":"57859a011b5d0892f6f5b0dc8422cd7789a1f572892292841a4e36e7a76d5605"}}]},"training_default":{"summary":"No. Google won't use your data to train or fine-tune any model without your permission or instruction. This covers all managed models, GA and pre-GA.","status":"stated","cites":[{"quote":"Google won't use your data to train or fine-tune any AI/ML models without your prior permission or instruction. This applies to all managed models on Gemini Enterprise Agent Platform, including GA and pre-GA models.","source":{"doc":"vertex-data-governance","title":"Gemini Enterprise Agent Platform and zero data retention \\u00a0","url":"https://docs.cloud.google.com/gemini-enterprise-agent-platform/resources/zero-data-retention","capturedAt":"2026-11-08T22:04:23Z","sha256":"57859a011b5d0892f6f5b0dc8422cd7789a1f572892292841a4e36e7a76d5605"}}]},"training_opt_out":{"summary":"No opt-out needed: training requires your prior permission. Cached data and OpenAI-model logs are also never used for training.","status":"stated","cites":[{"quote":"It's used only to serve your requests faster, and is never used to train or fine-tune models.","source":{"doc":"vertex-data-governance","title":"Gemini Enterprise Agent Platform and zero data retention \\u00a0","url":"https://docs.cloud.google.com/gemini-enterprise-agent-platform/resources/zero-data-retention","capturedAt":"2026-11-08T22:04:23Z","sha256":"57859a011b5d0892f6f5b0dc8422cd7789a1f572892292841a4e36e7a76d5605"}},{"quote":"Customer data is never used to train or fine-tune models.","source":{"doc":"vertex-data-governance","title":"Gemini Enterprise Agent Platform and zero data retention \\u00a0","url":"https://docs.cloud.google.com/gemini-enterprise-agent-platform/resources/zero-data-retention","capturedAt":"2026-11-08T22:04:23Z","sha256":"57859a011b5d0892f6f5b0dc8422cd7789a1f572892292841a4e36e7a76d5605"}}]},"human_review":{"summary":"The page doesn't say whether people review abuse-monitoring logs.","status":"not_stated","cites":[]},"memory":{"summary":"No persistent memory or profile feature is described. (The Interactions API's stored conversation state is under default_retention.)","status":"not_stated","cites":[]},"connector_data":{"summary":"The captured policies are silent on this.","status":"not_stated","cites":[]},"agent_actions":{"summary":"CodeMender stores session data (code, diffs) encrypted up to 7 days. Deep Research stores prompts and session data 7 days, unavoidably. Sandbox captured policies last the Sandbox TTL.","status":"stated","cites":[{"quote":"While a scan is in progress, session data — including target source code snippets, diffs, configuration, and analysis checkpoints — is stored encrypted for up to seven (7) days from session creation.","source":{"doc":"vertex-data-governance","title":"Gemini Enterprise Agent Platform and zero data retention \\u00a0","url":"https://docs.cloud.google.com/gemini-enterprise-agent-platform/resources/zero-data-retention","capturedAt":"2026-11-08T22:04:23Z","sha256":"57859a011b5d0892f6f5b0dc8422cd7789a1f572892292841a4e36e7a76d5605"}},{"quote":"Google stores prompts and session data - including search results and generated images - via the Interactions API for a period of seven (7) days.","source":{"doc":"vertex-data-governance","title":"Gemini Enterprise Agent Platform and zero data retention \\u00a0","url":"https://docs.cloud.google.com/gemini-enterprise-agent-platform/resources/zero-data-retention","capturedAt":"2026-11-08T22:04:23Z","sha256":"57859a011b5d0892f6f5b0dc8422cd7789a1f572892292841a4e36e7a76d5605"}},{"quote":"This feature cannot be disabled when using the Deep Research agent.","source":{"doc":"vertex-data-governance","title":"Gemini Enterprise Agent Platform and zero data retention \\u00a0","url":"https://docs.cloud.google.com/gemini-enterprise-agent-platform/resources/zero-data-retention","capturedAt":"2026-11-08T22:04:23Z","sha256":"57859a011b5d0892f6f5b0dc8422cd7789a1f572892292841a4e36e7a76d5605"}},{"quote":"If you use the Snapshot API to persist Sandbox state, these snapshots are stored only for the duration of the Sandbox TTL.","source":{"doc":"vertex-data-governance","title":"Gemini Enterprise Agent Platform and zero data retention \\u00a0","url":"https://docs.cloud.google.com/gemini-enterprise-agent-platform/resources/zero-data-retention","capturedAt":"2026-11-08T22:04:23Z","sha256":"57859a011b5d0892f6f5b0dc8422cd7789a1f572892292841a4e36e7a76d5605"}}]},"input_ownership":{"summary":"The captured policies are silent on this.","status":"not_stated","cites":[]},"output_ownership":{"summary":"The captured policies are silent on this.","status":"not_stated","cites":[]},"license_to_provider":{"summary":"The captured policies are silent on this.","status":"not_stated","cites":[]},"third_party_sharing":{"summary":"Not stated. The page notes OpenAI reviews ZDR requests for its models, but doesn't say whether customer prompts reach OpenAI or other partners.","status":"not_stated","cites":[]},"data_location":{"summary":"Regional or multi-regional endpoints keep durable cache data in the chosen location. The global endpoint can serve from any region. OpenAI-model abuse logs are kept in the US multi-region.","status":"stated","cites":[{"quote":"It stays within the selected location and adheres to its Data Residency requirements when you use a regional or multi-regional endpoint. When you use the global endpoint, requests and their cached data can be served from any region.","source":{"doc":"vertex-data-governance","title":"Gemini Enterprise Agent Platform and zero data retention \\u00a0","url":"https://docs.cloud.google.com/gemini-enterprise-agent-platform/resources/zero-data-retention","capturedAt":"2026-11-08T22:04:23Z","sha256":"57859a011b5d0892f6f5b0dc8422cd7789a1f572892292841a4e36e7a76d5605"}},{"quote":"It's processed in the region that serves the request.","source":{"doc":"vertex-data-governance","title":"Gemini Enterprise Agent Platform and zero data retention \\u00a0","url":"https://docs.cloud.google.com/gemini-enterprise-agent-platform/resources/zero-data-retention","capturedAt":"2026-11-08T22:04:23Z","sha256":"57859a011b5d0892f6f5b0dc8422cd7789a1f572892292841a4e36e7a76d5605"}},{"quote":"By default, Google Cloud logs prompts, file inputs, and responses for up to 30 days in Google-owned storage in the `us` multi-region for safety and abuse monitoring.","source":{"doc":"vertex-data-governance","title":"Gemini Enterprise Agent Platform and zero data retention \\u00a0","url":"https://docs.cloud.google.com/gemini-enterprise-agent-platform/resources/zero-data-retention","capturedAt":"2026-11-08T22:04:23Z","sha256":"57859a011b5d0892f6f5b0dc8422cd7789a1f572892292841a4e36e7a76d5605"}}]},"enterprise_controls":{"summary":"Cloud Data Processing Addendum. Admins can disable caching per project (org-wide via account team). Request-response logging is opt-in. CMEK isn't supported for durable caching.","status":"stated","cites":[{"quote":"More details about how Google processes data can also be found in Google's [Cloud Data Processing Addendum](https://cloud.google.com/terms/data-processing-addendum) (CDPA).","source":{"doc":"vertex-data-governance","title":"Gemini Enterprise Agent Platform and zero data retention \\u00a0","url":"https://docs.cloud.google.com/gemini-enterprise-agent-platform/resources/zero-data-retention","capturedAt":"2026-11-08T22:04:23Z","sha256":"57859a011b5d0892f6f5b0dc8422cd7789a1f572892292841a4e36e7a76d5605"}},{"quote":"If your organization's policy does not permit Customer Data to be stored at rest, you can [disable durable caching on a per-project basis](#enabling-disabling-caching) and maintain in-memory caching. Alternatively, you can disable caching entirely.","source":{"doc":"vertex-data-governance","title":"Gemini Enterprise Agent Platform and zero data retention \\u00a0","url":"https://docs.cloud.google.com/gemini-enterprise-agent-platform/resources/zero-data-retention","capturedAt":"2026-11-08T22:04:23Z","sha256":"57859a011b5d0892f6f5b0dc8422cd7789a1f572892292841a4e36e7a76d5605"}},{"quote":"To disable durable caching across your organization rather than on a project level, contact your account team.","source":{"doc":"vertex-data-governance","title":"Gemini Enterprise Agent Platform and zero data retention \\u00a0","url":"https://docs.cloud.google.com/gemini-enterprise-agent-platform/resources/zero-data-retention","capturedAt":"2026-11-08T22:04:23Z","sha256":"57859a011b5d0892f6f5b0dc8422cd7789a1f572892292841a4e36e7a76d5605"}},{"quote":"To run this command, a user must be granted the Agent Platform Administrator role, `roles/aiplatform.admin`.","source":{"doc":"vertex-data-governance","title":"Gemini Enterprise Agent Platform and zero data retention \\u00a0","url":"https://docs.cloud.google.com/gemini-enterprise-agent-platform/resources/zero-data-retention","capturedAt":"2026-11-08T22:04:23Z","sha256":"57859a011b5d0892f6f5b0dc8422cd7789a1f572892292841a4e36e7a76d5605"}},{"quote":"Customer-managed encryption keys (CMEK) aren't supported for durable caching.","source":{"doc":"vertex-data-governance","title":"Gemini Enterprise Agent Platform and zero data retention \\u00a0","url":"https://docs.cloud.google.com/gemini-enterprise-agent-platform/resources/zero-data-retention","capturedAt":"2026-11-08T22:04:23Z","sha256":"57859a011b5d0892f6f5b0dc8422cd7789a1f572892292841a4e36e7a76d5605"}}]}}}],"notes":[{"text":"Human-reviewed Gemini chats survive deletion: they're unlinked from your account and kept up to three years, along with related data like location and feedback.","cites":[{"quote":"Chats reviewed by human reviewers (and related data like your language, device type, location info, or feedback) are not deleted when you delete your activity. Instead, they are retained for up to three years.","source":{"doc":"gemini-apps-privacy-hub","title":"Gemini Apps Privacy Hub","url":"https://support.google.com/gemini/answer/13594961?hl=en#zippy=%2Cwhat-data-is-collected%2Chow-your-data-is-used%2Chow-gemini-apps-get-help-from-google-services%2Chow-gemini-apps-work-with-connected-apps%2Caudio-features%2Ccanvas%2Cconfiguring-your-settings%2Chow-long-we-retain-your-data%2Crequesting-content-removal-and-exporting-your-information%2Cother-things-to-know%2Crespect-others-rights%2Cwhat-are-gemini-apps%2Chow-can-i-object-to-the-processing-of-my-data-or-ask-for-inaccurate-data-in-gemini-apps-responses-to-be-corrected%2Cwhat-are-googles-legal-bases-of-processing-gemini-apps-data-under-european-union-eu-or-united-kingdom-uk-data-protection-law%2Cdo-you-use-my-gemini-apps-chats-to-show-me-ads%2Cwho-has-access-to-my-chats-and-how-does-human-review-improve-gemini-for-everyone%2Chow-long-does-google-retain-my-temporary-chats-and-chats-i-have-when-keep-activity-is-off-and-what-does-google-do-with-this-data%2Chow-does-google-use-my-feedback%2Cwhat-does-the-keep-activity-setting-control%2Cwhat-does-the-memory-summary-setting-control%2Chow-can-i-control-whether-google-uses-my-audio-and-gemini-live-videos-screenshares-to-improve-its-services%2Chow-do-i-manage-what-gemini-remembers-about-me-and-customize-my-responses%2Chow-can-i-control-whether-gemini-apps-use-my-past-chats-to-personalize-my-experience%2Chow-does-google-handle-my-data-when-i-use-gemini-apps-while-signed-out%2Cwhat-location-information-do-gemini-apps-collect-why-and-how-is-it-used%2Chow-do-i-know-if-gemini-apps-have-access-to-and-are-using-my-precise-location%2Chow-do-i-manage-my-mobile-permissions-when-gemini-is-my-device-assistant%2Cwhat-do-the-browser-app-permission-choices-mean%2Chow-does-google-work-with-my-uploaded-images%2Cwhat-happens-when-i-share-a-photo-or-video-from-a-media-gallery-connected-app-with-gemini-apps%2Cwhat-happens-with-my-data-that-gemini-connected-apps-and-other-services-exchange%2Chow-can-i-allow-gemini-to-personalize-my-experience-with-my-data-from-connected-apps%2Chow-is-my-data-used-to-make-calls-send-messages-with-connected-apps-in-gemini%2Chow-does-gemini-use-my-data-with-the-remote-browser-and-remote-computer%2Cwhat-happens-when-you-turn-off-task-mode%2Chow-does-google-work-with-gemini-live-data%2Cwhat-happens-to-my-data-when-i-use-gemini-in-chrome%2Cwhat-happens-with-my-data-when-gemini-uses-screen-automation-to-help-me-get-tasks-done-in-android-apps%2Cwhat-happens-to-my-data-when-i-use-geminis-agentic-calling-capability%2Cwhat-happens-to-my-data-when-i-add-items-to-the-google-shopping-cart-from-gemini%2Cwhat-happens-to-my-data-when-i-use-google-pay-in-gemini%2Cwhat-happens-to-my-data-when-i-interact-with-gems-from-google-labs%2Cwhat-happens-to-my-data-when-i-import-memory-or-chats-from-other-ai-platforms%2Cwhat-happens-to-my-data-when-i-use-notebooks-in-gemini%2Cwhat-happens-to-my-data-when-i-create-an-avatar-in-gemini-apps%2Cwhat-happens-to-my-data-when-i-share-my-avatar-with-other-users%2Cwhat-happens-to-my-data-when-i-interact-with-canvas-web-apps%2Cwhat-happens-when-i-interact-with-speak-to-window-on-gemini-for-macos%2Cwhat-terms-apply-to-use-of-gemini-apps","capturedAt":"2026-11-08T22:28:03Z","sha256":"e1e866ccdbaf192a25cd6823496389ad27321566852ad82a4a59583741d7ae44"}}]},{"text":"Gemini's most private modes aren't zero-retention: temporary chats and Keep Activity-off chats are kept 72 hours and may still be human-reviewed for safety.","cites":[{"quote":"Temporary chats and chats you have when [Keep Activity](https://myactivity.google.com/product/gemini?utm_source=help) is off are retained with your account for 72 hours","source":{"doc":"gemini-apps-privacy-hub","title":"Gemini Apps Privacy Hub","url":"https://support.google.com/gemini/answer/13594961?hl=en#zippy=%2Cwhat-data-is-collected%2Chow-your-data-is-used%2Chow-gemini-apps-get-help-from-google-services%2Chow-gemini-apps-work-with-connected-apps%2Caudio-features%2Ccanvas%2Cconfiguring-your-settings%2Chow-long-we-retain-your-data%2Crequesting-content-removal-and-exporting-your-information%2Cother-things-to-know%2Crespect-others-rights%2Cwhat-are-gemini-apps%2Chow-can-i-object-to-the-processing-of-my-data-or-ask-for-inaccurate-data-in-gemini-apps-responses-to-be-corrected%2Cwhat-are-googles-legal-bases-of-processing-gemini-apps-data-under-european-union-eu-or-united-kingdom-uk-data-protection-law%2Cdo-you-use-my-gemini-apps-chats-to-show-me-ads%2Cwho-has-access-to-my-chats-and-how-does-human-review-improve-gemini-for-everyone%2Chow-long-does-google-retain-my-temporary-chats-and-chats-i-have-when-keep-activity-is-off-and-what-does-google-do-with-this-data%2Chow-does-google-use-my-feedback%2Cwhat-does-the-keep-activity-setting-control%2Cwhat-does-the-memory-summary-setting-control%2Chow-can-i-control-whether-google-uses-my-audio-and-gemini-live-videos-screenshares-to-improve-its-services%2Chow-do-i-manage-what-gemini-remembers-about-me-and-customize-my-responses%2Chow-can-i-control-whether-gemini-apps-use-my-past-chats-to-personalize-my-experience%2Chow-does-google-handle-my-data-when-i-use-gemini-apps-while-signed-out%2Cwhat-location-information-do-gemini-apps-collect-why-and-how-is-it-used%2Chow-do-i-know-if-gemini-apps-have-access-to-and-are-using-my-precise-location%2Chow-do-i-manage-my-mobile-permissions-when-gemini-is-my-device-assistant%2Cwhat-do-the-browser-app-permission-choices-mean%2Chow-does-google-work-with-my-uploaded-images%2Cwhat-happens-when-i-share-a-photo-or-video-from-a-media-gallery-connected-app-with-gemini-apps%2Cwhat-happens-with-my-data-that-gemini-connected-apps-and-other-services-exchange%2Chow-can-i-allow-gemini-to-personalize-my-experience-with-my-data-from-connected-apps%2Chow-is-my-data-used-to-make-calls-send-messages-with-connected-apps-in-gemini%2Chow-does-gemini-use-my-data-with-the-remote-browser-and-remote-computer%2Cwhat-happens-when-you-turn-off-task-mode%2Chow-does-google-work-with-gemini-live-data%2Cwhat-happens-to-my-data-when-i-use-gemini-in-chrome%2Cwhat-happens-with-my-data-when-gemini-uses-screen-automation-to-help-me-get-tasks-done-in-android-apps%2Cwhat-happens-to-my-data-when-i-use-geminis-agentic-calling-capability%2Cwhat-happens-to-my-data-when-i-add-items-to-the-google-shopping-cart-from-gemini%2Cwhat-happens-to-my-data-when-i-use-google-pay-in-gemini%2Cwhat-happens-to-my-data-when-i-interact-with-gems-from-google-labs%2Cwhat-happens-to-my-data-when-i-import-memory-or-chats-from-other-ai-platforms%2Cwhat-happens-to-my-data-when-i-use-notebooks-in-gemini%2Cwhat-happens-to-my-data-when-i-create-an-avatar-in-gemini-apps%2Cwhat-happens-to-my-data-when-i-share-my-avatar-with-other-users%2Cwhat-happens-to-my-data-when-i-interact-with-canvas-web-apps%2Cwhat-happens-when-i-interact-with-speak-to-window-on-gemini-for-macos%2Cwhat-terms-apply-to-use-of-gemini-apps","capturedAt":"2026-11-08T22:28:03Z","sha256":"e1e866ccdbaf192a25cd6823496389ad27321566852ad82a4a59583741d7ae44"}},{"quote":"Even if your Keep Activity setting is off or you use temporary chats, Google still uses your chats to respond to you and help protect Google, our users, and the public, including with help from human reviewers.","source":{"doc":"gemini-apps-privacy-hub","title":"Gemini Apps Privacy Hub","url":"https://support.google.com/gemini/answer/13594961?hl=en#zippy=%2Cwhat-data-is-collected%2Chow-your-data-is-used%2Chow-gemini-apps-get-help-from-google-services%2Chow-gemini-apps-work-with-connected-apps%2Caudio-features%2Ccanvas%2Cconfiguring-your-settings%2Chow-long-we-retain-your-data%2Crequesting-content-removal-and-exporting-your-information%2Cother-things-to-know%2Crespect-others-rights%2Cwhat-are-gemini-apps%2Chow-can-i-object-to-the-processing-of-my-data-or-ask-for-inaccurate-data-in-gemini-apps-responses-to-be-corrected%2Cwhat-are-googles-legal-bases-of-processing-gemini-apps-data-under-european-union-eu-or-united-kingdom-uk-data-protection-law%2Cdo-you-use-my-gemini-apps-chats-to-show-me-ads%2Cwho-has-access-to-my-chats-and-how-does-human-review-improve-gemini-for-everyone%2Chow-long-does-google-retain-my-temporary-chats-and-chats-i-have-when-keep-activity-is-off-and-what-does-google-do-with-this-data%2Chow-does-google-use-my-feedback%2Cwhat-does-the-keep-activity-setting-control%2Cwhat-does-the-memory-summary-setting-control%2Chow-can-i-control-whether-google-uses-my-audio-and-gemini-live-videos-screenshares-to-improve-its-services%2Chow-do-i-manage-what-gemini-remembers-about-me-and-customize-my-responses%2Chow-can-i-control-whether-gemini-apps-use-my-past-chats-to-personalize-my-experience%2Chow-does-google-handle-my-data-when-i-use-gemini-apps-while-signed-out%2Cwhat-location-information-do-gemini-apps-collect-why-and-how-is-it-used%2Chow-do-i-know-if-gemini-apps-have-access-to-and-are-using-my-precise-location%2Chow-do-i-manage-my-mobile-permissions-when-gemini-is-my-device-assistant%2Cwhat-do-the-browser-app-permission-choices-mean%2Chow-does-google-work-with-my-uploaded-images%2Cwhat-happens-when-i-share-a-photo-or-video-from-a-media-gallery-connected-app-with-gemini-apps%2Cwhat-happens-with-my-data-that-gemini-connected-apps-and-other-services-exchange%2Chow-can-i-allow-gemini-to-personalize-my-experience-with-my-data-from-connected-apps%2Chow-is-my-data-used-to-make-calls-send-messages-with-connected-apps-in-gemini%2Chow-does-gemini-use-my-data-with-the-remote-browser-and-remote-computer%2Cwhat-happens-when-you-turn-off-task-mode%2Chow-does-google-work-with-gemini-live-data%2Cwhat-happens-to-my-data-when-i-use-gemini-in-chrome%2Cwhat-happens-with-my-data-when-gemini-uses-screen-automation-to-help-me-get-tasks-done-in-android-apps%2Cwhat-happens-to-my-data-when-i-use-geminis-agentic-calling-capability%2Cwhat-happens-to-my-data-when-i-add-items-to-the-google-shopping-cart-from-gemini%2Cwhat-happens-to-my-data-when-i-use-google-pay-in-gemini%2Cwhat-happens-to-my-data-when-i-interact-with-gems-from-google-labs%2Cwhat-happens-to-my-data-when-i-import-memory-or-chats-from-other-ai-platforms%2Cwhat-happens-to-my-data-when-i-use-notebooks-in-gemini%2Cwhat-happens-to-my-data-when-i-create-an-avatar-in-gemini-apps%2Cwhat-happens-to-my-data-when-i-share-my-avatar-with-other-users%2Cwhat-happens-to-my-data-when-i-interact-with-canvas-web-apps%2Cwhat-happens-when-i-interact-with-speak-to-window-on-gemini-for-macos%2Cwhat-terms-apply-to-use-of-gemini-apps","capturedAt":"2026-11-08T22:28:03Z","sha256":"e1e866ccdbaf192a25cd6823496389ad27321566852ad82a4a59583741d7ae44"}}]},{"text":"No Gemini setting stops Google from using chats to create anonymized data for improving its services.","cites":[{"quote":"Your Gemini settings don’t control processing of your chats to create anonymized data to improve Google services.","source":{"doc":"gemini-apps-privacy-hub","title":"Gemini Apps Privacy Hub","url":"https://support.google.com/gemini/answer/13594961?hl=en#zippy=%2Cwhat-data-is-collected%2Chow-your-data-is-used%2Chow-gemini-apps-get-help-from-google-services%2Chow-gemini-apps-work-with-connected-apps%2Caudio-features%2Ccanvas%2Cconfiguring-your-settings%2Chow-long-we-retain-your-data%2Crequesting-content-removal-and-exporting-your-information%2Cother-things-to-know%2Crespect-others-rights%2Cwhat-are-gemini-apps%2Chow-can-i-object-to-the-processing-of-my-data-or-ask-for-inaccurate-data-in-gemini-apps-responses-to-be-corrected%2Cwhat-are-googles-legal-bases-of-processing-gemini-apps-data-under-european-union-eu-or-united-kingdom-uk-data-protection-law%2Cdo-you-use-my-gemini-apps-chats-to-show-me-ads%2Cwho-has-access-to-my-chats-and-how-does-human-review-improve-gemini-for-everyone%2Chow-long-does-google-retain-my-temporary-chats-and-chats-i-have-when-keep-activity-is-off-and-what-does-google-do-with-this-data%2Chow-does-google-use-my-feedback%2Cwhat-does-the-keep-activity-setting-control%2Cwhat-does-the-memory-summary-setting-control%2Chow-can-i-control-whether-google-uses-my-audio-and-gemini-live-videos-screenshares-to-improve-its-services%2Chow-do-i-manage-what-gemini-remembers-about-me-and-customize-my-responses%2Chow-can-i-control-whether-gemini-apps-use-my-past-chats-to-personalize-my-experience%2Chow-does-google-handle-my-data-when-i-use-gemini-apps-while-signed-out%2Cwhat-location-information-do-gemini-apps-collect-why-and-how-is-it-used%2Chow-do-i-know-if-gemini-apps-have-access-to-and-are-using-my-precise-location%2Chow-do-i-manage-my-mobile-permissions-when-gemini-is-my-device-assistant%2Cwhat-do-the-browser-app-permission-choices-mean%2Chow-does-google-work-with-my-uploaded-images%2Cwhat-happens-when-i-share-a-photo-or-video-from-a-media-gallery-connected-app-with-gemini-apps%2Cwhat-happens-with-my-data-that-gemini-connected-apps-and-other-services-exchange%2Chow-can-i-allow-gemini-to-personalize-my-experience-with-my-data-from-connected-apps%2Chow-is-my-data-used-to-make-calls-send-messages-with-connected-apps-in-gemini%2Chow-does-gemini-use-my-data-with-the-remote-browser-and-remote-computer%2Cwhat-happens-when-you-turn-off-task-mode%2Chow-does-google-work-with-gemini-live-data%2Cwhat-happens-to-my-data-when-i-use-gemini-in-chrome%2Cwhat-happens-with-my-data-when-gemini-uses-screen-automation-to-help-me-get-tasks-done-in-android-apps%2Cwhat-happens-to-my-data-when-i-use-geminis-agentic-calling-capability%2Cwhat-happens-to-my-data-when-i-add-items-to-the-google-shopping-cart-from-gemini%2Cwhat-happens-to-my-data-when-i-use-google-pay-in-gemini%2Cwhat-happens-to-my-data-when-i-interact-with-gems-from-google-labs%2Cwhat-happens-to-my-data-when-i-import-memory-or-chats-from-other-ai-platforms%2Cwhat-happens-to-my-data-when-i-use-notebooks-in-gemini%2Cwhat-happens-to-my-data-when-i-create-an-avatar-in-gemini-apps%2Cwhat-happens-to-my-data-when-i-share-my-avatar-with-other-users%2Cwhat-happens-to-my-data-when-i-interact-with-canvas-web-apps%2Cwhat-happens-when-i-interact-with-speak-to-window-on-gemini-for-macos%2Cwhat-terms-apply-to-use-of-gemini-apps","capturedAt":"2026-11-08T22:28:03Z","sha256":"e1e866ccdbaf192a25cd6823496389ad27321566852ad82a4a59583741d7ae44"}}]},{"text":"Memory and chats imported into Gemini from other AI platforms are used to train Google's generative AI models, like other Gemini activity.","cites":[{"quote":"This data is used consistently with your Gemini Apps activity, including to improve our services (including training generative AI models)","source":{"doc":"gemini-apps-privacy-hub","title":"Gemini Apps Privacy Hub","url":"https://support.google.com/gemini/answer/13594961?hl=en#zippy=%2Cwhat-data-is-collected%2Chow-your-data-is-used%2Chow-gemini-apps-get-help-from-google-services%2Chow-gemini-apps-work-with-connected-apps%2Caudio-features%2Ccanvas%2Cconfiguring-your-settings%2Chow-long-we-retain-your-data%2Crequesting-content-removal-and-exporting-your-information%2Cother-things-to-know%2Crespect-others-rights%2Cwhat-are-gemini-apps%2Chow-can-i-object-to-the-processing-of-my-data-or-ask-for-inaccurate-data-in-gemini-apps-responses-to-be-corrected%2Cwhat-are-googles-legal-bases-of-processing-gemini-apps-data-under-european-union-eu-or-united-kingdom-uk-data-protection-law%2Cdo-you-use-my-gemini-apps-chats-to-show-me-ads%2Cwho-has-access-to-my-chats-and-how-does-human-review-improve-gemini-for-everyone%2Chow-long-does-google-retain-my-temporary-chats-and-chats-i-have-when-keep-activity-is-off-and-what-does-google-do-with-this-data%2Chow-does-google-use-my-feedback%2Cwhat-does-the-keep-activity-setting-control%2Cwhat-does-the-memory-summary-setting-control%2Chow-can-i-control-whether-google-uses-my-audio-and-gemini-live-videos-screenshares-to-improve-its-services%2Chow-do-i-manage-what-gemini-remembers-about-me-and-customize-my-responses%2Chow-can-i-control-whether-gemini-apps-use-my-past-chats-to-personalize-my-experience%2Chow-does-google-handle-my-data-when-i-use-gemini-apps-while-signed-out%2Cwhat-location-information-do-gemini-apps-collect-why-and-how-is-it-used%2Chow-do-i-know-if-gemini-apps-have-access-to-and-are-using-my-precise-location%2Chow-do-i-manage-my-mobile-permissions-when-gemini-is-my-device-assistant%2Cwhat-do-the-browser-app-permission-choices-mean%2Chow-does-google-work-with-my-uploaded-images%2Cwhat-happens-when-i-share-a-photo-or-video-from-a-media-gallery-connected-app-with-gemini-apps%2Cwhat-happens-with-my-data-that-gemini-connected-apps-and-other-services-exchange%2Chow-can-i-allow-gemini-to-personalize-my-experience-with-my-data-from-connected-apps%2Chow-is-my-data-used-to-make-calls-send-messages-with-connected-apps-in-gemini%2Chow-does-gemini-use-my-data-with-the-remote-browser-and-remote-computer%2Cwhat-happens-when-you-turn-off-task-mode%2Chow-does-google-work-with-gemini-live-data%2Cwhat-happens-to-my-data-when-i-use-gemini-in-chrome%2Cwhat-happens-with-my-data-when-gemini-uses-screen-automation-to-help-me-get-tasks-done-in-android-apps%2Cwhat-happens-to-my-data-when-i-use-geminis-agentic-calling-capability%2Cwhat-happens-to-my-data-when-i-add-items-to-the-google-shopping-cart-from-gemini%2Cwhat-happens-to-my-data-when-i-use-google-pay-in-gemini%2Cwhat-happens-to-my-data-when-i-interact-with-gems-from-google-labs%2Cwhat-happens-to-my-data-when-i-import-memory-or-chats-from-other-ai-platforms%2Cwhat-happens-to-my-data-when-i-use-notebooks-in-gemini%2Cwhat-happens-to-my-data-when-i-create-an-avatar-in-gemini-apps%2Cwhat-happens-to-my-data-when-i-share-my-avatar-with-other-users%2Cwhat-happens-to-my-data-when-i-interact-with-canvas-web-apps%2Cwhat-happens-when-i-interact-with-speak-to-window-on-gemini-for-macos%2Cwhat-terms-apply-to-use-of-gemini-apps","capturedAt":"2026-11-08T22:28:03Z","sha256":"e1e866ccdbaf192a25cd6823496389ad27321566852ad82a4a59583741d7ae44"}}]},{"text":"Gemini task mode keeps website login cookies in a remote browser; turning off Keep Activity doesn't delete them, but turning off task mode does.","cites":[{"quote":"Turning off Keep Activity or deleting Gemini Apps activity doesn’t impact [your remote browser and remote computer data and settings](https://gemini.google.com/gemini-spark).","source":{"doc":"gemini-apps-privacy-hub","title":"Gemini Apps Privacy Hub","url":"https://support.google.com/gemini/answer/13594961?hl=en#zippy=%2Cwhat-data-is-collected%2Chow-your-data-is-used%2Chow-gemini-apps-get-help-from-google-services%2Chow-gemini-apps-work-with-connected-apps%2Caudio-features%2Ccanvas%2Cconfiguring-your-settings%2Chow-long-we-retain-your-data%2Crequesting-content-removal-and-exporting-your-information%2Cother-things-to-know%2Crespect-others-rights%2Cwhat-are-gemini-apps%2Chow-can-i-object-to-the-processing-of-my-data-or-ask-for-inaccurate-data-in-gemini-apps-responses-to-be-corrected%2Cwhat-are-googles-legal-bases-of-processing-gemini-apps-data-under-european-union-eu-or-united-kingdom-uk-data-protection-law%2Cdo-you-use-my-gemini-apps-chats-to-show-me-ads%2Cwho-has-access-to-my-chats-and-how-does-human-review-improve-gemini-for-everyone%2Chow-long-does-google-retain-my-temporary-chats-and-chats-i-have-when-keep-activity-is-off-and-what-does-google-do-with-this-data%2Chow-does-google-use-my-feedback%2Cwhat-does-the-keep-activity-setting-control%2Cwhat-does-the-memory-summary-setting-control%2Chow-can-i-control-whether-google-uses-my-audio-and-gemini-live-videos-screenshares-to-improve-its-services%2Chow-do-i-manage-what-gemini-remembers-about-me-and-customize-my-responses%2Chow-can-i-control-whether-gemini-apps-use-my-past-chats-to-personalize-my-experience%2Chow-does-google-handle-my-data-when-i-use-gemini-apps-while-signed-out%2Cwhat-location-information-do-gemini-apps-collect-why-and-how-is-it-used%2Chow-do-i-know-if-gemini-apps-have-access-to-and-are-using-my-precise-location%2Chow-do-i-manage-my-mobile-permissions-when-gemini-is-my-device-assistant%2Cwhat-do-the-browser-app-permission-choices-mean%2Chow-does-google-work-with-my-uploaded-images%2Cwhat-happens-when-i-share-a-photo-or-video-from-a-media-gallery-connected-app-with-gemini-apps%2Cwhat-happens-with-my-data-that-gemini-connected-apps-and-other-services-exchange%2Chow-can-i-allow-gemini-to-personalize-my-experience-with-my-data-from-connected-apps%2Chow-is-my-data-used-to-make-calls-send-messages-with-connected-apps-in-gemini%2Chow-does-gemini-use-my-data-with-the-remote-browser-and-remote-computer%2Cwhat-happens-when-you-turn-off-task-mode%2Chow-does-google-work-with-gemini-live-data%2Cwhat-happens-to-my-data-when-i-use-gemini-in-chrome%2Cwhat-happens-with-my-data-when-gemini-uses-screen-automation-to-help-me-get-tasks-done-in-android-apps%2Cwhat-happens-to-my-data-when-i-use-geminis-agentic-calling-capability%2Cwhat-happens-to-my-data-when-i-add-items-to-the-google-shopping-cart-from-gemini%2Cwhat-happens-to-my-data-when-i-use-google-pay-in-gemini%2Cwhat-happens-to-my-data-when-i-interact-with-gems-from-google-labs%2Cwhat-happens-to-my-data-when-i-import-memory-or-chats-from-other-ai-platforms%2Cwhat-happens-to-my-data-when-i-use-notebooks-in-gemini%2Cwhat-happens-to-my-data-when-i-create-an-avatar-in-gemini-apps%2Cwhat-happens-to-my-data-when-i-share-my-avatar-with-other-users%2Cwhat-happens-to-my-data-when-i-interact-with-canvas-web-apps%2Cwhat-happens-when-i-interact-with-speak-to-window-on-gemini-for-macos%2Cwhat-terms-apply-to-use-of-gemini-apps","capturedAt":"2026-11-08T22:28:03Z","sha256":"e1e866ccdbaf192a25cd6823496389ad27321566852ad82a4a59583741d7ae44"}},{"quote":"Your [remote browser data and remote computer data](https://gemini.google.com/gemini-spark) is deleted.","source":{"doc":"gemini-apps-privacy-hub","title":"Gemini Apps Privacy Hub","url":"https://support.google.com/gemini/answer/13594961?hl=en#zippy=%2Cwhat-data-is-collected%2Chow-your-data-is-used%2Chow-gemini-apps-get-help-from-google-services%2Chow-gemini-apps-work-with-connected-apps%2Caudio-features%2Ccanvas%2Cconfiguring-your-settings%2Chow-long-we-retain-your-data%2Crequesting-content-removal-and-exporting-your-information%2Cother-things-to-know%2Crespect-others-rights%2Cwhat-are-gemini-apps%2Chow-can-i-object-to-the-processing-of-my-data-or-ask-for-inaccurate-data-in-gemini-apps-responses-to-be-corrected%2Cwhat-are-googles-legal-bases-of-processing-gemini-apps-data-under-european-union-eu-or-united-kingdom-uk-data-protection-law%2Cdo-you-use-my-gemini-apps-chats-to-show-me-ads%2Cwho-has-access-to-my-chats-and-how-does-human-review-improve-gemini-for-everyone%2Chow-long-does-google-retain-my-temporary-chats-and-chats-i-have-when-keep-activity-is-off-and-what-does-google-do-with-this-data%2Chow-does-google-use-my-feedback%2Cwhat-does-the-keep-activity-setting-control%2Cwhat-does-the-memory-summary-setting-control%2Chow-can-i-control-whether-google-uses-my-audio-and-gemini-live-videos-screenshares-to-improve-its-services%2Chow-do-i-manage-what-gemini-remembers-about-me-and-customize-my-responses%2Chow-can-i-control-whether-gemini-apps-use-my-past-chats-to-personalize-my-experience%2Chow-does-google-handle-my-data-when-i-use-gemini-apps-while-signed-out%2Cwhat-location-information-do-gemini-apps-collect-why-and-how-is-it-used%2Chow-do-i-know-if-gemini-apps-have-access-to-and-are-using-my-precise-location%2Chow-do-i-manage-my-mobile-permissions-when-gemini-is-my-device-assistant%2Cwhat-do-the-browser-app-permission-choices-mean%2Chow-does-google-work-with-my-uploaded-images%2Cwhat-happens-when-i-share-a-photo-or-video-from-a-media-gallery-connected-app-with-gemini-apps%2Cwhat-happens-with-my-data-that-gemini-connected-apps-and-other-services-exchange%2Chow-can-i-allow-gemini-to-personalize-my-experience-with-my-data-from-connected-apps%2Chow-is-my-data-used-to-make-calls-send-messages-with-connected-apps-in-gemini%2Chow-does-gemini-use-my-data-with-the-remote-browser-and-remote-computer%2Cwhat-happens-when-you-turn-off-task-mode%2Chow-does-google-work-with-gemini-live-data%2Cwhat-happens-to-my-data-when-i-use-gemini-in-chrome%2Cwhat-happens-with-my-data-when-gemini-uses-screen-automation-to-help-me-get-tasks-done-in-android-apps%2Cwhat-happens-to-my-data-when-i-use-geminis-agentic-calling-capability%2Cwhat-happens-to-my-data-when-i-add-items-to-the-google-shopping-cart-from-gemini%2Cwhat-happens-to-my-data-when-i-use-google-pay-in-gemini%2Cwhat-happens-to-my-data-when-i-interact-with-gems-from-google-labs%2Cwhat-happens-to-my-data-when-i-import-memory-or-chats-from-other-ai-platforms%2Cwhat-happens-to-my-data-when-i-use-notebooks-in-gemini%2Cwhat-happens-to-my-data-when-i-create-an-avatar-in-gemini-apps%2Cwhat-happens-to-my-data-when-i-share-my-avatar-with-other-users%2Cwhat-happens-to-my-data-when-i-interact-with-canvas-web-apps%2Cwhat-happens-when-i-interact-with-speak-to-window-on-gemini-for-macos%2Cwhat-terms-apply-to-use-of-gemini-apps","capturedAt":"2026-11-08T22:28:03Z","sha256":"e1e866ccdbaf192a25cd6823496389ad27321566852ad82a4a59583741d7ae44"}}]},{"text":"Signed-out Gemini use and Gems from Google Labs (Opal) fall outside the Gemini Apps Privacy Notice and are governed by the general Google Privacy Policy.","cites":[{"quote":"Your data is not associated with your Google account. The Gemini Apps Privacy Notice does not apply.","source":{"doc":"gemini-apps-privacy-hub","title":"Gemini Apps Privacy Hub","url":"https://support.google.com/gemini/answer/13594961?hl=en#zippy=%2Cwhat-data-is-collected%2Chow-your-data-is-used%2Chow-gemini-apps-get-help-from-google-services%2Chow-gemini-apps-work-with-connected-apps%2Caudio-features%2Ccanvas%2Cconfiguring-your-settings%2Chow-long-we-retain-your-data%2Crequesting-content-removal-and-exporting-your-information%2Cother-things-to-know%2Crespect-others-rights%2Cwhat-are-gemini-apps%2Chow-can-i-object-to-the-processing-of-my-data-or-ask-for-inaccurate-data-in-gemini-apps-responses-to-be-corrected%2Cwhat-are-googles-legal-bases-of-processing-gemini-apps-data-under-european-union-eu-or-united-kingdom-uk-data-protection-law%2Cdo-you-use-my-gemini-apps-chats-to-show-me-ads%2Cwho-has-access-to-my-chats-and-how-does-human-review-improve-gemini-for-everyone%2Chow-long-does-google-retain-my-temporary-chats-and-chats-i-have-when-keep-activity-is-off-and-what-does-google-do-with-this-data%2Chow-does-google-use-my-feedback%2Cwhat-does-the-keep-activity-setting-control%2Cwhat-does-the-memory-summary-setting-control%2Chow-can-i-control-whether-google-uses-my-audio-and-gemini-live-videos-screenshares-to-improve-its-services%2Chow-do-i-manage-what-gemini-remembers-about-me-and-customize-my-responses%2Chow-can-i-control-whether-gemini-apps-use-my-past-chats-to-personalize-my-experience%2Chow-does-google-handle-my-data-when-i-use-gemini-apps-while-signed-out%2Cwhat-location-information-do-gemini-apps-collect-why-and-how-is-it-used%2Chow-do-i-know-if-gemini-apps-have-access-to-and-are-using-my-precise-location%2Chow-do-i-manage-my-mobile-permissions-when-gemini-is-my-device-assistant%2Cwhat-do-the-browser-app-permission-choices-mean%2Chow-does-google-work-with-my-uploaded-images%2Cwhat-happens-when-i-share-a-photo-or-video-from-a-media-gallery-connected-app-with-gemini-apps%2Cwhat-happens-with-my-data-that-gemini-connected-apps-and-other-services-exchange%2Chow-can-i-allow-gemini-to-personalize-my-experience-with-my-data-from-connected-apps%2Chow-is-my-data-used-to-make-calls-send-messages-with-connected-apps-in-gemini%2Chow-does-gemini-use-my-data-with-the-remote-browser-and-remote-computer%2Cwhat-happens-when-you-turn-off-task-mode%2Chow-does-google-work-with-gemini-live-data%2Cwhat-happens-to-my-data-when-i-use-gemini-in-chrome%2Cwhat-happens-with-my-data-when-gemini-uses-screen-automation-to-help-me-get-tasks-done-in-android-apps%2Cwhat-happens-to-my-data-when-i-use-geminis-agentic-calling-capability%2Cwhat-happens-to-my-data-when-i-add-items-to-the-google-shopping-cart-from-gemini%2Cwhat-happens-to-my-data-when-i-use-google-pay-in-gemini%2Cwhat-happens-to-my-data-when-i-interact-with-gems-from-google-labs%2Cwhat-happens-to-my-data-when-i-import-memory-or-chats-from-other-ai-platforms%2Cwhat-happens-to-my-data-when-i-use-notebooks-in-gemini%2Cwhat-happens-to-my-data-when-i-create-an-avatar-in-gemini-apps%2Cwhat-happens-to-my-data-when-i-share-my-avatar-with-other-users%2Cwhat-happens-to-my-data-when-i-interact-with-canvas-web-apps%2Cwhat-happens-when-i-interact-with-speak-to-window-on-gemini-for-macos%2Cwhat-terms-apply-to-use-of-gemini-apps","capturedAt":"2026-11-08T22:28:03Z","sha256":"e1e866ccdbaf192a25cd6823496389ad27321566852ad82a4a59583741d7ae44"}},{"quote":"The Gemini Apps Privacy Notice does not apply, and your Opal data, including feedback you provide, is processed per the [Google Privacy Policy](https://policies.google.com/privacy).","source":{"doc":"gemini-apps-privacy-hub","title":"Gemini Apps Privacy Hub","url":"https://support.google.com/gemini/answer/13594961?hl=en#zippy=%2Cwhat-data-is-collected%2Chow-your-data-is-used%2Chow-gemini-apps-get-help-from-google-services%2Chow-gemini-apps-work-with-connected-apps%2Caudio-features%2Ccanvas%2Cconfiguring-your-settings%2Chow-long-we-retain-your-data%2Crequesting-content-removal-and-exporting-your-information%2Cother-things-to-know%2Crespect-others-rights%2Cwhat-are-gemini-apps%2Chow-can-i-object-to-the-processing-of-my-data-or-ask-for-inaccurate-data-in-gemini-apps-responses-to-be-corrected%2Cwhat-are-googles-legal-bases-of-processing-gemini-apps-data-under-european-union-eu-or-united-kingdom-uk-data-protection-law%2Cdo-you-use-my-gemini-apps-chats-to-show-me-ads%2Cwho-has-access-to-my-chats-and-how-does-human-review-improve-gemini-for-everyone%2Chow-long-does-google-retain-my-temporary-chats-and-chats-i-have-when-keep-activity-is-off-and-what-does-google-do-with-this-data%2Chow-does-google-use-my-feedback%2Cwhat-does-the-keep-activity-setting-control%2Cwhat-does-the-memory-summary-setting-control%2Chow-can-i-control-whether-google-uses-my-audio-and-gemini-live-videos-screenshares-to-improve-its-services%2Chow-do-i-manage-what-gemini-remembers-about-me-and-customize-my-responses%2Chow-can-i-control-whether-gemini-apps-use-my-past-chats-to-personalize-my-experience%2Chow-does-google-handle-my-data-when-i-use-gemini-apps-while-signed-out%2Cwhat-location-information-do-gemini-apps-collect-why-and-how-is-it-used%2Chow-do-i-know-if-gemini-apps-have-access-to-and-are-using-my-precise-location%2Chow-do-i-manage-my-mobile-permissions-when-gemini-is-my-device-assistant%2Cwhat-do-the-browser-app-permission-choices-mean%2Chow-does-google-work-with-my-uploaded-images%2Cwhat-happens-when-i-share-a-photo-or-video-from-a-media-gallery-connected-app-with-gemini-apps%2Cwhat-happens-with-my-data-that-gemini-connected-apps-and-other-services-exchange%2Chow-can-i-allow-gemini-to-personalize-my-experience-with-my-data-from-connected-apps%2Chow-is-my-data-used-to-make-calls-send-messages-with-connected-apps-in-gemini%2Chow-does-gemini-use-my-data-with-the-remote-browser-and-remote-computer%2Cwhat-happens-when-you-turn-off-task-mode%2Chow-does-google-work-with-gemini-live-data%2Cwhat-happens-to-my-data-when-i-use-gemini-in-chrome%2Cwhat-happens-with-my-data-when-gemini-uses-screen-automation-to-help-me-get-tasks-done-in-android-apps%2Cwhat-happens-to-my-data-when-i-use-geminis-agentic-calling-capability%2Cwhat-happens-to-my-data-when-i-add-items-to-the-google-shopping-cart-from-gemini%2Cwhat-happens-to-my-data-when-i-use-google-pay-in-gemini%2Cwhat-happens-to-my-data-when-i-interact-with-gems-from-google-labs%2Cwhat-happens-to-my-data-when-i-import-memory-or-chats-from-other-ai-platforms%2Cwhat-happens-to-my-data-when-i-use-notebooks-in-gemini%2Cwhat-happens-to-my-data-when-i-create-an-avatar-in-gemini-apps%2Cwhat-happens-to-my-data-when-i-share-my-avatar-with-other-users%2Cwhat-happens-to-my-data-when-i-interact-with-canvas-web-apps%2Cwhat-happens-when-i-interact-with-speak-to-window-on-gemini-for-macos%2Cwhat-terms-apply-to-use-of-gemini-apps","capturedAt":"2026-11-08T22:28:03Z","sha256":"e1e866ccdbaf192a25cd6823496389ad27321566852ad82a4a59583741d7ae44"}}]},{"text":"Free vs paid Gemini API: free-tier prompts and responses are used to improve Google products and ML, and human reviewers may read them. Paid-tier content is not used to improve products.","cites":[{"quote":"Google uses the content you submit to the Services and any generated responses to provide, improve, and develop Google products and services and machine learning technologies","source":{"doc":"gemini-api-terms","title":"Gemini api terms","url":"https://aistudio.google.com/docs/terms","capturedAt":"2026-11-08T22:19:40Z","sha256":"5ee6fee1cd1153ac041b662b68573dfc655c0f7e34955b904b63d69f0c7f06fa"}},{"quote":"To help with quality and improve our products, human reviewers may read, annotate, and process your API input and output.","source":{"doc":"gemini-api-terms","title":"Gemini api terms","url":"https://aistudio.google.com/docs/terms","capturedAt":"2026-11-08T22:19:40Z","sha256":"5ee6fee1cd1153ac041b662b68573dfc655c0f7e34955b904b63d69f0c7f06fa"}},{"quote":"Google doesn't use your prompts (including associated system instructions, cached content, and files such as images, videos, or documents) or responses to improve our products","source":{"doc":"gemini-api-terms","title":"Gemini api terms","url":"https://aistudio.google.com/docs/terms","capturedAt":"2026-11-08T22:19:40Z","sha256":"5ee6fee1cd1153ac041b662b68573dfc655c0f7e34955b904b63d69f0c7f06fa"}}]},{"text":"Users in the EEA, Switzerland and the UK get paid-tier data terms even on free AI Studio and free API quota.","cites":[{"quote":"apply to all Services, including Google AI Studio and unpaid quota in the Gemini API, even though they are offered free of charge.","source":{"doc":"gemini-api-terms","title":"Gemini api terms","url":"https://aistudio.google.com/docs/terms","capturedAt":"2026-11-08T22:19:40Z","sha256":"5ee6fee1cd1153ac041b662b68573dfc655c0f7e34955b904b63d69f0c7f06fa"}}]},{"text":"Grounding with Google Search retention differs by surface: 30 days on the Gemini API, up to 3 days (not linked to customer) on the Agent Platform.","cites":[{"quote":"Google will store prompts, contextual information that you may provide, and output for thirty (30) days","source":{"doc":"gemini-api-terms","title":"Gemini api terms","url":"https://aistudio.google.com/docs/terms","capturedAt":"2026-11-08T22:19:40Z","sha256":"5ee6fee1cd1153ac041b662b68573dfc655c0f7e34955b904b63d69f0c7f06fa"}},{"quote":"that are not associated with any Customer or its End Users for up to three (3) days","source":{"doc":"vertex-data-governance","title":"Gemini Enterprise Agent Platform and zero data retention \\u00a0","url":"https://docs.cloud.google.com/gemini-enterprise-agent-platform/resources/zero-data-retention","capturedAt":"2026-11-08T22:04:23Z","sha256":"57859a011b5d0892f6f5b0dc8422cd7789a1f572892292841a4e36e7a76d5605"}}]},{"text":"On the Agent Platform the Interactions API stores prompts, responses and conversation state by default. You must set store=false to avoid it.","cites":[{"quote":"If you do not specify a value for `store`, it defaults to `true` for all models. To achieve zero data retention, explicitly set `store = false` in your API requests.","source":{"doc":"vertex-data-governance","title":"Gemini Enterprise Agent Platform and zero data retention \\u00a0","url":"https://docs.cloud.google.com/gemini-enterprise-agent-platform/resources/zero-data-retention","capturedAt":"2026-11-08T22:04:23Z","sha256":"57859a011b5d0892f6f5b0dc8422cd7789a1f572892292841a4e36e7a76d5605"}}]},{"text":"The vertex-data-governance captured policy was requested at the Vertex AI data-governance URL but redirected to the Gemini Enterprise Agent Platform zero-data-retention page (see final_url in its header).","cites":[{"quote":"Gemini Enterprise Agent Platform and zero data retention","source":{"doc":"vertex-data-governance","title":"Gemini Enterprise Agent Platform and zero data retention \\u00a0","url":"https://docs.cloud.google.com/gemini-enterprise-agent-platform/resources/zero-data-retention","capturedAt":"2026-11-08T22:04:23Z","sha256":"57859a011b5d0892f6f5b0dc8422cd7789a1f572892292841a4e36e7a76d5605"}}]}],"gaps":["Whether Keep Activity (and so model training on chats) is on by default for new Gemini users: 'Manage & delete your activity in Gemini Apps' (support.google.com/gemini/answer/13278892).","Whether a temporary chat becomes trainable if you send feedback on it (the hub addresses feedback only for Keep Activity off): Gemini temporary chats help (support.google.com/gemini/answer/13275745).","Retention period for signed-out Gemini use and for Gemini in Chrome page content logged 'temporarily': Google Privacy Policy retention page and Gemini in Chrome help (support.google.com/gemini/answer/16283624).","Length of the paid Gemini API 'limited period' abuse-monitoring log, and whether a ZDR option exists for the Gemini API: likely in Gemini API docs on data logging/abuse monitoring.","Duration of Agent Platform abuse-monitoring prompt logs for Google models: the Agent Platform 'Abuse monitoring' page and Google Cloud Platform Terms of Service Section 4.3.","Scope and perpetuity of the content license under the Google APIs Terms 'Submission of Content' section (developers.google.com/terms).","Input/output ownership and license for Gemini Apps and Agent Platform: the hub confirms the Google Terms of Service (policies.google.com/terms) apply to Gemini Apps; also the Generative AI Additional Terms and Google Cloud Service Specific Terms.","Concrete deletion timelines after deleting Gemini activity, data or an account: policies.google.com/technologies/retention (the hub links to it for 'how long it takes us to delete your information').","Subprocessor lists for the paid API and Agent Platform: Google Cloud subprocessors page and the processor DPA.","Gemini for Google Workspace / Gemini Enterprise app (business surface) is not covered by any captured policy: Workspace Gemini privacy hub."],"documents":[{"doc":"gemini-api-terms","title":"Gemini api terms","url":"https://aistudio.google.com/docs/terms","capturedAt":"2026-11-08T22:19:40Z","sha256":"5ee6fee1cd1153ac041b662b68573dfc655c0f7e34955b904b63d69f0c7f06fa"},{"doc":"gemini-apps-privacy-hub","title":"Gemini Apps Privacy Hub","url":"https://support.google.com/gemini/answer/13594961?hl=en#zippy=%2Cwhat-data-is-collected%2Chow-your-data-is-used%2Chow-gemini-apps-get-help-from-google-services%2Chow-gemini-apps-work-with-connected-apps%2Caudio-features%2Ccanvas%2Cconfiguring-your-settings%2Chow-long-we-retain-your-data%2Crequesting-content-removal-and-exporting-your-information%2Cother-things-to-know%2Crespect-others-rights%2Cwhat-are-gemini-apps%2Chow-can-i-object-to-the-processing-of-my-data-or-ask-for-inaccurate-data-in-gemini-apps-responses-to-be-corrected%2Cwhat-are-googles-legal-bases-of-processing-gemini-apps-data-under-european-union-eu-or-united-kingdom-uk-data-protection-law%2Cdo-you-use-my-gemini-apps-chats-to-show-me-ads%2Cwho-has-access-to-my-chats-and-how-does-human-review-improve-gemini-for-everyone%2Chow-long-does-google-retain-my-temporary-chats-and-chats-i-have-when-keep-activity-is-off-and-what-does-google-do-with-this-data%2Chow-does-google-use-my-feedback%2Cwhat-does-the-keep-activity-setting-control%2Cwhat-does-the-memory-summary-setting-control%2Chow-can-i-control-whether-google-uses-my-audio-and-gemini-live-videos-screenshares-to-improve-its-services%2Chow-do-i-manage-what-gemini-remembers-about-me-and-customize-my-responses%2Chow-can-i-control-whether-gemini-apps-use-my-past-chats-to-personalize-my-experience%2Chow-does-google-handle-my-data-when-i-use-gemini-apps-while-signed-out%2Cwhat-location-information-do-gemini-apps-collect-why-and-how-is-it-used%2Chow-do-i-know-if-gemini-apps-have-access-to-and-are-using-my-precise-location%2Chow-do-i-manage-my-mobile-permissions-when-gemini-is-my-device-assistant%2Cwhat-do-the-browser-app-permission-choices-mean%2Chow-does-google-work-with-my-uploaded-images%2Cwhat-happens-when-i-share-a-photo-or-video-from-a-media-gallery-connected-app-with-gemini-apps%2Cwhat-happens-with-my-data-that-gemini-connected-apps-and-other-services-exchange%2Chow-can-i-allow-gemini-to-personalize-my-experience-with-my-data-from-connected-apps%2Chow-is-my-data-used-to-make-calls-send-messages-with-connected-apps-in-gemini%2Chow-does-gemini-use-my-data-with-the-remote-browser-and-remote-computer%2Cwhat-happens-when-you-turn-off-task-mode%2Chow-does-google-work-with-gemini-live-data%2Cwhat-happens-to-my-data-when-i-use-gemini-in-chrome%2Cwhat-happens-with-my-data-when-gemini-uses-screen-automation-to-help-me-get-tasks-done-in-android-apps%2Cwhat-happens-to-my-data-when-i-use-geminis-agentic-calling-capability%2Cwhat-happens-to-my-data-when-i-add-items-to-the-google-shopping-cart-from-gemini%2Cwhat-happens-to-my-data-when-i-use-google-pay-in-gemini%2Cwhat-happens-to-my-data-when-i-interact-with-gems-from-google-labs%2Cwhat-happens-to-my-data-when-i-import-memory-or-chats-from-other-ai-platforms%2Cwhat-happens-to-my-data-when-i-use-notebooks-in-gemini%2Cwhat-happens-to-my-data-when-i-create-an-avatar-in-gemini-apps%2Cwhat-happens-to-my-data-when-i-share-my-avatar-with-other-users%2Cwhat-happens-to-my-data-when-i-interact-with-canvas-web-apps%2Cwhat-happens-when-i-interact-with-speak-to-window-on-gemini-for-macos%2Cwhat-terms-apply-to-use-of-gemini-apps","capturedAt":"2026-11-08T22:28:03Z","sha256":"e1e866ccdbaf192a25cd6823496389ad27321566852ad82a4a59583741d7ae44"},{"doc":"vertex-data-governance","title":"Gemini Enterprise Agent Platform and zero data retention \\u00a0","url":"https://docs.cloud.google.com/gemini-enterprise-agent-platform/resources/zero-data-retention","capturedAt":"2026-11-08T22:04:23Z","sha256":"57859a011b5d0892f6f5b0dc8422cd7789a1f572892292841a4e36e7a76d5605"},{"doc":"privacy-policy","title":"Privacy Policy \\u2013 Privacy & Terms \\u2013 Google","url":"https://policies.google.com/privacy?hl=en-US","capturedAt":"2026-11-08T22:04:22Z","sha256":"450d30d71dd38b3096ec447da0b6cf51e2b8e63e8d6da3e89e4366bbd337814f"}],"url":"https://gjalla.io/data-policies/google/"},{"id":"huggingface","provider":"huggingface","name":"Hugging Face","category":"model-platform","checkedOn":"2026-11-08","products":[{"id":"inference-providers","name":"Inference Providers (routed API to external providers)","surface":"api","facts":{"default_retention":{"summary":"Hugging Face says it doesn't store request bodies or responses when routing. Debug logs are kept up to 30 days without user data or tokens. Each provider's own retention applies.","status":"stated","cites":[{"quote":"We do not store the request body or response when routing requests through Hugging Face. Logs are kept for debugging purposes for up to 30 days, but no user data or tokens are stored.","source":{"doc":"inference-providers-security","title":"Security & Compliance \\u00b7 Hugging Face","url":"https://huggingface.co/docs/inference-providers/security","capturedAt":"2026-11-08T21:38:13Z","sha256":"8a1196958384b37f19b7e0cd154a3dc9143ec912af9d30f1ecdf1f69213b26b2"}},{"quote":"For more information on how your data is handled, please refer to the Data Security Policies of each provider.","source":{"doc":"inference-providers-security","title":"Security & Compliance \\u00b7 Hugging Face","url":"https://huggingface.co/docs/inference-providers/security","capturedAt":"2026-11-08T21:38:13Z","sha256":"8a1196958384b37f19b7e0cd154a3dc9143ec912af9d30f1ecdf1f69213b26b2"}}]},"deletion_window":{"summary":"No deletion process for routing logs is described. When you cancel your account, Hugging Face uses reasonable efforts to delete your information within 90 days.","status":"stated","cites":[{"quote":"Upon cancellation of your Account, we will use commercially **reasonable efforts to delete** your information and Content of your own Repositories, whether public or private, within 90 days.","source":{"doc":"terms-of-service","title":"Terms of Service \\u2013 Hugging Face","url":"https://huggingface.co/terms-of-service","capturedAt":"2026-11-08T21:38:13Z","sha256":"316d42672bc98db18ad6829dce7dbd2e72725db8b1930e986030941a05e1f698"}}]},"retention_exceptions":{"summary":"Hugging Face may keep information for legal or regulatory compliance and in standard archiving and backup processes. No durations are given.","status":"stated","cites":[{"quote":"We also reserve the **right to retain** **your information** for legal or regulatory compliance, pursuant to standard archiving, recovery, and back-up processes and practices, and pursuant to our Privacy Policy.","source":{"doc":"terms-of-service","title":"Terms of Service \\u2013 Hugging Face","url":"https://huggingface.co/terms-of-service","capturedAt":"2026-11-08T21:38:13Z","sha256":"316d42672bc98db18ad6829dce7dbd2e72725db8b1930e986030941a05e1f698"}}]},"zdr":{"summary":"There is no named ZDR program. Inferred: Hugging Face stores no payloads and its logs exclude user data, so its layer is near-zero retention. Upstream providers set their own terms.","status":"inferred","cites":[{"quote":"We do not store the request body or response when routing requests through Hugging Face.","source":{"doc":"inference-providers-security","title":"Security & Compliance \\u00b7 Hugging Face","url":"https://huggingface.co/docs/inference-providers/security","capturedAt":"2026-11-08T21:38:13Z","sha256":"8a1196958384b37f19b7e0cd154a3dc9143ec912af9d30f1ecdf1f69213b26b2"}},{"quote":"For more information on how your data is handled, please refer to the Data Security Policies of each provider.","source":{"doc":"inference-providers-security","title":"Security & Compliance \\u00b7 Hugging Face","url":"https://huggingface.co/docs/inference-providers/security","capturedAt":"2026-11-08T21:38:13Z","sha256":"8a1196958384b37f19b7e0cd154a3dc9143ec912af9d30f1ecdf1f69213b26b2"}}]},"training_default":{"summary":"Hugging Face says it doesn't store user data for training. Whether upstream providers train on requests depends on their own policies, which aren't captured.","status":"stated","cites":[{"quote":"Hugging Face does not store any user data for training purposes.","source":{"doc":"inference-providers-security","title":"Security & Compliance \\u00b7 Hugging Face","url":"https://huggingface.co/docs/inference-providers/security","capturedAt":"2026-11-08T21:38:13Z","sha256":"8a1196958384b37f19b7e0cd154a3dc9143ec912af9d30f1ecdf1f69213b26b2"}}]},"training_opt_out":{"summary":"No opt-out is described, either for Hugging Face or for the upstream providers.","status":"not_stated","cites":[]},"human_review":{"summary":"The captured policies don't say whether people review routed requests.","status":"not_stated","cites":[]},"memory":{"summary":"No memory or profile feature is described.","status":"not_stated","cites":[]},"connector_data":{"summary":"No connected-account data handling is described.","status":"not_stated","cites":[]},"agent_actions":{"summary":"No agent action logging or credential storage is described.","status":"not_stated","cites":[]},"input_ownership":{"summary":"The Terms say you own the Content you create. Inferred to cover API inputs: Content means material on the Website or Hub, and API requests aren't mentioned.","status":"inferred","cites":[{"quote":"**You own the Content you create**!","source":{"doc":"terms-of-service","title":"Terms of Service \\u2013 Hugging Face","url":"https://huggingface.co/terms-of-service","capturedAt":"2026-11-08T21:38:13Z","sha256":"316d42672bc98db18ad6829dce7dbd2e72725db8b1930e986030941a05e1f698"}}]},"output_ownership":{"summary":"Who owns model outputs isn't stated.","status":"not_stated","cites":[]},"license_to_provider":{"summary":"Content you make available on the Website carries a worldwide, royalty-free license to Hugging Face to provide Services. Inferred: the Terms don't say whether this covers API payloads.","status":"inferred","cites":[{"quote":"You hereby **grant us** a worldwide, royalty-free and non-exclusive license to use, display, publish, reproduce, distribute, and make derivative works of such Content **to provide Services** and as otherwise permitted under these Terms and our Privacy Policy; and,","source":{"doc":"terms-of-service","title":"Terms of Service \\u2013 Hugging Face","url":"https://huggingface.co/terms-of-service","capturedAt":"2026-11-08T21:38:13Z","sha256":"316d42672bc98db18ad6829dce7dbd2e72725db8b1930e986030941a05e1f698"}}]},"third_party_sharing":{"summary":"Requests go to external inference providers, which handle data and security under their own policies. Hugging Face lists infrastructure subprocessors and says it won't sell personal information.","status":"stated","cites":[{"quote":"External providers are responsible for their own security measures, so please refer to their respective security policies for more details.","source":{"doc":"inference-providers-security","title":"Security & Compliance \\u00b7 Hugging Face","url":"https://huggingface.co/docs/inference-providers/security","capturedAt":"2026-11-08T21:38:13Z","sha256":"8a1196958384b37f19b7e0cd154a3dc9143ec912af9d30f1ecdf1f69213b26b2"}},{"quote":"The Company will not sell, rent or lease your Personal Information except as provided for by this Policy.","source":{"doc":"privacy-policy","title":"Privacy Policy \\u2013 Hugging Face","url":"https://huggingface.co/privacy","capturedAt":"2026-11-08T21:38:13Z","sha256":"6906e8cf8d279a6c43b4d5fa62730b125444c2fd515e333c53fe69c2ed4de7c8"}}]},"data_location":{"summary":"Hugging Face's servers are in the US, and data may be processed in other countries. Where upstream providers process requests isn't stated.","status":"stated","cites":[{"quote":"The Company and its servers are located in the United States.","source":{"doc":"privacy-policy","title":"Privacy Policy \\u2013 Hugging Face","url":"https://huggingface.co/privacy","capturedAt":"2026-11-08T21:38:13Z","sha256":"6906e8cf8d279a6c43b4d5fa62730b125444c2fd515e333c53fe69c2ed4de7c8"}},{"quote":"Personal Information collected by the Services may be stored and processed in the United States or any other country in which the Company or its affiliates, subsidiaries or agents maintain facilities.","source":{"doc":"privacy-policy","title":"Privacy Policy \\u2013 Hugging Face","url":"https://huggingface.co/privacy","capturedAt":"2026-11-08T21:38:13Z","sha256":"6906e8cf8d279a6c43b4d5fa62730b125444c2fd515e333c53fe69c2ed4de7c8"}}]},"enterprise_controls":{"summary":"Team/Enterprise plans add organization billing, usage analytics and spending limits for Inference Providers. Routing is encrypted with TLS.","status":"stated","cites":[{"quote":"Enable organization billing for Inference Providers, monitor usage with analytics, and manage spending limits.","source":{"doc":"enterprise","title":"Team & Enterprise Plans","url":"https://huggingface.co/enterprise","capturedAt":"2026-11-08T21:39:28Z","sha256":"226ae78c6494ff2e48733bafafba5f21ac33e9eb2d315306d34df0185b997123"}},{"quote":"Inference Provider routing uses TLS/SSL to encrypt data in transit.","source":{"doc":"inference-providers-security","title":"Security & Compliance \\u00b7 Hugging Face","url":"https://huggingface.co/docs/inference-providers/security","capturedAt":"2026-11-08T21:38:13Z","sha256":"8a1196958384b37f19b7e0cd154a3dc9143ec912af9d30f1ecdf1f69213b26b2"}}]}}},{"id":"inference-endpoints","name":"Inference Endpoints (dedicated deployments)","surface":"api","facts":{"default_retention":{"summary":"Hugging Face says it doesn't store payloads or tokens sent to an endpoint. It keeps logs for 30 days, and the page doesn't say what those logs contain.","status":"stated","cites":[{"quote":"Hugging Face does not store any customer data in terms of payloads or tokens that are passed to the Inference Endpoint. We are storing logs for 30 days.","source":{"doc":"inference-endpoints-security","title":"Security & Compliance \\u00b7 Hugging Face","url":"https://huggingface.co/docs/inference-endpoints/security","capturedAt":"2026-11-08T21:39:28Z","sha256":"7bd88df08f37ddbae615c923a9188ebd39d453af7af6385a1407d5e2711234f3"}}]},"deletion_window":{"summary":"Customers can delete their endpoints. When you cancel your account, Hugging Face uses reasonable efforts to delete your information and repository content within 90 days.","status":"stated","cites":[{"quote":"\"**Inference Endpoint Service**\" refers to the Hugging Face Hub service through which the Customer can create, edit, manage and delete Managed Endpoints.","source":{"doc":"terms-of-service","title":"Terms of Service \\u2013 Hugging Face","url":"https://huggingface.co/terms-of-service","capturedAt":"2026-11-08T21:38:13Z","sha256":"316d42672bc98db18ad6829dce7dbd2e72725db8b1930e986030941a05e1f698"}},{"quote":"Upon cancellation of your Account, we will use commercially **reasonable efforts to delete** your information and Content of your own Repositories, whether public or private, within 90 days.","source":{"doc":"terms-of-service","title":"Terms of Service \\u2013 Hugging Face","url":"https://huggingface.co/terms-of-service","capturedAt":"2026-11-08T21:38:13Z","sha256":"316d42672bc98db18ad6829dce7dbd2e72725db8b1930e986030941a05e1f698"}}]},"retention_exceptions":{"summary":"Hugging Face may keep information for legal compliance and in archiving and backup processes. No durations are given.","status":"stated","cites":[{"quote":"We also reserve the **right to retain** **your information** for legal or regulatory compliance, pursuant to standard archiving, recovery, and back-up processes and practices, and pursuant to our Privacy Policy.","source":{"doc":"terms-of-service","title":"Terms of Service \\u2013 Hugging Face","url":"https://huggingface.co/terms-of-service","capturedAt":"2026-11-08T21:38:13Z","sha256":"316d42672bc98db18ad6829dce7dbd2e72725db8b1930e986030941a05e1f698"}}]},"zdr":{"summary":"There is no named ZDR program. Inferred: payloads aren't stored, but logs are kept 30 days and their contents aren't described.","status":"inferred","cites":[{"quote":"Hugging Face does not store any customer data in terms of payloads or tokens that are passed to the Inference Endpoint. We are storing logs for 30 days.","source":{"doc":"inference-endpoints-security","title":"Security & Compliance \\u00b7 Hugging Face","url":"https://huggingface.co/docs/inference-endpoints/security","capturedAt":"2026-11-08T21:39:28Z","sha256":"7bd88df08f37ddbae615c923a9188ebd39d453af7af6385a1407d5e2711234f3"}}]},"training_default":{"summary":"Probably not, but inferred: the page says payloads aren't stored, yet never directly addresses training.","status":"inferred","cites":[{"quote":"Hugging Face does not store any customer data in terms of payloads or tokens that are passed to the Inference Endpoint.","source":{"doc":"inference-endpoints-security","title":"Security & Compliance \\u00b7 Hugging Face","url":"https://huggingface.co/docs/inference-endpoints/security","capturedAt":"2026-11-08T21:39:28Z","sha256":"7bd88df08f37ddbae615c923a9188ebd39d453af7af6385a1407d5e2711234f3"}}]},"training_opt_out":{"summary":"No training opt-out is described.","status":"not_stated","cites":[]},"human_review":{"summary":"The captured policies don't say whether people review endpoint traffic.","status":"not_stated","cites":[]},"memory":{"summary":"No memory or profile feature is described.","status":"not_stated","cites":[]},"connector_data":{"summary":"No connected-account data handling is described.","status":"not_stated","cites":[]},"agent_actions":{"summary":"No agent action logging or credential storage is described.","status":"not_stated","cites":[]},"input_ownership":{"summary":"Hugging Face says it doesn't own models or data you upload to the Hub. The page doesn't specifically address endpoint payloads.","status":"stated","cites":[{"quote":"Hugging Face does not own any model or data you upload to the Hugging Face hub.","source":{"doc":"inference-endpoints-security","title":"Security & Compliance \\u00b7 Hugging Face","url":"https://huggingface.co/docs/inference-endpoints/security","capturedAt":"2026-11-08T21:39:28Z","sha256":"7bd88df08f37ddbae615c923a9188ebd39d453af7af6385a1407d5e2711234f3"}}]},"output_ownership":{"summary":"Who owns endpoint outputs isn't stated.","status":"not_stated","cites":[]},"license_to_provider":{"summary":"Content made available on the Website carries a worldwide, royalty-free license to provide Services. Inferred to cover model repos you deploy. The Terms don't say whether it covers payloads.","status":"inferred","cites":[{"quote":"You hereby **grant us** a worldwide, royalty-free and non-exclusive license to use, display, publish, reproduce, distribute, and make derivative works of such Content **to provide Services** and as otherwise permitted under these Terms and our Privacy Policy; and,","source":{"doc":"terms-of-service","title":"Terms of Service \\u2013 Hugging Face","url":"https://huggingface.co/terms-of-service","capturedAt":"2026-11-08T21:38:13Z","sha256":"316d42672bc98db18ad6829dce7dbd2e72725db8b1930e986030941a05e1f698"}}]},"third_party_sharing":{"summary":"Private endpoints connect over AWS or Azure PrivateLink. AWS and Google Cloud appear in the general subprocessor list. Hugging Face says it won't sell personal information.","status":"stated","cites":[{"quote":"A Private Endpoint is only available through an intra-region secured AWS or Azure PrivateLink connection.","source":{"doc":"inference-endpoints-security","title":"Security & Compliance \\u00b7 Hugging Face","url":"https://huggingface.co/docs/inference-endpoints/security","capturedAt":"2026-11-08T21:39:28Z","sha256":"7bd88df08f37ddbae615c923a9188ebd39d453af7af6385a1407d5e2711234f3"}},{"quote":"Amazon Web Services, Inc. \\| Hosting/Infrastructure \\| United States","source":{"doc":"privacy-policy","title":"Privacy Policy \\u2013 Hugging Face","url":"https://huggingface.co/privacy","capturedAt":"2026-11-08T21:38:13Z","sha256":"6906e8cf8d279a6c43b4d5fa62730b125444c2fd515e333c53fe69c2ed4de7c8"}},{"quote":"The Company will not sell, rent or lease your Personal Information except as provided for by this Policy.","source":{"doc":"privacy-policy","title":"Privacy Policy \\u2013 Hugging Face","url":"https://huggingface.co/privacy","capturedAt":"2026-11-08T21:38:13Z","sha256":"6906e8cf8d279a6c43b4d5fa62730b125444c2fd515e333c53fe69c2ed4de7c8"}}]},"data_location":{"summary":"Private endpoints use intra-region PrivateLink. The captured policies don't describe region choices. The general policy says servers are in the US, with possible processing elsewhere.","status":"stated","cites":[{"quote":"A Private Endpoint is only available through an intra-region secured AWS or Azure PrivateLink connection. Private Endpoints are not accessible from the internet.","source":{"doc":"inference-endpoints-security","title":"Security & Compliance \\u00b7 Hugging Face","url":"https://huggingface.co/docs/inference-endpoints/security","capturedAt":"2026-11-08T21:39:28Z","sha256":"7bd88df08f37ddbae615c923a9188ebd39d453af7af6385a1407d5e2711234f3"}},{"quote":"The Company and its servers are located in the United States.","source":{"doc":"privacy-policy","title":"Privacy Policy \\u2013 Hugging Face","url":"https://huggingface.co/privacy","capturedAt":"2026-11-08T21:38:13Z","sha256":"6906e8cf8d279a6c43b4d5fa62730b125444c2fd515e333c53fe69c2ed4de7c8"}}]},"enterprise_controls":{"summary":"Three access levels (public, protected, private). A GDPR DPA comes with Enterprise Hub. SOC2 Type 2 and role-based access control are offered, and AWS PrivateLink is recommended.","status":"stated","cites":[{"quote":"Hugging Face also offers GDPR data processing agreement through an Enterprise Hub subscription.","source":{"doc":"inference-endpoints-security","title":"Security & Compliance \\u00b7 Hugging Face","url":"https://huggingface.co/docs/inference-endpoints/security","capturedAt":"2026-11-08T21:39:28Z","sha256":"7bd88df08f37ddbae615c923a9188ebd39d453af7af6385a1407d5e2711234f3"}},{"quote":"The Hugging Face Hub, and Inference Endpoints, is SOC2 Type 2 certified. The Hugging Face Hub also offers Role Based Access Control.","source":{"doc":"inference-endpoints-security","title":"Security & Compliance \\u00b7 Hugging Face","url":"https://huggingface.co/docs/inference-endpoints/security","capturedAt":"2026-11-08T21:39:28Z","sha256":"7bd88df08f37ddbae615c923a9188ebd39d453af7af6385a1407d5e2711234f3"}}]}}},{"id":"enterprise-hub","name":"Hugging Face Hub with Team & Enterprise plans","surface":"enterprise","facts":{"default_retention":{"summary":"Data is kept as long as needed for the Services, legal requirements, security and legitimate interests. No fixed period is given. Repository content stays until you delete it or cancel.","status":"stated","cites":[{"quote":"We retain your Information for as long as necessary to deliver the Services, to comply with any applicable legal requirements, to maintain security and prevent incidents and, in general, to pursue our legitimate interests.","source":{"doc":"privacy-policy","title":"Privacy Policy \\u2013 Hugging Face","url":"https://huggingface.co/privacy","capturedAt":"2026-11-08T21:38:13Z","sha256":"6906e8cf8d279a6c43b4d5fa62730b125444c2fd515e333c53fe69c2ed4de7c8"}}]},"deletion_window":{"summary":"After cancellation, Hugging Face uses reasonable efforts to delete your information and own repos within 90 days. Contributions to others' repos stay. Full erasure needs an email request.","status":"stated","cites":[{"quote":"Upon cancellation of your Account, we will use commercially **reasonable efforts to delete** your information and Content of your own Repositories, whether public or private, within 90 days. We will **not delete the Content that you contributed** to other Users' Repositories, or copies made by us or other Users.","source":{"doc":"terms-of-service","title":"Terms of Service \\u2013 Hugging Face","url":"https://huggingface.co/terms-of-service","capturedAt":"2026-11-08T21:38:13Z","sha256":"316d42672bc98db18ad6829dce7dbd2e72725db8b1930e986030941a05e1f698"}},{"quote":"If you wish to request the erasure of all of your Personal Information that we process, you may do so by sending a written request to <privacy@huggingface.co>.","source":{"doc":"privacy-policy","title":"Privacy Policy \\u2013 Hugging Face","url":"https://huggingface.co/privacy","capturedAt":"2026-11-08T21:38:13Z","sha256":"6906e8cf8d279a6c43b4d5fa62730b125444c2fd515e333c53fe69c2ed4de7c8"}}]},"retention_exceptions":{"summary":"Information may be kept for legal or regulatory compliance and in standard archiving, recovery and backup processes. No durations are given.","status":"stated","cites":[{"quote":"We also reserve the **right to retain** **your information** for legal or regulatory compliance, pursuant to standard archiving, recovery, and back-up processes and practices, and pursuant to our Privacy Policy.","source":{"doc":"terms-of-service","title":"Terms of Service \\u2013 Hugging Face","url":"https://huggingface.co/terms-of-service","capturedAt":"2026-11-08T21:38:13Z","sha256":"316d42672bc98db18ad6829dce7dbd2e72725db8b1930e986030941a05e1f698"}}]},"zdr":{"summary":"Not applicable to Hub storage, and no zero-retention option is described.","status":"not_stated","cites":[]},"training_default":{"summary":"The captured policies don't say whether Hub content (private repos, datasets) is used to train models.","status":"not_stated","cites":[]},"training_opt_out":{"summary":"No training opt-out is described.","status":"not_stated","cites":[]},"human_review":{"summary":"Private content is confidential, but Hugging Face may access it with your consent, or without consent for security or legal compliance.","status":"stated","cites":[{"quote":"The Company also reserves the right to access this information with your consent, or without your consent only for the purposes of pursuing legitimate interests such as maintaining security on its Services or complying with any legal or regulatory obligations.","source":{"doc":"privacy-policy","title":"Privacy Policy \\u2013 Hugging Face","url":"https://huggingface.co/privacy","capturedAt":"2026-11-08T21:38:13Z","sha256":"6906e8cf8d279a6c43b4d5fa62730b125444c2fd515e333c53fe69c2ed4de7c8"}}]},"memory":{"summary":"No memory or profile feature is described.","status":"not_stated","cites":[]},"connector_data":{"summary":"No connected-account data handling is described.","status":"not_stated","cites":[]},"agent_actions":{"summary":"No agent features are described. Audit logs of org actions and centralized token management are offered, but these cover user activity, not agent actions.","status":"not_stated","cites":[]},"input_ownership":{"summary":"You own the Content you create, and Hugging Face doesn't own models or data you upload. Hugging Face says it won't sell your Content.","status":"stated","cites":[{"quote":"**You own the Content you create**! We will not sell your Content, nor will we use it in any other way as permitted under these Terms.","source":{"doc":"terms-of-service","title":"Terms of Service \\u2013 Hugging Face","url":"https://huggingface.co/terms-of-service","capturedAt":"2026-11-08T21:38:13Z","sha256":"316d42672bc98db18ad6829dce7dbd2e72725db8b1930e986030941a05e1f698"}},{"quote":"Hugging Face does not own any model or data you upload to the Hugging Face hub.","source":{"doc":"inference-endpoints-security","title":"Security & Compliance \\u00b7 Hugging Face","url":"https://huggingface.co/docs/inference-endpoints/security","capturedAt":"2026-11-08T21:39:28Z","sha256":"7bd88df08f37ddbae615c923a9188ebd39d453af7af6385a1407d5e2711234f3"}}]},"output_ownership":{"summary":"Ownership of models trained on the platform (for example, AutoTrain) or other outputs isn't separately stated.","status":"not_stated","cites":[]},"license_to_provider":{"summary":"You grant Hugging Face a worldwide, royalty-free, non-exclusive license to provide Services. Public repos also grant every user a perpetual, irrevocable license. Feedback is licensed perpetually and irrevocably.","status":"stated","cites":[{"quote":"You hereby **grant us** a worldwide, royalty-free and non-exclusive license to use, display, publish, reproduce, distribute, and make derivative works of such Content **to provide Services** and as otherwise permitted under these Terms and our Privacy Policy; and,","source":{"doc":"terms-of-service","title":"Terms of Service \\u2013 Hugging Face","url":"https://huggingface.co/terms-of-service","capturedAt":"2026-11-08T21:38:13Z","sha256":"316d42672bc98db18ad6829dce7dbd2e72725db8b1930e986030941a05e1f698"}},{"quote":"If you decide to set your Repository **public**, you **grant each User** a perpetual, irrevocable, worldwide, royalty-free, non-exclusive license to use, display, publish, reproduce, distribute, and make derivative works of your Content through our Services and functionalities;","source":{"doc":"terms-of-service","title":"Terms of Service \\u2013 Hugging Face","url":"https://huggingface.co/terms-of-service","capturedAt":"2026-11-08T21:38:13Z","sha256":"316d42672bc98db18ad6829dce7dbd2e72725db8b1930e986030941a05e1f698"}},{"quote":"you hereby grant us a perpetual, irrevocable, worldwide, royalty-free, and non-exclusive right and license to exploit and commercialize the Feedback, improve the Services, and develop and/or commercialize new offerings, which we will solely and exclusively own.","source":{"doc":"terms-of-service","title":"Terms of Service \\u2013 Hugging Face","url":"https://huggingface.co/terms-of-service","capturedAt":"2026-11-08T21:38:13Z","sha256":"316d42672bc98db18ad6829dce7dbd2e72725db8b1930e986030941a05e1f698"}}]},"third_party_sharing":{"summary":"There's no sale of personal info. Data is shared with affiliates and listed subprocessors (AWS, GCP, MongoDB, Stripe and others). Anonymous aggregate data may go to advertisers.","status":"stated","cites":[{"quote":"The Company will not sell, rent or lease your Personal Information except as provided for by this Policy.","source":{"doc":"privacy-policy","title":"Privacy Policy \\u2013 Hugging Face","url":"https://huggingface.co/privacy","capturedAt":"2026-11-08T21:38:13Z","sha256":"6906e8cf8d279a6c43b4d5fa62730b125444c2fd515e333c53fe69c2ed4de7c8"}},{"quote":"The Company may disclose Anonymous Information (with or without compensation) to third parties, including advertisers and partners, for purposes including, but not limited to, targeting advertisements.","source":{"doc":"privacy-policy","title":"Privacy Policy \\u2013 Hugging Face","url":"https://huggingface.co/privacy","capturedAt":"2026-11-08T21:38:13Z","sha256":"6906e8cf8d279a6c43b4d5fa62730b125444c2fd515e333c53fe69c2ed4de7c8"}},{"quote":"Google Cloud Platform \\| Hosting/Infrastructure \\| United States/EMEA","source":{"doc":"privacy-policy","title":"Privacy Policy \\u2013 Hugging Face","url":"https://huggingface.co/privacy","capturedAt":"2026-11-08T21:38:13Z","sha256":"6906e8cf8d279a6c43b4d5fa62730b125444c2fd515e333c53fe69c2ed4de7c8"}}]},"data_location":{"summary":"Enterprise plans let you select, manage and audit where repository data is stored. Otherwise servers are in the US, and data may be transferred to other countries.","status":"stated","cites":[{"quote":"Select, manage, and audit the location of your repository data.","source":{"doc":"enterprise","title":"Team & Enterprise Plans","url":"https://huggingface.co/enterprise","capturedAt":"2026-11-08T21:39:28Z","sha256":"226ae78c6494ff2e48733bafafba5f21ac33e9eb2d315306d34df0185b997123"}},{"quote":"The Company and its servers are located in the United States.","source":{"doc":"privacy-policy","title":"Privacy Policy \\u2013 Hugging Face","url":"https://huggingface.co/privacy","capturedAt":"2026-11-08T21:38:13Z","sha256":"6906e8cf8d279a6c43b4d5fa62730b125444c2fd515e333c53fe69c2ed4de7c8"}}]},"enterprise_controls":{"summary":"Plans offer SSO, storage regions, audit logs, resource groups, token management and org-wide security policies. GDPR DPAs and Business Associate Addendums are available on the Enterprise Plan.","status":"stated","cites":[{"quote":"Connect securely to your identity provider with SSO integration.","source":{"doc":"enterprise","title":"Team & Enterprise Plans","url":"https://huggingface.co/enterprise","capturedAt":"2026-11-08T21:39:28Z","sha256":"226ae78c6494ff2e48733bafafba5f21ac33e9eb2d315306d34df0185b997123"}},{"quote":"Stay in control with comprehensive logs that report on actions taken.","source":{"doc":"enterprise","title":"Team & Enterprise Plans","url":"https://huggingface.co/enterprise","capturedAt":"2026-11-08T21:39:28Z","sha256":"226ae78c6494ff2e48733bafafba5f21ac33e9eb2d315306d34df0185b997123"}},{"quote":"Centralized token control and custom approval policies for organization access.","source":{"doc":"enterprise","title":"Team & Enterprise Plans","url":"https://huggingface.co/enterprise","capturedAt":"2026-11-08T21:39:28Z","sha256":"226ae78c6494ff2e48733bafafba5f21ac33e9eb2d315306d34df0185b997123"}},{"quote":"Hugging Face can also offer Business Associate Addendums or GDPR data processing agreements through an [Enterprise Plan](https://huggingface.co/pricing).","source":{"doc":"hub-security","title":"Security \\u00b7 Hugging Face","url":"https://huggingface.co/docs/hub/security","capturedAt":"2026-11-08T21:39:28Z","sha256":"365d1db8994811d9a2dbf34d8c2190106920cdb25f551aeaa25867ca98a322a4"}}]}}}],"notes":[{"text":"Making a repository public grants every user a perpetual, irrevocable license to your content, so deleting your account later doesn't revoke it. Contributions to others' repos also aren't deleted.","cites":[{"quote":"If you decide to set your Repository **public**, you **grant each User** a perpetual, irrevocable, worldwide, royalty-free, non-exclusive license to use, display, publish, reproduce, distribute, and make derivative works of your Content through our Services and functionalities;","source":{"doc":"terms-of-service","title":"Terms of Service \\u2013 Hugging Face","url":"https://huggingface.co/terms-of-service","capturedAt":"2026-11-08T21:38:13Z","sha256":"316d42672bc98db18ad6829dce7dbd2e72725db8b1930e986030941a05e1f698"}},{"quote":"We will **not delete the Content that you contributed** to other Users' Repositories, or copies made by us or other Users.","source":{"doc":"terms-of-service","title":"Terms of Service \\u2013 Hugging Face","url":"https://huggingface.co/terms-of-service","capturedAt":"2026-11-08T21:38:13Z","sha256":"316d42672bc98db18ad6829dce7dbd2e72725db8b1930e986030941a05e1f698"}}]},{"text":"Inference Providers is a router. Hugging Face says it keeps no payloads, but defers retention and training to each upstream provider's policy, and none of those are in the captured policies.","cites":[{"quote":"For more information on how your data is handled, please refer to the Data Security Policies of each provider.","source":{"doc":"inference-providers-security","title":"Security & Compliance \\u00b7 Hugging Face","url":"https://huggingface.co/docs/inference-providers/security","capturedAt":"2026-11-08T21:38:13Z","sha256":"8a1196958384b37f19b7e0cd154a3dc9143ec912af9d30f1ecdf1f69213b26b2"}}]},{"text":"Hugging Face may disclose anonymous or aggregated information to advertisers and partners, possibly for compensation, including for ad targeting.","cites":[{"quote":"The Company may disclose Anonymous Information (with or without compensation) to third parties, including advertisers and partners, for purposes including, but not limited to, targeting advertisements.","source":{"doc":"privacy-policy","title":"Privacy Policy \\u2013 Hugging Face","url":"https://huggingface.co/privacy","capturedAt":"2026-11-08T21:38:13Z","sha256":"6906e8cf8d279a6c43b4d5fa62730b125444c2fd515e333c53fe69c2ed4de7c8"}}]},{"text":"The Terms let Hugging Face aggregate, anonymize or otherwise learn from data about your use of the Services. Whether this reaches content as well as usage isn't spelled out.","cites":[{"quote":"In addition and subject to our Privacy Policy, we may **aggregate**, anonymize, or otherwise learn from data relating to your use of the Services, and use the foregoing to improve those Services.","source":{"doc":"terms-of-service","title":"Terms of Service \\u2013 Hugging Face","url":"https://huggingface.co/terms-of-service","capturedAt":"2026-11-08T21:38:13Z","sha256":"316d42672bc98db18ad6829dce7dbd2e72725db8b1930e986030941a05e1f698"}}]},{"text":"The policies are old (Privacy Policy effective March 2023, Terms September 2022). Changes take effect 10 days after posting.","cites":[{"quote":"**🗓 Effective Date: March 28, 2023**","source":{"doc":"privacy-policy","title":"Privacy Policy \\u2013 Hugging Face","url":"https://huggingface.co/privacy","capturedAt":"2026-11-08T21:38:13Z","sha256":"6906e8cf8d279a6c43b4d5fa62730b125444c2fd515e333c53fe69c2ed4de7c8"}},{"quote":"Changes will be effective 10 days following posting on the Website.","source":{"doc":"terms-of-service","title":"Terms of Service \\u2013 Hugging Face","url":"https://huggingface.co/terms-of-service","capturedAt":"2026-11-08T21:38:13Z","sha256":"316d42672bc98db18ad6829dce7dbd2e72725db8b1930e986030941a05e1f698"}}]}],"gaps":["HuggingChat: no captured policy covers it (retention, training, memory, deletion). It would need the HuggingChat privacy page (huggingface.co/chat/privacy) to be captured.","Upstream provider retention and training policies for Inference Providers: not in the captured policies. Each provider's data security policy is linked from the Inference Providers docs.","What the 30-day Inference Endpoints logs contain (for example, whether request content appears in container or application logs): not stated. Likely in the Inference Endpoints logs/monitoring docs.","Whether Hub content (private repos, datasets) can be used to train Hugging Face models: not stated. Likely in the Supplemental Terms PDF or the Content Policy.","Whether the Services license to Hugging Face ends when content is deleted or the account terminates: not stated. Likely in the Supplemental Terms or the Enterprise DPA.","Storage-region options and DPA terms for Enterprise Hub: only feature blurbs are captured. Likely in docs/hub/storage-regions and the Enterprise DPA."],"documents":[{"doc":"privacy-policy","title":"Privacy Policy \\u2013 Hugging Face","url":"https://huggingface.co/privacy","capturedAt":"2026-11-08T21:38:13Z","sha256":"6906e8cf8d279a6c43b4d5fa62730b125444c2fd515e333c53fe69c2ed4de7c8"},{"doc":"hub-security","title":"Security \\u00b7 Hugging Face","url":"https://huggingface.co/docs/hub/security","capturedAt":"2026-11-08T21:39:28Z","sha256":"365d1db8994811d9a2dbf34d8c2190106920cdb25f551aeaa25867ca98a322a4"},{"doc":"inference-endpoints-security","title":"Security & Compliance \\u00b7 Hugging Face","url":"https://huggingface.co/docs/inference-endpoints/security","capturedAt":"2026-11-08T21:39:28Z","sha256":"7bd88df08f37ddbae615c923a9188ebd39d453af7af6385a1407d5e2711234f3"},{"doc":"inference-providers-security","title":"Security & Compliance \\u00b7 Hugging Face","url":"https://huggingface.co/docs/inference-providers/security","capturedAt":"2026-11-08T21:38:13Z","sha256":"8a1196958384b37f19b7e0cd154a3dc9143ec912af9d30f1ecdf1f69213b26b2"},{"doc":"enterprise","title":"Team & Enterprise Plans","url":"https://huggingface.co/enterprise","capturedAt":"2026-11-08T21:39:28Z","sha256":"226ae78c6494ff2e48733bafafba5f21ac33e9eb2d315306d34df0185b997123"},{"doc":"terms-of-service","title":"Terms of Service \\u2013 Hugging Face","url":"https://huggingface.co/terms-of-service","capturedAt":"2026-11-08T21:38:13Z","sha256":"316d42672bc98db18ad6829dce7dbd2e72725db8b1930e986030941a05e1f698"}],"url":"https://gjalla.io/data-policies/huggingface/"},{"id":"instinct","provider":"instinct","name":"Instinct","category":"agent-assistant","checkedOn":"2026-11-08","products":[{"id":"assistant","name":"Instinct personal assistant (text, web, Mac and mobile apps)","surface":"agent","facts":{"default_retention":{"summary":"Neither the privacy policy nor the Terms gives any retention period for messages, outputs, connector data, action records or logs.","status":"not_stated","cites":[]},"deletion_window":{"summary":"No timeframe. The Terms say that on account deletion Instinct 'may, but is not obligated to' delete your Materials. Per the privacy policy, account deletion removes Google Workspace data.","status":"stated","cites":[{"quote":"In the event of Account deletion for any reason, the Company may, but is not obligated to, delete any of your Materials. The Company shall not be responsible for the failure to delete or deletion of your Materials.","source":{"doc":"terms","title":"Terms of Service","url":"https://instinct.com/terms","capturedAt":"2026-11-08T22:05:01Z","sha256":"66f4f323fa5de9b651f2ddc872b0ceeaea4c10350fd5dcd10278f80d51e0b5a3"}},{"quote":"You may also delete the information we previously collected from Google Workspace by deleting your account within Instinct's Workspace.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://instinct.com/privacy-policy","capturedAt":"2026-11-08T22:05:01Z","sha256":"f99c30130cb89f202b5486ea2e5509747b5ce803d54c478dfffab4c20084dfe1"}},{"quote":"You can delete all data indexed from external sources by visiting [app.instinct.com/workspace](https://app.instinct.com/workspace).","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://instinct.com/privacy-policy","capturedAt":"2026-11-08T22:05:01Z","sha256":"f99c30130cb89f202b5486ea2e5509747b5ce803d54c478dfffab4c20084dfe1"}}]},"retention_exceptions":{"summary":"No legal-hold, backup, abuse-monitoring or safety-flag retention periods are stated. (Safety-flagged content can still be used for training after opt-out; see training_opt_out.)","status":"not_stated","cites":[]},"zdr":{"summary":"No zero data retention option is mentioned.","status":"not_stated","cites":[]},"training_default":{"summary":"Yes, unless you opt out. Your information and Materials (inputs, outputs and connected-service data) are used to train AI models. Google Workspace data and Vault items are excluded.","status":"stated","cites":[{"quote":"we use certain information collected through your use of the Services, including as described in this section, to develop and improve our products and technologies, including to evaluate, fine-tune, and train the AI models that power our products and technology.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://instinct.com/privacy-policy","capturedAt":"2026-11-08T22:05:01Z","sha256":"f99c30130cb89f202b5486ea2e5509747b5ce803d54c478dfffab4c20084dfe1"}},{"quote":"You agree that we may use Materials to develop, provide, maintain and improve the Services and our other products and services, including training AI models, and for any purpose specified in our Privacy Notice, subject to your opt-out rights and Vault materials as outlined below.","source":{"doc":"terms","title":"Terms of Service","url":"https://instinct.com/terms","capturedAt":"2026-11-08T22:05:01Z","sha256":"66f4f323fa5de9b651f2ddc872b0ceeaea4c10350fd5dcd10278f80d51e0b5a3"}},{"quote":"For clarity, data collected by the Services from your Connected Services is considered your Input, and data generated and provided by the Services to Connected Services is considered your Output.","source":{"doc":"terms","title":"Terms of Service","url":"https://instinct.com/terms","capturedAt":"2026-11-08T22:05:01Z","sha256":"66f4f323fa5de9b651f2ddc872b0ceeaea4c10350fd5dcd10278f80d51e0b5a3"}},{"quote":"**However, for Materials that you add to our feature of the Service known as the \"Vault\" (or its successor name), we will only use such Materials to provide the Services to you and will not use such Materials to train AI models.**","source":{"doc":"terms","title":"Terms of Service","url":"https://instinct.com/terms","capturedAt":"2026-11-08T22:05:01Z","sha256":"66f4f323fa5de9b651f2ddc872b0ceeaea4c10350fd5dcd10278f80d51e0b5a3"}},{"quote":"We do not use information received from Google Workspace APIs to evaluate, fine-tune, train, or improve AI models, or for serving ads, including retargeting, personalized or interested-based advertising.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://instinct.com/privacy-policy","capturedAt":"2026-11-08T22:05:01Z","sha256":"f99c30130cb89f202b5486ea2e5509747b5ce803d54c478dfffab4c20084dfe1"}}]},"training_opt_out":{"summary":"Opt out at app.instinct.com/settings. It only works going forward. Safety-flagged content can still be trained on, models already trained on your data are kept, and non-training improvements continue.","status":"stated","cites":[{"quote":"If you do not want us to use your information to train AI models, you can opt out by visiting [app.instinct.com/settings](https://app.instinct.com/settings).","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://instinct.com/privacy-policy","capturedAt":"2026-11-08T22:05:01Z","sha256":"f99c30130cb89f202b5486ea2e5509747b5ce803d54c478dfffab4c20084dfe1"}},{"quote":"Even if you opt out, we may still use your information for AI model training when that information is flagged for safety review to improve our ability to detect harmful content, enforce our policies, or advance our safety research.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://instinct.com/privacy-policy","capturedAt":"2026-11-08T22:05:01Z","sha256":"f99c30130cb89f202b5486ea2e5509747b5ce803d54c478dfffab4c20084dfe1"}},{"quote":"This opt out applies on a go-forward basis and applies only to model training and not, for clarity, other types of improvements to the Services.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://instinct.com/privacy-policy","capturedAt":"2026-11-08T22:05:01Z","sha256":"f99c30130cb89f202b5486ea2e5509747b5ce803d54c478dfffab4c20084dfe1"}},{"quote":"We may still use AI models previously trained, fine-tuned or improved on your information prior to your opting out.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://instinct.com/privacy-policy","capturedAt":"2026-11-08T22:05:01Z","sha256":"f99c30130cb89f202b5486ea2e5509747b5ce803d54c478dfffab4c20084dfe1"}}]},"human_review":{"summary":"Inferred: content can be 'flagged for safety review', and log data may be reviewed when you report a bug. Neither page says whether or when staff read your conversations.","status":"inferred","cites":[{"quote":"Even if you opt out, we may still use your information for AI model training when that information is flagged for safety review to improve our ability to detect harmful content, enforce our policies, or advance our safety research.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://instinct.com/privacy-policy","capturedAt":"2026-11-08T22:05:01Z","sha256":"f99c30130cb89f202b5486ea2e5509747b5ce803d54c478dfffab4c20084dfe1"}},{"quote":"In addition to the uses of Usage Data described above, we may review and use this information for safety and security purposes when you report a bug.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://instinct.com/privacy-policy","capturedAt":"2026-11-08T22:05:01Z","sha256":"f99c30130cb89f202b5486ea2e5509747b5ce803d54c478dfffab4c20084dfe1"}}]},"memory":{"summary":"Inferred: the assistant personalizes using your past interactions, and a 'Vault' holds Materials used only to serve you. No memory feature is described, nor how to view or delete it.","status":"inferred","cites":[{"quote":"generate responses and provide you with personalized suggestions based on the context of your interactions and prior experience with the Services","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://instinct.com/privacy-policy","capturedAt":"2026-11-08T22:05:01Z","sha256":"f99c30130cb89f202b5486ea2e5509747b5ce803d54c478dfffab4c20084dfe1"}},{"quote":"**However, for Materials that you add to our feature of the Service known as the \"Vault\" (or its successor name), we will only use such Materials to provide the Services to you and will not use such Materials to train AI models.**","source":{"doc":"terms","title":"Terms of Service","url":"https://instinct.com/terms","capturedAt":"2026-11-08T22:05:01Z","sha256":"66f4f323fa5de9b651f2ddc872b0ceeaea4c10350fd5dcd10278f80d51e0b5a3"}}]},"connector_data":{"summary":"Instinct copies and indexes connected-account data. Disconnecting doesn't delete it, and Instinct may keep using it until you request deletion at app.instinct.com/workspace. Google Workspace data isn't used for training.","status":"stated","cites":[{"quote":"You also authorize us to access, copy, collect, and index data from your Connected Services, exchange data with your Connected Services and take Actions on Connected Services on your behalf.","source":{"doc":"terms","title":"Terms of Service","url":"https://instinct.com/terms","capturedAt":"2026-11-08T22:05:01Z","sha256":"66f4f323fa5de9b651f2ddc872b0ceeaea4c10350fd5dcd10278f80d51e0b5a3"}},{"quote":"Note, even if you disconnect a Connected Service, we may still use the indexed Connected Service Input data unless you follow the instructions to request deletion.","source":{"doc":"terms","title":"Terms of Service","url":"https://instinct.com/terms","capturedAt":"2026-11-08T22:05:01Z","sha256":"66f4f323fa5de9b651f2ddc872b0ceeaea4c10350fd5dcd10278f80d51e0b5a3"}},{"quote":"Please note that disconnecting a third-party integration does not automatically delete data collected from that integration.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://instinct.com/privacy-policy","capturedAt":"2026-11-08T22:05:01Z","sha256":"f99c30130cb89f202b5486ea2e5509747b5ce803d54c478dfffab4c20084dfe1"}},{"quote":"If you choose to link your Google Workspace to the Services, we receive access to your Google Calendar, Gmail, Google Drive, Google Docs, Google Sheets, Google Slides and Google Tasks","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://instinct.com/privacy-policy","capturedAt":"2026-11-08T22:05:01Z","sha256":"f99c30130cb89f202b5486ea2e5509747b5ce803d54c478dfffab4c20084dfe1"}},{"quote":"In particular, we do not disclose raw or derived Workspace or Photos API user data to third party AI services, including third-party AI model providers, for model training or secondary purposes.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://instinct.com/privacy-policy","capturedAt":"2026-11-08T22:05:01Z","sha256":"f99c30130cb89f202b5486ea2e5509747b5ce803d54c478dfffab4c20084dfe1"}}]},"agent_actions":{"summary":"The agent acts autonomously, including purchases and binding agreements as your appointed agent. You may give it passwords and card details; storage isn't described. Action records may be inaccurate.","status":"stated","cites":[{"quote":"You hereby appoint the Services as your agent to enter into agreements, commitments or transactions on your behalf or confirm your acceptance to the terms and conditions of any such third party service or application that the Services interact with on your behalf as part of such Actions. Any such agreements or commitments shall be binding on you as if entered into directly by you.","source":{"doc":"terms","title":"Terms of Service","url":"https://instinct.com/terms","capturedAt":"2026-11-08T22:05:01Z","sha256":"66f4f323fa5de9b651f2ddc872b0ceeaea4c10350fd5dcd10278f80d51e0b5a3"}},{"quote":"For example, you may provide your payment information to the personal assistant so it can book rides on your behalf or your username and password for third-party accounts so that the personal assistant can sign into these accounts on your behalf.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://instinct.com/privacy-policy","capturedAt":"2026-11-08T22:05:01Z","sha256":"f99c30130cb89f202b5486ea2e5509747b5ce803d54c478dfffab4c20084dfe1"}},{"quote":"Records of Actions available through the Services may not always be accurate. You are responsible for independently verifying the accuracy and appropriateness of Actions and regularly monitoring Actions.","source":{"doc":"terms","title":"Terms of Service","url":"https://instinct.com/terms","capturedAt":"2026-11-08T22:05:01Z","sha256":"66f4f323fa5de9b651f2ddc872b0ceeaea4c10350fd5dcd10278f80d51e0b5a3"}}]},"input_ownership":{"summary":"Instinct claims no ownership of your Materials, which include your Input (and connector data counts as Input).","status":"stated","cites":[{"quote":"The Company does not claim any ownership in your Materials","source":{"doc":"terms","title":"Terms of Service","url":"https://instinct.com/terms","capturedAt":"2026-11-08T22:05:01Z","sha256":"66f4f323fa5de9b651f2ddc872b0ceeaea4c10350fd5dcd10278f80d51e0b5a3"}},{"quote":"Inputs and Outputs are collectively referred to in these Terms as \"Materials\".","source":{"doc":"terms","title":"Terms of Service","url":"https://instinct.com/terms","capturedAt":"2026-11-08T22:05:01Z","sha256":"66f4f323fa5de9b651f2ddc872b0ceeaea4c10350fd5dcd10278f80d51e0b5a3"}}]},"output_ownership":{"summary":"Instinct claims no ownership of Outputs, but doesn't promise you hold any copyright in them, and others may get similar outputs.","status":"stated","cites":[{"quote":"The Company does not claim any ownership in your Materials","source":{"doc":"terms","title":"Terms of Service","url":"https://instinct.com/terms","capturedAt":"2026-11-08T22:05:01Z","sha256":"66f4f323fa5de9b651f2ddc872b0ceeaea4c10350fd5dcd10278f80d51e0b5a3"}},{"quote":"Due to the nature of AI technologies, the Company makes no representation or warranty to you that any copyright or other intellectual property rights will vest in any Output.","source":{"doc":"terms","title":"Terms of Service","url":"https://instinct.com/terms","capturedAt":"2026-11-08T22:05:01Z","sha256":"66f4f323fa5de9b651f2ddc872b0ceeaea4c10350fd5dcd10278f80d51e0b5a3"}}]},"license_to_provider":{"summary":"Inferred: no formal license, but you 'agree that we may use Materials' broadly, including for training. Not called perpetual or irrevocable; no stated end. Pre-opt-out trained models are kept.","status":"inferred","cites":[{"quote":"You agree that we may use Materials to develop, provide, maintain and improve the Services and our other products and services, including training AI models, and for any purpose specified in our Privacy Notice, subject to your opt-out rights and Vault materials as outlined below.","source":{"doc":"terms","title":"Terms of Service","url":"https://instinct.com/terms","capturedAt":"2026-11-08T22:05:01Z","sha256":"66f4f323fa5de9b651f2ddc872b0ceeaea4c10350fd5dcd10278f80d51e0b5a3"}},{"quote":"You also authorize us to access, copy, collect, and index data from your Connected Services, exchange data with your Connected Services and take Actions on Connected Services on your behalf.","source":{"doc":"terms","title":"Terms of Service","url":"https://instinct.com/terms","capturedAt":"2026-11-08T22:05:01Z","sha256":"66f4f323fa5de9b651f2ddc872b0ceeaea4c10350fd5dcd10278f80d51e0b5a3"}},{"quote":"All sections which by their nature should survive the termination of these Terms shall continue in full force and effect subsequent to and notwithstanding any termination of these Terms by the Company or you.","source":{"doc":"terms","title":"Terms of Service","url":"https://instinct.com/terms","capturedAt":"2026-11-08T22:05:01Z","sha256":"66f4f323fa5de9b651f2ddc872b0ceeaea4c10350fd5dcd10278f80d51e0b5a3"}},{"quote":"We may still use AI models previously trained, fine-tuned or improved on your information prior to your opting out.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://instinct.com/privacy-policy","capturedAt":"2026-11-08T22:05:01Z","sha256":"f99c30130cb89f202b5486ea2e5509747b5ce803d54c478dfffab4c20084dfe1"}}]},"third_party_sharing":{"summary":"No sale. Data goes to vendors, affiliates, third-party AI model providers, services the agent uses, and acquirers. Business partners get aggregate or anonymized data. Google data is excluded from partners.","status":"stated","cites":[{"quote":"We do not sell your information or disclose your information to registered data brokers or third parties who resell your information to others.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://instinct.com/privacy-policy","capturedAt":"2026-11-08T22:05:01Z","sha256":"f99c30130cb89f202b5486ea2e5509747b5ce803d54c478dfffab4c20084dfe1"}},{"quote":"Third-party AI model providers who help support the Services.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://instinct.com/privacy-policy","capturedAt":"2026-11-08T22:05:01Z","sha256":"f99c30130cb89f202b5486ea2e5509747b5ce803d54c478dfffab4c20084dfe1"}},{"quote":"Third-party business partners who may use the information for their own purposes. We will provide this data on an aggregate / anonymized basis, or otherwise in accordance with applicable law (including with your consent where required). Please note, we will not provide information collected from Google Workspace to third-party business partners for their own purposes.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://instinct.com/privacy-policy","capturedAt":"2026-11-08T22:05:01Z","sha256":"f99c30130cb89f202b5486ea2e5509747b5ce803d54c478dfffab4c20084dfe1"}},{"quote":"Third parties with whom the Services interact with on your behalf (including autonomously), for example, when the Services book a ride to the airport for you.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://instinct.com/privacy-policy","capturedAt":"2026-11-08T22:05:01Z","sha256":"f99c30130cb89f202b5486ea2e5509747b5ce803d54c478dfffab4c20084dfe1"}},{"quote":"Vendors and other service providers who help us provide the Services, including for system administration, third-party hosting, payment processing, security, and analytics purposes.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://instinct.com/privacy-policy","capturedAt":"2026-11-08T22:05:01Z","sha256":"f99c30130cb89f202b5486ea2e5509747b5ce803d54c478dfffab4c20084dfe1"}},{"quote":"Third parties in connection with or in anticipation of a business transaction such as a merger or acquisition.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://instinct.com/privacy-policy","capturedAt":"2026-11-08T22:05:01Z","sha256":"f99c30130cb89f202b5486ea2e5509747b5ce803d54c478dfffab4c20084dfe1"}}]},"data_location":{"summary":"The Terms say the Services are operated in the U.S. Neither page says where data is stored, and no residency options are offered.","status":"stated","cites":[{"quote":"The Services are operated by us in the United States.","source":{"doc":"terms","title":"Terms of Service","url":"https://instinct.com/terms","capturedAt":"2026-11-08T22:05:01Z","sha256":"66f4f323fa5de9b651f2ddc872b0ceeaea4c10350fd5dcd10278f80d51e0b5a3"}}]},"enterprise_controls":{"summary":"No DPA, SSO, audit logs, admin controls or custom retention are described.","status":"not_stated","cites":[]}}}],"notes":[{"text":"Inferred: connected-account data counts as Input, and Materials are used for training by default. Only Google Workspace data has a stated training exclusion, so data from other integrations appears to be in scope unless you opt out.","cites":[{"quote":"For clarity, data collected by the Services from your Connected Services is considered your Input, and data generated and provided by the Services to Connected Services is considered your Output.","source":{"doc":"terms","title":"Terms of Service","url":"https://instinct.com/terms","capturedAt":"2026-11-08T22:05:01Z","sha256":"66f4f323fa5de9b651f2ddc872b0ceeaea4c10350fd5dcd10278f80d51e0b5a3"}},{"quote":"You agree that we may use Materials to develop, provide, maintain and improve the Services and our other products and services, including training AI models","source":{"doc":"terms","title":"Terms of Service","url":"https://instinct.com/terms","capturedAt":"2026-11-08T22:05:01Z","sha256":"66f4f323fa5de9b651f2ddc872b0ceeaea4c10350fd5dcd10278f80d51e0b5a3"}},{"quote":"We do not use information received from Google Workspace APIs to evaluate, fine-tune, train, or improve AI models","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://instinct.com/privacy-policy","capturedAt":"2026-11-08T22:05:01Z","sha256":"f99c30130cb89f202b5486ea2e5509747b5ce803d54c478dfffab4c20084dfe1"}}]},{"text":"Deleting your account does not guarantee your Materials are deleted: the Terms make deletion optional and disclaim responsibility for failing to delete.","cites":[{"quote":"In the event of Account deletion for any reason, the Company may, but is not obligated to, delete any of your Materials. The Company shall not be responsible for the failure to delete or deletion of your Materials.","source":{"doc":"terms","title":"Terms of Service","url":"https://instinct.com/terms","capturedAt":"2026-11-08T22:05:01Z","sha256":"66f4f323fa5de9b651f2ddc872b0ceeaea4c10350fd5dcd10278f80d51e0b5a3"}}]},{"text":"Usage Data, including keystrokes, clicks and cursor positions, is also used to train AI models. The pages don't say whether the training opt-out covers it.","cites":[{"quote":"We use Usage Data to tailor features and content to you, to develop and improve our product and technology (including to evaluate, fine-tune and train the AI models that power our products and technology), run analytics, and better understand user interaction with the Services.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://instinct.com/privacy-policy","capturedAt":"2026-11-08T22:05:01Z","sha256":"f99c30130cb89f202b5486ea2e5509747b5ce803d54c478dfffab4c20084dfe1"}},{"quote":"**Usage information,** such as clickstream information (keystrokes, clicks, cursor positions, how much time is spent on the page)","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://instinct.com/privacy-policy","capturedAt":"2026-11-08T22:05:01Z","sha256":"f99c30130cb89f202b5486ea2e5509747b5ce803d54c478dfffab4c20084dfe1"}}]},{"text":"The agent can make purchases and enter binding agreements in your name, and you carry the consequences of unintended Actions.","cites":[{"quote":"Any such agreements or commitments shall be binding on you as if entered into directly by you.","source":{"doc":"terms","title":"Terms of Service","url":"https://instinct.com/terms","capturedAt":"2026-11-08T22:05:01Z","sha256":"66f4f323fa5de9b651f2ddc872b0ceeaea4c10350fd5dcd10278f80d51e0b5a3"}},{"quote":"We are not responsible for any unintended Actions or any loss, damage, charge, liability, or other consequence arising from Actions, including interactions with any Connected Services on your behalf.","source":{"doc":"terms","title":"Terms of Service","url":"https://instinct.com/terms","capturedAt":"2026-11-08T22:05:01Z","sha256":"66f4f323fa5de9b651f2ddc872b0ceeaea4c10350fd5dcd10278f80d51e0b5a3"}}]},{"text":"The assistant may handle sensitive data, including health information and the content of private messages and emails from connected accounts.","cites":[{"quote":"Or, for instance, you may use the personal assistant to process health-related information, for example, when the personal assistant books a medical appointment for you or summarizes an email received from your healthcare provider.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://instinct.com/privacy-policy","capturedAt":"2026-11-08T22:05:01Z","sha256":"f99c30130cb89f202b5486ea2e5509747b5ce803d54c478dfffab4c20084dfe1"}}]},{"text":"Deidentified information may be used for any purpose, and Feedback is assigned outright to Instinct, not just licensed.","cites":[{"quote":"we may use deidentified information for any purpose.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://instinct.com/privacy-policy","capturedAt":"2026-11-08T22:05:01Z","sha256":"f99c30130cb89f202b5486ea2e5509747b5ce803d54c478dfffab4c20084dfe1"}},{"quote":"You hereby assign to the Company any and all right, title and interest (including, but not limited to, any patent, copyright, trade secret, trademark, show-how, know-how, moral rights and any and all other intellectual property right) that you may have in and to any and all Feedback.","source":{"doc":"terms","title":"Terms of Service","url":"https://instinct.com/terms","capturedAt":"2026-11-08T22:05:01Z","sha256":"66f4f323fa5de9b651f2ddc872b0ceeaea4c10350fd5dcd10278f80d51e0b5a3"}}]},{"text":"The pages give two routes for deleting connector data: the workspace page for all indexed external data, and account deletion for Google Workspace data. It isn't clear whether the workspace route covers Google data.","cites":[{"quote":"At any time, you may revoke our access to your Google Workspace and request deletion of information collected via the Google Workspace API.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://instinct.com/privacy-policy","capturedAt":"2026-11-08T22:05:01Z","sha256":"f99c30130cb89f202b5486ea2e5509747b5ce803d54c478dfffab4c20084dfe1"}},{"quote":"You can delete all data indexed from external sources by visiting [app.instinct.com/workspace](https://app.instinct.com/workspace).","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://instinct.com/privacy-policy","capturedAt":"2026-11-08T22:05:01Z","sha256":"f99c30130cb89f202b5486ea2e5509747b5ce803d54c478dfffab4c20084dfe1"}}]},{"text":"The Terms grant use for personal purposes only, and no business or enterprise plan is described, so the card has a single agent product.","cites":[{"quote":"We hereby permit you to use the Services for your personal use only, provided that you comply with these Terms in connection with all such use.","source":{"doc":"terms","title":"Terms of Service","url":"https://instinct.com/terms","capturedAt":"2026-11-08T22:05:01Z","sha256":"66f4f323fa5de9b651f2ddc872b0ceeaea4c10350fd5dcd10278f80d51e0b5a3"}}]}],"gaps":["Retention periods for text conversations, outputs, indexed connector data, action records and logs: not on either page. Possibly in a help-center or data-retention page, or the SMS Privacy Statement (instinct.com/legal/sms-privacy.html), which wasn't captured.","How long deletion takes after a workspace deletion request or account deletion, and whether backups are purged: not stated anywhere.","Whether the training opt-out covers Usage Data and data from non-Google connectors, and how much safety-flagged data is retained: not stated; possibly a help-center article on app.instinct.com/settings.","How stored third-party passwords, payment details and OAuth tokens are kept, encrypted, and deleted: not stated; possibly a security or trust page.","What the memory/personalization store and the 'Vault' hold, and how to view or delete them: not described; likely product help docs.","Which third-party AI model providers and subprocessors are used, and whether they retain or train on data (non-Google): no list given; possibly a subprocessor page.","Whether and when humans review conversations: not stated.","The Acceptable Use Policy (instinct.com/acceptable-use-policy) and SMS/Text Messaging Terms (instinct.com/legal/sms-terms.html) are referenced but were not captured.","Which integrations besides Google Workspace are supported: not listed."],"documents":[{"doc":"privacy-policy","title":"Privacy Policy","url":"https://instinct.com/privacy-policy","capturedAt":"2026-11-08T22:05:01Z","sha256":"f99c30130cb89f202b5486ea2e5509747b5ce803d54c478dfffab4c20084dfe1"},{"doc":"terms","title":"Terms of Service","url":"https://instinct.com/terms","capturedAt":"2026-11-08T22:05:01Z","sha256":"66f4f323fa5de9b651f2ddc872b0ceeaea4c10350fd5dcd10278f80d51e0b5a3"}],"url":"https://gjalla.io/data-policies/instinct/"},{"id":"meta","provider":"meta","name":"Meta (Meta AI, Muse)","category":"frontier-lab","checkedOn":"2026-11-08","products":[{"id":"meta-ai","name":"Meta AI (assistant across Meta apps)","surface":"consumer","facts":{"default_retention":{"summary":"No fixed period. Meta keeps information as long as it needs it, decided case by case; the AI Terms say AIs 'sometimes retain and use' what you share.","status":"stated","cites":[{"quote":"We keep information as long as we need it to provide our Products, comply with legal obligations or protect our or other’s interests. We decide how long we need information on a case-by-case basis.","source":{"doc":"privacy-policy","title":"Meta Privacy Policy","url":"https://www.facebook.com/privacy/policy/","capturedAt":"2026-11-08T22:04:10Z","sha256":"1eaba7403149e22c8f2d3ca6b104904a7475380164d6d3944c4c88057587187d"}},{"quote":"When information is shared with AIs, the AIs will sometimes retain and use that information. Do not share information that you don’t want the AIs to use and retain, such as information about sensitive topics.","source":{"doc":"ai-terms","title":"Facebook","url":"https://www.facebook.com/legal/ai-terms","capturedAt":"2026-11-08T22:04:16Z","sha256":"d962466fa9dcf05d25e7b4a95816772d8765222d588509b2e789df3a805289ea"}}]},"deletion_window":{"summary":"No deletion timeline is given. The AI Terms warn that deleting messages, threads, or even your account may not delete Meta's copy of your information.","status":"stated","cites":[{"quote":"Depending on how you use AIs, deleting individual messages, entire threads, or even your account may not delete our copy of your personal information, and the Privacy Center describes the correct way to delete your personal information.","source":{"doc":"ai-terms","title":"Facebook","url":"https://www.facebook.com/legal/ai-terms","capturedAt":"2026-11-08T22:04:16Z","sha256":"d962466fa9dcf05d25e7b4a95816772d8765222d588509b2e789df3a805289ea"}}]},"retention_exceptions":{"summary":"Meta may keep or preserve information for an 'extended' period for legal obligations, harm prevention, investigations and safety. No durations are stated. Training data is kept case by case.","status":"stated","cites":[{"quote":"In some instances and for specific reasons, we’ll keep information for an extended period of time.","source":{"doc":"privacy-policy","title":"Meta Privacy Policy","url":"https://www.facebook.com/privacy/policy/","capturedAt":"2026-11-08T22:04:10Z","sha256":"1eaba7403149e22c8f2d3ca6b104904a7475380164d6d3944c4c88057587187d"}},{"quote":"If we need it for other legitimate purposes, such as to prevent harm; investigate possible violations of our terms or policies; promote safety, security and integrity; or protect ourselves, including our rights, property or products","source":{"doc":"privacy-policy","title":"Meta Privacy Policy","url":"https://www.facebook.com/privacy/policy/","capturedAt":"2026-11-08T22:04:10Z","sha256":"1eaba7403149e22c8f2d3ca6b104904a7475380164d6d3944c4c88057587187d"}},{"quote":"We may access or preserve your information for an extended amount of time.","source":{"doc":"privacy-policy","title":"Meta Privacy Policy","url":"https://www.facebook.com/privacy/policy/","capturedAt":"2026-11-08T22:04:10Z","sha256":"1eaba7403149e22c8f2d3ca6b104904a7475380164d6d3944c4c88057587187d"}},{"quote":"We keep training data for as long as we need it on a case-by-case basis to ensure an AI model is operating appropriately, safely and efficiently. We also may keep it to protect our or others' interests, or comply with legal obligations.","source":{"doc":"genai-privacy","title":"Genai privacy","url":"https://www.facebook.com/privacy/genai/","capturedAt":"2026-11-08T22:19:40Z","sha256":"8d0b7ed751aa6519fb9c8a19f4b7c7474300dae4880ac9f31bd5349a372e0e9c"}}]},"zdr":{"summary":"The captured policies describe no zero-data-retention option for Meta AI. (Private Processing limits Meta's access to some chats but is not described as a retention setting.)","status":"not_stated","cites":[]},"training_default":{"summary":"Yes. Your Meta AI interactions and public posts are used to develop and improve AI at Meta. Private messages with friends aren't used unless someone shares them with the AI.","status":"stated","cites":[{"quote":"Information shared on Meta Products including things like posts or photos and their captions, and your interactions with features that are part of AI at Meta","source":{"doc":"genai-privacy","title":"Genai privacy","url":"https://www.facebook.com/privacy/genai/","capturedAt":"2026-11-08T22:19:40Z","sha256":"8d0b7ed751aa6519fb9c8a19f4b7c7474300dae4880ac9f31bd5349a372e0e9c"}},{"quote":"We do not use the content of your private messages with friends and family to train our AIs unless you or someone in the chat chooses to share those messages with our AIs.","source":{"doc":"genai-privacy","title":"Genai privacy","url":"https://www.facebook.com/privacy/genai/","capturedAt":"2026-11-08T22:19:40Z","sha256":"8d0b7ed751aa6519fb9c8a19f4b7c7474300dae4880ac9f31bd5349a372e0e9c"}},{"quote":"Interactions with our features that are part of AI at Meta and related metadata. For example, information like content and messages you or others exchange with these features.","source":{"doc":"privacy-policy","title":"Meta Privacy Policy","url":"https://www.facebook.com/privacy/policy/","capturedAt":"2026-11-08T22:04:10Z","sha256":"1eaba7403149e22c8f2d3ca6b104904a7475380164d6d3944c4c88057587187d"}}]},"training_opt_out":{"summary":"No general opt-out toggle is described. In certain countries only, you can file an objection request, which covers future use and applies to accounts in the same Accounts Center.","status":"stated","cites":[{"quote":"If you use Meta Company Products, in certain countries you may be able to submit an objection request. This may include the right to object to your interactions with features that are part of AI at Meta and the public information you’ve shared on Meta Products being used to develop and improve","source":{"doc":"muse-non-users","title":"Information for people who don\\u2019t use Muse | Meta Help Center","url":"https://www.meta.com/help/superintelligence/4532990443643263/","capturedAt":"2026-11-08T22:04:20Z","sha256":"4eb67dc12d26be7c312d3e98fab7bf28d9958257e164b12830395faf670e3394"}},{"quote":"Your objection will be applied to information associated with the account you’re logged into and any accounts that you’ve added to the same Accounts Center.","source":{"doc":"muse-non-users","title":"Information for people who don\\u2019t use Muse | Meta Help Center","url":"https://www.meta.com/help/superintelligence/4532990443643263/","capturedAt":"2026-11-08T22:04:20Z","sha256":"4eb67dc12d26be7c312d3e98fab7bf28d9958257e164b12830395faf670e3394"}}]},"human_review":{"summary":"Yes, in some cases. Meta may review your AI conversations, by automated or human review, sometimes through third-party vendors. Chats that use Private Processing can't be read by Meta.","status":"stated","cites":[{"quote":"In some cases, Meta will review your interactions with AIs, including the content of your conversations with or messages to AIs, and this review may be automated or manual (human).","source":{"doc":"ai-terms","title":"Facebook","url":"https://www.facebook.com/legal/ai-terms","capturedAt":"2026-11-08T22:04:16Z","sha256":"d962466fa9dcf05d25e7b4a95816772d8765222d588509b2e789df3a805289ea"}},{"quote":"may do so through automated or manual (i.e. human) review and through third-party vendors in some instances","source":{"doc":"ai-terms","title":"Facebook","url":"https://www.facebook.com/legal/ai-terms","capturedAt":"2026-11-08T22:04:16Z","sha256":"d962466fa9dcf05d25e7b4a95816772d8765222d588509b2e789df3a805289ea"}},{"quote":"When you interact with AI chats that use Private Processing technology, Meta cannot read or access the messages you have shared, including AI chats with friends and family.","source":{"doc":"ai-terms","title":"Facebook","url":"https://www.facebook.com/legal/ai-terms","capturedAt":"2026-11-08T22:04:16Z","sha256":"d962466fa9dcf05d25e7b4a95816772d8765222d588509b2e789df3a805289ea"}}]},"memory":{"summary":"Inferred: the AI Terms say AIs sometimes retain and use what you share, and use your interests, location and profile to tailor replies. The captured policies don't describe a memory feature or controls to view or delete it.","status":"inferred","cites":[{"quote":"When information is shared with AIs, the AIs will sometimes retain and use that information.","source":{"doc":"ai-terms","title":"Facebook","url":"https://www.facebook.com/legal/ai-terms","capturedAt":"2026-11-08T22:04:16Z","sha256":"d962466fa9dcf05d25e7b4a95816772d8765222d588509b2e789df3a805289ea"}},{"quote":"along with information we use to make responses from AIs more relevant (like your interests, location and profile).","source":{"doc":"ai-terms","title":"Facebook","url":"https://www.facebook.com/legal/ai-terms","capturedAt":"2026-11-08T22:04:16Z","sha256":"d962466fa9dcf05d25e7b4a95816772d8765222d588509b2e789df3a805289ea"}}]},"connector_data":{"summary":"The captured policies don't describe Meta AI connecting to email, calendar or drive accounts, or what happens on disconnect.","status":"not_stated","cites":[]},"agent_actions":{"summary":"The privacy policy only says AI features may 'perform actions'. It says nothing about action logs, browsing records or stored credentials.","status":"stated","cites":[{"quote":"Provide our features that are part of [AI at Meta](https://www.facebook.com/privacy/genai) that do things like create and understand content (like text, audio, images and videos) and perform actions","source":{"doc":"privacy-policy","title":"Meta Privacy Policy","url":"https://www.facebook.com/privacy/policy/","capturedAt":"2026-11-08T22:04:10Z","sha256":"1eaba7403149e22c8f2d3ca6b104904a7475380164d6d3944c4c88057587187d"}}]},"input_ownership":{"summary":"You keep all rights, including IP, in your prompts, except as the AI Terms expressly provide.","status":"stated","cites":[{"quote":"Except as expressly provided in these Terms, you retain all right, title, and interest – including any intellectual property rights – that you have in and to your Prompts.","source":{"doc":"ai-terms","title":"Facebook","url":"https://www.facebook.com/legal/ai-terms","capturedAt":"2026-11-08T22:04:16Z","sha256":"d962466fa9dcf05d25e7b4a95816772d8765222d588509b2e789df3a805289ea"}}]},"output_ownership":{"summary":"The AI Terms state you keep rights in your Prompts but say nothing about who owns Outputs.","status":"not_stated","cites":[]},"license_to_provider":{"summary":"Inferred: the AI Terms grant no explicit license; Meta uses Content per the uncaptured Meta Terms of Service, including for research and improving services. Duration and irrevocability unstated.","status":"inferred","cites":[{"quote":"Meta uses Content and related information as described in the Meta Terms of Service and Meta Privacy Policy","source":{"doc":"ai-terms","title":"Facebook","url":"https://www.facebook.com/legal/ai-terms","capturedAt":"2026-11-08T22:04:16Z","sha256":"d962466fa9dcf05d25e7b4a95816772d8765222d588509b2e789df3a805289ea"}},{"quote":"To provide, maintain, and improve Meta services and features.","source":{"doc":"ai-terms","title":"Facebook","url":"https://www.facebook.com/legal/ai-terms","capturedAt":"2026-11-08T22:04:16Z","sha256":"d962466fa9dcf05d25e7b4a95816772d8765222d588509b2e789df3a805289ea"}},{"quote":"To conduct and support research","source":{"doc":"ai-terms","title":"Facebook","url":"https://www.facebook.com/legal/ai-terms","capturedAt":"2026-11-08T22:04:16Z","sha256":"d962466fa9dcf05d25e7b4a95816772d8765222d588509b2e789df3a805289ea"}}]},"third_party_sharing":{"summary":"Meta says it never sells data. It shares AI-related info with search partners, vendors and Meta Companies, and uses your AI interactions to personalize ads.","status":"stated","cites":[{"quote":"We don't sell any of your information to anyone, and we never will.","source":{"doc":"privacy-policy","title":"Meta Privacy Policy","url":"https://www.facebook.com/privacy/policy/","capturedAt":"2026-11-08T22:04:10Z","sha256":"1eaba7403149e22c8f2d3ca6b104904a7475380164d6d3944c4c88057587187d"}},{"quote":"Meta may share certain information with select partners, like search engines, to provide you with the most relevant information in connection with our AIs.","source":{"doc":"ai-terms","title":"Facebook","url":"https://www.facebook.com/legal/ai-terms","capturedAt":"2026-11-08T22:04:16Z","sha256":"d962466fa9dcf05d25e7b4a95816772d8765222d588509b2e789df3a805289ea"}},{"quote":"including how we use your interactions with AIs to personalize your experiences and ads, and improve AI at Meta.","source":{"doc":"ai-terms","title":"Facebook","url":"https://www.facebook.com/legal/ai-terms","capturedAt":"2026-11-08T22:04:16Z","sha256":"d962466fa9dcf05d25e7b4a95816772d8765222d588509b2e789df3a805289ea"}},{"quote":"We share information we collect, infrastructure, systems and technology with the other Meta Companies.","source":{"doc":"privacy-policy","title":"Meta Privacy Policy","url":"https://www.facebook.com/privacy/policy/","capturedAt":"2026-11-08T22:04:10Z","sha256":"1eaba7403149e22c8f2d3ca6b104904a7475380164d6d3944c4c88057587187d"}}]},"data_location":{"summary":"Data is processed globally, including to and from the United States, across Meta offices and data centers. No residency options are described.","status":"stated","cites":[{"quote":"Transferring, storing or processing your information across borders, including from and to the United States and other countries: We share information we collect globally, both internally across our offices and data centers","source":{"doc":"privacy-policy","title":"Meta Privacy Policy","url":"https://www.facebook.com/privacy/policy/","capturedAt":"2026-11-08T22:04:10Z","sha256":"1eaba7403149e22c8f2d3ca6b104904a7475380164d6d3944c4c88057587187d"}},{"quote":"Meta operates a global infrastructure to develop and improve AI at Meta, in accordance with applicable law","source":{"doc":"genai-privacy","title":"Genai privacy","url":"https://www.facebook.com/privacy/genai/","capturedAt":"2026-11-08T22:19:40Z","sha256":"8d0b7ed751aa6519fb9c8a19f4b7c7474300dae4880ac9f31bd5349a372e0e9c"}}]},"enterprise_controls":{"summary":"The captured policies describe no business or enterprise tier for Meta AI (no custom retention, DPA, SSO or audit logs).","status":"not_stated","cites":[]}}},{"id":"muse","name":"Muse (Meta's personal AI agent)","surface":"agent","facts":{"default_retention":{"summary":"Muse stores interactions (including voice, photos and connector data used in tasks), goals, artifacts, uploaded files, reminders, memories and its Soul/Identity files. No retention period is stated.","status":"stated","cites":[{"quote":"Your Muse learns about you over time and stores information like your conversation history, artifacts and other files it uses to provide your experience.","source":{"doc":"muse-manage-data","title":"How to manage your Muse data | Meta Help Center","url":"https://www.meta.com/help/superintelligence/2225571704857152/","capturedAt":"2026-11-08T22:28:16Z","sha256":"222f820252d0ae3c699a5e6b04ee153e6ed4a8fb94abf94ed9bb4611375a3823"}},{"quote":"Your interactions with Muse. Your messages and instructions, Muse’s responses, and information from services – including Connectors – used to perform tasks for you. This can include text, voice, photos, things you create together and information about you or others.","source":{"doc":"muse-manage-data","title":"How to manage your Muse data | Meta Help Center","url":"https://www.meta.com/help/superintelligence/2225571704857152/","capturedAt":"2026-11-08T22:28:16Z","sha256":"222f820252d0ae3c699a5e6b04ee153e6ed4a8fb94abf94ed9bb4611375a3823"}},{"quote":"System Files: your Muse stores all files that are uploaded or created by you in system files.","source":{"doc":"muse-manage-data","title":"How to manage your Muse data | Meta Help Center","url":"https://www.meta.com/help/superintelligence/2225571704857152/","capturedAt":"2026-11-08T22:28:16Z","sha256":"222f820252d0ae3c699a5e6b04ee153e6ed4a8fb94abf94ed9bb4611375a3823"}},{"quote":"Reminders and scheduled tasks: Reminder times and content are stored so they can be delivered on schedule.","source":{"doc":"muse-manage-data","title":"How to manage your Muse data | Meta Help Center","url":"https://www.meta.com/help/superintelligence/2225571704857152/","capturedAt":"2026-11-08T22:28:16Z","sha256":"222f820252d0ae3c699a5e6b04ee153e6ed4a8fb94abf94ed9bb4611375a3823"}}]},"deletion_window":{"summary":"In-app deletion for side chats, messages, goals, artifacts, system files and Memory/Soul/Identity files; reminders and connector data only by asking Muse. Reset or account deletion wipes everything. No timeline.","status":"stated","cites":[{"quote":"You can delete any message you send to Muse, Side chats with Muse, and files in your virtual machine. If you want to start from scratch, you can reset Muse, which deletes all your Muse data.","source":{"doc":"muse-manage-data","title":"How to manage your Muse data | Meta Help Center","url":"https://www.meta.com/help/superintelligence/2225571704857152/","capturedAt":"2026-11-08T22:28:16Z","sha256":"222f820252d0ae3c699a5e6b04ee153e6ed4a8fb94abf94ed9bb4611375a3823"}},{"quote":"After you delete something from Muse, Muse may still remember information it learned from what you deleted.","source":{"doc":"muse-manage-data","title":"How to manage your Muse data | Meta Help Center","url":"https://www.meta.com/help/superintelligence/2225571704857152/","capturedAt":"2026-11-08T22:28:16Z","sha256":"222f820252d0ae3c699a5e6b04ee153e6ed4a8fb94abf94ed9bb4611375a3823"}},{"quote":"You can reset Muse to its original state and permanently delete all information including chat history, files and active tasks:","source":{"doc":"muse-manage-data","title":"How to manage your Muse data | Meta Help Center","url":"https://www.meta.com/help/superintelligence/2225571704857152/","capturedAt":"2026-11-08T22:28:16Z","sha256":"222f820252d0ae3c699a5e6b04ee153e6ed4a8fb94abf94ed9bb4611375a3823"}},{"quote":"This will delete all information associated with your account, including Muse.","source":{"doc":"muse-manage-data","title":"How to manage your Muse data | Meta Help Center","url":"https://www.meta.com/help/superintelligence/2225571704857152/","capturedAt":"2026-11-08T22:28:16Z","sha256":"222f820252d0ae3c699a5e6b04ee153e6ed4a8fb94abf94ed9bb4611375a3823"}},{"quote":"In the Goals tab, tap the relevant goal, tap the three dot menu, select Delete, then confirm.","source":{"doc":"muse-manage-data","title":"How to manage your Muse data | Meta Help Center","url":"https://www.meta.com/help/superintelligence/2225571704857152/","capturedAt":"2026-11-08T22:28:16Z","sha256":"222f820252d0ae3c699a5e6b04ee153e6ed4a8fb94abf94ed9bb4611375a3823"}},{"quote":"You can ask your Muse in chat to update or delete a reminder or scheduled task.","source":{"doc":"muse-manage-data","title":"How to manage your Muse data | Meta Help Center","url":"https://www.meta.com/help/superintelligence/2225571704857152/","capturedAt":"2026-11-08T22:28:16Z","sha256":"222f820252d0ae3c699a5e6b04ee153e6ed4a8fb94abf94ed9bb4611375a3823"}},{"quote":"To delete your entire main chat thread, you can reset Muse.","source":{"doc":"muse-manage-data","title":"How to manage your Muse data | Meta Help Center","url":"https://www.meta.com/help/superintelligence/2225571704857152/","capturedAt":"2026-11-08T22:28:16Z","sha256":"222f820252d0ae3c699a5e6b04ee153e6ed4a8fb94abf94ed9bb4611375a3823"}}]},"retention_exceptions":{"summary":"The only exception stated is that Muse may still remember what it learned from deleted items. The Muse pages say nothing about legal holds, safety flags or backups.","status":"stated","cites":[{"quote":"After you delete something from Muse, Muse may still remember information it learned from what you deleted.","source":{"doc":"muse-manage-data","title":"How to manage your Muse data | Meta Help Center","url":"https://www.meta.com/help/superintelligence/2225571704857152/","capturedAt":"2026-11-08T22:28:16Z","sha256":"222f820252d0ae3c699a5e6b04ee153e6ed4a8fb94abf94ed9bb4611375a3823"}}]},"zdr":{"summary":"No zero-data-retention option is described for Muse.","status":"not_stated","cites":[]},"training_default":{"summary":"Yes. 'Help improve our AI models' is on when you first use Muse. Meta says it removes some identifiers (names, emails, phone numbers, SSNs) and disassociates interactions from your account.","status":"stated","cites":[{"quote":"This setting is on when you first use Muse. You can change it at any time.","source":{"doc":"muse-manage-data","title":"How to manage your Muse data | Meta Help Center","url":"https://www.meta.com/help/superintelligence/2225571704857152/","capturedAt":"2026-11-08T22:28:16Z","sha256":"222f820252d0ae3c699a5e6b04ee153e6ed4a8fb94abf94ed9bb4611375a3823"}},{"quote":"If you do allow this, we still remove certain categories of personally identifiable information like names, email addresses, phone numbers and Social Security Numbers. We also disassociate the interactions from your account.","source":{"doc":"muse-manage-data","title":"How to manage your Muse data | Meta Help Center","url":"https://www.meta.com/help/superintelligence/2225571704857152/","capturedAt":"2026-11-08T22:28:16Z","sha256":"222f820252d0ae3c699a5e6b04ee153e6ed4a8fb94abf94ed9bb4611375a3823"}}]},"training_opt_out":{"summary":"Turn off 'Help improve our AI models' under Settings > Data controls. Meta says this also applies to past interactions. The page doesn't say what the opt-out leaves out.","status":"stated","cites":[{"quote":"When the setting is off, your interactions with Muse will not be used to develop and improve","source":{"doc":"muse-manage-data","title":"How to manage your Muse data | Meta Help Center","url":"https://www.meta.com/help/superintelligence/2225571704857152/","capturedAt":"2026-11-08T22:28:16Z","sha256":"222f820252d0ae3c699a5e6b04ee153e6ed4a8fb94abf94ed9bb4611375a3823"}},{"quote":"Changes to this setting also apply to previous interactions.","source":{"doc":"muse-manage-data","title":"How to manage your Muse data | Meta Help Center","url":"https://www.meta.com/help/superintelligence/2225571704857152/","capturedAt":"2026-11-08T22:28:16Z","sha256":"222f820252d0ae3c699a5e6b04ee153e6ed4a8fb94abf94ed9bb4611375a3823"}},{"quote":"Go to Settings, then tap Data controls.","source":{"doc":"muse-manage-data","title":"How to manage your Muse data | Meta Help Center","url":"https://www.meta.com/help/superintelligence/2225571704857152/","capturedAt":"2026-11-08T22:28:16Z","sha256":"222f820252d0ae3c699a5e6b04ee153e6ed4a8fb94abf94ed9bb4611375a3823"}}]},"human_review":{"summary":"The Muse pages don't say whether people review Muse conversations.","status":"not_stated","cites":[]},"memory":{"summary":"Memories are saved in a Memory.md file (Assistant > Identity > Memory) you can edit or delete, alongside Soul.md and Identity.md. You can also ask Muse to 'forget' (best effort).","status":"stated","cites":[{"quote":"You can find out what Muse remembers about you at any time by asking directly, or by viewing files like your MEMORY.md.","source":{"doc":"muse-manage-data","title":"How to manage your Muse data | Meta Help Center","url":"https://www.meta.com/help/superintelligence/2225571704857152/","capturedAt":"2026-11-08T22:28:16Z","sha256":"222f820252d0ae3c699a5e6b04ee153e6ed4a8fb94abf94ed9bb4611375a3823"}},{"quote":"Forgetting works by asking Muse to look for information about a specific person, topic or matter in its memories and supporting files and remove it to the best of its ability.","source":{"doc":"muse-manage-data","title":"How to manage your Muse data | Meta Help Center","url":"https://www.meta.com/help/superintelligence/2225571704857152/","capturedAt":"2026-11-08T22:28:16Z","sha256":"222f820252d0ae3c699a5e6b04ee153e6ed4a8fb94abf94ed9bb4611375a3823"}},{"quote":"You can ask it what it has saved about you, for access to a file or to delete information.","source":{"doc":"muse-manage-data","title":"How to manage your Muse data | Meta Help Center","url":"https://www.meta.com/help/superintelligence/2225571704857152/","capturedAt":"2026-11-08T22:28:16Z","sha256":"222f820252d0ae3c699a5e6b04ee153e6ed4a8fb94abf94ed9bb4611375a3823"}},{"quote":"Memories: Information you share may be saved in Memories so Muse can personalize responses.","source":{"doc":"muse-manage-data","title":"How to manage your Muse data | Meta Help Center","url":"https://www.meta.com/help/superintelligence/2225571704857152/","capturedAt":"2026-11-08T22:28:16Z","sha256":"222f820252d0ae3c699a5e6b04ee153e6ed4a8fb94abf94ed9bb4611375a3823"}},{"quote":"You can edit and delete information in the Memory.md file directly. Tap the Assistant icon, then Identity, then Memory to update or delete the Memory file.","source":{"doc":"muse-manage-data","title":"How to manage your Muse data | Meta Help Center","url":"https://www.meta.com/help/superintelligence/2225571704857152/","capturedAt":"2026-11-08T22:28:16Z","sha256":"222f820252d0ae3c699a5e6b04ee153e6ed4a8fb94abf94ed9bb4611375a3823"}},{"quote":"Soul: Who your Muse is, including core truths, boundaries, and personality.","source":{"doc":"muse-manage-data","title":"How to manage your Muse data | Meta Help Center","url":"https://www.meta.com/help/superintelligence/2225571704857152/","capturedAt":"2026-11-08T22:28:16Z","sha256":"222f820252d0ae3c699a5e6b04ee153e6ed4a8fb94abf94ed9bb4611375a3823"}}]},"connector_data":{"summary":"Muse keeps what it gets from connected services (e.g. emails, calendar events). View it by asking Muse; remove it only via the best-effort 'forget' skill. Disconnect handling isn't captured.","status":"stated","cites":[{"quote":"For example, if a Muse user connects their calendar app and asks their Muse what meetings they have scheduled for the week, the names of the attendees and event details could be included in the request and response.","source":{"doc":"muse-non-users","title":"Information for people who don\\u2019t use Muse | Meta Help Center","url":"https://www.meta.com/help/superintelligence/4532990443643263/","capturedAt":"2026-11-08T22:04:20Z","sha256":"4eb67dc12d26be7c312d3e98fab7bf28d9958257e164b12830395faf670e3394"}},{"quote":"Learn more about how to disconnect Connectors at","source":{"doc":"muse-manage-data","title":"How to manage your Muse data | Meta Help Center","url":"https://www.meta.com/help/superintelligence/2225571704857152/","capturedAt":"2026-11-08T22:28:16Z","sha256":"222f820252d0ae3c699a5e6b04ee153e6ed4a8fb94abf94ed9bb4611375a3823"}},{"quote":"Information from Connectors. Information Muse retrieves or receives from connected services, such as emails and calendar events. Information used for a task forms part of your interactions with Muse.","source":{"doc":"muse-manage-data","title":"How to manage your Muse data | Meta Help Center","url":"https://www.meta.com/help/superintelligence/2225571704857152/","capturedAt":"2026-11-08T22:28:16Z","sha256":"222f820252d0ae3c699a5e6b04ee153e6ed4a8fb94abf94ed9bb4611375a3823"}},{"quote":"You can ask Muse in your chat what information it has from a Connector.","source":{"doc":"muse-manage-data","title":"How to manage your Muse data | Meta Help Center","url":"https://www.meta.com/help/superintelligence/2225571704857152/","capturedAt":"2026-11-08T22:28:16Z","sha256":"222f820252d0ae3c699a5e6b04ee153e6ed4a8fb94abf94ed9bb4611375a3823"}},{"quote":"You can use the forget skill. Ask Muse in chat to forget a topic or set of interactions.","source":{"doc":"muse-manage-data","title":"How to manage your Muse data | Meta Help Center","url":"https://www.meta.com/help/superintelligence/2225571704857152/","capturedAt":"2026-11-08T22:28:16Z","sha256":"222f820252d0ae3c699a5e6b04ee153e6ed4a8fb94abf94ed9bb4611375a3823"}}]},"agent_actions":{"summary":"Muse runs tasks in a virtual machine, stores reminders and scheduled tasks, may use public web info, and is testing calls to businesses. No action logs or stored credentials described.","status":"stated","cites":[{"quote":"files in your virtual machine","source":{"doc":"muse-manage-data","title":"How to manage your Muse data | Meta Help Center","url":"https://www.meta.com/help/superintelligence/2225571704857152/","capturedAt":"2026-11-08T22:28:16Z","sha256":"222f820252d0ae3c699a5e6b04ee153e6ed4a8fb94abf94ed9bb4611375a3823"}},{"quote":"permanently delete all information including chat history, files and active tasks","source":{"doc":"muse-manage-data","title":"How to manage your Muse data | Meta Help Center","url":"https://www.meta.com/help/superintelligence/2225571704857152/","capturedAt":"2026-11-08T22:28:16Z","sha256":"222f820252d0ae3c699a5e6b04ee153e6ed4a8fb94abf94ed9bb4611375a3823"}},{"quote":"To carry out user tasks, Muse might also access information that is publicly available on the internet, which may incidentally include information about you.","source":{"doc":"muse-non-users","title":"Information for people who don\\u2019t use Muse | Meta Help Center","url":"https://www.meta.com/help/superintelligence/4532990443643263/","capturedAt":"2026-11-08T22:04:20Z","sha256":"4eb67dc12d26be7c312d3e98fab7bf28d9958257e164b12830395faf670e3394"}},{"quote":"We’re also experimenting with the ability for Muse to make phone calls on your behalf to businesses whose phone numbers are publicly available.","source":{"doc":"muse-non-users","title":"Information for people who don\\u2019t use Muse | Meta Help Center","url":"https://www.meta.com/help/superintelligence/4532990443643263/","capturedAt":"2026-11-08T22:04:20Z","sha256":"4eb67dc12d26be7c312d3e98fab7bf28d9958257e164b12830395faf670e3394"}},{"quote":"If you'd prefer that your business not receive these AI phone calls, you can opt out using","source":{"doc":"muse-non-users","title":"Information for people who don\\u2019t use Muse | Meta Help Center","url":"https://www.meta.com/help/superintelligence/4532990443643263/","capturedAt":"2026-11-08T22:04:20Z","sha256":"4eb67dc12d26be7c312d3e98fab7bf28d9958257e164b12830395faf670e3394"}},{"quote":"Reminders and scheduled tasks: Reminder times and content are stored so they can be delivered on schedule.","source":{"doc":"muse-manage-data","title":"How to manage your Muse data | Meta Help Center","url":"https://www.meta.com/help/superintelligence/2225571704857152/","capturedAt":"2026-11-08T22:28:16Z","sha256":"222f820252d0ae3c699a5e6b04ee153e6ed4a8fb94abf94ed9bb4611375a3823"}}]},"input_ownership":{"summary":"The Muse pages don't address ownership of inputs, and the captured policies don't confirm whether the Meta AI Terms cover Muse.","status":"not_stated","cites":[]},"output_ownership":{"summary":"The Muse pages don't address ownership of outputs or artifacts.","status":"not_stated","cites":[]},"license_to_provider":{"summary":"No license grant for Muse is in the captured policies; it would likely be in Muse-specific terms or the Muse Privacy Policy.","status":"not_stated","cites":[]},"third_party_sharing":{"summary":"Meta says it doesn't and never will sell information. Non-users' info from Muse isn't linked to a Meta account. Other sharing is deferred to the uncaptured Muse Privacy Policy.","status":"stated","cites":[{"quote":"We don't sell your information, and we never will. We may use and share information provided to us through Muse as described in the","source":{"doc":"muse-non-users","title":"Information for people who don\\u2019t use Muse | Meta Help Center","url":"https://www.meta.com/help/superintelligence/4532990443643263/","capturedAt":"2026-11-08T22:04:20Z","sha256":"4eb67dc12d26be7c312d3e98fab7bf28d9958257e164b12830395faf670e3394"}},{"quote":"When we process information from external sources about people who don’t use Muse, we don’t link that information to any Meta account.","source":{"doc":"muse-non-users","title":"Information for people who don\\u2019t use Muse | Meta Help Center","url":"https://www.meta.com/help/superintelligence/4532990443643263/","capturedAt":"2026-11-08T22:04:20Z","sha256":"4eb67dc12d26be7c312d3e98fab7bf28d9958257e164b12830395faf670e3394"}}]},"data_location":{"summary":"The Muse pages don't say where Muse data is stored or offer residency options.","status":"not_stated","cites":[]},"enterprise_controls":{"summary":"No business or enterprise controls are described for Muse.","status":"not_stated","cites":[]}}}],"notes":[{"text":"Meta AI deletion warning: deleting messages, threads or your whole account may not delete Meta's copy. You're sent to the Privacy Center (not captured) for the right way to delete.","cites":[{"quote":"It is important that you review the Privacy Center before you try to delete any personal information or delete or deactivate your account.","source":{"doc":"ai-terms","title":"Facebook","url":"https://www.facebook.com/legal/ai-terms","capturedAt":"2026-11-08T22:04:16Z","sha256":"d962466fa9dcf05d25e7b4a95816772d8765222d588509b2e789df3a805289ea"}}]},{"text":"Meta AI interactions are used to personalize ads as well as to train models.","cites":[{"quote":"including how we use your interactions with AIs to personalize your experiences and ads, and improve AI at Meta.","source":{"doc":"ai-terms","title":"Facebook","url":"https://www.facebook.com/legal/ai-terms","capturedAt":"2026-11-08T22:04:16Z","sha256":"d962466fa9dcf05d25e7b4a95816772d8765222d588509b2e789df3a805289ea"}}]},{"text":"Muse training is on by default, but turning it off applies retroactively to past interactions.","cites":[{"quote":"This setting is on when you first use Muse.","source":{"doc":"muse-manage-data","title":"How to manage your Muse data | Meta Help Center","url":"https://www.meta.com/help/superintelligence/2225571704857152/","capturedAt":"2026-11-08T22:28:16Z","sha256":"222f820252d0ae3c699a5e6b04ee153e6ed4a8fb94abf94ed9bb4611375a3823"}},{"quote":"Changes to this setting also apply to previous interactions.","source":{"doc":"muse-manage-data","title":"How to manage your Muse data | Meta Help Center","url":"https://www.meta.com/help/superintelligence/2225571704857152/","capturedAt":"2026-11-08T22:28:16Z","sha256":"222f820252d0ae3c699a5e6b04ee153e6ed4a8fb94abf94ed9bb4611375a3823"}}]},{"text":"Muse deletion is incomplete by design: deleted items may still shape what Muse remembers, and 'forget' is best effort.","cites":[{"quote":"After you delete something from Muse, Muse may still remember information it learned from what you deleted.","source":{"doc":"muse-manage-data","title":"How to manage your Muse data | Meta Help Center","url":"https://www.meta.com/help/superintelligence/2225571704857152/","capturedAt":"2026-11-08T22:28:16Z","sha256":"222f820252d0ae3c699a5e6b04ee153e6ed4a8fb94abf94ed9bb4611375a3823"}},{"quote":"remove it to the best of its ability","source":{"doc":"muse-manage-data","title":"How to manage your Muse data | Meta Help Center","url":"https://www.meta.com/help/superintelligence/2225571704857152/","capturedAt":"2026-11-08T22:28:16Z","sha256":"222f820252d0ae3c699a5e6b04ee153e6ed4a8fb94abf94ed9bb4611375a3823"}}]},{"text":"Non-users: Muse can receive info about people who don't use it (contacts, calendar attendees, public web). Meta says it doesn't link this to a Meta account, so it can only honor rights requests for identifiable data.","cites":[{"quote":"When others use Muse, information about you may be provided to Muse, even if you don’t use Muse directly.","source":{"doc":"muse-non-users","title":"Information for people who don\\u2019t use Muse | Meta Help Center","url":"https://www.meta.com/help/superintelligence/4532990443643263/","capturedAt":"2026-11-08T22:04:20Z","sha256":"4eb67dc12d26be7c312d3e98fab7bf28d9958257e164b12830395faf670e3394"}},{"quote":"Keep in mind that Meta can only honor data subject rights in relation to information that is linked to a Meta account or stored in a way that allows Meta to identify which information relates to a particular person.","source":{"doc":"muse-non-users","title":"Information for people who don\\u2019t use Muse | Meta Help Center","url":"https://www.meta.com/help/superintelligence/4532990443643263/","capturedAt":"2026-11-08T22:04:20Z","sha256":"4eb67dc12d26be7c312d3e98fab7bf28d9958257e164b12830395faf670e3394"}}]},{"text":"Private Processing: in AI chats using this technology Meta says it can't read the messages, and related search queries aren't linked to your account.","cites":[{"quote":"Meta provides Private Processing as a service on your behalf.","source":{"doc":"ai-terms","title":"Facebook","url":"https://www.facebook.com/legal/ai-terms","capturedAt":"2026-11-08T22:04:16Z","sha256":"d962466fa9dcf05d25e7b4a95816772d8765222d588509b2e789df3a805289ea"}},{"quote":"These queries are not connected to your account.","source":{"doc":"ai-terms","title":"Facebook","url":"https://www.facebook.com/legal/ai-terms","capturedAt":"2026-11-08T22:04:16Z","sha256":"d962466fa9dcf05d25e7b4a95816772d8765222d588509b2e789df3a805289ea"}}]},{"text":"The captured AI Terms are the general (US) version. The UK, Brazil and European Region have separate AI Terms that weren't captured.","cites":[{"quote":"**Our AI Terms are different depending on the region you live in**","source":{"doc":"ai-terms","title":"Facebook","url":"https://www.facebook.com/legal/ai-terms","capturedAt":"2026-11-08T22:04:16Z","sha256":"d962466fa9dcf05d25e7b4a95816772d8765222d588509b2e789df3a805289ea"}}]},{"text":"Meta also trains on information about people who don't use its products, e.g. when they appear in others' photos or posts.","cites":[{"quote":"Even if you don’t use our Products or have an account, we may still process information about you to develop and improve AI at Meta.","source":{"doc":"genai-privacy","title":"Genai privacy","url":"https://www.facebook.com/privacy/genai/","capturedAt":"2026-11-08T22:19:40Z","sha256":"8d0b7ed751aa6519fb9c8a19f4b7c7474300dae4880ac9f31bd5349a372e0e9c"}}]},{"text":"Muse's 'interactions', which the training toggle covers, are defined to include information from Connectors used in tasks. The page doesn't say whether connector data (e.g. emails) is excluded from training when the toggle is on.","cites":[{"quote":"Your interactions with Muse. Your messages and instructions, Muse’s responses, and information from services – including Connectors – used to perform tasks for you. This can include text, voice, photos, things you create together and information about you or others.","source":{"doc":"muse-manage-data","title":"How to manage your Muse data | Meta Help Center","url":"https://www.meta.com/help/superintelligence/2225571704857152/","capturedAt":"2026-11-08T22:28:16Z","sha256":"222f820252d0ae3c699a5e6b04ee153e6ed4a8fb94abf94ed9bb4611375a3823"}},{"quote":"You decide whether we can use your interactions with Muse to train and improve our AI models. This setting is on when you first use Muse.","source":{"doc":"muse-manage-data","title":"How to manage your Muse data | Meta Help Center","url":"https://www.meta.com/help/superintelligence/2225571704857152/","capturedAt":"2026-11-08T22:28:16Z","sha256":"222f820252d0ae3c699a5e6b04ee153e6ed4a8fb94abf94ed9bb4611375a3823"}}]},{"text":"Connector data in Muse has no direct delete control in the table; the listed option is asking Muse to 'forget', which works 'to the best of its ability'.","cites":[{"quote":"You can use the forget skill. Ask Muse in chat to forget a topic or set of interactions.","source":{"doc":"muse-manage-data","title":"How to manage your Muse data | Meta Help Center","url":"https://www.meta.com/help/superintelligence/2225571704857152/","capturedAt":"2026-11-08T22:28:16Z","sha256":"222f820252d0ae3c699a5e6b04ee153e6ed4a8fb94abf94ed9bb4611375a3823"}},{"quote":"remove it to the best of its ability","source":{"doc":"muse-manage-data","title":"How to manage your Muse data | Meta Help Center","url":"https://www.meta.com/help/superintelligence/2225571704857152/","capturedAt":"2026-11-08T22:28:16Z","sha256":"222f820252d0ae3c699a5e6b04ee153e6ed4a8fb94abf94ed9bb4611375a3823"}}]}],"gaps":["Muse Privacy Policy (muse.ai/privacy) is referenced but not captured. It likely covers Muse retention periods, sharing, data location, human review and legal terms.","The 'How Muse works with Connectors' help page isn't captured. It would say what connector data is stored and what happens on disconnect.","No captured policy gives a deletion timeline for Meta AI or Muse (how long until deleted data is gone, including backups). The Meta AI Privacy Center guide (facebook.com/privacy/guide/genai) and the Meta Privacy Policy 'Learn more' subpages on retention would likely say.","Output ownership and the license Meta gets in your content aren't in the AI Terms. Both are likely in the Meta Terms of Service (facebook.com/terms.php), which isn't captured.","Whether the Meta AIs Terms of Service govern Muse isn't stated. Muse-specific terms would answer this.","Regional AI Terms (UK, EU, Brazil) and the US Regional Privacy Notice aren't captured.","The privacy policy's 'Where is information transferred?' and 'AI integrations' subsections are collapsed in the captured policy. Their expanded text would say more about data location and AI third-party sharing.","The AI partners page (facebook.com/privacy/dialog/ai-partners) isn't captured. It would name the search partners and say what is shared with them."],"documents":[{"doc":"ai-terms","title":"Facebook","url":"https://www.facebook.com/legal/ai-terms","capturedAt":"2026-11-08T22:04:16Z","sha256":"d962466fa9dcf05d25e7b4a95816772d8765222d588509b2e789df3a805289ea"},{"doc":"genai-privacy","title":"Genai privacy","url":"https://www.facebook.com/privacy/genai/","capturedAt":"2026-11-08T22:19:40Z","sha256":"8d0b7ed751aa6519fb9c8a19f4b7c7474300dae4880ac9f31bd5349a372e0e9c"},{"doc":"muse-manage-data","title":"How to manage your Muse data | Meta Help Center","url":"https://www.meta.com/help/superintelligence/2225571704857152/","capturedAt":"2026-11-08T22:28:16Z","sha256":"222f820252d0ae3c699a5e6b04ee153e6ed4a8fb94abf94ed9bb4611375a3823"},{"doc":"muse-non-users","title":"Information for people who don\\u2019t use Muse | Meta Help Center","url":"https://www.meta.com/help/superintelligence/4532990443643263/","capturedAt":"2026-11-08T22:04:20Z","sha256":"4eb67dc12d26be7c312d3e98fab7bf28d9958257e164b12830395faf670e3394"},{"doc":"privacy-policy","title":"Meta Privacy Policy","url":"https://www.facebook.com/privacy/policy/","capturedAt":"2026-11-08T22:04:10Z","sha256":"1eaba7403149e22c8f2d3ca6b104904a7475380164d6d3944c4c88057587187d"}],"url":"https://gjalla.io/data-policies/meta/"},{"id":"microsoft","provider":"microsoft","name":"Microsoft (Azure OpenAI/Foundry, Copilot)","category":"model-platform","checkedOn":"2026-11-08","products":[{"id":"azure-openai-foundry","name":"Azure OpenAI / Foundry Models sold by Azure","surface":"api","facts":{"default_retention":{"summary":"Plain inference is stateless and stores nothing in the model. Optional features (Responses API, Assistants Threads, Stored completions, Files) keep data in your resource until you delete it.","status":"stated","cites":[{"quote":"**The models are stateless: no prompts or completions are stored in the model. Additionally, prompts and completions are not used to train, retrain, or improve the base models.**","source":{"doc":"azure-openai-data-privacy","title":"Data, privacy, and security for Foundry Models sold by Azure in Microsoft Foundry - Microsoft Foundry","url":"https://learn.microsoft.com/en-us/azure/foundry/responsible-ai/openai/data-privacy?tabs=azure-portal","capturedAt":"2026-11-08T22:04:48Z","sha256":"bec664eb38063be8a2b089e14d4ac98ed87ef3eb39d41bb866e7875eab36f116"}},{"quote":"This data is either uploaded by the customer, using the Files API or vector store, or is automatically stored in connection with certain stateful entities such as the Responses API, the Threads feature of the Assistants API, and Stored completions.","source":{"doc":"azure-openai-data-privacy","title":"Data, privacy, and security for Foundry Models sold by Azure in Microsoft Foundry - Microsoft Foundry","url":"https://learn.microsoft.com/en-us/azure/foundry/responsible-ai/openai/data-privacy?tabs=azure-portal","capturedAt":"2026-11-08T22:04:48Z","sha256":"bec664eb38063be8a2b089e14d4ac98ed87ef3eb39d41bb866e7875eab36f116"}},{"quote":"Can be deleted by the customer at any time.","source":{"doc":"azure-openai-data-privacy","title":"Data, privacy, and security for Foundry Models sold by Azure in Microsoft Foundry - Microsoft Foundry","url":"https://learn.microsoft.com/en-us/azure/foundry/responsible-ai/openai/data-privacy?tabs=azure-portal","capturedAt":"2026-11-08T22:04:48Z","sha256":"bec664eb38063be8a2b089e14d4ac98ed87ef3eb39d41bb866e7875eab36f116"}}]},"deletion_window":{"summary":"Customers can delete stored data and fine-tuned models at any time. The page gives no timeframe for when deleted data is fully gone, including from backups.","status":"stated","cites":[{"quote":"Can be deleted by the customer at any time.","source":{"doc":"azure-openai-data-privacy","title":"Data, privacy, and security for Foundry Models sold by Azure in Microsoft Foundry - Microsoft Foundry","url":"https://learn.microsoft.com/en-us/azure/foundry/responsible-ai/openai/data-privacy?tabs=azure-portal","capturedAt":"2026-11-08T22:04:48Z","sha256":"bec664eb38063be8a2b089e14d4ac98ed87ef3eb39d41bb866e7875eab36f116"}},{"quote":"Fine-tuned models are exclusively available to the customer whose data was used to create the fine-tuned model, are encrypted at rest (when not deployed for inferencing), and can be deleted by the customer at any time.","source":{"doc":"azure-openai-data-privacy","title":"Data, privacy, and security for Foundry Models sold by Azure in Microsoft Foundry - Microsoft Foundry","url":"https://learn.microsoft.com/en-us/azure/foundry/responsible-ai/openai/data-privacy?tabs=azure-portal","capturedAt":"2026-11-08T22:04:48Z","sha256":"bec664eb38063be8a2b089e14d4ac98ed87ef3eb39d41bb866e7875eab36f116"}}]},"retention_exceptions":{"summary":"Abuse monitoring: when abuse is indicated, sampled prompts and completions are kept in an abuse-monitoring data store for human review. This page doesn't say how long that store keeps them.","status":"stated","cites":[{"quote":"When these indicators are detected, a sample of customer's prompts and completions may be selected for review.","source":{"doc":"azure-openai-data-privacy","title":"Data, privacy, and security for Foundry Models sold by Azure in Microsoft Foundry - Microsoft Foundry","url":"https://learn.microsoft.com/en-us/azure/foundry/responsible-ai/openai/data-privacy?tabs=azure-portal","capturedAt":"2026-11-08T22:04:48Z","sha256":"bec664eb38063be8a2b089e14d4ac98ed87ef3eb39d41bb866e7875eab36f116"}},{"quote":"The abuse monitoring data store where prompts and completions are stored for human review is logically separated by customer resource (each request includes the resource ID of the customer's Foundry resource).","source":{"doc":"azure-openai-data-privacy","title":"Data, privacy, and security for Foundry Models sold by Azure in Microsoft Foundry - Microsoft Foundry","url":"https://learn.microsoft.com/en-us/azure/foundry/responsible-ai/openai/data-privacy?tabs=azure-portal","capturedAt":"2026-11-08T22:04:48Z","sha256":"bec664eb38063be8a2b089e14d4ac98ed87ef3eb39d41bb866e7875eab36f116"}},{"quote":"For automated review, customer's prompts and completions are not stored by the system or used to train the AI models or other systems.","source":{"doc":"azure-openai-data-privacy","title":"Data, privacy, and security for Foundry Models sold by Azure in Microsoft Foundry - Microsoft Foundry","url":"https://learn.microsoft.com/en-us/azure/foundry/responsible-ai/openai/data-privacy?tabs=azure-portal","capturedAt":"2026-11-08T22:04:48Z","sha256":"bec664eb38063be8a2b089e14d4ac98ed87ef3eb39d41bb866e7875eab36f116"}}]},"zdr":{"summary":"Managed customers can apply for modified abuse monitoring. If approved, nothing is stored for human abuse review, though automated review may still run. ContentLogging=false confirms it.","status":"stated","cites":[{"quote":"As depicted in the diagram above, managed customers may [apply to modify abuse monitoring]","source":{"doc":"azure-openai-data-privacy","title":"Data, privacy, and security for Foundry Models sold by Azure in Microsoft Foundry - Microsoft Foundry","url":"https://learn.microsoft.com/en-us/azure/foundry/responsible-ai/openai/data-privacy?tabs=azure-portal","capturedAt":"2026-11-08T22:04:48Z","sha256":"bec664eb38063be8a2b089e14d4ac98ed87ef3eb39d41bb866e7875eab36f116"}},{"quote":"If the customer has been approved for modified abuse monitoring (learn more at [Abuse Monitoring](/en-us/azure/ai-foundry/openai/concepts/abuse-monitoring))), the data storage and human review process described above is not performed. However, automated review may still be conducted, leveraging algorithms including AI models that review prompts and completions at the time provided or generated, as applicable.","source":{"doc":"azure-openai-data-privacy","title":"Data, privacy, and security for Foundry Models sold by Azure in Microsoft Foundry - Microsoft Foundry","url":"https://learn.microsoft.com/en-us/azure/foundry/responsible-ai/openai/data-privacy?tabs=azure-portal","capturedAt":"2026-11-08T22:04:48Z","sha256":"bec664eb38063be8a2b089e14d4ac98ed87ef3eb39d41bb866e7875eab36f116"}},{"quote":"The value of \"false\" for the \"ContentLogging\" attribute appears only if data storage for abuse monitoring is turned off.","source":{"doc":"azure-openai-data-privacy","title":"Data, privacy, and security for Foundry Models sold by Azure in Microsoft Foundry - Microsoft Foundry","url":"https://learn.microsoft.com/en-us/azure/foundry/responsible-ai/openai/data-privacy?tabs=azure-portal","capturedAt":"2026-11-08T22:04:48Z","sha256":"bec664eb38063be8a2b089e14d4ac98ed87ef3eb39d41bb866e7875eab36f116"}}]},"training_default":{"summary":"No. Prompts, completions, embeddings and training data aren't used to train foundation models or improve Microsoft or third-party products without your permission, and aren't shared with OpenAI.","status":"stated","cites":[{"quote":"are NOT used to train any generative AI foundation models without your permission or instruction.","source":{"doc":"azure-openai-data-privacy","title":"Data, privacy, and security for Foundry Models sold by Azure in Microsoft Foundry - Microsoft Foundry","url":"https://learn.microsoft.com/en-us/azure/foundry/responsible-ai/openai/data-privacy?tabs=azure-portal","capturedAt":"2026-11-08T22:04:48Z","sha256":"bec664eb38063be8a2b089e14d4ac98ed87ef3eb39d41bb866e7875eab36f116"}},{"quote":"Customer Data, Prompts, and Completions are NOT used to improve Microsoft or third-party products or services without your explicit permission or instruction.","source":{"doc":"azure-openai-data-privacy","title":"Data, privacy, and security for Foundry Models sold by Azure in Microsoft Foundry - Microsoft Foundry","url":"https://learn.microsoft.com/en-us/azure/foundry/responsible-ai/openai/data-privacy?tabs=azure-portal","capturedAt":"2026-11-08T22:04:48Z","sha256":"bec664eb38063be8a2b089e14d4ac98ed87ef3eb39d41bb866e7875eab36f116"}}]},"training_opt_out":{"summary":"No opt-out is needed: training happens only with your permission or instruction. Fine-tuned models from your data are yours alone. How permission is given isn't described.","status":"stated","cites":[{"quote":"Training data uploaded for fine-tuning is not used to train any generative AI foundation models without your permission or instruction.","source":{"doc":"azure-openai-data-privacy","title":"Data, privacy, and security for Foundry Models sold by Azure in Microsoft Foundry - Microsoft Foundry","url":"https://learn.microsoft.com/en-us/azure/foundry/responsible-ai/openai/data-privacy?tabs=azure-portal","capturedAt":"2026-11-08T22:04:48Z","sha256":"bec664eb38063be8a2b089e14d4ac98ed87ef3eb39d41bb866e7875eab36f116"}},{"quote":"Your fine-tuned Models sold by Azure are available exclusively for your use.","source":{"doc":"azure-openai-data-privacy","title":"Data, privacy, and security for Foundry Models sold by Azure in Microsoft Foundry - Microsoft Foundry","url":"https://learn.microsoft.com/en-us/azure/foundry/responsible-ai/openai/data-privacy?tabs=azure-portal","capturedAt":"2026-11-08T22:04:48Z","sha256":"bec664eb38063be8a2b089e14d4ac98ed87ef3eb39d41bb866e7875eab36f116"}}]},"human_review":{"summary":"Possible by default: automated review, plus humans 'as necessary'. Authorized Microsoft staff may review flagged prompts and completions under controlled access. EEA deployments use EEA-based reviewers.","status":"stated","cites":[{"quote":"Review is conducted by automated means including by AI models such as LLMs by default, with additional reviews by human reviewers as necessary.","source":{"doc":"azure-openai-data-privacy","title":"Data, privacy, and security for Foundry Models sold by Azure in Microsoft Foundry - Microsoft Foundry","url":"https://learn.microsoft.com/en-us/azure/foundry/responsible-ai/openai/data-privacy?tabs=azure-portal","capturedAt":"2026-11-08T22:04:48Z","sha256":"bec664eb38063be8a2b089e14d4ac98ed87ef3eb39d41bb866e7875eab36f116"}},{"quote":"Human reviewers assessing potential abuse can access prompts and completions data only when that data has already been flagged by the abuse monitoring system, or when the prompts and completions are part of a potentially abusive pattern of use.","source":{"doc":"azure-openai-data-privacy","title":"Data, privacy, and security for Foundry Models sold by Azure in Microsoft Foundry - Microsoft Foundry","url":"https://learn.microsoft.com/en-us/azure/foundry/responsible-ai/openai/data-privacy?tabs=azure-portal","capturedAt":"2026-11-08T22:04:48Z","sha256":"bec664eb38063be8a2b089e14d4ac98ed87ef3eb39d41bb866e7875eab36f116"}},{"quote":"For Models sold by Azure deployed in the European Economic Area, the authorized Microsoft employees are located in the European Economic Area.","source":{"doc":"azure-openai-data-privacy","title":"Data, privacy, and security for Foundry Models sold by Azure in Microsoft Foundry - Microsoft Foundry","url":"https://learn.microsoft.com/en-us/azure/foundry/responsible-ai/openai/data-privacy?tabs=azure-portal","capturedAt":"2026-11-08T22:04:48Z","sha256":"bec664eb38063be8a2b089e14d4ac98ed87ef3eb39d41bb866e7875eab36f116"}}]},"memory":{"summary":"No end-user memory feature is described. Stateful features (Responses API, Assistants Threads, Stored completions) save message history in your resource, configured by you and deletable.","status":"stated","cites":[{"quote":"When you use certain optional features of Models sold by Azure and Agents, such as the [Responses API](/en-us/azure/ai-foundry/openai/how-to/responses), the Threads feature of the [Assistants API](/en-us/azure/ai-foundry/openai/how-to/assistant), and Stored completions, the service creates a data store to persist message history and other content, in accordance with how you configure the feature.","source":{"doc":"azure-openai-data-privacy","title":"Data, privacy, and security for Foundry Models sold by Azure in Microsoft Foundry - Microsoft Foundry","url":"https://learn.microsoft.com/en-us/azure/foundry/responsible-ai/openai/data-privacy?tabs=azure-portal","capturedAt":"2026-11-08T22:04:48Z","sha256":"bec664eb38063be8a2b089e14d4ac98ed87ef3eb39d41bb866e7875eab36f116"}}]},"connector_data":{"summary":"With \"On your data\", data stays in the source you connect and the service doesn't copy it into its own store. What happens on disconnect isn't stated.","status":"stated","cites":[{"quote":"The data remains stored in the data source and location you designate; Azure OpenAI does not create a duplicate data store.","source":{"doc":"azure-openai-data-privacy","title":"Data, privacy, and security for Foundry Models sold by Azure in Microsoft Foundry - Microsoft Foundry","url":"https://learn.microsoft.com/en-us/azure/foundry/responsible-ai/openai/data-privacy?tabs=azure-portal","capturedAt":"2026-11-08T22:04:48Z","sha256":"bec664eb38063be8a2b089e14d4ac98ed87ef3eb39d41bb866e7875eab36f116"}}]},"agent_actions":{"summary":"Agents' stateful features keep message history in a data store, and prompts may pull in content from URLs. Logs of agent actions, browsing and stored credentials aren't covered.","status":"stated","cites":[{"quote":"When you use certain optional features of Models sold by Azure and Agents, such as the [Responses API](/en-us/azure/ai-foundry/openai/how-to/responses), the Threads feature of the [Assistants API](/en-us/azure/ai-foundry/openai/how-to/assistant), and Stored completions, the service creates a data store to persist message history and other content, in accordance with how you configure the feature.","source":{"doc":"azure-openai-data-privacy","title":"Data, privacy, and security for Foundry Models sold by Azure in Microsoft Foundry - Microsoft Foundry","url":"https://learn.microsoft.com/en-us/azure/foundry/responsible-ai/openai/data-privacy?tabs=azure-portal","capturedAt":"2026-11-08T22:04:48Z","sha256":"bec664eb38063be8a2b089e14d4ac98ed87ef3eb39d41bb866e7875eab36f116"}},{"quote":"Prompts may also be augmented with data retrieved from a source included in the prompt itself, such as a URL.","source":{"doc":"azure-openai-data-privacy","title":"Data, privacy, and security for Foundry Models sold by Azure in Microsoft Foundry - Microsoft Foundry","url":"https://learn.microsoft.com/en-us/azure/foundry/responsible-ai/openai/data-privacy?tabs=azure-portal","capturedAt":"2026-11-08T22:04:48Z","sha256":"bec664eb38063be8a2b089e14d4ac98ed87ef3eb39d41bb866e7875eab36f116"}}]},"input_ownership":{"summary":"The captured policies don't say who owns inputs. That is likely in the Product Terms or DPA, which aren't captured.","status":"not_stated","cites":[]},"output_ownership":{"summary":"The Azure page doesn't say who owns outputs.","status":"not_stated","cites":[]},"license_to_provider":{"summary":"No license grant from the customer is described in the captured policies.","status":"not_stated","cites":[]},"third_party_sharing":{"summary":"Data isn't available to OpenAI, other model providers or other customers. Models run in Microsoft's Azure environment and don't call OpenAI's services. The Microsoft DPA governs processing.","status":"stated","cites":[{"quote":"are NOT available to OpenAI or other providers of Models sold by Azure.","source":{"doc":"azure-openai-data-privacy","title":"Data, privacy, and security for Foundry Models sold by Azure in Microsoft Foundry - Microsoft Foundry","url":"https://learn.microsoft.com/en-us/azure/foundry/responsible-ai/openai/data-privacy?tabs=azure-portal","capturedAt":"2026-11-08T22:04:48Z","sha256":"bec664eb38063be8a2b089e14d4ac98ed87ef3eb39d41bb866e7875eab36f116"}},{"quote":"Foundry is an Azure service; Microsoft hosts the Models sold by Azure in Microsoft's Azure environment and Models sold by Azure do NOT interact with any services operated by providers of Models sold by Azure, for example, OpenAI (e.g. ChatGPT, or the OpenAI API).","source":{"doc":"azure-openai-data-privacy","title":"Data, privacy, and security for Foundry Models sold by Azure in Microsoft Foundry - Microsoft Foundry","url":"https://learn.microsoft.com/en-us/azure/foundry/responsible-ai/openai/data-privacy?tabs=azure-portal","capturedAt":"2026-11-08T22:04:48Z","sha256":"bec664eb38063be8a2b089e14d4ac98ed87ef3eb39d41bb866e7875eab36f116"}},{"quote":"Please also see [Microsoft Products and Services Data Protection Addendum](https://aka.ms/DPA), which governs data processing by Models sold by Azure.","source":{"doc":"azure-openai-data-privacy","title":"Data, privacy, and security for Foundry Models sold by Azure in Microsoft Foundry - Microsoft Foundry","url":"https://learn.microsoft.com/en-us/azure/foundry/responsible-ai/openai/data-privacy?tabs=azure-portal","capturedAt":"2026-11-08T22:04:48Z","sha256":"bec664eb38063be8a2b089e14d4ac98ed87ef3eb39d41bb866e7875eab36f116"}}]},"data_location":{"summary":"Standard deployments process in your chosen geography. Global may process wherever the model runs; DataZone stays within the US or EU zone. Data at rest stays in your geography.","status":"stated","cites":[{"quote":"Prompts and responses are processed within the customer-specified [geography](https://azure.microsoft.com/explore/global-infrastructure/geographies/) (unless you are using a Global or DataZone deployment type), but may be processed between regions within the geography for operational purposes (including performance and capacity management).","source":{"doc":"azure-openai-data-privacy","title":"Data, privacy, and security for Foundry Models sold by Azure in Microsoft Foundry - Microsoft Foundry","url":"https://learn.microsoft.com/en-us/azure/foundry/responsible-ai/openai/data-privacy?tabs=azure-portal","capturedAt":"2026-11-08T22:04:48Z","sha256":"bec664eb38063be8a2b089e14d4ac98ed87ef3eb39d41bb866e7875eab36f116"}},{"quote":"For both Global and DataZone deployment types, any data stored at rest, such as uploaded data, and including the abuse monitoring data store created for Global and DataZone deployments, is stored in the customer-designated geography.","source":{"doc":"azure-openai-data-privacy","title":"Data, privacy, and security for Foundry Models sold by Azure in Microsoft Foundry - Microsoft Foundry","url":"https://learn.microsoft.com/en-us/azure/foundry/responsible-ai/openai/data-privacy?tabs=azure-portal","capturedAt":"2026-11-08T22:04:48Z","sha256":"bec664eb38063be8a2b089e14d4ac98ed87ef3eb39d41bb866e7875eab36f116"}}]},"enterprise_controls":{"summary":"Covered by the Microsoft DPA. Stored data can use customer-managed keys, and managed customers can apply for modified abuse monitoring. SSO and audit logs aren't covered on this page.","status":"stated","cites":[{"quote":"Is always encrypted at rest with Microsoft's AES-256-encryption by default, with the option of using a customer managed key (certain preview features may not support customer-managed keys).","source":{"doc":"azure-openai-data-privacy","title":"Data, privacy, and security for Foundry Models sold by Azure in Microsoft Foundry - Microsoft Foundry","url":"https://learn.microsoft.com/en-us/azure/foundry/responsible-ai/openai/data-privacy?tabs=azure-portal","capturedAt":"2026-11-08T22:04:48Z","sha256":"bec664eb38063be8a2b089e14d4ac98ed87ef3eb39d41bb866e7875eab36f116"}},{"quote":"As depicted in the diagram above, managed customers may [apply to modify abuse monitoring]","source":{"doc":"azure-openai-data-privacy","title":"Data, privacy, and security for Foundry Models sold by Azure in Microsoft Foundry - Microsoft Foundry","url":"https://learn.microsoft.com/en-us/azure/foundry/responsible-ai/openai/data-privacy?tabs=azure-portal","capturedAt":"2026-11-08T22:04:48Z","sha256":"bec664eb38063be8a2b089e14d4ac98ed87ef3eb39d41bb866e7875eab36f116"}}]}}},{"id":"m365-copilot","name":"Microsoft 365 Copilot (work/school accounts)","surface":"business","facts":{"default_retention":{"summary":"Prompts, responses and citations are stored as Copilot activity history under the same contractual commitments as your org's other Microsoft 365 content. No default retention period is stated.","status":"stated","cites":[{"quote":"The stored data includes the user's prompt and Copilot's response, including citations to any information used to ground Copilot's response.","source":{"doc":"m365-copilot-privacy","title":"Data, Privacy, and Security for Microsoft Copilot","url":"https://learn.microsoft.com/en-us/copilot/plan/microsoft-365-copilot-privacy","capturedAt":"2026-11-08T22:04:48Z","sha256":"339cbd163d75373df7467d753f2fd4fb15d4987fe532a590af12e01dd0fbc9a4"}},{"quote":"This data is processed and stored in alignment with contractual commitments with your organization's other content in Microsoft 365. The data is encrypted while it's stored and isn't used to train foundation LLMs, including those used by Microsoft Copilot.","source":{"doc":"m365-copilot-privacy","title":"Data, Privacy, and Security for Microsoft Copilot","url":"https://learn.microsoft.com/en-us/copilot/plan/microsoft-365-copilot-privacy","capturedAt":"2026-11-08T22:04:48Z","sha256":"339cbd163d75373df7467d753f2fd4fb15d4987fe532a590af12e01dd0fbc9a4"}}]},"deletion_window":{"summary":"Users can delete their Copilot activity history in the My Account portal. No timeframe for final deletion is given.","status":"stated","cites":[{"quote":"Your users can delete their Copilot activity history, which includes their prompts and the responses Copilot returns, by going to the [My Account portal](https://myaccount.microsoft.com/).","source":{"doc":"m365-copilot-privacy","title":"Data, Privacy, and Security for Microsoft Copilot","url":"https://learn.microsoft.com/en-us/copilot/plan/microsoft-365-copilot-privacy","capturedAt":"2026-11-08T22:04:48Z","sha256":"339cbd163d75373df7467d753f2fd4fb15d4987fe532a590af12e01dd0fbc9a4"}}]},"retention_exceptions":{"summary":"Admins can set Purview retention policies on Copilot chat data and search it. Copilot has opted out of Azure OpenAI abuse monitoring. Legal-hold and backup durations aren't stated.","status":"stated","cites":[{"quote":"To view and manage this stored data, admins can use Content search or Microsoft Purview. Admins can also use Microsoft Purview to set retention policies for the data related to chat interactions with Copilot.","source":{"doc":"m365-copilot-privacy","title":"Data, Privacy, and Security for Microsoft Copilot","url":"https://learn.microsoft.com/en-us/copilot/plan/microsoft-365-copilot-privacy","capturedAt":"2026-11-08T22:04:48Z","sha256":"339cbd163d75373df7467d753f2fd4fb15d4987fe532a590af12e01dd0fbc9a4"}},{"quote":"While abuse monitoring, which includes human review of content, is available in Azure OpenAI, Microsoft Copilot services have opted out of it.","source":{"doc":"m365-copilot-privacy","title":"Data, Privacy, and Security for Microsoft Copilot","url":"https://learn.microsoft.com/en-us/copilot/plan/microsoft-365-copilot-privacy","capturedAt":"2026-11-08T22:04:48Z","sha256":"339cbd163d75373df7467d753f2fd4fb15d4987fe532a590af12e01dd0fbc9a4"}}]},"zdr":{"summary":"No zero-retention option is described. Inferred from the page saying interactions are stored as activity history by default.","status":"inferred","cites":[{"quote":"When a user interacts with Microsoft Copilot (using apps such as Word, PowerPoint, Excel, OneNote, Loop, or Whiteboard), we store data about these interactions.","source":{"doc":"m365-copilot-privacy","title":"Data, Privacy, and Security for Microsoft Copilot","url":"https://learn.microsoft.com/en-us/copilot/plan/microsoft-365-copilot-privacy","capturedAt":"2026-11-08T22:04:48Z","sha256":"339cbd163d75373df7467d753f2fd4fb15d4987fe532a590af12e01dd0fbc9a4"}}]},"training_default":{"summary":"No. Prompts, responses and Microsoft Graph data aren't used to train foundation LLMs.","status":"stated","cites":[{"quote":"Prompts, responses, and data accessed through Microsoft Graph aren't used to train foundation LLMs, including those used by Microsoft Copilot.","source":{"doc":"m365-copilot-privacy","title":"Data, Privacy, and Security for Microsoft Copilot","url":"https://learn.microsoft.com/en-us/copilot/plan/microsoft-365-copilot-privacy","capturedAt":"2026-11-08T22:04:48Z","sha256":"339cbd163d75373df7467d753f2fd4fb15d4987fe532a590af12e01dd0fbc9a4"}}]},"training_opt_out":{"summary":"No training opt-out is needed. Optional user feedback may be used to improve Copilot, though not to train foundation LLMs, and admins can manage feedback.","status":"stated","cites":[{"quote":"We may use customer feedback, which is optional, to improve Microsoft Copilot, just like we use customer feedback to improve other Microsoft 365 services and Microsoft 365 productivity apps. We don't use this feedback to train the foundation LLMs used by Microsoft Copilot. Customers can manage feedback through admin controls.","source":{"doc":"m365-copilot-privacy","title":"Data, Privacy, and Security for Microsoft Copilot","url":"https://learn.microsoft.com/en-us/copilot/plan/microsoft-365-copilot-privacy","capturedAt":"2026-11-08T22:04:48Z","sha256":"339cbd163d75373df7467d753f2fd4fb15d4987fe532a590af12e01dd0fbc9a4"}}]},"human_review":{"summary":"Microsoft Copilot services have opted out of Azure OpenAI abuse monitoring, which includes human review. Automated harmful-content filters still apply.","status":"stated","cites":[{"quote":"While abuse monitoring, which includes human review of content, is available in Azure OpenAI, Microsoft Copilot services have opted out of it.","source":{"doc":"m365-copilot-privacy","title":"Data, Privacy, and Security for Microsoft Copilot","url":"https://learn.microsoft.com/en-us/copilot/plan/microsoft-365-copilot-privacy","capturedAt":"2026-11-08T22:04:48Z","sha256":"339cbd163d75373df7467d753f2fd4fb15d4987fe532a590af12e01dd0fbc9a4"}}]},"memory":{"summary":"Only Copilot activity history is described: users can delete it, and admins can view it via Content search or Purview. A separate memory feature isn't mentioned.","status":"stated","cites":[{"quote":"We refer to the user's prompt and Copilot's response to that prompt as the \"content of interactions\" and the record of those interactions is the user's Copilot activity history.","source":{"doc":"m365-copilot-privacy","title":"Data, Privacy, and Security for Microsoft Copilot","url":"https://learn.microsoft.com/en-us/copilot/plan/microsoft-365-copilot-privacy","capturedAt":"2026-11-08T22:04:48Z","sha256":"339cbd163d75373df7467d753f2fd4fb15d4987fe532a590af12e01dd0fbc9a4"}},{"quote":"To view and manage this stored data, admins can use Content search or Microsoft Purview.","source":{"doc":"m365-copilot-privacy","title":"Data, Privacy, and Security for Microsoft Copilot","url":"https://learn.microsoft.com/en-us/copilot/plan/microsoft-365-copilot-privacy","capturedAt":"2026-11-08T22:04:48Z","sha256":"339cbd163d75373df7467d753f2fd4fb15d4987fe532a590af12e01dd0fbc9a4"}}]},"connector_data":{"summary":"Copilot uses Microsoft Graph content (email, calendar, chats, documents) the user can already view, plus Graph connectors for third-party data. What happens to indexed data on disconnect isn't stated.","status":"stated","cites":[{"quote":"It can generate responses anchored in your organizational data, such as user documents, emails, calendar, chats, meetings, and contacts.","source":{"doc":"m365-copilot-privacy","title":"Data, Privacy, and Security for Microsoft Copilot","url":"https://learn.microsoft.com/en-us/copilot/plan/microsoft-365-copilot-privacy","capturedAt":"2026-11-08T22:04:48Z","sha256":"339cbd163d75373df7467d753f2fd4fb15d4987fe532a590af12e01dd0fbc9a4"}},{"quote":"Microsoft Copilot only surfaces organizational data to which individual users have at least view permissions.","source":{"doc":"m365-copilot-privacy","title":"Data, Privacy, and Security for Microsoft Copilot","url":"https://learn.microsoft.com/en-us/copilot/plan/microsoft-365-copilot-privacy","capturedAt":"2026-11-08T22:04:48Z","sha256":"339cbd163d75373df7467d753f2fd4fb15d4987fe532a590af12e01dd0fbc9a4"}},{"quote":"Data from Graph connectors can be returned in Microsoft Copilot responses if the user has permission to access that information.","source":{"doc":"m365-copilot-privacy","title":"Data, Privacy, and Security for Microsoft Copilot","url":"https://learn.microsoft.com/en-us/copilot/plan/microsoft-365-copilot-privacy","capturedAt":"2026-11-08T22:04:48Z","sha256":"339cbd163d75373df7467d753f2fd4fb15d4987fe532a590af12e01dd0fbc9a4"}}]},"agent_actions":{"summary":"Copilot sends queries built from prompts, activity history and accessible data to admin-approved agents, which follow their own terms. Web queries go to Bing. Action logs aren't described.","status":"stated","cites":[{"quote":"If an agent is needed, Microsoft Copilot generates a search query to send to the agent on the user's behalf. The query is based on the user's prompt, Copilot activity history, and data the user has access to in Microsoft 365.","source":{"doc":"m365-copilot-privacy","title":"Data, Privacy, and Security for Microsoft Copilot","url":"https://learn.microsoft.com/en-us/copilot/plan/microsoft-365-copilot-privacy","capturedAt":"2026-11-08T22:04:48Z","sha256":"339cbd163d75373df7467d753f2fd4fb15d4987fe532a590af12e01dd0fbc9a4"}},{"quote":"When you're using agents to help Microsoft Copilot to provide more relevant information, check the privacy statement and terms of use of the agent to determine how it will handle your organization's data.","source":{"doc":"m365-copilot-privacy","title":"Data, Privacy, and Security for Microsoft Copilot","url":"https://learn.microsoft.com/en-us/copilot/plan/microsoft-365-copilot-privacy","capturedAt":"2026-11-08T22:04:48Z","sha256":"339cbd163d75373df7467d753f2fd4fb15d4987fe532a590af12e01dd0fbc9a4"}},{"quote":"Based on these terms, Copilot generates a search query that it sends to the Bing Search service.","source":{"doc":"m365-copilot-privacy","title":"Data, Privacy, and Security for Microsoft Copilot","url":"https://learn.microsoft.com/en-us/copilot/plan/microsoft-365-copilot-privacy","capturedAt":"2026-11-08T22:04:48Z","sha256":"339cbd163d75373df7467d753f2fd4fb15d4987fe532a590af12e01dd0fbc9a4"}}]},"input_ownership":{"summary":"The page doesn't say who owns inputs. It says only that they are handled like other Microsoft 365 content under the org's contract.","status":"not_stated","cites":[]},"output_ownership":{"summary":"Microsoft doesn't claim ownership of output, but doesn't decide whether it is copyrightable. It will defend commercial customers sued for copyright if they used the built-in guardrails.","status":"stated","cites":[{"quote":"Microsoft doesn't claim ownership of the output of the service. That said, we don't make a determination on whether a customer's output is copyright protected or enforceable against other users.","source":{"doc":"m365-copilot-privacy","title":"Data, Privacy, and Security for Microsoft Copilot","url":"https://learn.microsoft.com/en-us/copilot/plan/microsoft-365-copilot-privacy","capturedAt":"2026-11-08T22:04:48Z","sha256":"339cbd163d75373df7467d753f2fd4fb15d4987fe532a590af12e01dd0fbc9a4"}},{"quote":"If a third party sues a commercial customer for copyright infringement for using Microsoft's Copilots or the output they generate, we'll defend the customer and pay the amount of any adverse judgments or settlements that result from the lawsuit, as long as the customer used the guardrails and content filters we have built into our products.","source":{"doc":"m365-copilot-privacy","title":"Data, Privacy, and Security for Microsoft Copilot","url":"https://learn.microsoft.com/en-us/copilot/plan/microsoft-365-copilot-privacy","capturedAt":"2026-11-08T22:04:48Z","sha256":"339cbd163d75373df7467d753f2fd4fb15d4987fe532a590af12e01dd0fbc9a4"}}]},"license_to_provider":{"summary":"No license grant from the customer is described in the captured policies.","status":"not_stated","cites":[]},"third_party_sharing":{"summary":"Admins can choose to use Anthropic and OpenAI models, which act as subprocessors (extra terms may apply). Other Microsoft-hosted models keep data inside Microsoft. Web search queries go to Bing.","status":"stated","cites":[{"quote":"Microsoft offers third-party AI models in Microsoft Copilot, such as Anthropic and OpenAI models. As an admin, you can decide whether to use these models to power your experiences, and additional terms may apply.","source":{"doc":"m365-copilot-privacy","title":"Data, Privacy, and Security for Microsoft Copilot","url":"https://learn.microsoft.com/en-us/copilot/plan/microsoft-365-copilot-privacy","capturedAt":"2026-11-08T22:04:48Z","sha256":"339cbd163d75373df7467d753f2fd4fb15d4987fe532a590af12e01dd0fbc9a4"}},{"quote":"These models are governed by the same contractual and data protection commitments already in place, including that no data leaves Microsoft.","source":{"doc":"m365-copilot-privacy","title":"Data, Privacy, and Security for Microsoft Copilot","url":"https://learn.microsoft.com/en-us/copilot/plan/microsoft-365-copilot-privacy","capturedAt":"2026-11-08T22:04:48Z","sha256":"339cbd163d75373df7467d753f2fd4fb15d4987fe532a590af12e01dd0fbc9a4"}}]},"data_location":{"summary":"EU traffic stays in the EU Data Boundary, except Anthropic models. Non-EU queries may go to the US, EU or other regions. Advanced Data Residency and Multi-Geo cover Copilot.","status":"stated","cites":[{"quote":"EU traffic stays within the EU Data Boundary while worldwide traffic can be sent to the EU and other countries or regions for LLM processing.","source":{"doc":"m365-copilot-privacy","title":"Data, Privacy, and Security for Microsoft Copilot","url":"https://learn.microsoft.com/en-us/copilot/plan/microsoft-365-copilot-privacy","capturedAt":"2026-11-08T22:04:48Z","sha256":"339cbd163d75373df7467d753f2fd4fb15d4987fe532a590af12e01dd0fbc9a4"}},{"quote":"Models provided by Anthropic as a subprocessor are currently excluded from the EU Data Boundary.","source":{"doc":"m365-copilot-privacy","title":"Data, Privacy, and Security for Microsoft Copilot","url":"https://learn.microsoft.com/en-us/copilot/plan/microsoft-365-copilot-privacy","capturedAt":"2026-11-08T22:04:48Z","sha256":"339cbd163d75373df7467d753f2fd4fb15d4987fe532a590af12e01dd0fbc9a4"}},{"quote":"Microsoft [Advanced Data Residency (ADR)](/en-us/microsoft-365/enterprise/m365-dr-adr-overview) and [Multi-Geo Capabilities](/en-us/microsoft-365/enterprise/microsoft-365-multi-geo) offerings include data residency commitments for Microsoft Copilot customers as of March 1, 2024.","source":{"doc":"m365-copilot-privacy","title":"Data, Privacy, and Security for Microsoft Copilot","url":"https://learn.microsoft.com/en-us/copilot/plan/microsoft-365-copilot-privacy","capturedAt":"2026-11-08T22:04:48Z","sha256":"339cbd163d75373df7467d753f2fd4fb15d4987fe532a590af12e01dd0fbc9a4"}}]},"enterprise_controls":{"summary":"Product Terms and DPA apply. Admins get Purview retention policies, Content search, Teams Export APIs, agent allow-lists, feedback controls and connected-experience privacy controls.","status":"stated","cites":[{"quote":"Microsoft Copilot is upholding data residency commitments as outlined in the Microsoft Product Terms and Data Protection Addendum.","source":{"doc":"m365-copilot-privacy","title":"Data, Privacy, and Security for Microsoft Copilot","url":"https://learn.microsoft.com/en-us/copilot/plan/microsoft-365-copilot-privacy","capturedAt":"2026-11-08T22:04:48Z","sha256":"339cbd163d75373df7467d753f2fd4fb15d4987fe532a590af12e01dd0fbc9a4"}},{"quote":"For Microsoft Teams chats with Copilot, admins can also use [Microsoft Teams Export APIs](/en-us/microsoftteams/export-teams-content) to view the stored data.","source":{"doc":"m365-copilot-privacy","title":"Data, Privacy, and Security for Microsoft Copilot","url":"https://learn.microsoft.com/en-us/copilot/plan/microsoft-365-copilot-privacy","capturedAt":"2026-11-08T22:04:48Z","sha256":"339cbd163d75373df7467d753f2fd4fb15d4987fe532a590af12e01dd0fbc9a4"}},{"quote":"Admins have full control to select which agents are allowed in their organization.","source":{"doc":"m365-copilot-privacy","title":"Data, Privacy, and Security for Microsoft Copilot","url":"https://learn.microsoft.com/en-us/copilot/plan/microsoft-365-copilot-privacy","capturedAt":"2026-11-08T22:04:48Z","sha256":"339cbd163d75373df7467d753f2fd4fb15d4987fe532a590af12e01dd0fbc9a4"}}]}}},{"id":"copilot-consumer","name":"Microsoft Copilot (consumer website and apps, personal Microsoft account)","surface":"consumer","facts":{"default_retention":{"summary":"No Copilot-specific retention period. The privacy statement says data is kept as long as necessary for the service and other legitimate purposes, and periods vary widely.","status":"stated","cites":[{"quote":"Because these needs can vary for different data types and the context of our interactions with you or your use of our products, actual retention periods can vary significantly. See relevant product documentation for more information.","source":{"doc":"privacy-statement","title":"Microsoft Privacy Statement \\u2013 Microsoft privacy","url":"https://www.microsoft.com/en-us/privacy/privacystatement","capturedAt":"2026-11-08T22:04:50Z","sha256":"b35f98f736d3574d49bcb5894e89ab38f16b22c5bbad498b9a2e3691a3867964"}}]},"deletion_window":{"summary":"Signed-in users can view, export and delete Copilot activity history on the privacy dashboard. No timeline is given. The only closure timeline (60 days) is stated for child accounts.","status":"stated","cites":[{"quote":"If you are signed into Microsoft Copilot with your Microsoft account, you can view, access, export and delete Copilot activity history from your [privacy dashboard](https://account.microsoft.com/privacy/).","source":{"doc":"privacy-statement","title":"Microsoft Privacy Statement \\u2013 Microsoft privacy","url":"https://www.microsoft.com/en-us/privacy/privacystatement","capturedAt":"2026-11-08T22:04:50Z","sha256":"b35f98f736d3574d49bcb5894e89ab38f16b22c5bbad498b9a2e3691a3867964"}},{"quote":"After requesting account closure, the account is marked for deletion, but we will wait 60 days before permanently deleting the account in case you change your mind or need to access information.","source":{"doc":"privacy-statement","title":"Microsoft Privacy Statement \\u2013 Microsoft privacy","url":"https://www.microsoft.com/en-us/privacy/privacystatement","capturedAt":"2026-11-08T22:04:50Z","sha256":"b35f98f736d3574d49bcb5894e89ab38f16b22c5bbad498b9a2e3691a3867964"}}]},"retention_exceptions":{"summary":"Data may be kept for legal duties, preservation orders, litigation, security and safety. Content can be preserved and disclosed under good-faith legal or safety needs. No durations are given.","status":"stated","cites":[{"quote":"Legal, contractual, and other similar obligations we are subject to, including data retention laws, government orders to preserve data relevant to an investigation, or data retained for the purposes of litigation.","source":{"doc":"privacy-statement","title":"Microsoft Privacy Statement \\u2013 Microsoft privacy","url":"https://www.microsoft.com/en-us/privacy/privacystatement","capturedAt":"2026-11-08T22:04:50Z","sha256":"b35f98f736d3574d49bcb5894e89ab38f16b22c5bbad498b9a2e3691a3867964"}},{"quote":"Finally, we retain, access, transfer, disclose, and preserve personal data, including your content (like the content of your emails in Outlook.com or files in OneDrive), when we have a good faith belief that it is necessary to do any of the following:","source":{"doc":"privacy-statement","title":"Microsoft Privacy Statement \\u2013 Microsoft privacy","url":"https://www.microsoft.com/en-us/privacy/privacystatement","capturedAt":"2026-11-08T22:04:50Z","sha256":"b35f98f736d3574d49bcb5894e89ab38f16b22c5bbad498b9a2e3691a3867964"}}]},"zdr":{"summary":"No zero-retention option is described for consumer Copilot.","status":"not_stated","cites":[]},"training_default":{"summary":"Microsoft may use data to train AI models, and Copilot uses prompts to improve services. Whether Copilot chats are trained on by default isn't stated. Copilot Health is excluded.","status":"stated","cites":[{"quote":"As part of our efforts to improve and develop our products, we may use your data to develop, train, and fine-tune our AI models, including large language models (LLMs).","source":{"doc":"privacy-statement","title":"Microsoft Privacy Statement \\u2013 Microsoft privacy","url":"https://www.microsoft.com/en-us/privacy/privacystatement","capturedAt":"2026-11-08T22:04:50Z","sha256":"b35f98f736d3574d49bcb5894e89ab38f16b22c5bbad498b9a2e3691a3867964"}},{"quote":"Microsoft Copilot also uses prompts and related data to provide and improve services, including relevant advertising.","source":{"doc":"privacy-statement","title":"Microsoft Privacy Statement \\u2013 Microsoft privacy","url":"https://www.microsoft.com/en-us/privacy/privacystatement","capturedAt":"2026-11-08T22:04:50Z","sha256":"b35f98f736d3574d49bcb5894e89ab38f16b22c5bbad498b9a2e3691a3867964"}},{"quote":"It is not used to develop or train generative AI models, and it is not used for advertising or marketing purposes.","source":{"doc":"privacy-statement","title":"Microsoft Privacy Statement \\u2013 Microsoft privacy","url":"https://www.microsoft.com/en-us/privacy/privacystatement","capturedAt":"2026-11-08T22:04:50Z","sha256":"b35f98f736d3574d49bcb5894e89ab38f16b22c5bbad498b9a2e3691a3867964"}}]},"training_opt_out":{"summary":"The privacy statement describes no Copilot training opt-out. It links to a Copilot privacy FAQ that isn't in the captured policies.","status":"not_stated","cites":[]},"human_review":{"summary":"Likely, but inferred: Microsoft says it manually reviews some AI results and uses conversation data to prevent abuse. It doesn't say whether humans read Copilot chats specifically.","status":"inferred","cites":[{"quote":"Our processing of personal data involves both automated and manual (human) methods, which often work together. For example, to build, train, and improve the accuracy of our automated systems – such as AI - we manually review some of the results against the underlying data.","source":{"doc":"privacy-statement","title":"Microsoft Privacy Statement \\u2013 Microsoft privacy","url":"https://www.microsoft.com/en-us/privacy/privacystatement","capturedAt":"2026-11-08T22:04:50Z","sha256":"b35f98f736d3574d49bcb5894e89ab38f16b22c5bbad498b9a2e3691a3867964"}},{"quote":"We also use your conversation data to monitor performance, troubleshoot and fix bugs and issues, prevent abuse, and to provide and improve Microsoft Copilot.","source":{"doc":"privacy-statement","title":"Microsoft Privacy Statement \\u2013 Microsoft privacy","url":"https://www.microsoft.com/en-us/privacy/privacystatement","capturedAt":"2026-11-08T22:04:50Z","sha256":"b35f98f736d3574d49bcb5894e89ab38f16b22c5bbad498b9a2e3691a3867964"}}]},"memory":{"summary":"In some markets, Copilot uses conversation history and saved memories to personalize, and may draw on Bing, Edge and MSN activity. You can manage memories and personalization in Copilot settings.","status":"stated","cites":[{"quote":"For users in some markets, Microsoft Copilot can use your conversation history (including any memories you save) to personalize your experience. We may also offer you the ability to personalize your Microsoft Copilot experience using your interactions with our other products and services, like Bing, Edge, and MSN. You can manage your memories and control personalization features using the settings in Microsoft Copilot at any time.","source":{"doc":"privacy-statement","title":"Microsoft Privacy Statement \\u2013 Microsoft privacy","url":"https://www.microsoft.com/en-us/privacy/privacystatement","capturedAt":"2026-11-08T22:04:50Z","sha256":"b35f98f736d3574d49bcb5894e89ab38f16b22c5bbad498b9a2e3691a3867964"}}]},"connector_data":{"summary":"In Microsoft 365 Personal/Family/Premium apps, Copilot uses file content only when you ask it to act on that content. Email or calendar connectors and disconnect behavior aren't described.","status":"stated","cites":[{"quote":"When used with available Microsoft 365 apps, Microsoft Copilot will use the content in your files only when you ask it to perform a specific action on that specific content","source":{"doc":"privacy-statement","title":"Microsoft Privacy Statement \\u2013 Microsoft privacy","url":"https://www.microsoft.com/en-us/privacy/privacystatement","capturedAt":"2026-11-08T22:04:50Z","sha256":"b35f98f736d3574d49bcb5894e89ab38f16b22c5bbad498b9a2e3691a3867964"}}]},"agent_actions":{"summary":"Copilot can act in other apps and sites. In Edge, it may see browsing activity if you allow it, and captured policies pages it visits during tasks. Retention isn't stated.","status":"stated","cites":[{"quote":"as well as let Microsoft Copilot interact with other apps, services, and websites to take actions on your behalf.","source":{"doc":"privacy-statement","title":"Microsoft Privacy Statement \\u2013 Microsoft privacy","url":"https://www.microsoft.com/en-us/privacy/privacystatement","capturedAt":"2026-11-08T22:04:50Z","sha256":"b35f98f736d3574d49bcb5894e89ab38f16b22c5bbad498b9a2e3691a3867964"}},{"quote":"If you choose to use features that perform tasks on your behalf, Copilot will capture visual snapshots of the pages it visits to interact with and complete the action.","source":{"doc":"privacy-statement","title":"Microsoft Privacy Statement \\u2013 Microsoft privacy","url":"https://www.microsoft.com/en-us/privacy/privacystatement","capturedAt":"2026-11-08T22:04:50Z","sha256":"b35f98f736d3574d49bcb5894e89ab38f16b22c5bbad498b9a2e3691a3867964"}},{"quote":"When using Copilot features in Microsoft Edge, you can choose to allow Microsoft Copilot in Edge to access your browsing activity, including screenshots of webpages you visit, open tabs, and browsing history to provide better answers and enable advanced Copilot features.","source":{"doc":"privacy-statement","title":"Microsoft Privacy Statement \\u2013 Microsoft privacy","url":"https://www.microsoft.com/en-us/privacy/privacystatement","capturedAt":"2026-11-08T22:04:50Z","sha256":"b35f98f736d3574d49bcb5894e89ab38f16b22c5bbad498b9a2e3691a3867964"}}]},"input_ownership":{"summary":"The privacy statement doesn't say who owns inputs. The Microsoft Services Agreement, which isn't captured, would likely cover it.","status":"not_stated","cites":[]},"output_ownership":{"summary":"Output ownership for consumer Copilot isn't stated in the captured policies.","status":"not_stated","cites":[]},"license_to_provider":{"summary":"No content license is described in the captured policies.","status":"not_stated","cites":[]},"third_party_sharing":{"summary":"Ads may relate to your Copilot conversations, including shared files. Data goes to ad partners for personalized ads (opt-out available) and to vendors. Third-party platforms' policies may also apply.","status":"stated","cites":[{"quote":"Ads may be shown that relate to the current interaction you are having with us, such as your Copilot conversations (including files you share); your current location; transactions; product usage; search queries; or the content you’re viewing.","source":{"doc":"privacy-statement","title":"Microsoft Privacy Statement \\u2013 Microsoft privacy","url":"https://www.microsoft.com/en-us/privacy/privacystatement","capturedAt":"2026-11-08T22:04:50Z","sha256":"b35f98f736d3574d49bcb5894e89ab38f16b22c5bbad498b9a2e3691a3867964"}},{"quote":"To opt out of sharing data with third parties for personalized ads, please visit our [third-party ad settings](https://go.microsoft.com/fwlink/?linkid=2214802) page.","source":{"doc":"privacy-statement","title":"Microsoft Privacy Statement \\u2013 Microsoft privacy","url":"https://www.microsoft.com/en-us/privacy/privacystatement","capturedAt":"2026-11-08T22:04:50Z","sha256":"b35f98f736d3574d49bcb5894e89ab38f16b22c5bbad498b9a2e3691a3867964"}},{"quote":"If you use Microsoft Copilot in third-party products and services, such as messaging platforms, Microsoft processes your data as described here, but the third party’s privacy policies and data processing activities may also apply.","source":{"doc":"privacy-statement","title":"Microsoft Privacy Statement \\u2013 Microsoft privacy","url":"https://www.microsoft.com/en-us/privacy/privacystatement","capturedAt":"2026-11-08T22:04:50Z","sha256":"b35f98f736d3574d49bcb5894e89ab38f16b22c5bbad498b9a2e3691a3867964"}}]},"data_location":{"summary":"Data may be stored in your region, the US, or wherever Microsoft or its providers operate, typically your region or the US with a backup elsewhere. No residency choice.","status":"stated","cites":[{"quote":"Typically, the primary storage location is in your region or in the United States, often with a backup to a data center in another region.","source":{"doc":"privacy-statement","title":"Microsoft Privacy Statement \\u2013 Microsoft privacy","url":"https://www.microsoft.com/en-us/privacy/privacystatement","capturedAt":"2026-11-08T22:04:50Z","sha256":"b35f98f736d3574d49bcb5894e89ab38f16b22c5bbad498b9a2e3691a3867964"}}]},"enterprise_controls":{"summary":"This is a consumer product, so no admin controls apply. The statement points enterprise customers to its Enterprise and Developer Products section.","status":"stated","cites":[{"quote":"For enterprise customers, Microsoft Copilot offers enhanced data protection and customization. Data is collected and used as described in the Enterprise and Developer Products section.","source":{"doc":"privacy-statement","title":"Microsoft Privacy Statement \\u2013 Microsoft privacy","url":"https://www.microsoft.com/en-us/privacy/privacystatement","capturedAt":"2026-11-08T22:04:50Z","sha256":"b35f98f736d3574d49bcb5894e89ab38f16b22c5bbad498b9a2e3691a3867964"}}]}}}],"notes":[{"text":"Consumer Copilot conversations, including files you share, can be used to show you ads. Copilot uses prompts to improve services 'including relevant advertising'.","cites":[{"quote":"Ads may be shown that relate to the current interaction you are having with us, such as your Copilot conversations (including files you share); your current location; transactions; product usage; search queries; or the content you’re viewing.","source":{"doc":"privacy-statement","title":"Microsoft Privacy Statement \\u2013 Microsoft privacy","url":"https://www.microsoft.com/en-us/privacy/privacystatement","capturedAt":"2026-11-08T22:04:50Z","sha256":"b35f98f736d3574d49bcb5894e89ab38f16b22c5bbad498b9a2e3691a3867964"}},{"quote":"Microsoft Copilot also uses prompts and related data to provide and improve services, including relevant advertising.","source":{"doc":"privacy-statement","title":"Microsoft Privacy Statement \\u2013 Microsoft privacy","url":"https://www.microsoft.com/en-us/privacy/privacystatement","capturedAt":"2026-11-08T22:04:50Z","sha256":"b35f98f736d3574d49bcb5894e89ab38f16b22c5bbad498b9a2e3691a3867964"}}]},{"text":"Azure OpenAI includes human review of flagged content by default, and customers must apply to turn it off. Microsoft 365 Copilot has opted out of that abuse monitoring entirely.","cites":[{"quote":"Review is conducted by automated means including by AI models such as LLMs by default, with additional reviews by human reviewers as necessary.","source":{"doc":"azure-openai-data-privacy","title":"Data, privacy, and security for Foundry Models sold by Azure in Microsoft Foundry - Microsoft Foundry","url":"https://learn.microsoft.com/en-us/azure/foundry/responsible-ai/openai/data-privacy?tabs=azure-portal","capturedAt":"2026-11-08T22:04:48Z","sha256":"bec664eb38063be8a2b089e14d4ac98ed87ef3eb39d41bb866e7875eab36f116"}},{"quote":"While abuse monitoring, which includes human review of content, is available in Azure OpenAI, Microsoft Copilot services have opted out of it.","source":{"doc":"m365-copilot-privacy","title":"Data, Privacy, and Security for Microsoft Copilot","url":"https://learn.microsoft.com/en-us/copilot/plan/microsoft-365-copilot-privacy","capturedAt":"2026-11-08T22:04:48Z","sha256":"339cbd163d75373df7467d753f2fd4fb15d4987fe532a590af12e01dd0fbc9a4"}}]},{"text":"In Microsoft 365 Copilot, Anthropic models are run by a subprocessor and are currently outside the EU Data Boundary.","cites":[{"quote":"Models provided by Anthropic as a subprocessor are currently excluded from the EU Data Boundary.","source":{"doc":"m365-copilot-privacy","title":"Data, Privacy, and Security for Microsoft Copilot","url":"https://learn.microsoft.com/en-us/copilot/plan/microsoft-365-copilot-privacy","capturedAt":"2026-11-08T22:04:48Z","sha256":"339cbd163d75373df7467d753f2fd4fb15d4987fe532a590af12e01dd0fbc9a4"}}]},{"text":"For enterprise and developer products, the customer agreement overrides the general privacy statement where they conflict.","cites":[{"quote":"***In the event of a conflict between our privacy statement and the terms of any agreement(s) between a customer and Microsoft for Enterprise and Developer Products, the terms of those agreement(s) will control.***","source":{"doc":"privacy-statement","title":"Microsoft Privacy Statement \\u2013 Microsoft privacy","url":"https://www.microsoft.com/en-us/privacy/privacystatement","capturedAt":"2026-11-08T22:04:50Z","sha256":"b35f98f736d3574d49bcb5894e89ab38f16b22c5bbad498b9a2e3691a3867964"}}]},{"text":"Azure features in preview may follow different privacy practices, including for abuse monitoring.","cites":[{"quote":"Azure Preview features, including Models sold by Azure in preview, may employ different privacy practices, including with respect to abuse monitoring.","source":{"doc":"azure-openai-data-privacy","title":"Data, privacy, and security for Foundry Models sold by Azure in Microsoft Foundry - Microsoft Foundry","url":"https://learn.microsoft.com/en-us/azure/foundry/responsible-ai/openai/data-privacy?tabs=azure-portal","capturedAt":"2026-11-08T22:04:48Z","sha256":"bec664eb38063be8a2b089e14d4ac98ed87ef3eb39d41bb866e7875eab36f116"}}]}],"gaps":["How long the Azure OpenAI abuse-monitoring store keeps flagged prompts and completions: not stated. Likely on the linked Azure OpenAI 'Abuse monitoring' page.","How long Responses API, Assistants Threads and Stored completions data is kept if the customer never deletes it, and how long deletion takes: not stated. Likely in the Responses API or Assistants docs.","Whether consumer Copilot conversations are used for model training by default, and how to opt out: not stated. Likely in 'Privacy FAQ for Microsoft Copilot' and 'Microsoft Copilot for individuals: your privacy controls and choices'.","Default retention for consumer Copilot conversation history, and how long deletion from the privacy dashboard takes: not stated. Likely in the Copilot privacy FAQ or Copilot Privacy Center.","Default retention for Microsoft 365 Copilot activity history with no Purview policy set: not stated. Likely in 'Learn about retention for Copilot' (Purview docs).","Ownership of inputs/outputs and any license to Microsoft: not stated for Azure or consumer Copilot. Likely in the Microsoft Product Terms/DPA (Azure, M365) and the Microsoft Services Agreement (consumer).","Data handling once an admin enables Anthropic or OpenAI as subprocessors in Microsoft 365 Copilot: not covered. Likely in 'Claude models from Anthropic in Microsoft Online Services' and 'OpenAI as a subprocessor in Microsoft Online Services'."],"documents":[{"doc":"azure-openai-data-privacy","title":"Data, privacy, and security for Foundry Models sold by Azure in Microsoft Foundry - Microsoft Foundry","url":"https://learn.microsoft.com/en-us/azure/foundry/responsible-ai/openai/data-privacy?tabs=azure-portal","capturedAt":"2026-11-08T22:04:48Z","sha256":"bec664eb38063be8a2b089e14d4ac98ed87ef3eb39d41bb866e7875eab36f116"},{"doc":"m365-copilot-privacy","title":"Data, Privacy, and Security for Microsoft Copilot","url":"https://learn.microsoft.com/en-us/copilot/plan/microsoft-365-copilot-privacy","capturedAt":"2026-11-08T22:04:48Z","sha256":"339cbd163d75373df7467d753f2fd4fb15d4987fe532a590af12e01dd0fbc9a4"},{"doc":"privacy-statement","title":"Microsoft Privacy Statement \\u2013 Microsoft privacy","url":"https://www.microsoft.com/en-us/privacy/privacystatement","capturedAt":"2026-11-08T22:04:50Z","sha256":"b35f98f736d3574d49bcb5894e89ab38f16b22c5bbad498b9a2e3691a3867964"}],"url":"https://gjalla.io/data-policies/microsoft/"},{"id":"mistral","provider":"mistral","name":"Mistral (Le Chat, La Plateforme)","category":"frontier-lab","checkedOn":"2026-11-08","products":[{"id":"vibe","name":"Vibe (Mistral's chat assistant app, including Chat and Vibe Work), individual use","surface":"consumer","facts":{"default_retention":{"summary":"Inputs and outputs are kept until you delete the conversation or your account, so your chat history stays visible.","status":"stated","cites":[{"quote":"we keep your Input and Output until you delete your account or until you delete the conversation from Vibe.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://legal.mistral.ai/terms/privacy-policy/?lang=en","capturedAt":"2026-11-08T22:28:15Z","sha256":"fd6e447bf35391b4c29ea9270015539a245cfa84ee0c5e6f38eaeeabc6ad19c4"}},{"quote":"**Input and output are maintained by default** so you can see your **conversation history in the product**.","source":{"doc":"help-delete-chat","title":"Can I delete a chat conversation?","url":"https://help.mistral.ai/en/articles/347613-can-i-delete-a-chat-conversation","capturedAt":"2026-11-08T22:04:39Z","sha256":"615b0ccbcfe7cb4a8f48a010468aa6c0ad7e070a5dc2f0e31fe76b41c5866404"}}]},"deletion_window":{"summary":"Deleted chats and accounts are removed, typically after an unspecified 'short grace period'. Some backend data lasts longer: account data 1 year after deletion, identity data 5 years.","status":"stated","cites":[{"quote":"Conversations are removed from our systems **upon manual deletion on your side**, or **when you delete your account**, typically after a **short grace period** to prevent accidental data loss, and for monitoring and legal retention purposes.","source":{"doc":"help-zdr","title":"Can I activate Zero Data Retention (ZDR)?","url":"https://help.mistral.ai/en/articles/347612-can-i-activate-zero-data-retention-zdr","capturedAt":"2026-11-08T22:04:38Z","sha256":"35d01d6d3f9726e783db4a869565d7d93a2254bc4ce23ce39b84e863adf4b79c"}},{"quote":"Even **after your manual deletion on your end**, we may retain **different types of data in our backend systems** for different amounts of time, as specified in our [Privacy Policy](https://mistral.ai/terms#privacy-policy) and/or your Data Protection Agreement with us.","source":{"doc":"help-delete-chat","title":"Can I delete a chat conversation?","url":"https://help.mistral.ai/en/articles/347613-can-i-delete-a-chat-conversation","capturedAt":"2026-11-08T22:04:39Z","sha256":"615b0ccbcfe7cb4a8f48a010468aa6c0ad7e070a5dc2f0e31fe76b41c5866404"}},{"quote":"for 1 year after you delete your account.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://legal.mistral.ai/terms/privacy-policy/?lang=en","capturedAt":"2026-11-08T22:28:15Z","sha256":"fd6e447bf35391b4c29ea9270015539a245cfa84ee0c5e6f38eaeeabc6ad19c4"}},{"quote":"for 5 years after the termination of your Mistral AI account.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://legal.mistral.ai/terms/privacy-policy/?lang=en","capturedAt":"2026-11-08T22:28:15Z","sha256":"fd6e447bf35391b4c29ea9270015539a245cfa84ee0c5e6f38eaeeabc6ad19c4"}}]},"retention_exceptions":{"summary":"Chats may be kept to enforce the Usage Policy, handle violations, or meet legal duties (no duration given). Technical connection data is kept 1 rolling year.","status":"stated","cites":[{"quote":"For instance, we may retain your input and output data to **enforce our Usage Policy**, address Terms of Service or **policy violations**, or as **required by law**.","source":{"doc":"help-delete-chat","title":"Can I delete a chat conversation?","url":"https://help.mistral.ai/en/articles/347613-can-i-delete-a-chat-conversation","capturedAt":"2026-11-08T22:04:39Z","sha256":"615b0ccbcfe7cb4a8f48a010468aa6c0ad7e070a5dc2f0e31fe76b41c5866404"}},{"quote":"Sometimes, we may keep your data longer to comply with our legal obligations and/or for legal proceedings, as detailed below.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://legal.mistral.ai/terms/privacy-policy/?lang=en","capturedAt":"2026-11-08T22:28:15Z","sha256":"fd6e447bf35391b4c29ea9270015539a245cfa84ee0c5e6f38eaeeabc6ad19c4"}},{"quote":"for 1 rolling year from the date of connection, for each operation contributing to the operation of connection.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://legal.mistral.ai/terms/privacy-policy/?lang=en","capturedAt":"2026-11-08T22:28:15Z","sha256":"fd6e447bf35391b4c29ea9270015539a245cfa84ee0c5e6f38eaeeabc6ad19c4"}},{"quote":"Please note that the categories of personal data we retain longer will not be accessed or used by any member of our teams during their legal keeping periods, except to fulfill our legal obligations or in case of dispute or litigation (e.g. to recover an unpaid invoice).","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://legal.mistral.ai/terms/privacy-policy/?lang=en","capturedAt":"2026-11-08T22:28:15Z","sha256":"fd6e447bf35391b4c29ea9270015539a245cfa84ee0c5e6f38eaeeabc6ad19c4"}}]},"zdr":{"summary":"Not available for Vibe Work or Chat on any plan, because Mistral stores data for conversation history and app state.","status":"stated","cites":[{"quote":"ZDR is **not available** for Vibe Work or Chat, regardless of your subscription plan.","source":{"doc":"help-zdr","title":"Can I activate Zero Data Retention (ZDR)?","url":"https://help.mistral.ai/en/articles/347612-can-i-activate-zero-data-retention-zdr","capturedAt":"2026-11-08T22:04:38Z","sha256":"35d01d6d3f9726e783db4a869565d7d93a2254bc4ce23ce39b84e863adf4b79c"}},{"quote":"This is because **we must store your data for user experience purposes**","source":{"doc":"help-zdr","title":"Can I activate Zero Data Retention (ZDR)?","url":"https://help.mistral.ai/en/articles/347612-can-i-activate-zero-data-retention-zdr","capturedAt":"2026-11-08T22:04:38Z","sha256":"35d01d6d3f9726e783db4a869565d7d93a2254bc4ce23ce39b84e863adf4b79c"}}]},"training_default":{"summary":"Inferred yes: an opt-out exists, and the legal-bases table lists inputs and outputs for training 'subject to your opt-out'. Feedback is listed without that qualifier.","status":"inferred","cites":[{"quote":"We’ve introduced a user control which allows you to object to the use of your input and output data for model training directly from your account.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://legal.mistral.ai/terms/privacy-policy/?lang=en","capturedAt":"2026-11-08T22:28:15Z","sha256":"fd6e447bf35391b4c29ea9270015539a245cfa84ee0c5e6f38eaeeabc6ad19c4"}},{"quote":"your use of our products (to the extent permitted by our applicable terms)","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://legal.mistral.ai/terms/privacy-policy/?lang=en","capturedAt":"2026-11-08T22:28:15Z","sha256":"fd6e447bf35391b4c29ea9270015539a245cfa84ee0c5e6f38eaeeabc6ad19c4"}},{"quote":"If you use Vibe, you can instead manage your data-training preferences in your privacy settings.","source":{"doc":"help-zdr","title":"Can I activate Zero Data Retention (ZDR)?","url":"https://help.mistral.ai/en/articles/347612-can-i-activate-zero-data-retention-zdr","capturedAt":"2026-11-08T22:04:38Z","sha256":"35d01d6d3f9726e783db4a869565d7d93a2254bc4ce23ce39b84e863adf4b79c"}},{"quote":"To train our artificial intelligence models (large language models) to answer questions, generate text, translate, summarize and correct text, classify text, analyze feelings, etc. according to context, Inputs (e-mails, letters, reports, computer code, etc.) and Outputs.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://legal.mistral.ai/terms/privacy-policy/?lang=en","capturedAt":"2026-11-08T22:28:15Z","sha256":"fd6e447bf35391b4c29ea9270015539a245cfa84ee0c5e6f38eaeeabc6ad19c4"}},{"quote":"Your Input and Output, subject to your opt-out. Your Feedback.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://legal.mistral.ai/terms/privacy-policy/?lang=en","capturedAt":"2026-11-08T22:28:15Z","sha256":"fd6e447bf35391b4c29ea9270015539a245cfa84ee0c5e6f38eaeeabc6ad19c4"}},{"quote":"Our legitimate interest in developing and providing state-of-the-art large language models as part of the Mistral AI Products.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://legal.mistral.ai/terms/privacy-policy/?lang=en","capturedAt":"2026-11-08T22:28:15Z","sha256":"fd6e447bf35391b4c29ea9270015539a245cfa84ee0c5e6f38eaeeabc6ad19c4"}}]},"training_opt_out":{"summary":"Use the training control in your account privacy settings. Mistral warns training requests have 'technical limitations'; whether already-trained data is removed isn't stated.","status":"stated","cites":[{"quote":"We’ve introduced a user control which allows you to object to the use of your input and output data for model training directly from your account.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://legal.mistral.ai/terms/privacy-policy/?lang=en","capturedAt":"2026-11-08T22:28:15Z","sha256":"fd6e447bf35391b4c29ea9270015539a245cfa84ee0c5e6f38eaeeabc6ad19c4"}},{"quote":"If you use Vibe, you can instead manage your data-training preferences in your privacy settings.","source":{"doc":"help-zdr","title":"Can I activate Zero Data Retention (ZDR)?","url":"https://help.mistral.ai/en/articles/347612-can-i-activate-zero-data-retention-zdr","capturedAt":"2026-11-08T22:04:38Z","sha256":"35d01d6d3f9726e783db4a869565d7d93a2254bc4ce23ce39b84e863adf4b79c"}},{"quote":"However, when your request concerns the training of our models, it’s important to note that your rights have technical limitations and fulfilling your requests might involve a complex technical process.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://legal.mistral.ai/terms/privacy-policy/?lang=en","capturedAt":"2026-11-08T22:28:15Z","sha256":"fd6e447bf35391b4c29ea9270015539a245cfa84ee0c5e6f38eaeeabc6ad19c4"}}]},"human_review":{"summary":"Inputs and outputs are used for debugging, customer support, and moderation and abuse monitoring, and authorized staff may access data for their jobs. Whether people read chats isn't stated outright.","status":"inferred","cites":[{"quote":"Authorized members of our teams who need to access your personal data, strictly to perform their jobs","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://legal.mistral.ai/terms/privacy-policy/?lang=en","capturedAt":"2026-11-08T22:28:15Z","sha256":"fd6e447bf35391b4c29ea9270015539a245cfa84ee0c5e6f38eaeeabc6ad19c4"}},{"quote":"To manage and enforce our Terms of Service and licenses, including moderation and abuse monitoring","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://legal.mistral.ai/terms/privacy-policy/?lang=en","capturedAt":"2026-11-08T22:28:15Z","sha256":"fd6e447bf35391b4c29ea9270015539a245cfa84ee0c5e6f38eaeeabc6ad19c4"}},{"quote":"To provide customer support, including debugging and fixing errors reported by you","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://legal.mistral.ai/terms/privacy-policy/?lang=en","capturedAt":"2026-11-08T22:28:15Z","sha256":"fd6e447bf35391b4c29ea9270015539a245cfa84ee0c5e6f38eaeeabc6ad19c4"}}]},"memory":{"summary":"Vibe's Memory feature (becoming 'Knowledge Base') personalizes answers from past chats. You can turn it off and view, add, edit or delete memories in settings. Sensitive data needs explicit consent.","status":"stated","cites":[{"quote":"To enhance your experience on Vibe via the Memory feature (now becoming Knowledge Base) by providing you more relevant and personalized answers based on your past interactions with Vibe.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://legal.mistral.ai/terms/privacy-policy/?lang=en","capturedAt":"2026-11-08T22:28:15Z","sha256":"fd6e447bf35391b4c29ea9270015539a245cfa84ee0c5e6f38eaeeabc6ad19c4"}},{"quote":"As the Memory feature is becoming Knowledge Base, your previous Memories will be retained in Knowledge Base","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://legal.mistral.ai/terms/privacy-policy/?lang=en","capturedAt":"2026-11-08T22:28:15Z","sha256":"fd6e447bf35391b4c29ea9270015539a245cfa84ee0c5e6f38eaeeabc6ad19c4"}},{"quote":"Your explicit consent for any sensitive data contained in your Memories (Knowledge Base will not seek to store sensitive data included in your Input)","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://legal.mistral.ai/terms/privacy-policy/?lang=en","capturedAt":"2026-11-08T22:28:15Z","sha256":"fd6e447bf35391b4c29ea9270015539a245cfa84ee0c5e6f38eaeeabc6ad19c4"}},{"quote":"Turn off the feature at all times through your settingsAccess, add, delete or edit your Memories or your Knowledge Base at all time through your settings.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://legal.mistral.ai/terms/privacy-policy/?lang=en","capturedAt":"2026-11-08T22:28:15Z","sha256":"fd6e447bf35391b4c29ea9270015539a245cfa84ee0c5e6f38eaeeabc6ad19c4"}}]},"connector_data":{"summary":"Data accessed through integrations you connect is defined as 'Input', which the training row covers 'subject to your opt-out', so it seems treated like prompts. Disconnect handling isn't described.","status":"stated","cites":[{"quote":"“Input”, any data provided by you or accessed by Mistral AI through integrations or services you have connected to generate an Output, such as prompts, content or fine-tuning data.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://legal.mistral.ai/terms/privacy-policy/?lang=en","capturedAt":"2026-11-08T22:28:15Z","sha256":"fd6e447bf35391b4c29ea9270015539a245cfa84ee0c5e6f38eaeeabc6ad19c4"}},{"quote":"Your Input and Output, subject to your opt-out. Your Feedback.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://legal.mistral.ai/terms/privacy-policy/?lang=en","capturedAt":"2026-11-08T22:28:15Z","sha256":"fd6e447bf35391b4c29ea9270015539a245cfa84ee0c5e6f38eaeeabc6ad19c4"}}]},"agent_actions":{"summary":"Web Search can show third-party links and snippets, which may echo personal data from your input; Mistral doesn't train on them. Nothing on action logs or stored credentials.","status":"stated","cites":[{"quote":"When you use certain features that interact with third party Mistral AI Products, such as Web Search or verified news on Vibe, we may display content from third parties on Vibe, such as links, thumbnails, or snippets","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://legal.mistral.ai/terms/privacy-policy/?lang=en","capturedAt":"2026-11-08T22:28:15Z","sha256":"fd6e447bf35391b4c29ea9270015539a245cfa84ee0c5e6f38eaeeabc6ad19c4"}},{"quote":"If you include personal data in your Input, personal data might also appear in the Third-Party Content. We do not use this Third-Party Content to train our models.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://legal.mistral.ai/terms/privacy-policy/?lang=en","capturedAt":"2026-11-08T22:28:15Z","sha256":"fd6e447bf35391b4c29ea9270015539a245cfa84ee0c5e6f38eaeeabc6ad19c4"}}]},"input_ownership":{"summary":"Not addressed; the consumer Terms of Service were not captured.","status":"not_stated","cites":[]},"output_ownership":{"summary":"Not addressed; the consumer Terms of Service were not captured.","status":"not_stated","cites":[]},"license_to_provider":{"summary":"Not addressed; the consumer Terms of Service were not captured.","status":"not_stated","cites":[]},"third_party_sharing":{"summary":"Shared with service providers under data protection agreements (listed on Trust Center), banks, regulators and legal advisers. No sale or targeted advertising of consumer data in 12 months (US-law terms).","status":"stated","cites":[{"quote":"Additionally, we may share all or part of your personal data with our service providers.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://legal.mistral.ai/terms/privacy-policy/?lang=en","capturedAt":"2026-11-08T22:28:15Z","sha256":"fd6e447bf35391b4c29ea9270015539a245cfa84ee0c5e6f38eaeeabc6ad19c4"}},{"quote":"We sign a dedicated data protection agreement with each of these providers.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://legal.mistral.ai/terms/privacy-policy/?lang=en","capturedAt":"2026-11-08T22:28:15Z","sha256":"fd6e447bf35391b4c29ea9270015539a245cfa84ee0c5e6f38eaeeabc6ad19c4"}},{"quote":"Our main providers are listed on our [Trust Center](https://trust.mistral.ai/subprocessors).","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://legal.mistral.ai/terms/privacy-policy/?lang=en","capturedAt":"2026-11-08T22:28:15Z","sha256":"fd6e447bf35391b4c29ea9270015539a245cfa84ee0c5e6f38eaeeabc6ad19c4"}},{"quote":"Banks and other financial organizations","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://legal.mistral.ai/terms/privacy-policy/?lang=en","capturedAt":"2026-11-08T22:28:15Z","sha256":"fd6e447bf35391b4c29ea9270015539a245cfa84ee0c5e6f38eaeeabc6ad19c4"}},{"quote":"Such as the French data protection authority (CNIL)","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://legal.mistral.ai/terms/privacy-policy/?lang=en","capturedAt":"2026-11-08T22:28:15Z","sha256":"fd6e447bf35391b4c29ea9270015539a245cfa84ee0c5e6f38eaeeabc6ad19c4"}},{"quote":"When appropriate, we may share data with competent courts, mediators, accountants, auditors, lawyers, bailiffs, and debt collection agencies.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://legal.mistral.ai/terms/privacy-policy/?lang=en","capturedAt":"2026-11-08T22:28:15Z","sha256":"fd6e447bf35391b4c29ea9270015539a245cfa84ee0c5e6f38eaeeabc6ad19c4"}},{"quote":"Mistral AI has not “sold,” “shared,” or engaged in “targeted advertising” with (as those terms are defined under U.S. state privacy laws) any personal data of consumers in the preceding 12 months","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://legal.mistral.ai/terms/privacy-policy/?lang=en","capturedAt":"2026-11-08T22:28:15Z","sha256":"fd6e447bf35391b4c29ea9270015539a245cfa84ee0c5e6f38eaeeabc6ad19c4"}}]},"data_location":{"summary":"Mistral prefers EU providers; non-EU providers are used in exceptional cases under Standard Contractual Clauses. No residency choice is described.","status":"stated","cites":[{"quote":"We prioritize selecting providers within the European Union that strictly adhere to the GDPR. However, in exceptional cases, we may opt for non-EU providers that meet our high standards of data security and Personal Data protection.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://legal.mistral.ai/terms/privacy-policy/?lang=en","capturedAt":"2026-11-08T22:28:15Z","sha256":"fd6e447bf35391b4c29ea9270015539a245cfa84ee0c5e6f38eaeeabc6ad19c4"}},{"quote":"Additionally, we attach the most recent version of the European Commission’s Standard Contractual Clauses to all such contracts.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://legal.mistral.ai/terms/privacy-policy/?lang=en","capturedAt":"2026-11-08T22:28:15Z","sha256":"fd6e447bf35391b4c29ea9270015539a245cfa84ee0c5e6f38eaeeabc6ad19c4"}}]},"enterprise_controls":{"summary":"Not applicable to individual use; see the Team and Enterprise product.","status":"not_stated","cites":[]}}},{"id":"api","name":"Mistral AI Studio APIs (pay-as-you-go and free mode; includes Vibe CLI calls)","surface":"api","facts":{"default_retention":{"summary":"Most APIs: kept while generating, then 30 rolling days for abuse monitoring. Agents API: until account termination. Fine-tuning data: until deleted. Files API stores uploads (no period given).","status":"stated","cites":[{"quote":"Except for specific APIs, we keep your Input and Output for the period necessary to generate the Output and then for thirty (30) rolling days to monitor abuse (unless zero data retention is activated).","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://legal.mistral.ai/terms/privacy-policy/?lang=en","capturedAt":"2026-11-08T22:28:15Z","sha256":"fd6e447bf35391b4c29ea9270015539a245cfa84ee0c5e6f38eaeeabc6ad19c4"}},{"quote":"If you use our Agents API, we keep your Input and Output until you terminate your account.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://legal.mistral.ai/terms/privacy-policy/?lang=en","capturedAt":"2026-11-08T22:28:15Z","sha256":"fd6e447bf35391b4c29ea9270015539a245cfa84ee0c5e6f38eaeeabc6ad19c4"}},{"quote":"If you use our Fine-Tuning API, we keep your fine-tuning data until you delete it from Mistral AI Studio or until you terminate your account.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://legal.mistral.ai/terms/privacy-policy/?lang=en","capturedAt":"2026-11-08T22:28:15Z","sha256":"fd6e447bf35391b4c29ea9270015539a245cfa84ee0c5e6f38eaeeabc6ad19c4"}},{"quote":"For example, the Files API stores uploaded files and is outside the scope of ZDR.","source":{"doc":"help-zdr","title":"Can I activate Zero Data Retention (ZDR)?","url":"https://help.mistral.ai/en/articles/347612-can-i-activate-zero-data-retention-zdr","capturedAt":"2026-11-08T22:04:38Z","sha256":"35d01d6d3f9726e783db4a869565d7d93a2254bc4ce23ce39b84e863adf4b79c"}}]},"deletion_window":{"summary":"You can delete your account and fine-tuning data yourself. No timeframe is given for purging API data afterward; account data is kept 1 year, identity data 5 years.","status":"stated","cites":[{"quote":"We’ve introduced a user control which allows you to delete your account at all times.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://legal.mistral.ai/terms/privacy-policy/?lang=en","capturedAt":"2026-11-08T22:28:15Z","sha256":"fd6e447bf35391b4c29ea9270015539a245cfa84ee0c5e6f38eaeeabc6ad19c4"}},{"quote":"for 1 year after you delete your account.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://legal.mistral.ai/terms/privacy-policy/?lang=en","capturedAt":"2026-11-08T22:28:15Z","sha256":"fd6e447bf35391b4c29ea9270015539a245cfa84ee0c5e6f38eaeeabc6ad19c4"}},{"quote":"for 5 years after the termination of your Mistral AI account.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://legal.mistral.ai/terms/privacy-policy/?lang=en","capturedAt":"2026-11-08T22:28:15Z","sha256":"fd6e447bf35391b4c29ea9270015539a245cfa84ee0c5e6f38eaeeabc6ad19c4"}}]},"retention_exceptions":{"summary":"30-day abuse-monitoring window on most endpoints. Data may be kept longer for legal obligations or proceedings, with category-specific periods; staff may access it only for legal or dispute purposes.","status":"stated","cites":[{"quote":"Sometimes, we may keep your data longer to comply with our legal obligations and/or for legal proceedings, as detailed below.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://legal.mistral.ai/terms/privacy-policy/?lang=en","capturedAt":"2026-11-08T22:28:15Z","sha256":"fd6e447bf35391b4c29ea9270015539a245cfa84ee0c5e6f38eaeeabc6ad19c4"}},{"quote":"Please note that the categories of personal data we retain longer will not be accessed or used by any member of our teams during their legal keeping periods, except to fulfill our legal obligations or in case of dispute or litigation (e.g. to recover an unpaid invoice).","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://legal.mistral.ai/terms/privacy-policy/?lang=en","capturedAt":"2026-11-08T22:28:15Z","sha256":"fd6e447bf35391b4c29ea9270015539a245cfa84ee0c5e6f38eaeeabc6ad19c4"}},{"quote":"for 1 rolling year from the date of connection, for each operation contributing to the operation of connection.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://legal.mistral.ai/terms/privacy-policy/?lang=en","capturedAt":"2026-11-08T22:28:15Z","sha256":"fd6e447bf35391b4c29ea9270015539a245cfa84ee0c5e6f38eaeeabc6ad19c4"}},{"quote":"For instance, we may retain your input and output data to **enforce our Usage Policy**, address Terms of Service or **policy violations**, or as **required by law**.","source":{"doc":"help-delete-chat","title":"Can I delete a chat conversation?","url":"https://help.mistral.ai/en/articles/347613-can-i-delete-a-chat-conversation","capturedAt":"2026-11-08T22:04:39Z","sha256":"615b0ccbcfe7cb4a8f48a010468aa6c0ad7e070a5dc2f0e31fe76b41c5866404"}}]},"zdr":{"summary":"Pay-as-you-go only, stateless endpoints only (chat, FIM, embeddings, moderation, OCR, audio). Request via support with your reasons; Mistral approves at its discretion. Agents, batch, files excluded.","status":"stated","cites":[{"quote":"Zero Data Retention (ZDR) is available **only with pay-as-you-go** and **only for stateless API calls**.","source":{"doc":"help-zdr","title":"Can I activate Zero Data Retention (ZDR)?","url":"https://help.mistral.ai/en/articles/347612-can-i-activate-zero-data-retention-zdr","capturedAt":"2026-11-08T22:04:38Z","sha256":"35d01d6d3f9726e783db4a869565d7d93a2254bc4ce23ce39b84e863adf4b79c"}},{"quote":"As part of this request, **you must provide sufficient detail of your legitimate reasons** for requesting Zero Data Retention.","source":{"doc":"help-zdr","title":"Can I activate Zero Data Retention (ZDR)?","url":"https://help.mistral.ai/en/articles/347612-can-i-activate-zero-data-retention-zdr","capturedAt":"2026-11-08T22:04:38Z","sha256":"35d01d6d3f9726e783db4a869565d7d93a2254bc4ce23ce39b84e863adf4b79c"}},{"quote":"We will review your request and, **at our discretion**, approve or deny it.","source":{"doc":"help-zdr","title":"Can I activate Zero Data Retention (ZDR)?","url":"https://help.mistral.ai/en/articles/347612-can-i-activate-zero-data-retention-zdr","capturedAt":"2026-11-08T22:04:38Z","sha256":"35d01d6d3f9726e783db4a869565d7d93a2254bc4ce23ce39b84e863adf4b79c"}},{"quote":"ZDR does **not** apply to stateful APIs or products, including agents, batch processing files, conversations, libraries, `/v1/files`, Vibe Work, and Chat.","source":{"doc":"help-zdr","title":"Can I activate Zero Data Retention (ZDR)?","url":"https://help.mistral.ai/en/articles/347612-can-i-activate-zero-data-retention-zdr","capturedAt":"2026-11-08T22:04:38Z","sha256":"35d01d6d3f9726e783db4a869565d7d93a2254bc4ce23ce39b84e863adf4b79c"}},{"quote":"If ZDR is enabled for your organization with pay-as-you-go, Vibe CLI API calls follow the same ZDR rules as the underlying API endpoint.","source":{"doc":"help-zdr","title":"Can I activate Zero Data Retention (ZDR)?","url":"https://help.mistral.ai/en/articles/347612-can-i-activate-zero-data-retention-zdr","capturedAt":"2026-11-08T22:04:38Z","sha256":"35d01d6d3f9726e783db4a869565d7d93a2254bc4ce23ce39b84e863adf4b79c"}}]},"training_default":{"summary":"Not stated for the API. The policy lists inputs and outputs for training 'subject to your opt-out', covering 'eligible data' (undefined), so API data may be used unless opted out.","status":"inferred","cites":[{"quote":"**Training opt-out** controls whether eligible data may be used to improve Mistral’s models.","source":{"doc":"help-zdr","title":"Can I activate Zero Data Retention (ZDR)?","url":"https://help.mistral.ai/en/articles/347612-can-i-activate-zero-data-retention-zdr","capturedAt":"2026-11-08T22:04:38Z","sha256":"35d01d6d3f9726e783db4a869565d7d93a2254bc4ce23ce39b84e863adf4b79c"}},{"quote":"We’ve introduced a user control which allows you to object to the use of your input and output data for model training directly from your account.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://legal.mistral.ai/terms/privacy-policy/?lang=en","capturedAt":"2026-11-08T22:28:15Z","sha256":"fd6e447bf35391b4c29ea9270015539a245cfa84ee0c5e6f38eaeeabc6ad19c4"}},{"quote":"Your Input and Output, subject to your opt-out. Your Feedback.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://legal.mistral.ai/terms/privacy-policy/?lang=en","capturedAt":"2026-11-08T22:28:15Z","sha256":"fd6e447bf35391b4c29ea9270015539a245cfa84ee0c5e6f38eaeeabc6ad19c4"}}]},"training_opt_out":{"summary":"Opt out with the account control. Mistral calls it a control separate from ZDR. What counts as 'eligible data' isn't defined.","status":"stated","cites":[{"quote":"We’ve introduced a user control which allows you to object to the use of your input and output data for model training directly from your account.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://legal.mistral.ai/terms/privacy-policy/?lang=en","capturedAt":"2026-11-08T22:28:15Z","sha256":"fd6e447bf35391b4c29ea9270015539a245cfa84ee0c5e6f38eaeeabc6ad19c4"}},{"quote":"ZDR and training opt-out are separate controls:","source":{"doc":"help-zdr","title":"Can I activate Zero Data Retention (ZDR)?","url":"https://help.mistral.ai/en/articles/347612-can-i-activate-zero-data-retention-zdr","capturedAt":"2026-11-08T22:04:38Z","sha256":"35d01d6d3f9726e783db4a869565d7d93a2254bc4ce23ce39b84e863adf4b79c"}},{"quote":"**Training opt-out** controls whether eligible data may be used to improve Mistral’s models.","source":{"doc":"help-zdr","title":"Can I activate Zero Data Retention (ZDR)?","url":"https://help.mistral.ai/en/articles/347612-can-i-activate-zero-data-retention-zdr","capturedAt":"2026-11-08T22:04:38Z","sha256":"35d01d6d3f9726e783db4a869565d7d93a2254bc4ce23ce39b84e863adf4b79c"}}]},"human_review":{"summary":"API data is kept 30 days 'to monitor abuse', and authorized staff may access personal data for their jobs. Whether people read prompts isn't stated.","status":"inferred","cites":[{"quote":"then for thirty (30) rolling days to monitor abuse (unless zero data retention is activated)","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://legal.mistral.ai/terms/privacy-policy/?lang=en","capturedAt":"2026-11-08T22:28:15Z","sha256":"fd6e447bf35391b4c29ea9270015539a245cfa84ee0c5e6f38eaeeabc6ad19c4"}},{"quote":"Authorized members of our teams who need to access your personal data, strictly to perform their jobs","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://legal.mistral.ai/terms/privacy-policy/?lang=en","capturedAt":"2026-11-08T22:28:15Z","sha256":"fd6e447bf35391b4c29ea9270015539a245cfa84ee0c5e6f38eaeeabc6ad19c4"}},{"quote":"To manage and enforce our Terms of Service and licenses, including moderation and abuse monitoring","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://legal.mistral.ai/terms/privacy-policy/?lang=en","capturedAt":"2026-11-08T22:28:15Z","sha256":"fd6e447bf35391b4c29ea9270015539a245cfa84ee0c5e6f38eaeeabc6ad19c4"}}]},"memory":{"summary":"Not addressed. Stateful products (agents, conversations, libraries) are named, but no memory feature is described.","status":"not_stated","cites":[]},"connector_data":{"summary":"Not addressed in the captured policies.","status":"not_stated","cites":[]},"agent_actions":{"summary":"Agents API inputs and outputs are kept until you close your account. Vibe CLI runs locally and calls stateless APIs. Nothing on action logs or stored credentials.","status":"stated","cites":[{"quote":"If you use our Agents API, we keep your Input and Output until you terminate your account.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://legal.mistral.ai/terms/privacy-policy/?lang=en","capturedAt":"2026-11-08T22:28:15Z","sha256":"fd6e447bf35391b4c29ea9270015539a245cfa84ee0c5e6f38eaeeabc6ad19c4"}},{"quote":"Vibe CLI runs on your machine and calls stateless APIs.","source":{"doc":"help-zdr","title":"Can I activate Zero Data Retention (ZDR)?","url":"https://help.mistral.ai/en/articles/347612-can-i-activate-zero-data-retention-zdr","capturedAt":"2026-11-08T22:04:38Z","sha256":"35d01d6d3f9726e783db4a869565d7d93a2254bc4ce23ce39b84e863adf4b79c"}}]},"input_ownership":{"summary":"Not addressed; the Commercial Terms of Service were not captured.","status":"not_stated","cites":[]},"output_ownership":{"summary":"Not addressed; the Commercial Terms of Service were not captured.","status":"not_stated","cites":[]},"license_to_provider":{"summary":"Not addressed; the Commercial Terms of Service were not captured.","status":"not_stated","cites":[]},"third_party_sharing":{"summary":"Shared with service providers under data protection agreements (listed on Trust Center), banks, regulators and legal advisers. No sale or targeted advertising of consumer data in 12 months (US-law terms).","status":"stated","cites":[{"quote":"Additionally, we may share all or part of your personal data with our service providers.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://legal.mistral.ai/terms/privacy-policy/?lang=en","capturedAt":"2026-11-08T22:28:15Z","sha256":"fd6e447bf35391b4c29ea9270015539a245cfa84ee0c5e6f38eaeeabc6ad19c4"}},{"quote":"We sign a dedicated data protection agreement with each of these providers.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://legal.mistral.ai/terms/privacy-policy/?lang=en","capturedAt":"2026-11-08T22:28:15Z","sha256":"fd6e447bf35391b4c29ea9270015539a245cfa84ee0c5e6f38eaeeabc6ad19c4"}},{"quote":"Our main providers are listed on our [Trust Center](https://trust.mistral.ai/subprocessors).","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://legal.mistral.ai/terms/privacy-policy/?lang=en","capturedAt":"2026-11-08T22:28:15Z","sha256":"fd6e447bf35391b4c29ea9270015539a245cfa84ee0c5e6f38eaeeabc6ad19c4"}},{"quote":"Banks and other financial organizations","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://legal.mistral.ai/terms/privacy-policy/?lang=en","capturedAt":"2026-11-08T22:28:15Z","sha256":"fd6e447bf35391b4c29ea9270015539a245cfa84ee0c5e6f38eaeeabc6ad19c4"}},{"quote":"Such as the French data protection authority (CNIL)","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://legal.mistral.ai/terms/privacy-policy/?lang=en","capturedAt":"2026-11-08T22:28:15Z","sha256":"fd6e447bf35391b4c29ea9270015539a245cfa84ee0c5e6f38eaeeabc6ad19c4"}},{"quote":"When appropriate, we may share data with competent courts, mediators, accountants, auditors, lawyers, bailiffs, and debt collection agencies.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://legal.mistral.ai/terms/privacy-policy/?lang=en","capturedAt":"2026-11-08T22:28:15Z","sha256":"fd6e447bf35391b4c29ea9270015539a245cfa84ee0c5e6f38eaeeabc6ad19c4"}},{"quote":"Mistral AI has not “sold,” “shared,” or engaged in “targeted advertising” with (as those terms are defined under U.S. state privacy laws) any personal data of consumers in the preceding 12 months","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://legal.mistral.ai/terms/privacy-policy/?lang=en","capturedAt":"2026-11-08T22:28:15Z","sha256":"fd6e447bf35391b4c29ea9270015539a245cfa84ee0c5e6f38eaeeabc6ad19c4"}}]},"data_location":{"summary":"Mistral prefers EU providers; non-EU providers are used in exceptional cases under Standard Contractual Clauses. No residency option is described.","status":"stated","cites":[{"quote":"We prioritize selecting providers within the European Union that strictly adhere to the GDPR. However, in exceptional cases, we may opt for non-EU providers that meet our high standards of data security and Personal Data protection.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://legal.mistral.ai/terms/privacy-policy/?lang=en","capturedAt":"2026-11-08T22:28:15Z","sha256":"fd6e447bf35391b4c29ea9270015539a245cfa84ee0c5e6f38eaeeabc6ad19c4"}},{"quote":"Additionally, we attach the most recent version of the European Commission’s Standard Contractual Clauses to all such contracts.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://legal.mistral.ai/terms/privacy-policy/?lang=en","capturedAt":"2026-11-08T22:28:15Z","sha256":"fd6e447bf35391b4c29ea9270015539a245cfa84ee0c5e6f38eaeeabc6ad19c4"}}]},"enterprise_controls":{"summary":"A standard online DPA (cannot be signed offline) and ZDR status in the Admin panel privacy settings. For business data, you are controller and Mistral is processor.","status":"stated","cites":[{"quote":"Our **Data Processing Agreement (DPA)** is available in our [Data Processing Addendum](https://legal.mistral.ai/terms/data-processing-addendum) and is regularly updated to reflect our processing, services, security measures, and applicable regulations. We cannot sign the DPA offline.","source":{"doc":"help-zdr","title":"Can I activate Zero Data Retention (ZDR)?","url":"https://help.mistral.ai/en/articles/347612-can-i-activate-zero-data-retention-zdr","capturedAt":"2026-11-08T22:04:38Z","sha256":"35d01d6d3f9726e783db4a869565d7d93a2254bc4ce23ce39b84e863adf4b79c"}},{"quote":"After your ZDR request is approved, it appears in the [Privacy settings](https://admin.mistral.ai/vibe/privacy) of the Admin panel.","source":{"doc":"help-zdr","title":"Can I activate Zero Data Retention (ZDR)?","url":"https://help.mistral.ai/en/articles/347612-can-i-activate-zero-data-retention-zdr","capturedAt":"2026-11-08T22:04:38Z","sha256":"35d01d6d3f9726e783db4a869565d7d93a2254bc4ce23ce39b84e863adf4b79c"}},{"quote":"This Privacy Policy does not apply if you use our Mistral AI Products to process personal data in the context of your business activities. In this case, you are the data controller, and Mistral AI is the data processor processing on your behalf.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://legal.mistral.ai/terms/privacy-policy/?lang=en","capturedAt":"2026-11-08T22:28:15Z","sha256":"fd6e447bf35391b4c29ea9270015539a245cfa84ee0c5e6f38eaeeabc6ad19c4"}}]}}},{"id":"team-enterprise","name":"Vibe Team and Enterprise plans, and other business use (Mistral as data processor)","surface":"business","facts":{"default_retention":{"summary":"No default period is given. Your organization may set its own retention controls, and business processing falls under the DPA rather than the Privacy Policy.","status":"stated","cites":[{"quote":"For the Team and Enterprise plans, please note that **your Organization may have separate controls in place** based on its own data retention policies.","source":{"doc":"help-delete-chat","title":"Can I delete a chat conversation?","url":"https://help.mistral.ai/en/articles/347613-can-i-delete-a-chat-conversation","capturedAt":"2026-11-08T22:04:39Z","sha256":"615b0ccbcfe7cb4a8f48a010468aa6c0ad7e070a5dc2f0e31fe76b41c5866404"}},{"quote":"This Privacy Policy does not apply if you use our Mistral AI Products to process personal data in the context of your business activities. In this case, you are the data controller, and Mistral AI is the data processor processing on your behalf.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://legal.mistral.ai/terms/privacy-policy/?lang=en","capturedAt":"2026-11-08T22:28:15Z","sha256":"fd6e447bf35391b4c29ea9270015539a245cfa84ee0c5e6f38eaeeabc6ad19c4"}}]},"deletion_window":{"summary":"After you delete, backend retention follows the Privacy Policy and/or your DPA. The captured policies give no timeframe.","status":"stated","cites":[{"quote":"Even **after your manual deletion on your end**, we may retain **different types of data in our backend systems** for different amounts of time, as specified in our [Privacy Policy](https://mistral.ai/terms#privacy-policy) and/or your Data Protection Agreement with us.","source":{"doc":"help-delete-chat","title":"Can I delete a chat conversation?","url":"https://help.mistral.ai/en/articles/347613-can-i-delete-a-chat-conversation","capturedAt":"2026-11-08T22:04:39Z","sha256":"615b0ccbcfe7cb4a8f48a010468aa6c0ad7e070a5dc2f0e31fe76b41c5866404"}}]},"retention_exceptions":{"summary":"Inputs and outputs may be kept to enforce the Usage Policy, handle violations, or as required by law. No durations are given for business plans.","status":"stated","cites":[{"quote":"For instance, we may retain your input and output data to **enforce our Usage Policy**, address Terms of Service or **policy violations**, or as **required by law**.","source":{"doc":"help-delete-chat","title":"Can I delete a chat conversation?","url":"https://help.mistral.ai/en/articles/347613-can-i-delete-a-chat-conversation","capturedAt":"2026-11-08T22:04:39Z","sha256":"615b0ccbcfe7cb4a8f48a010468aa6c0ad7e070a5dc2f0e31fe76b41c5866404"}}]},"zdr":{"summary":"Not available for Vibe Work or Chat on any plan. For API use, ZDR requires pay-as-you-go and covers stateless endpoints only.","status":"stated","cites":[{"quote":"ZDR is **not available** for Vibe Work or Chat, regardless of your subscription plan.","source":{"doc":"help-zdr","title":"Can I activate Zero Data Retention (ZDR)?","url":"https://help.mistral.ai/en/articles/347612-can-i-activate-zero-data-retention-zdr","capturedAt":"2026-11-08T22:04:38Z","sha256":"35d01d6d3f9726e783db4a869565d7d93a2254bc4ce23ce39b84e863adf4b79c"}},{"quote":"Zero Data Retention (ZDR) is available **only with pay-as-you-go** and **only for stateless API calls**.","source":{"doc":"help-zdr","title":"Can I activate Zero Data Retention (ZDR)?","url":"https://help.mistral.ai/en/articles/347612-can-i-activate-zero-data-retention-zdr","capturedAt":"2026-11-08T22:04:38Z","sha256":"35d01d6d3f9726e783db4a869565d7d93a2254bc4ce23ce39b84e863adf4b79c"}}]},"training_default":{"summary":"Not stated for Team or Enterprise plans. Likely in the Commercial Terms or DPA, which were not captured.","status":"not_stated","cites":[]},"training_opt_out":{"summary":"Not stated for Team or Enterprise plans beyond Admin-panel privacy settings existing.","status":"not_stated","cites":[]},"human_review":{"summary":"Not addressed for business plans.","status":"not_stated","cites":[]},"memory":{"summary":"Not addressed in the captured policies.","status":"not_stated","cites":[]},"connector_data":{"summary":"Not addressed in the captured policies.","status":"not_stated","cites":[]},"agent_actions":{"summary":"Not addressed in the captured policies.","status":"not_stated","cites":[]},"input_ownership":{"summary":"Not addressed; the Commercial Terms of Service were not captured.","status":"not_stated","cites":[]},"output_ownership":{"summary":"Not addressed; the Commercial Terms of Service were not captured.","status":"not_stated","cites":[]},"license_to_provider":{"summary":"Not addressed; the Commercial Terms of Service were not captured.","status":"not_stated","cites":[]},"third_party_sharing":{"summary":"Not addressed for processor-role data; the DPA and subprocessor list were not captured.","status":"not_stated","cites":[]},"data_location":{"summary":"Not addressed for processor-role data; the DPA was not captured.","status":"not_stated","cites":[]},"enterprise_controls":{"summary":"Organization-level retention controls, Admin-panel privacy settings, and a standard online DPA that cannot be signed offline. SSO and audit logs aren't mentioned.","status":"stated","cites":[{"quote":"For the Team and Enterprise plans, please note that **your Organization may have separate controls in place** based on its own data retention policies.","source":{"doc":"help-delete-chat","title":"Can I delete a chat conversation?","url":"https://help.mistral.ai/en/articles/347613-can-i-delete-a-chat-conversation","capturedAt":"2026-11-08T22:04:39Z","sha256":"615b0ccbcfe7cb4a8f48a010468aa6c0ad7e070a5dc2f0e31fe76b41c5866404"}},{"quote":"Our **Data Processing Agreement (DPA)** is available in our [Data Processing Addendum](https://legal.mistral.ai/terms/data-processing-addendum) and is regularly updated to reflect our processing, services, security measures, and applicable regulations. We cannot sign the DPA offline.","source":{"doc":"help-zdr","title":"Can I activate Zero Data Retention (ZDR)?","url":"https://help.mistral.ai/en/articles/347612-can-i-activate-zero-data-retention-zdr","capturedAt":"2026-11-08T22:04:38Z","sha256":"35d01d6d3f9726e783db4a869565d7d93a2254bc4ce23ce39b84e863adf4b79c"}},{"quote":"it appears in the [Privacy settings](https://admin.mistral.ai/vibe/privacy) of the Admin panel.","source":{"doc":"help-zdr","title":"Can I activate Zero Data Retention (ZDR)?","url":"https://help.mistral.ai/en/articles/347612-can-i-activate-zero-data-retention-zdr","capturedAt":"2026-11-08T22:04:38Z","sha256":"35d01d6d3f9726e783db4a869565d7d93a2254bc4ce23ce39b84e863adf4b79c"}}]}}}],"notes":[{"text":"The captured policies name the products 'Vibe' (chat app, with Chat and Vibe Work) and 'Mistral AI Studio' (API). The names 'Le Chat' and 'La Plateforme' do not appear in any captured policy.","cites":[{"quote":"how we collect, use, and protect your personal data when you use our generative AI Mistral AI Products such as Vibe or Mistral AI Studio","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://legal.mistral.ai/terms/privacy-policy/?lang=en","capturedAt":"2026-11-08T22:28:15Z","sha256":"fd6e447bf35391b4c29ea9270015539a245cfa84ee0c5e6f38eaeeabc6ad19c4"}}]},{"text":"API ZDR is discretionary: pay-as-you-go only, you must justify the request, and Mistral may refuse. It covers stateless endpoints only.","cites":[{"quote":"Zero Data Retention (ZDR) is available **only with pay-as-you-go** and **only for stateless API calls**.","source":{"doc":"help-zdr","title":"Can I activate Zero Data Retention (ZDR)?","url":"https://help.mistral.ai/en/articles/347612-can-i-activate-zero-data-retention-zdr","capturedAt":"2026-11-08T22:04:38Z","sha256":"35d01d6d3f9726e783db4a869565d7d93a2254bc4ce23ce39b84e863adf4b79c"}},{"quote":"We will review your request and, **at our discretion**, approve or deny it.","source":{"doc":"help-zdr","title":"Can I activate Zero Data Retention (ZDR)?","url":"https://help.mistral.ai/en/articles/347612-can-i-activate-zero-data-retention-zdr","capturedAt":"2026-11-08T22:04:38Z","sha256":"35d01d6d3f9726e783db4a869565d7d93a2254bc4ce23ce39b84e863adf4b79c"}}]},{"text":"Agents API inputs and outputs are kept until you terminate your account, unlike the 30-day window for most other APIs.","cites":[{"quote":"If you use our Agents API, we keep your Input and Output until you terminate your account.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://legal.mistral.ai/terms/privacy-policy/?lang=en","capturedAt":"2026-11-08T22:28:15Z","sha256":"fd6e447bf35391b4c29ea9270015539a245cfa84ee0c5e6f38eaeeabc6ad19c4"}}]},{"text":"Some account data outlives the account: identity data 5 years after termination, account contact data 1 year after deletion, privacy-request records 6 years.","cites":[{"quote":"for 5 years after the termination of your Mistral AI account.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://legal.mistral.ai/terms/privacy-policy/?lang=en","capturedAt":"2026-11-08T22:28:15Z","sha256":"fd6e447bf35391b4c29ea9270015539a245cfa84ee0c5e6f38eaeeabc6ad19c4"}},{"quote":"for 1 year after you delete your account.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://legal.mistral.ai/terms/privacy-policy/?lang=en","capturedAt":"2026-11-08T22:28:15Z","sha256":"fd6e447bf35391b4c29ea9270015539a245cfa84ee0c5e6f38eaeeabc6ad19c4"}},{"quote":"for the duration of processing the request and for 6 years following the request.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://legal.mistral.ai/terms/privacy-policy/?lang=en","capturedAt":"2026-11-08T22:28:15Z","sha256":"fd6e447bf35391b4c29ea9270015539a245cfa84ee0c5e6f38eaeeabc6ad19c4"}}]},{"text":"Mistral says it trains on data from 'your use of our products' where its terms permit, and that this collection began in 2023 and is ongoing.","cites":[{"quote":"your use of our products (to the extent permitted by our applicable terms)","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://legal.mistral.ai/terms/privacy-policy/?lang=en","capturedAt":"2026-11-08T22:28:15Z","sha256":"fd6e447bf35391b4c29ea9270015539a245cfa84ee0c5e6f38eaeeabc6ad19c4"}},{"quote":"Such collection and training began in 2023, is ongoing, and is used to improve our artificial intelligence models.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://legal.mistral.ai/terms/privacy-policy/?lang=en","capturedAt":"2026-11-08T22:28:15Z","sha256":"fd6e447bf35391b4c29ea9270015539a245cfa84ee0c5e6f38eaeeabc6ad19c4"}}]},{"text":"Mistral says it has not sold or shared personal data, or used it for targeted advertising, in the preceding 12 months (US state-law definitions).","cites":[{"quote":"Mistral AI has not “sold,” “shared,” or engaged in “targeted advertising” with (as those terms are defined under U.S. state privacy laws) any personal data of consumers in the preceding 12 months","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://legal.mistral.ai/terms/privacy-policy/?lang=en","capturedAt":"2026-11-08T22:28:15Z","sha256":"fd6e447bf35391b4c29ea9270015539a245cfa84ee0c5e6f38eaeeabc6ad19c4"}}]},{"text":"Thumbs-up/down Feedback includes the rated input and output, and the training row lists Feedback without the opt-out qualifier it gives inputs and outputs. The policy doesn't say whether the training opt-out covers rated chats.","cites":[{"quote":"“Feedback”, any information you provide when you rate an Output, such as “thumbs up” or “thumbs down\", and the associated Input and Output.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://legal.mistral.ai/terms/privacy-policy/?lang=en","capturedAt":"2026-11-08T22:28:15Z","sha256":"fd6e447bf35391b4c29ea9270015539a245cfa84ee0c5e6f38eaeeabc6ad19c4"}},{"quote":"Your Input and Output, subject to your opt-out. Your Feedback.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://legal.mistral.ai/terms/privacy-policy/?lang=en","capturedAt":"2026-11-08T22:28:15Z","sha256":"fd6e447bf35391b4c29ea9270015539a245cfa84ee0c5e6f38eaeeabc6ad19c4"}}]},{"text":"Mistral uses part of your IP address to tailor outputs to your location; you can opt out in your account preferences.","cites":[{"quote":"Please note that we use part of your IP address to make your experience better, such as, for instance, to provide you with more accurate Outputs depending on where you use our Mistral AI Products. You can opt-out of this processing at any time through your user preferences on your Mistral AI Account.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://legal.mistral.ai/terms/privacy-policy/?lang=en","capturedAt":"2026-11-08T22:28:15Z","sha256":"fd6e447bf35391b4c29ea9270015539a245cfa84ee0c5e6f38eaeeabc6ad19c4"}}]},{"text":"The US state-law table lists 'Audio, electronic, visual, or similar information' among data collected and disclosed for a business purpose, and 'Providing advertising and marketing services' among purposes, alongside the statement that Mistral does no targeted advertising. It also lists third-party training datasets as a data source.","cites":[{"quote":"Audio, electronic, visual, or similar information.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://legal.mistral.ai/terms/privacy-policy/?lang=en","capturedAt":"2026-11-08T22:28:15Z","sha256":"fd6e447bf35391b4c29ea9270015539a245cfa84ee0c5e6f38eaeeabc6ad19c4"}},{"quote":"Providing advertising and marketing services.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://legal.mistral.ai/terms/privacy-policy/?lang=en","capturedAt":"2026-11-08T22:28:15Z","sha256":"fd6e447bf35391b4c29ea9270015539a245cfa84ee0c5e6f38eaeeabc6ad19c4"}},{"quote":"Data provided by third parties (e.g., third-party content and training datasets).","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://legal.mistral.ai/terms/privacy-policy/?lang=en","capturedAt":"2026-11-08T22:28:15Z","sha256":"fd6e447bf35391b4c29ea9270015539a245cfa84ee0c5e6f38eaeeabc6ad19c4"}}]}],"gaps":["Ownership of inputs and outputs, and the license granted to Mistral: not captured. Likely in the EU and rest-of-world consumer Terms of Service and the Commercial Terms of Service, linked from the legal center.","Whether Vibe free and paid tiers differ (retention, training default): not stated. Likely in the consumer Terms or Help Center plan pages.","What 'eligible data' means for the API training opt-out, and whether the opt-out covers Feedback (rated chats): not stated. Likely in a Help Center article on training opt-out.","Length of the 'short grace period' before deleted chats are purged: not stated. Likely in the Help Center or DPA.","Team and Enterprise retention, training, subprocessor and location terms: governed by the DPA and Commercial Terms, which were not captured.","The recaptured privacy policy tables (Sections 2.1, 2.2, 3 and the US state-law table) cover data categories, purposes and legal bases but give no retention periods. Retention periods come only from Section 5's list.","No effective or last-updated date appears on the privacy policy or the help articles captured.","Vibe connectors (email, calendar, drive): what's stored and what happens on disconnect, plus agent action logs: not addressed. The Connector Terms page and Help Center (including Knowledge Base articles) would likely cover them.","Subprocessor list and locations: referenced but not captured (trust.mistral.ai/subprocessors)."],"documents":[{"doc":"help-zdr","title":"Can I activate Zero Data Retention (ZDR)?","url":"https://help.mistral.ai/en/articles/347612-can-i-activate-zero-data-retention-zdr","capturedAt":"2026-11-08T22:04:38Z","sha256":"35d01d6d3f9726e783db4a869565d7d93a2254bc4ce23ce39b84e863adf4b79c"},{"doc":"help-delete-chat","title":"Can I delete a chat conversation?","url":"https://help.mistral.ai/en/articles/347613-can-i-delete-a-chat-conversation","capturedAt":"2026-11-08T22:04:39Z","sha256":"615b0ccbcfe7cb4a8f48a010468aa6c0ad7e070a5dc2f0e31fe76b41c5866404"},{"doc":"privacy-policy","title":"Privacy Policy","url":"https://legal.mistral.ai/terms/privacy-policy/?lang=en","capturedAt":"2026-11-08T22:28:15Z","sha256":"fd6e447bf35391b4c29ea9270015539a245cfa84ee0c5e6f38eaeeabc6ad19c4"},{"doc":"terms","title":"Welcome to our Legal Center","url":"https://legal.mistral.ai/terms/get-started/","capturedAt":"2026-11-08T22:04:37Z","sha256":"6db53f5398db919bf6e2a60e529fb8a2ae0eda09b7a913f1dd00bc1fff40cb26"}],"url":"https://gjalla.io/data-policies/mistral/"},{"id":"openai","provider":"openai","name":"OpenAI","category":"frontier-lab","checkedOn":"2026-11-08","products":[{"id":"chatgpt-consumer","name":"ChatGPT (Free, Go, Plus, Pro personal plans)","surface":"consumer","facts":{"default_retention":{"summary":"Saved chats are kept until you delete them; no maximum period is stated. Temporary Chats stay out of history but may be kept up to 30 days for safety.","status":"stated","cites":[{"quote":"**Information we retain until you delete it:** Some of our Services allow you to delete Personal Data stored in your account.","source":{"doc":"privacy-policy","title":"Privacy policy","url":"https://openai.com/policies/privacy-policy/","capturedAt":"2026-11-08T22:28:17Z","sha256":"c1b6765d1f394f58341873b9abf449ef22a0be3c1fac6c18051ac40f403f814f"}},{"quote":"We’ll retain your Personal Data for only as long as we need in order to provide our Services to you, or for other legitimate business purposes such as resolving disputes, safety and security reasons, or complying with our legal obligations.","source":{"doc":"privacy-policy","title":"Privacy policy","url":"https://openai.com/policies/privacy-policy/","capturedAt":"2026-11-08T22:28:17Z","sha256":"c1b6765d1f394f58341873b9abf449ef22a0be3c1fac6c18051ac40f403f814f"}},{"quote":"may be retained for up to 30 days for safety purposes","source":{"doc":"help-data-controls","title":"Help data controls","url":"https://help.openai.com/en/articles/7730893-data-controls-in-chatgpt","capturedAt":"2026-11-08T22:19:40Z","sha256":"ee55f4ae08df76f08eea98895c51e00677078a76d90e208673d4ab281445ff34"}}]},"deletion_window":{"summary":"Deleted chats, memories or accounts are removed within 30 days, except data kept for listed reasons or already de-identified and disassociated for model training. Deleted-memory logs may persist 30 days.","status":"stated","cites":[{"quote":"Once you choose to delete Personal Data, we will remove it from our systems within 30 days unless we need to retain it for longer as described below, or it has already been de-identified and disassociated from your account when you allow us to use your Content to","source":{"doc":"privacy-policy","title":"Privacy policy","url":"https://openai.com/policies/privacy-policy/","capturedAt":"2026-11-08T22:28:17Z","sha256":"c1b6765d1f394f58341873b9abf449ef22a0be3c1fac6c18051ac40f403f814f"}},{"quote":"When you delete a chat (or your account), the chat is removed from your account immediately and scheduled for permanent deletion from OpenAI systems within 30 days, unless we are required to retain it for legal or security reasons","source":{"doc":"nyt-data-demands","title":"How we\\u2019re responding to The New York Times\\u2019 data demands in order to protect user privacy","url":"https://openai.com/index/response-to-nyt-data-demands/","capturedAt":"2026-11-08T21:37:59Z","sha256":"0c3f21b266298dc23839db2275090f4a60de89a1edc7e36551604ce9f10a6f9e"}},{"quote":"OpenAI may retain logs of deleted saved memories for up to 30 days for safety and debugging purposes.","source":{"doc":"help-memory-faq","title":"Help memory faq","url":"https://help.openai.com/en/articles/8590148-memory-in-chatgpt","capturedAt":"2026-11-08T22:19:40Z","sha256":"51ec696ccba593906a806e50716b6515d95ffff5e75c6e034dbbd4ab6fe5cd63"}}]},"retention_exceptions":{"summary":"Kept longer: banned content (no duration given), legally required data, payment records, erasure audit logs. The NYT order ended Sept 26, 2025, but some April–Sept 2025 data remains held.","status":"stated","cites":[{"quote":"we may retain that data for to protect our services from fraud, abuse, or other violations of our policies","source":{"doc":"privacy-policy","title":"Privacy policy","url":"https://openai.com/policies/privacy-policy/","capturedAt":"2026-11-08T22:28:17Z","sha256":"c1b6765d1f394f58341873b9abf449ef22a0be3c1fac6c18051ac40f403f814f"}},{"quote":"If we are legally required to retain your data (for instance, we receive a lawful subpoena) then we may retain it for the duration of the relevant legal or regulatory obligation","source":{"doc":"privacy-policy","title":"Privacy policy","url":"https://openai.com/policies/privacy-policy/","capturedAt":"2026-11-08T22:28:17Z","sha256":"c1b6765d1f394f58341873b9abf449ef22a0be3c1fac6c18051ac40f403f814f"}},{"quote":"we may retain payment and transaction related information to meet our accounting, dispute resolution, and regulatory compliance purposes","source":{"doc":"privacy-policy","title":"Privacy policy","url":"https://openai.com/policies/privacy-policy/","capturedAt":"2026-11-08T22:28:17Z","sha256":"c1b6765d1f394f58341873b9abf449ef22a0be3c1fac6c18051ac40f403f814f"}},{"quote":"When you ask us to delete your Personal Data, we retain the audit record of the erasure request to be able to verify that we have complied with the request.","source":{"doc":"privacy-policy","title":"Privacy policy","url":"https://openai.com/policies/privacy-policy/","capturedAt":"2026-11-08T22:28:17Z","sha256":"c1b6765d1f394f58341873b9abf449ef22a0be3c1fac6c18051ac40f403f814f"}},{"quote":"After months of litigation, we are no longer under a legal order to retain consumer ChatGPT and API content indefinitely. Our obligations under the earlier order ended on September 26, 2025.","source":{"doc":"nyt-data-demands","title":"How we\\u2019re responding to The New York Times\\u2019 data demands in order to protect user privacy","url":"https://openai.com/index/response-to-nyt-data-demands/","capturedAt":"2026-11-08T21:37:59Z","sha256":"0c3f21b266298dc23839db2275090f4a60de89a1edc7e36551604ce9f10a6f9e"}},{"quote":"we will securely store limited historical April–September 2025 user data. It remains locked down, accessible only to a small, audited OpenAI legal and security team, and can’t be used for anything other than meeting legal obligations.","source":{"doc":"nyt-data-demands","title":"How we\\u2019re responding to The New York Times\\u2019 data demands in order to protect user privacy","url":"https://openai.com/index/response-to-nyt-data-demands/","capturedAt":"2026-11-08T21:37:59Z","sha256":"0c3f21b266298dc23839db2275090f4a60de89a1edc7e36551604ce9f10a6f9e"}}]},"zdr":{"summary":"The captured policies describe no zero-data-retention option for personal ChatGPT plans; ZDR appears only for the API.","status":"not_stated","cites":[]},"training_default":{"summary":"Yes for Free, Plus and Pro (Go isn't named): data sharing ('Improve the model for everyone') is on by default, so chats and remembered information may train models.","status":"stated","cites":[{"quote":"On personal workspaces with ChatGPT Free, Plus, or Pro, data sharing is enabled by default.","source":{"doc":"help-data-controls","title":"Help data controls","url":"https://help.openai.com/en/articles/7730893-data-controls-in-chatgpt","capturedAt":"2026-11-08T22:19:40Z","sha256":"ee55f4ae08df76f08eea98895c51e00677078a76d90e208673d4ab281445ff34"}},{"quote":"As noted above, we may use Content you provide us to improve our Services, for example to train the models that power ChatGPT.","source":{"doc":"privacy-policy","title":"Privacy policy","url":"https://openai.com/policies/privacy-policy/","capturedAt":"2026-11-08T22:28:17Z","sha256":"c1b6765d1f394f58341873b9abf449ef22a0be3c1fac6c18051ac40f403f814f"}},{"quote":"For personal ChatGPT accounts, OpenAI may use chats and remembered information to improve models when **Improve the model for everyone** is on.","source":{"doc":"help-memory-faq","title":"Help memory faq","url":"https://help.openai.com/en/articles/8590148-memory-in-chatgpt","capturedAt":"2026-11-08T22:19:40Z","sha256":"51ec696ccba593906a806e50716b6515d95ffff5e75c6e034dbbd4ab6fe5cd63"}}]},"training_opt_out":{"summary":"Turn off 'Improve the model for everyone' in Data controls. Not covered: thumbs-up/down feedback (whole conversation), Daybreak Trusted Access sessions, and voice mode and Codex environments (separate toggles).","status":"stated","cites":[{"quote":"You can turn off **Improve the model for everyone** and keep your chat history.","source":{"doc":"help-data-controls","title":"Help data controls","url":"https://help.openai.com/en/articles/7730893-data-controls-in-chatgpt","capturedAt":"2026-11-08T22:19:40Z","sha256":"ee55f4ae08df76f08eea98895c51e00677078a76d90e208673d4ab281445ff34"}},{"quote":"If you choose to provide feedback, such as selecting thumbs up or thumbs down on a response, the entire conversation associated with that feedback may be used to train OpenAI models.","source":{"doc":"help-data-controls","title":"Help data controls","url":"https://help.openai.com/en/articles/7730893-data-controls-in-chatgpt","capturedAt":"2026-11-08T22:19:40Z","sha256":"ee55f4ae08df76f08eea98895c51e00677078a76d90e208673d4ab281445ff34"}},{"quote":"During Daybreak sessions on your personal account, we may use content from your interactions to improve our models even when “Improve the model for everyone” is off.","source":{"doc":"help-data-controls","title":"Help data controls","url":"https://help.openai.com/en/articles/7730893-data-controls-in-chatgpt","capturedAt":"2026-11-08T22:19:40Z","sha256":"ee55f4ae08df76f08eea98895c51e00677078a76d90e208673d4ab281445ff34"}},{"quote":"Voice mode has a separate control for sharing data for model training.","source":{"doc":"help-data-controls","title":"Help data controls","url":"https://help.openai.com/en/articles/7730893-data-controls-in-chatgpt","capturedAt":"2026-11-08T22:19:40Z","sha256":"ee55f4ae08df76f08eea98895c51e00677078a76d90e208673d4ab281445ff34"}},{"quote":"Changing your ChatGPT setting or opting out through the Privacy Portal does not change that setting.","source":{"doc":"help-data-controls","title":"Help data controls","url":"https://help.openai.com/en/articles/7730893-data-controls-in-chatgpt","capturedAt":"2026-11-08T22:19:40Z","sha256":"ee55f4ae08df76f08eea98895c51e00677078a76d90e208673d4ab281445ff34"}},{"quote":"When using ChatGPT without signing in, open Settings and turn off Improve the model for everyone. Your choice is saved in that browser.","source":{"doc":"help-data-controls","title":"Help data controls","url":"https://help.openai.com/en/articles/7730893-data-controls-in-chatgpt","capturedAt":"2026-11-08T22:19:40Z","sha256":"ee55f4ae08df76f08eea98895c51e00677078a76d90e208673d4ab281445ff34"}}]},"human_review":{"summary":"Inferred: OpenAI says it monitors submitted Content for misuse and uses ChatGPT user data with human trainers, but the captured policies don't say when staff read consumer chats.","status":"inferred","cites":[{"quote":"To prevent fraud, illegal activity, or misuses of our Services, and to protect the security of our systems and Services, including by monitoring any Content submitted or exchanged on our platforms","source":{"doc":"privacy-policy","title":"Privacy policy","url":"https://openai.com/policies/privacy-policy/","capturedAt":"2026-11-08T22:28:17Z","sha256":"c1b6765d1f394f58341873b9abf449ef22a0be3c1fac6c18051ac40f403f814f"}},{"quote":"Then, we use data from ChatGPT users and human trainers to make sure the outputs are safe and accurate and to improve their general capabilities.","source":{"doc":"enterprise-privacy","title":"Enterprise privacy","url":"https://openai.com/enterprise-privacy/","capturedAt":"2026-11-08T22:19:40Z","sha256":"03ba1b3b3aef729cb764ff065dd84c1db4e135327fb4339316ab2d0b5044c6e4"}}]},"memory":{"summary":"Memory uses past chats, saved memories, files and connected apps. Review via summary; delete saved memories separately from chats. Chat-history memory deleted within 30 days when turned off.","status":"stated","cites":[{"quote":"The memory summary is a high-level view of information that ChatGPT may use to personalize responses. It does not necessarily include every detail or source that Memory can reference.","source":{"doc":"help-memory-faq","title":"Help memory faq","url":"https://help.openai.com/en/articles/8590148-memory-in-chatgpt","capturedAt":"2026-11-08T22:19:40Z","sha256":"51ec696ccba593906a806e50716b6515d95ffff5e75c6e034dbbd4ab6fe5cd63"}},{"quote":"Saved memories are stored separately from chat history. Deleting the original chat does not automatically delete a separate saved memory.","source":{"doc":"help-memory-faq","title":"Help memory faq","url":"https://help.openai.com/en/articles/8590148-memory-in-chatgpt","capturedAt":"2026-11-08T22:19:40Z","sha256":"51ec696ccba593906a806e50716b6515d95ffff5e75c6e034dbbd4ab6fe5cd63"}},{"quote":"If you turn **Reference chat history** off, information remembered from past chats is scheduled for deletion from OpenAI systems within 30 days.","source":{"doc":"help-memory-faq","title":"Help memory faq","url":"https://help.openai.com/en/articles/8590148-memory-in-chatgpt","capturedAt":"2026-11-08T22:19:40Z","sha256":"51ec696ccba593906a806e50716b6515d95ffff5e75c6e034dbbd4ab6fe5cd63"}},{"quote":"OpenAI may retain logs of deleted saved memories for up to 30 days for safety and debugging purposes.","source":{"doc":"help-memory-faq","title":"Help memory faq","url":"https://help.openai.com/en/articles/8590148-memory-in-chatgpt","capturedAt":"2026-11-08T22:19:40Z","sha256":"51ec696ccba593906a806e50716b6515d95ffff5e75c6e034dbbd4ab6fe5cd63"}},{"quote":"Temporary chats do not create or update memories, even with personalization on.","source":{"doc":"help-memory-faq","title":"Help memory faq","url":"https://help.openai.com/en/articles/8590148-memory-in-chatgpt","capturedAt":"2026-11-08T22:19:40Z","sha256":"51ec696ccba593906a806e50716b6515d95ffff5e75c6e034dbbd4ab6fe5cd63"}}]},"connector_data":{"summary":"Connected-service data is collected as Content and can feed Memory. Disconnecting stops future access but doesn't delete past conversations that used it; how long app data is stored isn't stated.","status":"stated","cites":[{"quote":"and data from [*connected services*","source":{"doc":"privacy-policy","title":"Privacy policy","url":"https://openai.com/policies/privacy-policy/","capturedAt":"2026-11-08T22:28:17Z","sha256":"c1b6765d1f394f58341873b9abf449ef22a0be3c1fac6c18051ac40f403f814f"}},{"quote":"content from connected apps, such as Gmail","source":{"doc":"help-memory-faq","title":"Help memory faq","url":"https://help.openai.com/en/articles/8590148-memory-in-chatgpt","capturedAt":"2026-11-08T22:19:40Z","sha256":"51ec696ccba593906a806e50716b6515d95ffff5e75c6e034dbbd4ab6fe5cd63"}},{"quote":"Disconnecting an app prevents future access to that app. It does not delete past conversations that already used app content.","source":{"doc":"help-memory-faq","title":"Help memory faq","url":"https://help.openai.com/en/articles/8590148-memory-in-chatgpt","capturedAt":"2026-11-08T22:19:40Z","sha256":"51ec696ccba593906a806e50716b6515d95ffff5e75c6e034dbbd4ab6fe5cd63"}}]},"agent_actions":{"summary":"The privacy policy says OpenAI may collect in-app browser data per your controls. Captured policies don't describe ChatGPT agent action logs or stored tokens (see the Dots product).","status":"stated","cites":[{"quote":"If you use the in-app browser we may also collect your browser data according to your controls and use of the service.","source":{"doc":"privacy-policy","title":"Privacy policy","url":"https://openai.com/policies/privacy-policy/","capturedAt":"2026-11-08T22:28:17Z","sha256":"c1b6765d1f394f58341873b9abf449ef22a0be3c1fac6c18051ac40f403f814f"}}]},"input_ownership":{"summary":"You keep your ownership rights in what you input, as between you and OpenAI and where the law allows.","status":"stated","cites":[{"quote":"As between you and OpenAI, and to the extent permitted by applicable law, you (a) retain your ownership rights in Input and (b) own the Output.","source":{"doc":"terms-of-use","title":"Terms of use","url":"https://openai.com/policies/terms-of-use/","capturedAt":"2026-11-08T22:19:41Z","sha256":"e2b639780e1ed1e57354f9fb6c6229d1ca5a47194475f1657a07bb54268e4359"}}]},"output_ownership":{"summary":"You own outputs and OpenAI assigns you any rights it has; similar outputs given to other users aren't covered.","status":"stated","cites":[{"quote":"We hereby assign to you all our right, title, and interest, if any, in and to Output.","source":{"doc":"terms-of-use","title":"Terms of use","url":"https://openai.com/policies/terms-of-use/","capturedAt":"2026-11-08T22:19:41Z","sha256":"e2b639780e1ed1e57354f9fb6c6229d1ca5a47194475f1657a07bb54268e4359"}},{"quote":"Our assignment above does not extend to other users’ output or any Third Party Output.","source":{"doc":"terms-of-use","title":"Terms of use","url":"https://openai.com/policies/terms-of-use/","capturedAt":"2026-11-08T22:19:41Z","sha256":"e2b639780e1ed1e57354f9fb6c6229d1ca5a47194475f1657a07bb54268e4359"}}]},"license_to_provider":{"summary":"No formal license clause: OpenAI may use Content to run, develop and improve services. Duration, revocability and survival aren't stated. Feedback may be used without restriction.","status":"stated","cites":[{"quote":"We may use Content to provide, maintain, develop, and improve our Services, comply with applicable law, enforce our terms and policies, and keep our Services safe.","source":{"doc":"terms-of-use","title":"Terms of use","url":"https://openai.com/policies/terms-of-use/","capturedAt":"2026-11-08T22:19:41Z","sha256":"e2b639780e1ed1e57354f9fb6c6229d1ca5a47194475f1657a07bb54268e4359"}},{"quote":"We appreciate your feedback, and you agree that we may use it without restriction or compensation to you.","source":{"doc":"terms-of-use","title":"Terms of use","url":"https://openai.com/policies/terms-of-use/","capturedAt":"2026-11-08T22:19:41Z","sha256":"e2b639780e1ed1e57354f9fb6c6229d1ca5a47194475f1657a07bb54268e4359"}}]},"third_party_sharing":{"summary":"Shared with vendors, affiliates, authorities and marketing partners (ads on other sites, opt-out available). OpenAI says it doesn't 'sell' data. Free and Go users get personalized ads.","status":"stated","cites":[{"quote":"When we work with Service Providers, these parties will access, process, or store Personal Data based on our instructions and only in the course of performing their duties to us.","source":{"doc":"privacy-policy","title":"Privacy policy","url":"https://openai.com/policies/privacy-policy/","capturedAt":"2026-11-08T22:28:17Z","sha256":"c1b6765d1f394f58341873b9abf449ef22a0be3c1fac6c18051ac40f403f814f"}},{"quote":"We don’t “sell” Personal Data. Depending upon your choices, we may share limited data with select marketing partners for purposes of promoting our products and services to you on third-party properties.","source":{"doc":"privacy-policy","title":"Privacy policy","url":"https://openai.com/policies/privacy-policy/","capturedAt":"2026-11-08T22:28:17Z","sha256":"c1b6765d1f394f58341873b9abf449ef22a0be3c1fac6c18051ac40f403f814f"}},{"quote":"For Free and Go users, to personalize the ads you see on our Services (subject to your settings), and to measure the effectiveness of ads shown on our Services.","source":{"doc":"privacy-policy","title":"Privacy policy","url":"https://openai.com/policies/privacy-policy/","capturedAt":"2026-11-08T22:28:17Z","sha256":"c1b6765d1f394f58341873b9abf449ef22a0be3c1fac6c18051ac40f403f814f"}},{"quote":"Information you share with third-party partners is governed by their own terms and privacy policies","source":{"doc":"privacy-policy","title":"Privacy policy","url":"https://openai.com/policies/privacy-policy/","capturedAt":"2026-11-08T22:28:17Z","sha256":"c1b6765d1f394f58341873b9abf449ef22a0be3c1fac6c18051ac40f403f814f"}}]},"data_location":{"summary":"Processed and stored in the US and wherever affiliates, partners or vendors are. No consumer residency option is described; EEA, UK and Swiss users have a separate policy.","status":"stated","cites":[{"quote":"including processing and storing your Personal Data in our facilities and servers in the United States, or in countries or territories where our affiliates and partners or our vendors and service providers are located.","source":{"doc":"privacy-policy","title":"Privacy policy","url":"https://openai.com/policies/privacy-policy/","capturedAt":"2026-11-08T22:28:17Z","sha256":"c1b6765d1f394f58341873b9abf449ef22a0be3c1fac6c18051ac40f403f814f"}},{"quote":"For individuals in the European Economic Area, United Kingdom, and Switzerland, you can read","source":{"doc":"privacy-policy","title":"Privacy policy","url":"https://openai.com/policies/privacy-policy/","capturedAt":"2026-11-08T22:28:17Z","sha256":"c1b6765d1f394f58341873b9abf449ef22a0be3c1fac6c18051ac40f403f814f"}}]},"enterprise_controls":{"summary":"Not applicable to personal plans; see the chatgpt-business product.","status":"not_stated","cites":[]}}},{"id":"chatgpt-business","name":"ChatGPT Business, Enterprise, Edu, for Healthcare, and for Teachers","surface":"business","facts":{"default_retention":{"summary":"Enterprise, Edu and Healthcare admins set retention; Business admins can control it; in ChatGPT for Teachers each member decides. No default period is stated.","status":"stated","cites":[{"quote":"Your workspace admins control how long your data is retained.","source":{"doc":"enterprise-privacy","title":"Enterprise privacy","url":"https://openai.com/enterprise-privacy/","capturedAt":"2026-11-08T22:19:40Z","sha256":"03ba1b3b3aef729cb764ff065dd84c1db4e135327fb4339316ab2d0b5044c6e4"}},{"quote":"Your workspace admins can control how long your data is retained.","source":{"doc":"enterprise-privacy","title":"Enterprise privacy","url":"https://openai.com/enterprise-privacy/","capturedAt":"2026-11-08T22:19:40Z","sha256":"03ba1b3b3aef729cb764ff065dd84c1db4e135327fb4339316ab2d0b5044c6e4"}},{"quote":"Each of your workspace members control whether their conversations are retained.","source":{"doc":"enterprise-privacy","title":"Enterprise privacy","url":"https://openai.com/enterprise-privacy/","capturedAt":"2026-11-08T22:19:40Z","sha256":"03ba1b3b3aef729cb764ff065dd84c1db4e135327fb4339316ab2d0b5044c6e4"}},{"quote":"Managed workspaces can also have organization-level retention, Memory, compliance, and access settings.","source":{"doc":"help-data-controls","title":"Help data controls","url":"https://help.openai.com/en/articles/7730893-data-controls-in-chatgpt","capturedAt":"2026-11-08T22:19:40Z","sha256":"ee55f4ae08df76f08eea98895c51e00677078a76d90e208673d4ab281445ff34"}}]},"deletion_window":{"summary":"Deleted conversations (and, for Business, unsaved ones) are removed within 30 days. On contract termination all Customer Content is deleted within 30 days. Account deletion goes through the workspace owner.","status":"stated","cites":[{"quote":"Any deleted conversations are removed from our systems within 30 days, unless we are legally required to retain them.","source":{"doc":"enterprise-privacy","title":"Enterprise privacy","url":"https://openai.com/enterprise-privacy/","capturedAt":"2026-11-08T22:19:40Z","sha256":"03ba1b3b3aef729cb764ff065dd84c1db4e135327fb4339316ab2d0b5044c6e4"}},{"quote":"Any deleted or unsaved conversations are removed from our systems within 30 days, unless longer retention is required by law, or is reasonably necessary to protect our services or any third party from harm.","source":{"doc":"enterprise-privacy","title":"Enterprise privacy","url":"https://openai.com/enterprise-privacy/","capturedAt":"2026-11-08T22:19:40Z","sha256":"03ba1b3b3aef729cb764ff065dd84c1db4e135327fb4339316ab2d0b5044c6e4"}},{"quote":"OpenAI will delete all Customer Content from its systems within thirty days, unless: (i) OpenAI is legally required to retain it; or (ii) Customer has agreed otherwise in writing.","source":{"doc":"services-agreement","title":"Services agreement","url":"https://openai.com/policies/services-agreement/","capturedAt":"2026-11-08T22:19:40Z","sha256":"7be322b3ba0e171882e1ddd8434b383a0b51818186255237555233a79532da03"}},{"quote":"Self-service account deletion is not available in managed workspaces and should be directed to the workspace owner.","source":{"doc":"help-data-controls","title":"Help data controls","url":"https://help.openai.com/en/articles/7730893-data-controls-in-chatgpt","capturedAt":"2026-11-08T22:19:40Z","sha256":"ee55f4ae08df76f08eea98895c51e00677078a76d90e208673d4ab281445ff34"}}]},"retention_exceptions":{"summary":"Legal requirements; for Business, also harm prevention; abusive content may be kept. Classifier metadata is created (duration unstated). The past NYT order covered Team but excluded Enterprise and Edu.","status":"stated","cites":[{"quote":"Despite anything to the contrary in this Agreement, OpenAI may retain Abusive Customer Content","source":{"doc":"services-agreement","title":"Services agreement","url":"https://openai.com/policies/services-agreement/","capturedAt":"2026-11-08T22:19:40Z","sha256":"7be322b3ba0e171882e1ddd8434b383a0b51818186255237555233a79532da03"}},{"quote":"We may run any business data submitted to OpenAI’s services through automated content classifiers and safety tools, including to better understand how our services are used. The classifications created are metadata about the business data but do not contain any of the business data itself.","source":{"doc":"enterprise-privacy","title":"Enterprise privacy","url":"https://openai.com/enterprise-privacy/","capturedAt":"2026-11-08T22:19:40Z","sha256":"03ba1b3b3aef729cb764ff065dd84c1db4e135327fb4339316ab2d0b5044c6e4"}},{"quote":"Yes, if you have a ChatGPT Free, Plus, Pro, and Team subscription or if you use the OpenAI API (without a Zero Data Retention agreement).","source":{"doc":"nyt-data-demands","title":"How we\\u2019re responding to The New York Times\\u2019 data demands in order to protect user privacy","url":"https://openai.com/index/response-to-nyt-data-demands/","capturedAt":"2026-11-08T21:37:59Z","sha256":"0c3f21b266298dc23839db2275090f4a60de89a1edc7e36551604ce9f10a6f9e"}},{"quote":"This does *not* impact ChatGPT Enterprise or ChatGPT Edu customers.","source":{"doc":"nyt-data-demands","title":"How we\\u2019re responding to The New York Times\\u2019 data demands in order to protect user privacy","url":"https://openai.com/index/response-to-nyt-data-demands/","capturedAt":"2026-11-08T21:37:59Z","sha256":"0c3f21b266298dc23839db2275090f4a60de89a1edc7e36551604ce9f10a6f9e"}},{"quote":"Our obligations under the earlier order ended on September 26, 2025.","source":{"doc":"nyt-data-demands","title":"How we\\u2019re responding to The New York Times\\u2019 data demands in order to protect user privacy","url":"https://openai.com/index/response-to-nyt-data-demands/","capturedAt":"2026-11-08T21:37:59Z","sha256":"0c3f21b266298dc23839db2275090f4a60de89a1edc7e36551604ce9f10a6f9e"}}]},"zdr":{"summary":"The captured policies describe no zero-data-retention option for ChatGPT workspaces; admin-controlled retention is the stated control.","status":"not_stated","cites":[]},"training_default":{"summary":"No. Business, Enterprise, Edu, Healthcare and Teachers content, including data accessed through apps, isn't used for training by default unless the customer explicitly agrees.","status":"stated","cites":[{"quote":"By default, OpenAI does not use content from ChatGPT Business, Enterprise, Edu, or ChatGPT for Healthcare workspaces to train its models.","source":{"doc":"help-data-controls","title":"Help data controls","url":"https://help.openai.com/en/articles/7730893-data-controls-in-chatgpt","capturedAt":"2026-11-08T22:19:40Z","sha256":"ee55f4ae08df76f08eea98895c51e00677078a76d90e208673d4ab281445ff34"}},{"quote":"As with our Enterprise, Business, and Edu offerings, information shared with ChatGPT for Teachers is not used to train our models by default.","source":{"doc":"enterprise-privacy","title":"Enterprise privacy","url":"https://openai.com/enterprise-privacy/","capturedAt":"2026-11-08T22:19:40Z","sha256":"03ba1b3b3aef729cb764ff065dd84c1db4e135327fb4339316ab2d0b5044c6e4"}},{"quote":"By default, we do not train our models on any data accessed from apps.","source":{"doc":"enterprise-privacy","title":"Enterprise privacy","url":"https://openai.com/enterprise-privacy/","capturedAt":"2026-11-08T22:19:40Z","sha256":"03ba1b3b3aef729cb764ff065dd84c1db4e135327fb4339316ab2d0b5044c6e4"}},{"quote":"OpenAI will not use Customer Content to develop or improve the Services, unless Customer explicitly agrees to such use.","source":{"doc":"services-agreement","title":"Services agreement","url":"https://openai.com/policies/services-agreement/","capturedAt":"2026-11-08T22:19:40Z","sha256":"7be322b3ba0e171882e1ddd8434b383a0b51818186255237555233a79532da03"}}]},"training_opt_out":{"summary":"Nothing to opt out of: training happens only after an explicit opt-in, e.g. feedback mechanisms. The captured policies don't say whether an end user's thumbs-up counts as opt-in.","status":"stated","cites":[{"quote":"If you have explicitly opted in to share your data with us","source":{"doc":"enterprise-privacy","title":"Enterprise privacy","url":"https://openai.com/enterprise-privacy/","capturedAt":"2026-11-08T22:19:40Z","sha256":"03ba1b3b3aef729cb764ff065dd84c1db4e135327fb4339316ab2d0b5044c6e4"}},{"quote":"then we may use the shared data to train our models.","source":{"doc":"enterprise-privacy","title":"Enterprise privacy","url":"https://openai.com/enterprise-privacy/","capturedAt":"2026-11-08T22:19:40Z","sha256":"03ba1b3b3aef729cb764ff065dd84c1db4e135327fb4339316ab2d0b5044c6e4"}}]},"human_review":{"summary":"Automated classifiers scan business data. Enterprise/Edu/Healthcare: staff access only for incidents, permitted recovery, or law. Business/Teachers: staff for support, abuse, legal, plus contracted abuse reviewers.","status":"stated","cites":[{"quote":"Business data is only subject to human review as described below on a service-by-service basis.","source":{"doc":"enterprise-privacy","title":"Enterprise privacy","url":"https://openai.com/enterprise-privacy/","capturedAt":"2026-11-08T22:19:40Z","sha256":"03ba1b3b3aef729cb764ff065dd84c1db4e135327fb4339316ab2d0b5044c6e4"}},{"quote":"Authorized OpenAI employees will only ever access your conversations for the purposes of resolving incidents, recovering end user conversations with your explicit permission, or where required by applicable law.","source":{"doc":"enterprise-privacy","title":"Enterprise privacy","url":"https://openai.com/enterprise-privacy/","capturedAt":"2026-11-08T22:19:40Z","sha256":"03ba1b3b3aef729cb764ff065dd84c1db4e135327fb4339316ab2d0b5044c6e4"}},{"quote":"Our access to conversations stored on our systems is limited to (1) authorized employees that require access for engineering support, investigating potential platform abuse, and legal compliance and (2) specialized third-party contractors who are bound by confidentiality and security obligations, solely to review for abuse and misuse.","source":{"doc":"enterprise-privacy","title":"Enterprise privacy","url":"https://openai.com/enterprise-privacy/","capturedAt":"2026-11-08T22:19:40Z","sha256":"03ba1b3b3aef729cb764ff065dd84c1db4e135327fb4339316ab2d0b5044c6e4"}}]},"memory":{"summary":"Admins manage memory settings and role permissions. In Healthcare and Regulated Enterprise workspaces improved memory is off by default and not BAA-covered; Project-only memory can limit scope.","status":"stated","cites":[{"quote":"Workspace owners and admins can manage supported memory settings and role permissions.","source":{"doc":"help-memory-faq","title":"Help memory faq","url":"https://help.openai.com/en/articles/8590148-memory-in-chatgpt","capturedAt":"2026-11-08T22:19:40Z","sha256":"51ec696ccba593906a806e50716b6515d95ffff5e75c6e034dbbd4ab6fe5cd63"}},{"quote":"In ChatGPT for Healthcare and ChatGPT Enterprise with Regulated Workspace, improved memory is disabled by default.","source":{"doc":"help-memory-faq","title":"Help memory faq","url":"https://help.openai.com/en/articles/8590148-memory-in-chatgpt","capturedAt":"2026-11-08T22:19:40Z","sha256":"51ec696ccba593906a806e50716b6515d95ffff5e75c6e034dbbd4ab6fe5cd63"}},{"quote":"This feature is not covered under your BAA. PHI should not be entered when using this feature.","source":{"doc":"help-memory-faq","title":"Help memory faq","url":"https://help.openai.com/en/articles/8590148-memory-in-chatgpt","capturedAt":"2026-11-08T22:19:40Z","sha256":"51ec696ccba593906a806e50716b6515d95ffff5e75c6e034dbbd4ab6fe5cd63"}},{"quote":"Members who choose to use improved memory can use Project-only memory to keep memory context limited to a specific project.","source":{"doc":"help-memory-faq","title":"Help memory faq","url":"https://help.openai.com/en/articles/8590148-memory-in-chatgpt","capturedAt":"2026-11-08T22:19:40Z","sha256":"51ec696ccba593906a806e50716b6515d95ffff5e75c6e034dbbd4ab6fe5cd63"}}]},"connector_data":{"summary":"Admins choose which apps are enabled; each user authenticates and existing permissions apply; app data isn't trained on by default. Storage and post-disconnect handling aren't stated.","status":"stated","cites":[{"quote":"Your workspace admins can control which apps are enabled for your workspace. ChatGPT respects your organization’s existing permissions, and each end user is required to authenticate with a connected application before use.","source":{"doc":"enterprise-privacy","title":"Enterprise privacy","url":"https://openai.com/enterprise-privacy/","capturedAt":"2026-11-08T22:19:40Z","sha256":"03ba1b3b3aef729cb764ff065dd84c1db4e135327fb4339316ab2d0b5044c6e4"}},{"quote":"By default, we do not train our models on any data accessed from apps.","source":{"doc":"enterprise-privacy","title":"Enterprise privacy","url":"https://openai.com/enterprise-privacy/","capturedAt":"2026-11-08T22:19:40Z","sha256":"03ba1b3b3aef729cb764ff065dd84c1db4e135327fb4339316ab2d0b5044c6e4"}}]},"agent_actions":{"summary":"The captured policies don't describe agent action logs, browsing sessions or stored tokens for ChatGPT workspaces (dots are covered separately).","status":"not_stated","cites":[]},"input_ownership":{"summary":"The customer retains all ownership rights in Input, as between customer and OpenAI and where the law allows.","status":"stated","cites":[{"quote":"As between Customer and OpenAI, to the extent permitted by applicable law, Customer: (a) retains all ownership rights in Input; and (b) owns all Output.","source":{"doc":"services-agreement","title":"Services agreement","url":"https://openai.com/policies/services-agreement/","capturedAt":"2026-11-08T22:19:40Z","sha256":"7be322b3ba0e171882e1ddd8434b383a0b51818186255237555233a79532da03"}},{"quote":"you retain all rights to the inputs you provide to our services","source":{"doc":"enterprise-privacy","title":"Enterprise privacy","url":"https://openai.com/enterprise-privacy/","capturedAt":"2026-11-08T22:19:40Z","sha256":"03ba1b3b3aef729cb764ff065dd84c1db4e135327fb4339316ab2d0b5044c6e4"}}]},"output_ownership":{"summary":"The customer owns all Output and OpenAI assigns its rights; responses generated for other users aren't the customer's Output.","status":"stated","cites":[{"quote":"OpenAI hereby assigns to Customer all OpenAI’s right, title, and interest, if any, in and to Output.","source":{"doc":"services-agreement","title":"Services agreement","url":"https://openai.com/policies/services-agreement/","capturedAt":"2026-11-08T22:19:40Z","sha256":"7be322b3ba0e171882e1ddd8434b383a0b51818186255237555233a79532da03"}},{"quote":"Responses that are requested by and generated for other users are not considered Customer’s Output.","source":{"doc":"services-agreement","title":"Services agreement","url":"https://openai.com/policies/services-agreement/","capturedAt":"2026-11-08T22:19:40Z","sha256":"7be322b3ba0e171882e1ddd8434b383a0b51818186255237555233a79532da03"}}]},"license_to_provider":{"summary":"Only limited rights needed to deliver the Services, extended to subprocessors; use limited to service, law, policy and abuse. The IP section survives termination; content is deleted within 30 days.","status":"stated","cites":[{"quote":"Customer grants OpenAI only the limited rights that are reasonably necessary for OpenAI to deliver the Services. This limited permission also extends to subcontractors or sub-processors.","source":{"doc":"services-agreement","title":"Services agreement","url":"https://openai.com/policies/services-agreement/","capturedAt":"2026-11-08T22:19:40Z","sha256":"7be322b3ba0e171882e1ddd8434b383a0b51818186255237555233a79532da03"}},{"quote":"OpenAI will only use Customer Content as necessary to provide Customer with the Services, comply with applicable law, enforce the OpenAI Policies, and prevent abuse.","source":{"doc":"services-agreement","title":"Services agreement","url":"https://openai.com/policies/services-agreement/","capturedAt":"2026-11-08T22:19:40Z","sha256":"7be322b3ba0e171882e1ddd8434b383a0b51818186255237555233a79532da03"}},{"quote":"The following provisions will survive termination or expiration of the Agreement: 6.2 (Payment), 7 (Confidentiality), 9 (IP Rights)","source":{"doc":"services-agreement","title":"Services agreement","url":"https://openai.com/policies/services-agreement/","capturedAt":"2026-11-08T22:19:40Z","sha256":"7be322b3ba0e171882e1ddd8434b383a0b51818186255237555233a79532da03"}},{"quote":"If Customer provides Feedback, Customer grants OpenAI the right to use and exploit Feedback without restriction or compensation.","source":{"doc":"services-agreement","title":"Services agreement","url":"https://openai.com/policies/services-agreement/","capturedAt":"2026-11-08T22:19:40Z","sha256":"7be322b3ba0e171882e1ddd8434b383a0b51818186255237555233a79532da03"}}]},"third_party_sharing":{"summary":"Workspace admins can access members' content. Subprocessors get limited rights; Business and Teachers conversations may go to contracted abuse reviewers. Ads aren't mentioned for business plans.","status":"stated","cites":[{"quote":"When you join a ChatGPT Enterprise or business account, the administrators of that account may access and control your OpenAI account, including being able to access your Content.","source":{"doc":"privacy-policy","title":"Privacy policy","url":"https://openai.com/policies/privacy-policy/","capturedAt":"2026-11-08T22:28:17Z","sha256":"c1b6765d1f394f58341873b9abf449ef22a0be3c1fac6c18051ac40f403f814f"}},{"quote":"Workspace admins have control over workspaces and can view, access, export, and delete end user conversations in the workspace.","source":{"doc":"enterprise-privacy","title":"Enterprise privacy","url":"https://openai.com/enterprise-privacy/","capturedAt":"2026-11-08T22:19:40Z","sha256":"03ba1b3b3aef729cb764ff065dd84c1db4e135327fb4339316ab2d0b5044c6e4"}},{"quote":"This limited permission also extends to subcontractors or sub-processors.","source":{"doc":"services-agreement","title":"Services agreement","url":"https://openai.com/policies/services-agreement/","capturedAt":"2026-11-08T22:19:40Z","sha256":"7be322b3ba0e171882e1ddd8434b383a0b51818186255237555233a79532da03"}}]},"data_location":{"summary":"Inferred: the captured policies link to a ChatGPT data residency and inference residency article, so regional options appear to exist, but no regions or eligibility rules are given.","status":"inferred","cites":[{"quote":"Learn how ChatGPT data residency and inference residency affect storage, model processing, eligibility, and supported regions.","source":{"doc":"help-data-controls","title":"Help data controls","url":"https://help.openai.com/en/articles/7730893-data-controls-in-chatgpt","capturedAt":"2026-11-08T22:19:40Z","sha256":"ee55f4ae08df76f08eea98895c51e00677078a76d90e208673d4ab281445ff34"}},{"quote":"For supported storage and inference regions, see","source":{"doc":"dots-privacy-faq","title":"Dots privacy faq","url":"https://help.openai.com/en/articles/20001529-dots-privacy-security-and-safety-faqs","capturedAt":"2026-11-08T22:19:40Z","sha256":"dcfb8795c612be594f5e9cacacc6708564c4f1035ef769be14b4505be39e312d"}}]},"enterprise_controls":{"summary":"SAML SSO, fine-grained access, admin-set retention, Compliance API audit logs (Enterprise/Edu/Healthcare), DPA (Business/Enterprise), Student Data Privacy Agreement (Edu/Teachers), SOC 2 Type 2; exports via workspace owner.","status":"stated","cites":[{"quote":"Enterprise-level authentication through SAML SSO","source":{"doc":"enterprise-privacy","title":"Enterprise privacy","url":"https://openai.com/enterprise-privacy/","capturedAt":"2026-11-08T22:19:40Z","sha256":"03ba1b3b3aef729cb764ff065dd84c1db4e135327fb4339316ab2d0b5044c6e4"}},{"quote":"workspace admins can access an audit log of conversations and GPTs through the","source":{"doc":"enterprise-privacy","title":"Enterprise privacy","url":"https://openai.com/enterprise-privacy/","capturedAt":"2026-11-08T22:19:40Z","sha256":"03ba1b3b3aef729cb764ff065dd84c1db4e135327fb4339316ab2d0b5044c6e4"}},{"quote":"we are able to execute a Data Processing Addendum (DPA) with customers for their use of ChatGPT Business, ChatGPT Enterprise, and the API in support of their compliance with GDPR and other privacy laws.","source":{"doc":"enterprise-privacy","title":"Enterprise privacy","url":"https://openai.com/enterprise-privacy/","capturedAt":"2026-11-08T22:19:40Z","sha256":"03ba1b3b3aef729cb764ff065dd84c1db4e135327fb4339316ab2d0b5044c6e4"}},{"quote":"For ChatGPT Edu and for Teachers, we process your data pursuant to our","source":{"doc":"enterprise-privacy","title":"Enterprise privacy","url":"https://openai.com/enterprise-privacy/","capturedAt":"2026-11-08T22:19:40Z","sha256":"03ba1b3b3aef729cb764ff065dd84c1db4e135327fb4339316ab2d0b5044c6e4"}},{"quote":"They’ve each successfully completed a SOC 2 Type 2 audit.","source":{"doc":"enterprise-privacy","title":"Enterprise privacy","url":"https://openai.com/enterprise-privacy/","capturedAt":"2026-11-08T22:19:40Z","sha256":"03ba1b3b3aef729cb764ff065dd84c1db4e135327fb4339316ab2d0b5044c6e4"}},{"quote":"Self-service data export is not available for ChatGPT Business, Enterprise, or ChatGPT for Healthcare workspaces and should be directed to the workspace owner.","source":{"doc":"help-data-controls","title":"Help data controls","url":"https://help.openai.com/en/articles/7730893-data-controls-in-chatgpt","capturedAt":"2026-11-08T22:19:40Z","sha256":"ee55f4ae08df76f08eea98895c51e00677078a76d90e208673d4ab281445ff34"}}]}}},{"id":"api","name":"OpenAI API Platform","surface":"api","facts":{"default_retention":{"summary":"Abuse-monitoring logs (may include prompts and outputs) kept up to 30 days. App state varies: Responses at least 30 days by default; Conversations, Assistants, fine-tuning files kept until deleted.","status":"stated","cites":[{"quote":"Abuse monitoring logs may contain certain customer content, such as prompts and responses, as well as metadata derived from that customer content, such as classifier outputs. By default, abuse monitoring logs are generated for all API feature usage and retained for up to 30 days","source":{"doc":"api-your-data","title":"Data controls in the OpenAI platform","url":"https://developers.openai.com/api/docs/guides/your-data","capturedAt":"2026-11-08T22:28:03Z","sha256":"dae156f60ed4b36470dfb1322e3f9bb6cf589e071d6b6df8f4b341cc12e81e89"}},{"quote":"Except as noted below, the Responses API has a 30 day Application State retention period by default, or when the `store` parameter is set to `true`. In those cases, response data will be stored for at least 30 days.","source":{"doc":"api-your-data","title":"Data controls in the OpenAI platform","url":"https://developers.openai.com/api/docs/guides/your-data","capturedAt":"2026-11-08T22:28:03Z","sha256":"dae156f60ed4b36470dfb1322e3f9bb6cf589e071d6b6df8f4b341cc12e81e89"}},{"quote":"/v1/conversations \\| No \\| Until deleted \\| Until deleted","source":{"doc":"api-your-data","title":"Data controls in the OpenAI platform","url":"https://developers.openai.com/api/docs/guides/your-data","capturedAt":"2026-11-08T22:28:03Z","sha256":"dae156f60ed4b36470dfb1322e3f9bb6cf589e071d6b6df8f4b341cc12e81e89"}},{"quote":"Objects that are not deleted via the API or dashboard are retained indefinitely.","source":{"doc":"api-your-data","title":"Data controls in the OpenAI platform","url":"https://developers.openai.com/api/docs/guides/your-data","capturedAt":"2026-11-08T22:28:03Z","sha256":"dae156f60ed4b36470dfb1322e3f9bb6cf589e071d6b6df8f4b341cc12e81e89"}},{"quote":"Data submitted to fine-tune a model is retained until the customer deletes the files.","source":{"doc":"enterprise-privacy","title":"Enterprise privacy","url":"https://openai.com/enterprise-privacy/","capturedAt":"2026-11-08T22:19:40Z","sha256":"03ba1b3b3aef729cb764ff065dd84c1db4e135327fb4339316ab2d0b5044c6e4"}}]},"deletion_window":{"summary":"Assistants objects are deleted 30 days after you delete them; all Customer Content within 30 days of termination. Live session recordings can't be deleted; they expire after 30 days.","status":"stated","cites":[{"quote":"Objects related to the Assistants API are deleted from our servers 30 days after you delete them via the API or the dashboard.","source":{"doc":"api-your-data","title":"Data controls in the OpenAI platform","url":"https://developers.openai.com/api/docs/guides/your-data","capturedAt":"2026-11-08T22:28:03Z","sha256":"dae156f60ed4b36470dfb1322e3f9bb6cf589e071d6b6df8f4b341cc12e81e89"}},{"quote":"OpenAI will delete all Customer Content from its systems within thirty days, unless: (i) OpenAI is legally required to retain it; or (ii) Customer has agreed otherwise in writing.","source":{"doc":"services-agreement","title":"Services agreement","url":"https://openai.com/policies/services-agreement/","capturedAt":"2026-11-08T22:19:40Z","sha256":"7be322b3ba0e171882e1ddd8434b383a0b51818186255237555233a79532da03"}},{"quote":"The API does not provide a public stored-session deletion endpoint.","source":{"doc":"api-your-data","title":"Data controls in the OpenAI platform","url":"https://developers.openai.com/api/docs/guides/your-data","capturedAt":"2026-11-08T22:28:03Z","sha256":"dae156f60ed4b36470dfb1322e3f9bb6cf589e071d6b6df8f4b341cc12e81e89"}},{"quote":"Stored sessions and their index expire after 30 days.","source":{"doc":"api-your-data","title":"Data controls in the OpenAI platform","url":"https://developers.openai.com/api/docs/guides/your-data","capturedAt":"2026-11-08T22:28:03Z","sha256":"dae156f60ed4b36470dfb1322e3f9bb6cf589e071d6b6df8f4b341cc12e81e89"}}]},"retention_exceptions":{"summary":"Kept longer if legally required or to prevent harm. Suspected CSAM images kept for review even under ZDR; Safety Retention may keep flagged content. NYT order ended Sept 26, 2025.","status":"stated","cites":[{"quote":"unless longer retention is required by law, or is reasonably necessary to protect our services or any third party from harm.","source":{"doc":"api-your-data","title":"Data controls in the OpenAI platform","url":"https://developers.openai.com/api/docs/guides/your-data","capturedAt":"2026-11-08T22:28:03Z","sha256":"dae156f60ed4b36470dfb1322e3f9bb6cf589e071d6b6df8f4b341cc12e81e89"}},{"quote":"If the classifier detects potential CSAM content, the image will be retained for manual review, even if Zero Data Retention, Modified Abuse Monitoring, or Private Retention with PSP is enabled.","source":{"doc":"api-your-data","title":"Data controls in the OpenAI platform","url":"https://developers.openai.com/api/docs/guides/your-data","capturedAt":"2026-11-08T22:28:03Z","sha256":"dae156f60ed4b36470dfb1322e3f9bb6cf589e071d6b6df8f4b341cc12e81e89"}},{"quote":"In this instance, we may retain and human review customer content when using these models that our classifiers detect as potentially violating our","source":{"doc":"api-your-data","title":"Data controls in the OpenAI platform","url":"https://developers.openai.com/api/docs/guides/your-data","capturedAt":"2026-11-08T22:28:03Z","sha256":"dae156f60ed4b36470dfb1322e3f9bb6cf589e071d6b6df8f4b341cc12e81e89"}},{"quote":"Yes, if you have a ChatGPT Free, Plus, Pro, and Team subscription or if you use the OpenAI API (without a Zero Data Retention agreement).","source":{"doc":"nyt-data-demands","title":"How we\\u2019re responding to The New York Times\\u2019 data demands in order to protect user privacy","url":"https://openai.com/index/response-to-nyt-data-demands/","capturedAt":"2026-11-08T21:37:59Z","sha256":"0c3f21b266298dc23839db2275090f4a60de89a1edc7e36551604ce9f10a6f9e"}},{"quote":"After months of litigation, we are no longer under a legal order to retain consumer ChatGPT and API content indefinitely. Our obligations under the earlier order ended on September 26, 2025.","source":{"doc":"nyt-data-demands","title":"How we\\u2019re responding to The New York Times\\u2019 data demands in order to protect user privacy","url":"https://openai.com/index/response-to-nyt-data-demands/","capturedAt":"2026-11-08T21:37:59Z","sha256":"0c3f21b266298dc23839db2275090f4a60de89a1edc7e36551604ce9f10a6f9e"}}]},"zdr":{"summary":"Yes, with prior OpenAI approval via sales. Removes content from abuse logs and forces store=false; ineligible endpoints still keep app state; OpenAI may exclude models with written notice.","status":"stated","cites":[{"quote":"Currently, these controls are subject to prior approval by OpenAI and acceptance of additional requirements.","source":{"doc":"api-your-data","title":"Data controls in the OpenAI platform","url":"https://developers.openai.com/api/docs/guides/your-data","capturedAt":"2026-11-08T22:28:03Z","sha256":"dae156f60ed4b36470dfb1322e3f9bb6cf589e071d6b6df8f4b341cc12e81e89"}},{"quote":"You can also request zero data retention (ZDR) for eligible endpoints if you have a qualifying use-case.","source":{"doc":"enterprise-privacy","title":"Enterprise privacy","url":"https://openai.com/enterprise-privacy/","capturedAt":"2026-11-08T22:19:40Z","sha256":"03ba1b3b3aef729cb764ff065dd84c1db4e135327fb4339316ab2d0b5044c6e4"}},{"quote":"Additionally, Zero Data Retention changes some endpoint behavior: the `store` parameter for `/v1/responses` and `v1/chat/completions` will always be treated as `false`, even if the request attempts to set the value to `true`.","source":{"doc":"api-your-data","title":"Data controls in the OpenAI platform","url":"https://developers.openai.com/api/docs/guides/your-data","capturedAt":"2026-11-08T22:28:03Z","sha256":"dae156f60ed4b36470dfb1322e3f9bb6cf589e071d6b6df8f4b341cc12e81e89"}},{"quote":"Zero Data Retention ineligible endpoints or capabilities may retain application state when used, even if you have Zero Data Retention enabled.","source":{"doc":"api-your-data","title":"Data controls in the OpenAI platform","url":"https://developers.openai.com/api/docs/guides/your-data","capturedAt":"2026-11-08T22:28:03Z","sha256":"dae156f60ed4b36470dfb1322e3f9bb6cf589e071d6b6df8f4b341cc12e81e89"}},{"quote":"we reserve the right to make models ineligible for Zero Data Retention or Modified Abuse Monitoring for specific customers, as notified in advance to the impacted customers in writing.","source":{"doc":"api-your-data","title":"Data controls in the OpenAI platform","url":"https://developers.openai.com/api/docs/guides/your-data","capturedAt":"2026-11-08T22:28:03Z","sha256":"dae156f60ed4b36470dfb1322e3f9bb6cf589e071d6b6df8f4b341cc12e81e89"}}]},"training_default":{"summary":"No. Since March 1, 2023, API data isn't used to train or improve models unless the customer explicitly opts in.","status":"stated","cites":[{"quote":"As of March 1, 2023, data sent to the OpenAI API is not used to train or improve OpenAI models (unless you explicitly opt in to share data with us).","source":{"doc":"api-your-data","title":"Data controls in the OpenAI platform","url":"https://developers.openai.com/api/docs/guides/your-data","capturedAt":"2026-11-08T22:28:03Z","sha256":"dae156f60ed4b36470dfb1322e3f9bb6cf589e071d6b6df8f4b341cc12e81e89"}},{"quote":"OpenAI will not use Customer Content to develop or improve the Services, unless Customer explicitly agrees to such use.","source":{"doc":"services-agreement","title":"Services agreement","url":"https://openai.com/policies/services-agreement/","capturedAt":"2026-11-08T22:19:40Z","sha256":"7be322b3ba0e171882e1ddd8434b383a0b51818186255237555233a79532da03"}}]},"training_opt_out":{"summary":"Not needed: training is opt-in only, for example via feedback-sharing mechanisms. The captured policies don't describe how to withdraw an opt-in.","status":"stated","cites":[{"quote":"If you have explicitly opted in to share your data with us","source":{"doc":"enterprise-privacy","title":"Enterprise privacy","url":"https://openai.com/enterprise-privacy/","capturedAt":"2026-11-08T22:19:40Z","sha256":"03ba1b3b3aef729cb764ff065dd84c1db4e135327fb4339316ab2d0b5044c6e4"}},{"quote":"then we may use the shared data to train our models.","source":{"doc":"enterprise-privacy","title":"Enterprise privacy","url":"https://openai.com/enterprise-privacy/","capturedAt":"2026-11-08T22:19:40Z","sha256":"03ba1b3b3aef729cb764ff065dd84c1db4e135327fb4339316ab2d0b5044c6e4"}}]},"human_review":{"summary":"Staff (engineering, abuse, legal) and contracted abuse reviewers can access stored API data. Safety Retention allows human review of flagged content; Private Retention excludes it unless law requires.","status":"stated","cites":[{"quote":"Our access to API business data stored on our systems is limited to (1) authorized employees that require access for engineering support, investigating potential platform abuse, and legal compliance and (2) specialized third-party contractors who are bound by confidentiality and security obligations, solely to review for abuse and misuse.","source":{"doc":"enterprise-privacy","title":"Enterprise privacy","url":"https://openai.com/enterprise-privacy/","capturedAt":"2026-11-08T22:19:40Z","sha256":"03ba1b3b3aef729cb764ff065dd84c1db4e135327fb4339316ab2d0b5044c6e4"}},{"quote":"In this instance, we may retain and human review customer content when using these models that our classifiers detect as potentially violating our","source":{"doc":"api-your-data","title":"Data controls in the OpenAI platform","url":"https://developers.openai.com/api/docs/guides/your-data","capturedAt":"2026-11-08T22:28:03Z","sha256":"dae156f60ed4b36470dfb1322e3f9bb6cf589e071d6b6df8f4b341cc12e81e89"}},{"quote":"but such content will be excluded from human review unless required by applicable law.","source":{"doc":"api-your-data","title":"Data controls in the OpenAI platform","url":"https://developers.openai.com/api/docs/guides/your-data","capturedAt":"2026-11-08T22:28:03Z","sha256":"dae156f60ed4b36470dfb1322e3f9bb6cf589e071d6b6df8f4b341cc12e81e89"}}]},"memory":{"summary":"The captured policies describe no memory or user-profile feature for the API; stored Conversations objects are covered under retention.","status":"not_stated","cites":[]},"connector_data":{"summary":"Data sent to remote MCP servers or other third-party services over the network follows those services' retention and residency policies, not OpenAI's.","status":"stated","cites":[{"quote":"MCP servers (used with the [remote MCP server tool](/api/docs/guides/tools-remote-mcp)) are third-party services, and data sent to an MCP server is subject to their data retention policies.","source":{"doc":"api-your-data","title":"Data controls in the OpenAI platform","url":"https://developers.openai.com/api/docs/guides/your-data","capturedAt":"2026-11-08T22:28:03Z","sha256":"dae156f60ed4b36470dfb1322e3f9bb6cf589e071d6b6df8f4b341cc12e81e89"}},{"quote":"Data transmitted to third-party services over network connections is subject to their data retention policies.","source":{"doc":"api-your-data","title":"Data controls in the OpenAI platform","url":"https://developers.openai.com/api/docs/guides/your-data","capturedAt":"2026-11-08T22:28:03Z","sha256":"dae156f60ed4b36470dfb1322e3f9bb6cf589e071d6b6df8f4b341cc12e81e89"}}]},"agent_actions":{"summary":"Hosted shell, Code Interpreter and hosted skills write temporary container data, deleted when the container expires or is deleted. /v1/agents state is kept until deleted. Computer Use images are CSAM-scanned.","status":"stated","cites":[{"quote":"Hosted containers used by [Hosted Shell](/api/docs/guides/tools-shell#hosted-shell-quickstart) and [Code Interpreter](/api/docs/guides/tools-code-interpreter) may write temporary application state to the container filesystem (backed by ephemeral block storage) while the container is active. Container data is deleted when the container expires or is explicitly deleted.","source":{"doc":"api-your-data","title":"Data controls in the OpenAI platform","url":"https://developers.openai.com/api/docs/guides/your-data","capturedAt":"2026-11-08T22:28:03Z","sha256":"dae156f60ed4b36470dfb1322e3f9bb6cf589e071d6b6df8f4b341cc12e81e89"}},{"quote":"/v1/agents \\| No \\| 30 days \\| Until deleted","source":{"doc":"api-your-data","title":"Data controls in the OpenAI platform","url":"https://developers.openai.com/api/docs/guides/your-data","capturedAt":"2026-11-08T22:28:03Z","sha256":"dae156f60ed4b36470dfb1322e3f9bb6cf589e071d6b6df8f4b341cc12e81e89"}},{"quote":"Images and files may be uploaded as inputs to `/v1/responses` (including when using the Computer Use tool), `/v1/chat/completions`, and `/v1/images`.","source":{"doc":"api-your-data","title":"Data controls in the OpenAI platform","url":"https://developers.openai.com/api/docs/guides/your-data","capturedAt":"2026-11-08T22:28:03Z","sha256":"dae156f60ed4b36470dfb1322e3f9bb6cf589e071d6b6df8f4b341cc12e81e89"}},{"quote":"Image and file inputs are scanned for CSAM content upon submission.","source":{"doc":"api-your-data","title":"Data controls in the OpenAI platform","url":"https://developers.openai.com/api/docs/guides/your-data","capturedAt":"2026-11-08T22:28:03Z","sha256":"dae156f60ed4b36470dfb1322e3f9bb6cf589e071d6b6df8f4b341cc12e81e89"}}]},"input_ownership":{"summary":"The customer retains all ownership rights in Input, as between customer and OpenAI and where the law allows.","status":"stated","cites":[{"quote":"As between Customer and OpenAI, to the extent permitted by applicable law, Customer: (a) retains all ownership rights in Input; and (b) owns all Output.","source":{"doc":"services-agreement","title":"Services agreement","url":"https://openai.com/policies/services-agreement/","capturedAt":"2026-11-08T22:19:40Z","sha256":"7be322b3ba0e171882e1ddd8434b383a0b51818186255237555233a79532da03"}}]},"output_ownership":{"summary":"The customer owns all Output and OpenAI assigns its rights; output generated for other users isn't the customer's.","status":"stated","cites":[{"quote":"OpenAI hereby assigns to Customer all OpenAI’s right, title, and interest, if any, in and to Output.","source":{"doc":"services-agreement","title":"Services agreement","url":"https://openai.com/policies/services-agreement/","capturedAt":"2026-11-08T22:19:40Z","sha256":"7be322b3ba0e171882e1ddd8434b383a0b51818186255237555233a79532da03"}},{"quote":"Responses that are requested by and generated for other users are not considered Customer’s Output.","source":{"doc":"services-agreement","title":"Services agreement","url":"https://openai.com/policies/services-agreement/","capturedAt":"2026-11-08T22:19:40Z","sha256":"7be322b3ba0e171882e1ddd8434b383a0b51818186255237555233a79532da03"}}]},"license_to_provider":{"summary":"Only limited rights needed to deliver the Services, extended to subprocessors; use limited to service, law, policy and abuse. The IP section survives termination. Feedback usable without restriction.","status":"stated","cites":[{"quote":"Customer grants OpenAI only the limited rights that are reasonably necessary for OpenAI to deliver the Services. This limited permission also extends to subcontractors or sub-processors.","source":{"doc":"services-agreement","title":"Services agreement","url":"https://openai.com/policies/services-agreement/","capturedAt":"2026-11-08T22:19:40Z","sha256":"7be322b3ba0e171882e1ddd8434b383a0b51818186255237555233a79532da03"}},{"quote":"OpenAI will only use Customer Content as necessary to provide Customer with the Services, comply with applicable law, enforce the OpenAI Policies, and prevent abuse.","source":{"doc":"services-agreement","title":"Services agreement","url":"https://openai.com/policies/services-agreement/","capturedAt":"2026-11-08T22:19:40Z","sha256":"7be322b3ba0e171882e1ddd8434b383a0b51818186255237555233a79532da03"}},{"quote":"The following provisions will survive termination or expiration of the Agreement: 6.2 (Payment), 7 (Confidentiality), 9 (IP Rights)","source":{"doc":"services-agreement","title":"Services agreement","url":"https://openai.com/policies/services-agreement/","capturedAt":"2026-11-08T22:19:40Z","sha256":"7be322b3ba0e171882e1ddd8434b383a0b51818186255237555233a79532da03"}},{"quote":"If Customer provides Feedback, Customer grants OpenAI the right to use and exploit Feedback without restriction or compensation.","source":{"doc":"services-agreement","title":"Services agreement","url":"https://openai.com/policies/services-agreement/","capturedAt":"2026-11-08T22:19:40Z","sha256":"7be322b3ba0e171882e1ddd8434b383a0b51818186255237555233a79532da03"}}]},"third_party_sharing":{"summary":"OpenAI uses listed sub-processors; Cloudflare terminates TLS in-region for US/EU endpoints. Data routed to MCP or third-party services follows their terms. Abuse-related information may be shared.","status":"stated","cites":[{"quote":"OpenAI uses [sub-processors](https://openai.com/policies/sub-processor-list/) to provide its services.","source":{"doc":"api-your-data","title":"Data controls in the OpenAI platform","url":"https://developers.openai.com/api/docs/guides/your-data","capturedAt":"2026-11-08T22:28:03Z","sha256":"dae156f60ed4b36470dfb1322e3f9bb6cf589e071d6b6df8f4b341cc12e81e89"}},{"quote":"For requests sent to `us.api.openai.com` or `eu.api.openai.com`, OpenAI uses [Cloudflare Regional Services](https://developers.cloudflare.com/data-localization/regional-services/) so that TLS termination and HTTPS decryption occur within the selected processing region.","source":{"doc":"api-your-data","title":"Data controls in the OpenAI platform","url":"https://developers.openai.com/api/docs/guides/your-data","capturedAt":"2026-11-08T22:28:03Z","sha256":"dae156f60ed4b36470dfb1322e3f9bb6cf589e071d6b6df8f4b341cc12e81e89"}},{"quote":"share information related to Abusive Customer Content, as required by law, or as reasonably necessary to protect the Services or any third party from harm.","source":{"doc":"services-agreement","title":"Services agreement","url":"https://openai.com/policies/services-agreement/","capturedAt":"2026-11-08T22:19:40Z","sha256":"7be322b3ba0e171882e1ddd8434b383a0b51818186255237555233a79532da03"}}]},"data_location":{"summary":"Approved customers can choose a storage region per project; not every region also runs inference there. Non-US regions require MAM/ZDR plus an amendment. System data is excluded; 10% price uplift.","status":"stated","cites":[{"quote":"Contact our [sales team](https://openai.com/contact-sales) to see if you’re eligible for using data residency controls.","source":{"doc":"api-your-data","title":"Data controls in the OpenAI platform","url":"https://developers.openai.com/api/docs/guides/your-data","capturedAt":"2026-11-08T22:28:03Z","sha256":"dae156f60ed4b36470dfb1322e3f9bb6cf589e071d6b6df8f4b341cc12e81e89"}},{"quote":"Support for regional storage does not imply support for regional processing.","source":{"doc":"api-your-data","title":"Data controls in the OpenAI platform","url":"https://developers.openai.com/api/docs/guides/your-data","capturedAt":"2026-11-08T22:28:03Z","sha256":"dae156f60ed4b36470dfb1322e3f9bb6cf589e071d6b6df8f4b341cc12e81e89"}},{"quote":"If your selected Region does not support regional processing, as identified below, OpenAI may also process and temporarily store Customer Content outside of the Region to deliver the services.","source":{"doc":"api-your-data","title":"Data controls in the OpenAI platform","url":"https://developers.openai.com/api/docs/guides/your-data","capturedAt":"2026-11-08T22:28:03Z","sha256":"dae156f60ed4b36470dfb1322e3f9bb6cf589e071d6b6df8f4b341cc12e81e89"}},{"quote":"To use data residency with any region other than the United States, you must be approved for abuse monitoring controls, and execute a Modified Retention amendment.","source":{"doc":"api-your-data","title":"Data controls in the OpenAI platform","url":"https://developers.openai.com/api/docs/guides/your-data","capturedAt":"2026-11-08T22:28:03Z","sha256":"dae156f60ed4b36470dfb1322e3f9bb6cf589e071d6b6df8f4b341cc12e81e89"}},{"quote":"Data residency does not apply to system data, which may be processed and stored outside the selected region.","source":{"doc":"api-your-data","title":"Data controls in the OpenAI platform","url":"https://developers.openai.com/api/docs/guides/your-data","capturedAt":"2026-11-08T22:28:03Z","sha256":"dae156f60ed4b36470dfb1322e3f9bb6cf589e071d6b6df8f4b341cc12e81e89"}},{"quote":"Data residency endpoints are charged a [10% uplift](/api/docs/pricing) for models released on or after March 5, 2026, that are eligible for data residency.","source":{"doc":"api-your-data","title":"Data controls in the OpenAI platform","url":"https://developers.openai.com/api/docs/guides/your-data","capturedAt":"2026-11-08T22:28:03Z","sha256":"dae156f60ed4b36470dfb1322e3f9bb6cf589e071d6b6df8f4b341cc12e81e89"}}]},"enterprise_controls":{"summary":"Org- and project-level ZDR/Modified Abuse Monitoring settings, data residency, Enterprise Key Management, DPA, BAA for HIPAA, SOC 2 Type 2, and audit reports on request.","status":"stated","cites":[{"quote":"From that tab, you can configure data retention controls at both the organization and project level.","source":{"doc":"api-your-data","title":"Data controls in the OpenAI platform","url":"https://developers.openai.com/api/docs/guides/your-data","capturedAt":"2026-11-08T22:28:03Z","sha256":"dae156f60ed4b36470dfb1322e3f9bb6cf589e071d6b6df8f4b341cc12e81e89"}},{"quote":"Enterprise Key Management (EKM) allows you to encrypt your customer content at OpenAI using keys managed by your own external Key Management System (KMS).","source":{"doc":"api-your-data","title":"Data controls in the OpenAI platform","url":"https://developers.openai.com/api/docs/guides/your-data","capturedAt":"2026-11-08T22:28:03Z","sha256":"dae156f60ed4b36470dfb1322e3f9bb6cf589e071d6b6df8f4b341cc12e81e89"}},{"quote":"We are able to sign Business Associate Agreements (BAA) in support of customers’ compliance with the Health Insurance Portability and Accountability Act (HIPAA).","source":{"doc":"enterprise-privacy","title":"Enterprise privacy","url":"https://openai.com/enterprise-privacy/","capturedAt":"2026-11-08T22:19:40Z","sha256":"03ba1b3b3aef729cb764ff065dd84c1db4e135327fb4339316ab2d0b5044c6e4"}},{"quote":"we are able to execute a Data Processing Addendum (DPA) with customers for their use of ChatGPT Business, ChatGPT Enterprise, and the API in support of their compliance with GDPR and other privacy laws.","source":{"doc":"enterprise-privacy","title":"Enterprise privacy","url":"https://openai.com/enterprise-privacy/","capturedAt":"2026-11-08T22:19:40Z","sha256":"03ba1b3b3aef729cb764ff065dd84c1db4e135327fb4339316ab2d0b5044c6e4"}},{"quote":"Our API Platform has been audited and certified for SOC 2 Type 2 compliance.","source":{"doc":"enterprise-privacy","title":"Enterprise privacy","url":"https://openai.com/enterprise-privacy/","capturedAt":"2026-11-08T22:19:40Z","sha256":"03ba1b3b3aef729cb764ff065dd84c1db4e135327fb4339316ab2d0b5044c6e4"}},{"quote":"Upon Customer’s written request, but no more than once per year, OpenAI will provide Customer a copy of the most recent Audit Reports","source":{"doc":"services-agreement","title":"Services agreement","url":"https://openai.com/policies/services-agreement/","capturedAt":"2026-11-08T22:19:40Z","sha256":"7be322b3ba0e171882e1ddd8434b383a0b51818186255237555233a79532da03"}}]}}},{"id":"dots","name":"Dots (always-on agent in ChatGPT)","surface":"agent","facts":{"default_retention":{"summary":"A dot keeps context from your conversations and plugins for as long as you keep the dot. Its context excludes credentials, images and screenshots; files elsewhere follow that location's rules.","status":"stated","cites":[{"quote":"Your dot can retain context from your conversations and plugins for as long as you keep your dot.","source":{"doc":"dots-privacy-faq","title":"Dots privacy faq","url":"https://help.openai.com/en/articles/20001529-dots-privacy-security-and-safety-faqs","capturedAt":"2026-11-08T22:19:40Z","sha256":"dcfb8795c612be594f5e9cacacc6708564c4f1035ef769be14b4505be39e312d"}},{"quote":"Your dot’s context does not retain credentials, images, or screenshots. Files your dot creates or uses in other locations, such as ChatGPT Library, your computer, or a connected storage service, follow that location’s retention policies.","source":{"doc":"dots-privacy-faq","title":"Dots privacy faq","url":"https://help.openai.com/en/articles/20001529-dots-privacy-security-and-safety-faqs","capturedAt":"2026-11-08T22:19:40Z","sha256":"dcfb8795c612be594f5e9cacacc6708564c4f1035ef769be14b4505be39e312d"}}]},"deletion_window":{"summary":"Deleting a dot 'starts deletion' of its context; no completion time is stated. Files, Codex threads and ChatGPT conversations it created remain. Pausing or removing access deletes nothing.","status":"stated","cites":[{"quote":"Deleting your dot starts deletion of its own context.","source":{"doc":"dots-privacy-faq","title":"Dots privacy faq","url":"https://help.openai.com/en/articles/20001529-dots-privacy-security-and-safety-faqs","capturedAt":"2026-11-08T22:19:40Z","sha256":"dcfb8795c612be594f5e9cacacc6708564c4f1035ef769be14b4505be39e312d"}},{"quote":"Files, Codex threads, and ChatGPT conversations your dot created are stored separately. Deleting your dot does not delete them.","source":{"doc":"dots-privacy-faq","title":"Dots privacy faq","url":"https://help.openai.com/en/articles/20001529-dots-privacy-security-and-safety-faqs","capturedAt":"2026-11-08T22:19:40Z","sha256":"dcfb8795c612be594f5e9cacacc6708564c4f1035ef769be14b4505be39e312d"}},{"quote":"Pausing a dot or removing a member’s permission to use it does not delete the dot’s stored information.","source":{"doc":"dots-privacy-faq","title":"Dots privacy faq","url":"https://help.openai.com/en/articles/20001529-dots-privacy-security-and-safety-faqs","capturedAt":"2026-11-08T22:19:40Z","sha256":"dcfb8795c612be594f5e9cacacc6708564c4f1035ef769be14b4505be39e312d"}},{"quote":"Deleting a Library file does not by itself delete a copy already attached to your dot’s conversation.","source":{"doc":"dots-privacy-faq","title":"Dots privacy faq","url":"https://help.openai.com/en/articles/20001529-dots-privacy-security-and-safety-faqs","capturedAt":"2026-11-08T22:19:40Z","sha256":"dcfb8795c612be594f5e9cacacc6708564c4f1035ef769be14b4505be39e312d"}}]},"retention_exceptions":{"summary":"The dots FAQ names no legal-hold, safety or backup retention for dot context; whether ChatGPT's exceptions apply isn't stated.","status":"not_stated","cites":[]},"zdr":{"summary":"The dots FAQ describes no zero-data-retention option.","status":"not_stated","cites":[]},"training_default":{"summary":"Business/Enterprise/Edu: no. Personal plans follow 'Improve the model for everyone', which ChatGPT says is on by default for Free/Plus/Pro, so inferred yes, including actions and connected-app data.","status":"inferred","cites":[{"quote":"For ChatGPT Business, Enterprise, and Edu workspaces, we don’t use your data to train our models by default.","source":{"doc":"dots-privacy-faq","title":"Dots privacy faq","url":"https://help.openai.com/en/articles/20001529-dots-privacy-security-and-safety-faqs","capturedAt":"2026-11-08T22:19:40Z","sha256":"dcfb8795c612be594f5e9cacacc6708564c4f1035ef769be14b4505be39e312d"}},{"quote":"For personal ChatGPT plans, your “**Improve the model for everyone**” setting controls whether your dots’ conversations and work may be used to improve our models.","source":{"doc":"dots-privacy-faq","title":"Dots privacy faq","url":"https://help.openai.com/en/articles/20001529-dots-privacy-security-and-safety-faqs","capturedAt":"2026-11-08T22:19:40Z","sha256":"dcfb8795c612be594f5e9cacacc6708564c4f1035ef769be14b4505be39e312d"}},{"quote":"This may include actions dots take, work they delegate to other agents, automations you set up, and data from connected apps that is used to inform your conversations.","source":{"doc":"dots-privacy-faq","title":"Dots privacy faq","url":"https://help.openai.com/en/articles/20001529-dots-privacy-security-and-safety-faqs","capturedAt":"2026-11-08T22:19:40Z","sha256":"dcfb8795c612be594f5e9cacacc6708564c4f1035ef769be14b4505be39e312d"}},{"quote":"On personal workspaces with ChatGPT Free, Plus, or Pro, data sharing is enabled by default.","source":{"doc":"help-data-controls","title":"Help data controls","url":"https://help.openai.com/en/articles/7730893-data-controls-in-chatgpt","capturedAt":"2026-11-08T22:19:40Z","sha256":"ee55f4ae08df76f08eea98895c51e00677078a76d90e208673d4ab281445ff34"}}]},"training_opt_out":{"summary":"Turn off 'Improve the model for everyone' in ChatGPT settings. Background research notes aren't trained on directly, but research brought into a conversation may be. Identifiers removed 'where possible'.","status":"stated","cites":[{"quote":"You can turn off “**Improve the model for everyone**” in ChatGPT settings.","source":{"doc":"dots-privacy-faq","title":"Dots privacy faq","url":"https://help.openai.com/en/articles/20001529-dots-privacy-security-and-safety-faqs","capturedAt":"2026-11-08T22:19:40Z","sha256":"dcfb8795c612be594f5e9cacacc6708564c4f1035ef769be14b4505be39e312d"}},{"quote":"We don’t train directly on proactive background research or its notes. If a dot brings information from that research into an eligible conversation or task, that information may be used for training, depending on your settings.","source":{"doc":"dots-privacy-faq","title":"Dots privacy faq","url":"https://help.openai.com/en/articles/20001529-dots-privacy-security-and-safety-faqs","capturedAt":"2026-11-08T22:19:40Z","sha256":"dcfb8795c612be594f5e9cacacc6708564c4f1035ef769be14b4505be39e312d"}},{"quote":"We take steps to remove personal identifiers where possible before using eligible data.","source":{"doc":"dots-privacy-faq","title":"Dots privacy faq","url":"https://help.openai.com/en/articles/20001529-dots-privacy-security-and-safety-faqs","capturedAt":"2026-11-08T22:19:40Z","sha256":"dcfb8795c612be594f5e9cacacc6708564c4f1035ef769be14b4505be39e312d"}}]},"human_review":{"summary":"Yes: people associated with OpenAI may review dot activity in limited circumstances, including safety cases, even with model improvement off. Automated safety monitoring runs as the dot works.","status":"stated","cites":[{"quote":"Human review may occur in limited [*circumstances*](https://help.openai.com/articles/7039943#authorized-human-access-to-content), including safety-related cases, even when model improvement is turned off.","source":{"doc":"dots-privacy-faq","title":"Dots privacy faq","url":"https://help.openai.com/en/articles/20001529-dots-privacy-security-and-safety-faqs","capturedAt":"2026-11-08T22:19:40Z","sha256":"dcfb8795c612be594f5e9cacacc6708564c4f1035ef769be14b4505be39e312d"}},{"quote":"**Safety monitoring** looks for potentially harmful behavior as your dot works.","source":{"doc":"dots-privacy-faq","title":"Dots privacy faq","url":"https://help.openai.com/en/articles/20001529-dots-privacy-security-and-safety-faqs","capturedAt":"2026-11-08T22:19:40Z","sha256":"dcfb8795c612be594f5e9cacacc6708564c4f1035ef769be14b4505be39e312d"}}]},"memory":{"summary":"Dots and ChatGPT Memory share memories both ways. Individual dot memories can't be viewed, edited or deleted; only deleting the dot does. Turning off Memory stops sharing, keeps received data.","status":"stated","cites":[{"quote":"Yes. Your dot can receive memories and recent conversation context from ChatGPT, and conversations with your dot can contribute to memory in ChatGPT.","source":{"doc":"dots-privacy-faq","title":"Dots privacy faq","url":"https://help.openai.com/en/articles/20001529-dots-privacy-security-and-safety-faqs","capturedAt":"2026-11-08T22:19:40Z","sha256":"dcfb8795c612be594f5e9cacacc6708564c4f1035ef769be14b4505be39e312d"}},{"quote":"Turning off **Memory** in ChatGPT stops that sharing. It does not delete information that your dot has already received.","source":{"doc":"dots-privacy-faq","title":"Dots privacy faq","url":"https://help.openai.com/en/articles/20001529-dots-privacy-security-and-safety-faqs","capturedAt":"2026-11-08T22:19:40Z","sha256":"dcfb8795c612be594f5e9cacacc6708564c4f1035ef769be14b4505be39e312d"}},{"quote":"You currently cannot view, delete, or directly modify individual dot memories, including specific details that enter the dot’s context from plugins.","source":{"doc":"dots-privacy-faq","title":"Dots privacy faq","url":"https://help.openai.com/en/articles/20001529-dots-privacy-security-and-safety-faqs","capturedAt":"2026-11-08T22:19:40Z","sha256":"dcfb8795c612be594f5e9cacacc6708564c4f1035ef769be14b4505be39e312d"}},{"quote":"Any information that your dot has shared with ChatGPT Memory can be separately managed in ChatGPT Memory settings.","source":{"doc":"dots-privacy-faq","title":"Dots privacy faq","url":"https://help.openai.com/en/articles/20001529-dots-privacy-security-and-safety-faqs","capturedAt":"2026-11-08T22:19:40Z","sha256":"dcfb8795c612be594f5e9cacacc6708564c4f1035ef769be14b4505be39e312d"}}]},"connector_data":{"summary":"Dots share plugin connections with ChatGPT, ChatGPT Work and Codex; plugin data enters dot context. Disconnecting stops new access but deletes nothing already absorbed. Proactive research reads connected sources.","status":"stated","cites":[{"quote":"Plugin permissions are shared across dots, ChatGPT, ChatGPT Work, and Codex. Your dot can use your existing connections within the permissions you’ve granted.","source":{"doc":"dots-privacy-faq","title":"Dots privacy faq","url":"https://help.openai.com/en/articles/20001529-dots-privacy-security-and-safety-faqs","capturedAt":"2026-11-08T22:19:40Z","sha256":"dcfb8795c612be594f5e9cacacc6708564c4f1035ef769be14b4505be39e312d"}},{"quote":"This stops new access through that connection. It does not delete information your dot has already built into its context.","source":{"doc":"dots-privacy-faq","title":"Dots privacy faq","url":"https://help.openai.com/en/articles/20001529-dots-privacy-security-and-safety-faqs","capturedAt":"2026-11-08T22:19:40Z","sha256":"dcfb8795c612be594f5e9cacacc6708564c4f1035ef769be14b4505be39e312d"}},{"quote":"It can read information from permitted connected sources and save private notes, but its research tools cannot directly:","source":{"doc":"dots-privacy-faq","title":"Dots privacy faq","url":"https://help.openai.com/en/articles/20001529-dots-privacy-security-and-safety-faqs","capturedAt":"2026-11-08T22:19:40Z","sha256":"dcfb8795c612be594f5e9cacacc6708564c4f1035ef769be14b4505be39e312d"}},{"quote":"You can also set up a separate Slack account for your dot, giving it its own identity and access in those services.","source":{"doc":"dots-privacy-faq","title":"Dots privacy faq","url":"https://help.openai.com/en/articles/20001529-dots-privacy-security-and-safety-faqs","capturedAt":"2026-11-08T22:19:40Z","sha256":"dcfb8795c612be594f5e9cacacc6708564c4f1035ef769be14b4505be39e312d"}}]},"agent_actions":{"summary":"Activity View lists tasks and steps. Password changes and money transfers require takeover; purchases need approval. Secure-form passwords aren't shown to the model; signed-in sessions persist. Log retention unstated.","status":"stated","cites":[{"quote":"Activity View in the desktop app shows your dot’s ongoing and delegated tasks. You can see task descriptions and their status to follow its progress. You can also review steps your dot has taken.","source":{"doc":"dots-privacy-faq","title":"Dots privacy faq","url":"https://help.openai.com/en/articles/20001529-dots-privacy-security-and-safety-faqs","capturedAt":"2026-11-08T22:19:40Z","sha256":"dcfb8795c612be594f5e9cacacc6708564c4f1035ef769be14b4505be39e312d"}},{"quote":"The most sensitive actions like changing a password or transferring money require you to take over so you can complete them yourself.","source":{"doc":"dots-privacy-faq","title":"Dots privacy faq","url":"https://help.openai.com/en/articles/20001529-dots-privacy-security-and-safety-faqs","capturedAt":"2026-11-08T22:19:40Z","sha256":"dcfb8795c612be594f5e9cacacc6708564c4f1035ef769be14b4505be39e312d"}},{"quote":"Other actions like permanently deleting data or installing software may require approval each time you ask your dot to perform them.","source":{"doc":"dots-privacy-faq","title":"Dots privacy faq","url":"https://help.openai.com/en/articles/20001529-dots-privacy-security-and-safety-faqs","capturedAt":"2026-11-08T22:19:40Z","sha256":"dcfb8795c612be594f5e9cacacc6708564c4f1035ef769be14b4505be39e312d"}},{"quote":"The form sends your credentials directly to the browser environment without exposing them to the model. Your dot can then continue using the signed-in session.","source":{"doc":"dots-privacy-faq","title":"Dots privacy faq","url":"https://help.openai.com/en/articles/20001529-dots-privacy-security-and-safety-faqs","capturedAt":"2026-11-08T22:19:40Z","sha256":"dcfb8795c612be594f5e9cacacc6708564c4f1035ef769be14b4505be39e312d"}},{"quote":"They don’t cover passwords you share separately in a chat or document, or through a plugin.","source":{"doc":"dots-privacy-faq","title":"Dots privacy faq","url":"https://help.openai.com/en/articles/20001529-dots-privacy-security-and-safety-faqs","capturedAt":"2026-11-08T22:19:40Z","sha256":"dcfb8795c612be594f5e9cacacc6708564c4f1035ef769be14b4505be39e312d"}},{"quote":"These purchases require your approval, which may be given in advance when it specifically covers the purchase.","source":{"doc":"dots-privacy-faq","title":"Dots privacy faq","url":"https://help.openai.com/en/articles/20001529-dots-privacy-security-and-safety-faqs","capturedAt":"2026-11-08T22:19:40Z","sha256":"dcfb8795c612be594f5e9cacacc6708564c4f1035ef769be14b4505be39e312d"}},{"quote":"**Auto-review** checks certain planned actions against your instructions, Custom Rules, and safety requirements before they run.","source":{"doc":"dots-privacy-faq","title":"Dots privacy faq","url":"https://help.openai.com/en/articles/20001529-dots-privacy-security-and-safety-faqs","capturedAt":"2026-11-08T22:19:40Z","sha256":"dcfb8795c612be594f5e9cacacc6708564c4f1035ef769be14b4505be39e312d"}},{"quote":"Whether a completed action can be reversed depends on the action and the app involved.","source":{"doc":"dots-privacy-faq","title":"Dots privacy faq","url":"https://help.openai.com/en/articles/20001529-dots-privacy-security-and-safety-faqs","capturedAt":"2026-11-08T22:19:40Z","sha256":"dcfb8795c612be594f5e9cacacc6708564c4f1035ef769be14b4505be39e312d"}},{"quote":"Before your dot can access your computer’s camera, microphone, or screen, you must connect your computer to your dot.","source":{"doc":"dots-privacy-faq","title":"Dots privacy faq","url":"https://help.openai.com/en/articles/20001529-dots-privacy-security-and-safety-faqs","capturedAt":"2026-11-08T22:19:40Z","sha256":"dcfb8795c612be594f5e9cacacc6708564c4f1035ef769be14b4505be39e312d"}}]},"input_ownership":{"summary":"Inferred: the dots FAQ is silent. Dots run inside ChatGPT, whose consumer Terms keep your Input rights; business workspaces fall under the customer agreement, which does the same.","status":"inferred","cites":[{"quote":"These Terms of Use apply to your use of ChatGPT, DALL·E, and OpenAI’s other services for individuals","source":{"doc":"terms-of-use","title":"Terms of use","url":"https://openai.com/policies/terms-of-use/","capturedAt":"2026-11-08T22:19:41Z","sha256":"e2b639780e1ed1e57354f9fb6c6229d1ca5a47194475f1657a07bb54268e4359"}},{"quote":"As between you and OpenAI, and to the extent permitted by applicable law, you (a) retain your ownership rights in Input and (b) own the Output.","source":{"doc":"terms-of-use","title":"Terms of use","url":"https://openai.com/policies/terms-of-use/","capturedAt":"2026-11-08T22:19:41Z","sha256":"e2b639780e1ed1e57354f9fb6c6229d1ca5a47194475f1657a07bb54268e4359"}},{"quote":"For information processed on behalf of business customers, the applicable customer agreement governs how it is handled.","source":{"doc":"dots-privacy-faq","title":"Dots privacy faq","url":"https://help.openai.com/en/articles/20001529-dots-privacy-security-and-safety-faqs","capturedAt":"2026-11-08T22:19:40Z","sha256":"dcfb8795c612be594f5e9cacacc6708564c4f1035ef769be14b4505be39e312d"}},{"quote":"As between Customer and OpenAI, to the extent permitted by applicable law, Customer: (a) retains all ownership rights in Input; and (b) owns all Output.","source":{"doc":"services-agreement","title":"Services agreement","url":"https://openai.com/policies/services-agreement/","capturedAt":"2026-11-08T22:19:40Z","sha256":"7be322b3ba0e171882e1ddd8434b383a0b51818186255237555233a79532da03"}}]},"output_ownership":{"summary":"Inferred: the dots FAQ is silent. Under the ChatGPT Terms and the Services Agreement, the user or customer owns Output and OpenAI assigns its rights.","status":"inferred","cites":[{"quote":"We hereby assign to you all our right, title, and interest, if any, in and to Output.","source":{"doc":"terms-of-use","title":"Terms of use","url":"https://openai.com/policies/terms-of-use/","capturedAt":"2026-11-08T22:19:41Z","sha256":"e2b639780e1ed1e57354f9fb6c6229d1ca5a47194475f1657a07bb54268e4359"}},{"quote":"OpenAI hereby assigns to Customer all OpenAI’s right, title, and interest, if any, in and to Output.","source":{"doc":"services-agreement","title":"Services agreement","url":"https://openai.com/policies/services-agreement/","capturedAt":"2026-11-08T22:19:40Z","sha256":"7be322b3ba0e171882e1ddd8434b383a0b51818186255237555233a79532da03"}},{"quote":"For information processed on behalf of business customers, the applicable customer agreement governs how it is handled.","source":{"doc":"dots-privacy-faq","title":"Dots privacy faq","url":"https://help.openai.com/en/articles/20001529-dots-privacy-security-and-safety-faqs","capturedAt":"2026-11-08T22:19:40Z","sha256":"dcfb8795c612be594f5e9cacacc6708564c4f1035ef769be14b4505be39e312d"}}]},"license_to_provider":{"summary":"Inferred: the dots FAQ is silent. Personal use falls under the Terms (use to run and improve services); business use under the Services Agreement (limited rights to deliver the Services).","status":"inferred","cites":[{"quote":"We may use Content to provide, maintain, develop, and improve our Services, comply with applicable law, enforce our terms and policies, and keep our Services safe.","source":{"doc":"terms-of-use","title":"Terms of use","url":"https://openai.com/policies/terms-of-use/","capturedAt":"2026-11-08T22:19:41Z","sha256":"e2b639780e1ed1e57354f9fb6c6229d1ca5a47194475f1657a07bb54268e4359"}},{"quote":"Customer grants OpenAI only the limited rights that are reasonably necessary for OpenAI to deliver the Services.","source":{"doc":"services-agreement","title":"Services agreement","url":"https://openai.com/policies/services-agreement/","capturedAt":"2026-11-08T22:19:40Z","sha256":"7be322b3ba0e171882e1ddd8434b383a0b51818186255237555233a79532da03"}},{"quote":"For information processed on behalf of business customers, the applicable customer agreement governs how it is handled.","source":{"doc":"dots-privacy-faq","title":"Dots privacy faq","url":"https://help.openai.com/en/articles/20001529-dots-privacy-security-and-safety-faqs","capturedAt":"2026-11-08T22:19:40Z","sha256":"dcfb8795c612be594f5e9cacacc6708564c4f1035ef769be14b4505be39e312d"}}]},"third_party_sharing":{"summary":"OpenAI's service providers (hosting, cloud, support, safety, email) may access or store dot data under its instructions. Third-party services a dot uses keep their own coverage and restrictions.","status":"stated","cites":[{"quote":"OpenAI uses service providers to help operate its services, including hosting, cloud infrastructure, support, safety, and email delivery. These providers may access, process, or store personal information under OpenAI’s instructions to carry out those services.","source":{"doc":"dots-privacy-faq","title":"Dots privacy faq","url":"https://help.openai.com/en/articles/20001529-dots-privacy-security-and-safety-faqs","capturedAt":"2026-11-08T22:19:40Z","sha256":"dcfb8795c612be594f5e9cacacc6708564c4f1035ef769be14b4505be39e312d"}},{"quote":"Other features and third-party services your dot uses retain their own coverage and restrictions.","source":{"doc":"dots-privacy-faq","title":"Dots privacy faq","url":"https://help.openai.com/en/articles/20001529-dots-privacy-security-and-safety-faqs","capturedAt":"2026-11-08T22:19:40Z","sha256":"dcfb8795c612be594f5e9cacacc6708564c4f1035ef769be14b4505be39e312d"}}]},"data_location":{"summary":"Inferred: the FAQ points to a ChatGPT residency article for supported storage and inference regions, suggesting regional options exist for dots; no regions are listed.","status":"inferred","cites":[{"quote":"For supported storage and inference regions, see","source":{"doc":"dots-privacy-faq","title":"Dots privacy faq","url":"https://help.openai.com/en/articles/20001529-dots-privacy-security-and-safety-faqs","capturedAt":"2026-11-08T22:19:40Z","sha256":"dcfb8795c612be594f5e9cacacc6708564c4f1035ef769be14b4505be39e312d"}}]},"enterprise_controls":{"summary":"Enterprise access and pause controls; customer-managed keys (EKM) for new dots in eligible workspaces; HIPAA-eligible under a BAA; Custom Rules, which can't override core safety requirements.","status":"stated","cites":[{"quote":"In an eligible Enterprise workspace configured with Enterprise Key Management (EKM), long-term data in new dots supports customer-managed encryption keys.","source":{"doc":"dots-privacy-faq","title":"Dots privacy faq","url":"https://help.openai.com/en/articles/20001529-dots-privacy-security-and-safety-faqs","capturedAt":"2026-11-08T22:19:40Z","sha256":"dcfb8795c612be594f5e9cacacc6708564c4f1035ef769be14b4505be39e312d"}},{"quote":"Dots are HIPAA-eligible when used from an eligible ChatGPT workspace under a BAA and enabled for your role.","source":{"doc":"dots-privacy-faq","title":"Dots privacy faq","url":"https://help.openai.com/en/articles/20001529-dots-privacy-security-and-safety-faqs","capturedAt":"2026-11-08T22:19:40Z","sha256":"dcfb8795c612be594f5e9cacacc6708564c4f1035ef769be14b4505be39e312d"}},{"quote":"For Enterprise access and pause controls, see","source":{"doc":"dots-privacy-faq","title":"Dots privacy faq","url":"https://help.openai.com/en/articles/20001529-dots-privacy-security-and-safety-faqs","capturedAt":"2026-11-08T22:19:40Z","sha256":"dcfb8795c612be594f5e9cacacc6708564c4f1035ef769be14b4505be39e312d"}},{"quote":"Custom Rules let you customize these and tell your dot which supported actions it can take independently, which require your approval, and which it should not take.","source":{"doc":"dots-privacy-faq","title":"Dots privacy faq","url":"https://help.openai.com/en/articles/20001529-dots-privacy-security-and-safety-faqs","capturedAt":"2026-11-08T22:19:40Z","sha256":"dcfb8795c612be594f5e9cacacc6708564c4f1035ef769be14b4505be39e312d"}},{"quote":"Custom Rules cannot turn off core safety requirements, such as when your dot asks you to take back over to change a password.","source":{"doc":"dots-privacy-faq","title":"Dots privacy faq","url":"https://help.openai.com/en/articles/20001529-dots-privacy-security-and-safety-faqs","capturedAt":"2026-11-08T22:19:40Z","sha256":"dcfb8795c612be594f5e9cacacc6708564c4f1035ef769be14b4505be39e312d"}}]}}}],"notes":[{"text":"NYT legal hold, as the captured policy's latest update (October 22, 2025) gives it: OpenAI's obligations under the order ended September 26, 2025, and standard retention resumed, but OpenAI still stores limited historical April–September 2025 user data under lock, accessible only to a small legal and security team. The captured policy does not say whether that data has since been released. The rest of the page (June 5, 2025) describes the order as in force and is out of date.","cites":[{"quote":"After months of litigation, we are no longer under a legal order to retain consumer ChatGPT and API content indefinitely. Our obligations under the earlier order ended on September 26, 2025.","source":{"doc":"nyt-data-demands","title":"How we\\u2019re responding to The New York Times\\u2019 data demands in order to protect user privacy","url":"https://openai.com/index/response-to-nyt-data-demands/","capturedAt":"2026-11-08T21:37:59Z","sha256":"0c3f21b266298dc23839db2275090f4a60de89a1edc7e36551604ce9f10a6f9e"}},{"quote":"The New York Times continues to demand that OpenAI keep a specific set of user data from April-September 2025.","source":{"doc":"nyt-data-demands","title":"How we\\u2019re responding to The New York Times\\u2019 data demands in order to protect user privacy","url":"https://openai.com/index/response-to-nyt-data-demands/","capturedAt":"2026-11-08T21:37:59Z","sha256":"0c3f21b266298dc23839db2275090f4a60de89a1edc7e36551604ce9f10a6f9e"}},{"quote":"we will securely store limited historical April–September 2025 user data. It remains locked down, accessible only to a small, audited OpenAI legal and security team, and can’t be used for anything other than meeting legal obligations.","source":{"doc":"nyt-data-demands","title":"How we\\u2019re responding to The New York Times\\u2019 data demands in order to protect user privacy","url":"https://openai.com/index/response-to-nyt-data-demands/","capturedAt":"2026-11-08T21:37:59Z","sha256":"0c3f21b266298dc23839db2275090f4a60de89a1edc7e36551604ce9f10a6f9e"}}]},{"text":"Consumer deletion has a training carve-out: content already de-identified and disassociated from your account for model training is not covered by the 30-day removal promise.","cites":[{"quote":"Once you choose to delete Personal Data, we will remove it from our systems within 30 days unless we need to retain it for longer as described below, or it has already been de-identified and disassociated from your account when you allow us to use your Content to","source":{"doc":"privacy-policy","title":"Privacy policy","url":"https://openai.com/policies/privacy-policy/","capturedAt":"2026-11-08T22:28:17Z","sha256":"c1b6765d1f394f58341873b9abf449ef22a0be3c1fac6c18051ac40f403f814f"}}]},{"text":"Dots memory is a one-way door: you can't view, correct or delete individual dot memories, disconnecting a plugin doesn't remove what the dot already absorbed, and deleting the dot only 'starts' deletion, with no completion time given.","cites":[{"quote":"You currently cannot view, delete, or directly modify individual dot memories, including specific details that enter the dot’s context from plugins.","source":{"doc":"dots-privacy-faq","title":"Dots privacy faq","url":"https://help.openai.com/en/articles/20001529-dots-privacy-security-and-safety-faqs","capturedAt":"2026-11-08T22:19:40Z","sha256":"dcfb8795c612be594f5e9cacacc6708564c4f1035ef769be14b4505be39e312d"}},{"quote":"This stops new access through that connection. It does not delete information your dot has already built into its context.","source":{"doc":"dots-privacy-faq","title":"Dots privacy faq","url":"https://help.openai.com/en/articles/20001529-dots-privacy-security-and-safety-faqs","capturedAt":"2026-11-08T22:19:40Z","sha256":"dcfb8795c612be594f5e9cacacc6708564c4f1035ef769be14b4505be39e312d"}},{"quote":"Deleting your dot starts deletion of its own context.","source":{"doc":"dots-privacy-faq","title":"Dots privacy faq","url":"https://help.openai.com/en/articles/20001529-dots-privacy-security-and-safety-faqs","capturedAt":"2026-11-08T22:19:40Z","sha256":"dcfb8795c612be594f5e9cacacc6708564c4f1035ef769be14b4505be39e312d"}}]},{"text":"For personal ChatGPT accounts, the training opt-out has holes: rating a response with thumbs up or down makes the whole conversation eligible for training, and Daybreak Trusted Access sessions may be used even with the setting off.","cites":[{"quote":"If you choose to provide feedback, such as selecting thumbs up or thumbs down on a response, the entire conversation associated with that feedback may be used to train OpenAI models.","source":{"doc":"help-data-controls","title":"Help data controls","url":"https://help.openai.com/en/articles/7730893-data-controls-in-chatgpt","capturedAt":"2026-11-08T22:19:40Z","sha256":"ee55f4ae08df76f08eea98895c51e00677078a76d90e208673d4ab281445ff34"}},{"quote":"During Daybreak sessions on your personal account, we may use content from your interactions to improve our models even when “Improve the model for everyone” is off.","source":{"doc":"help-data-controls","title":"Help data controls","url":"https://help.openai.com/en/articles/7730893-data-controls-in-chatgpt","capturedAt":"2026-11-08T22:19:40Z","sha256":"ee55f4ae08df76f08eea98895c51e00677078a76d90e208673d4ab281445ff34"}}]},{"text":"The API's 30-day figure applies to abuse-monitoring logs. Stored application state can last longer: Responses data is kept 'at least' 30 days by default with no stated maximum, and Assistants objects not deleted are kept indefinitely.","cites":[{"quote":"In those cases, response data will be stored for at least 30 days.","source":{"doc":"api-your-data","title":"Data controls in the OpenAI platform","url":"https://developers.openai.com/api/docs/guides/your-data","capturedAt":"2026-11-08T22:28:03Z","sha256":"dae156f60ed4b36470dfb1322e3f9bb6cf589e071d6b6df8f4b341cc12e81e89"}},{"quote":"Objects that are not deleted via the API or dashboard are retained indefinitely.","source":{"doc":"api-your-data","title":"Data controls in the OpenAI platform","url":"https://developers.openai.com/api/docs/guides/your-data","capturedAt":"2026-11-08T22:28:03Z","sha256":"dae156f60ed4b36470dfb1322e3f9bb6cf589e071d6b6df8f4b341cc12e81e89"}}]},{"text":"The consumer Privacy Policy explicitly excludes content OpenAI processes for business customers such as the API; that data is governed by customer agreements.","cites":[{"quote":"This Privacy Policy does not apply to content that we process on behalf of customers of our business offerings, such as our API. Our use of that data is governed by our customer agreements covering access to and use of those offerings.","source":{"doc":"privacy-policy","title":"Privacy policy","url":"https://openai.com/policies/privacy-policy/","capturedAt":"2026-11-08T22:28:17Z","sha256":"c1b6765d1f394f58341873b9abf449ef22a0be3c1fac6c18051ac40f403f814f"}}]},{"text":"The privacy policy's clause on banned content gives no retention period (the sentence appears garbled: 'retain that data for to protect').","cites":[{"quote":"we may retain that data for to protect our services from fraud, abuse, or other violations of our policies","source":{"doc":"privacy-policy","title":"Privacy policy","url":"https://openai.com/policies/privacy-policy/","capturedAt":"2026-11-08T22:28:17Z","sha256":"c1b6765d1f394f58341873b9abf449ef22a0be3c1fac6c18051ac40f403f814f"}}]},{"text":"Dots are not available to users under 18.","cites":[{"quote":"No. Dots are not yet available to users under 18.","source":{"doc":"dots-privacy-faq","title":"Dots privacy faq","url":"https://help.openai.com/en/articles/20001529-dots-privacy-security-and-safety-faqs","capturedAt":"2026-11-08T22:19:40Z","sha256":"dcfb8795c612be594f5e9cacacc6708564c4f1035ef769be14b4505be39e312d"}}]}],"gaps":["Consumer ChatGPT: when OpenAI staff or contractors read personal chats. Likely answered by the 'authorized human access to content' help article (help.openai.com/articles/7039943), linked from the dots FAQ but not captured.","Dots: how long deletion of a dot's context takes to complete, whether ChatGPT's legal/safety retention exceptions apply, and how long Activity View action logs and signed-in browser sessions are kept. Likely in 'Getting started with your dot' (help article 20001530) or 'Managing dots in ChatGPT workspaces' (20001554).","Whether the historical April–September 2025 data held for the NYT case is still held after the October 22, 2025 update. Would need a newer OpenAI statement or the chat-and-file retention help article (8983778).","ChatGPT Go: the data controls page lists Free, Plus and Pro as training-on by default but doesn't mention Go. The 'How your data is used to improve model performance' article (5722486) may answer.","ChatGPT workspace and dots data residency regions and eligibility: only linked, not captured ('Data residency and inference residency for ChatGPT', help article 9903489).","How long ChatGPT stores data pulled from connected apps, and what happens to it on disconnect beyond stopping future access. Likely in 'Connectors in ChatGPT' (help article 11487775).","ChatGPT Business/Enterprise: what retention applies when admins set nothing, and how long classifier metadata is kept. The DPA (openai.com/policies/data-processing-addendum) or the Compliance API docs may answer.","API: the maximum retention for Responses application state ('at least 30 days'), and how to withdraw a training opt-in. Likely in the API data-controls FAQ or the feedback-sharing article (9883556).","Named sub-processors and the DPA terms were not captured (openai.com/policies/sub-processor-list, data-processing-addendum), nor the Service Terms or the EEA/UK privacy policy and terms.","Three help pages give only relative dates ('Updated: 3 days ago', '8 days ago') as captured on 2026-11-08, so exact revision dates are unknown."],"documents":[{"doc":"api-your-data","title":"Data controls in the OpenAI platform","url":"https://developers.openai.com/api/docs/guides/your-data","capturedAt":"2026-11-08T22:28:03Z","sha256":"dae156f60ed4b36470dfb1322e3f9bb6cf589e071d6b6df8f4b341cc12e81e89"},{"doc":"dots-privacy-faq","title":"Dots privacy faq","url":"https://help.openai.com/en/articles/20001529-dots-privacy-security-and-safety-faqs","capturedAt":"2026-11-08T22:19:40Z","sha256":"dcfb8795c612be594f5e9cacacc6708564c4f1035ef769be14b4505be39e312d"},{"doc":"enterprise-privacy","title":"Enterprise privacy","url":"https://openai.com/enterprise-privacy/","capturedAt":"2026-11-08T22:19:40Z","sha256":"03ba1b3b3aef729cb764ff065dd84c1db4e135327fb4339316ab2d0b5044c6e4"},{"doc":"help-data-controls","title":"Help data controls","url":"https://help.openai.com/en/articles/7730893-data-controls-in-chatgpt","capturedAt":"2026-11-08T22:19:40Z","sha256":"ee55f4ae08df76f08eea98895c51e00677078a76d90e208673d4ab281445ff34"},{"doc":"help-memory-faq","title":"Help memory faq","url":"https://help.openai.com/en/articles/8590148-memory-in-chatgpt","capturedAt":"2026-11-08T22:19:40Z","sha256":"51ec696ccba593906a806e50716b6515d95ffff5e75c6e034dbbd4ab6fe5cd63"},{"doc":"nyt-data-demands","title":"How we\\u2019re responding to The New York Times\\u2019 data demands in order to protect user privacy","url":"https://openai.com/index/response-to-nyt-data-demands/","capturedAt":"2026-11-08T21:37:59Z","sha256":"0c3f21b266298dc23839db2275090f4a60de89a1edc7e36551604ce9f10a6f9e"},{"doc":"privacy-policy","title":"Privacy policy","url":"https://openai.com/policies/privacy-policy/","capturedAt":"2026-11-08T22:28:17Z","sha256":"c1b6765d1f394f58341873b9abf449ef22a0be3c1fac6c18051ac40f403f814f"},{"doc":"services-agreement","title":"Services agreement","url":"https://openai.com/policies/services-agreement/","capturedAt":"2026-11-08T22:19:40Z","sha256":"7be322b3ba0e171882e1ddd8434b383a0b51818186255237555233a79532da03"},{"doc":"terms-of-use","title":"Terms of use","url":"https://openai.com/policies/terms-of-use/","capturedAt":"2026-11-08T22:19:41Z","sha256":"e2b639780e1ed1e57354f9fb6c6229d1ca5a47194475f1657a07bb54268e4359"}],"url":"https://gjalla.io/data-policies/openai/"},{"id":"openrouter","provider":"openrouter","name":"OpenRouter","category":"router","checkedOn":"2026-11-08","products":[{"id":"api","name":"OpenRouter API and chat (self-serve accounts)","surface":"api","facts":{"default_retention":{"summary":"OpenRouter stores no prompts or responses by default, only request metadata (retention period not stated). Opted-in Input & Output Logging keeps content at least 3 months, possibly longer.","status":"stated","cites":[{"quote":"OpenRouter does not store your prompts or responses, *unless* you opt in to one or both of the following, or content is flagged as potential CSAM:","source":{"doc":"docs-data-collection","title":"Data Collection","url":"https://openrouter.ai/docs/guides/privacy/data-collection","capturedAt":"2026-11-08T21:39:42Z","sha256":"d0729cf83c414078592504daef0efe82c9e81b7a937ccb0bd1648c1b046ed3f7"}},{"quote":"OpenRouter does store metadata (e.g. number of prompt and completion tokens, latency, etc) for each request.","source":{"doc":"docs-data-collection","title":"Data Collection","url":"https://openrouter.ai/docs/guides/privacy/data-collection","capturedAt":"2026-11-08T21:39:42Z","sha256":"d0729cf83c414078592504daef0efe82c9e81b7a937ccb0bd1648c1b046ed3f7"}},{"quote":"**Retention**: Data is retained for a minimum of 3 months, and may be retained beyond 3 months at OpenRouter’s discretion unless you request deletion.","source":{"doc":"docs-input-output-logging","title":"Input & Output Logging","url":"https://openrouter.ai/docs/guides/features/input-output-logging","capturedAt":"2026-11-08T21:39:36Z","sha256":"ce4e1f62c759d18fad8b09690bf01222d23a81f5073dec09113d532887724959"}},{"quote":"Uploaded Files are retained by us until you delete them or close your account, subject to the exceptions described below.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://openrouter.ai/privacy","capturedAt":"2026-11-08T22:28:10Z","sha256":"310e69e72c14b849378d7d256ebab9a8a90e6e295a452319bf486ca4f30d3ac0"}}]},"deletion_window":{"summary":"You request account or log deletion by email. No timeframe is given for individual users. The DPA, which applies to organizational/commercial users, says 30 business days, backups included.","status":"stated","cites":[{"quote":"When your account is deleted, all associated personal data is deleted, unless we are required to maintain it for regulatory and compliance purposes or for a legal or business necessity.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://openrouter.ai/privacy","capturedAt":"2026-11-08T22:28:10Z","sha256":"310e69e72c14b849378d7d256ebab9a8a90e6e295a452319bf486ca4f30d3ac0"}},{"quote":"Account owners can request deletion of their stored data at any time by contacting [support@openrouter.ai](mailto:support@openrouter.ai).","source":{"doc":"docs-input-output-logging","title":"Input & Output Logging","url":"https://openrouter.ai/docs/guides/features/input-output-logging","capturedAt":"2026-11-08T21:39:36Z","sha256":"ce4e1f62c759d18fad8b09690bf01222d23a81f5073dec09113d532887724959"}},{"quote":"If you are part of and represent an organization in entering into these Terms or use the Service for commercial, for-profit purposes, please read the OpenRouter [Data Processing Agreement](https://openrouter.ai/data-processing-agreement) (\"**DPA**\") relating to our processing of your Personal Data (as defined in the DPA).","source":{"doc":"terms","title":"Terms of Service","url":"https://openrouter.ai/terms","capturedAt":"2026-11-08T21:38:18Z","sha256":"aaa888c7f7173f40f94402d033784a964a78fbc10c8b3c141506e4332b9eca50"}},{"quote":"OpenRouter deletes Customer Data from the datastores and backups within 30 business days of request and supplies notification of completion via email.","source":{"doc":"data-processing-agreement","title":"Data Processing Agreement","url":"https://openrouter.ai/data-processing-agreement","capturedAt":"2026-11-08T22:28:13Z","sha256":"62a312be4c0d1c271d7eb43493fed1cefb34dd05584fb82b0d164a18b96fe983"}}]},"retention_exceptions":{"summary":"Exceptions: CSAM-flagged content, Safety Retention endpoints (abuse-only retention by OpenRouter or provider), temporary batch storage, legal preservation. OpenRouter states no durations; Google Vertex: up to 90 days.","status":"stated","cites":[{"quote":"Content flagged as potential CSAM may be retained for human review, reporting, and preservation where required by law.","source":{"doc":"docs-data-collection","title":"Data Collection","url":"https://openrouter.ai/docs/guides/privacy/data-collection","capturedAt":"2026-11-08T21:39:42Z","sha256":"d0729cf83c414078592504daef0efe82c9e81b7a937ccb0bd1648c1b046ed3f7"}},{"quote":"Requests to Safety Retention endpoints are the exception: OpenRouter or the provider may retain prompts and responses from any request, only to prevent abuse, and not for training.","source":{"doc":"docs-data-collection","title":"Data Collection","url":"https://openrouter.ai/docs/guides/privacy/data-collection","capturedAt":"2026-11-08T21:39:42Z","sha256":"d0729cf83c414078592504daef0efe82c9e81b7a937ccb0bd1648c1b046ed3f7"}},{"quote":"Certain features of the Service, such as batch or other large-volume request processing, require OpenRouter to temporarily store your User Content in order to process, route, and fulfill your request","source":{"doc":"terms","title":"Terms of Service","url":"https://openrouter.ai/terms","capturedAt":"2026-11-08T21:38:18Z","sha256":"aaa888c7f7173f40f94402d033784a964a78fbc10c8b3c141506e4332b9eca50"}},{"quote":"With Safety Retention, Google doesn’t retain prompts by default, but it may retain prompts that its safety classifiers flag, for up to 90 days, for abuse monitoring.","source":{"doc":"docs-zdr","title":"Zero Data Retention - How OpenRouter gives you control over your data","url":"https://openrouter.ai/docs/guides/features/zdr","capturedAt":"2026-11-08T21:38:19Z","sha256":"a0a6dcc4f3c1075d888fb6855f693e75050882b6f759941206e9f34f2370be83"}},{"quote":"We will preserve and disclose any and all information to law enforcement agencies or others if required to do so by law","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://openrouter.ai/privacy","capturedAt":"2026-11-08T22:28:10Z","sha256":"310e69e72c14b849378d7d256ebab9a8a90e6e295a452319bf486ca4f30d3ac0"}}]},"zdr":{"summary":"Any account can enforce ZDR globally, per model group, per guardrail, or per request. It limits routing to about 1,100 listed endpoints; self-serve default also allows Safety Retention endpoints.","status":"stated","cites":[{"quote":"OpenRouter has [privacy settings](https://openrouter.ai/settings/privacy) that, when enabled, only allow you to route to endpoints that have a Zero Data Retention policy. You can enforce ZDR globally, per model group, per guardrail, or per request.","source":{"doc":"docs-zdr","title":"Zero Data Retention - How OpenRouter gives you control over your data","url":"https://openrouter.ai/docs/guides/features/zdr","capturedAt":"2026-11-08T21:38:19Z","sha256":"a0a6dcc4f3c1075d888fb6855f693e75050882b6f759941206e9f34f2370be83"}},{"quote":"If you haven’t chosen, self-serve accounts allow Safety Retention and enterprise accounts use ZDR only.","source":{"doc":"docs-zdr","title":"Zero Data Retention - How OpenRouter gives you control over your data","url":"https://openrouter.ai/docs/guides/features/zdr","capturedAt":"2026-11-08T21:38:19Z","sha256":"a0a6dcc4f3c1075d888fb6855f693e75050882b6f759941206e9f34f2370be83"}},{"quote":"The following endpoints are eligible when ZDR is enforced. Note that this list is also available programmatically via [https://openrouter.ai/api/v1/endpoints/zdr](https://openrouter.ai/api/v1/endpoints/zdr).","source":{"doc":"docs-zdr","title":"Zero Data Retention - How OpenRouter gives you control over your data","url":"https://openrouter.ai/docs/guides/features/zdr","capturedAt":"2026-11-08T21:38:19Z","sha256":"a0a6dcc4f3c1075d888fb6855f693e75050882b6f759941206e9f34f2370be83"}},{"quote":"OpenRouter has taken the stance that in-memory caching of prompts is *not* considered “retaining” data, and we therefore allow endpoints/models with implicit caching to be hit when a ZDR routing policy is in effect.","source":{"doc":"docs-zdr","title":"Zero Data Retention - How OpenRouter gives you control over your data","url":"https://openrouter.ai/docs/guides/features/zdr","capturedAt":"2026-11-08T21:38:19Z","sha256":"a0a6dcc4f3c1075d888fb6855f693e75050882b6f759941206e9f34f2370be83"}},{"quote":"ZDR enforcement only applies to provider routing for inference requests. It does not apply to [plugins](/docs/guides/features/plugins) and tools you choose to enable","source":{"doc":"docs-zdr","title":"Zero Data Retention - How OpenRouter gives you control over your data","url":"https://openrouter.ai/docs/guides/features/zdr","capturedAt":"2026-11-08T21:38:19Z","sha256":"a0a6dcc4f3c1075d888fb6855f693e75050882b6f759941206e9f34f2370be83"}}]},"training_default":{"summary":"OpenRouter does not train on your inputs or outputs. Letting it use them to improve the product is opt-in, for a 1% discount. Upstream providers may train under their policies.","status":"stated","cites":[{"quote":"**OpenRouter does not use your Inputs or Outputs for model training.**","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://openrouter.ai/privacy","capturedAt":"2026-11-08T22:28:10Z","sha256":"310e69e72c14b849378d7d256ebab9a8a90e6e295a452319bf486ca4f30d3ac0"}},{"quote":"**OpenRouter Use of Inputs/Outputs:** Allow OpenRouter to use your prompt and completion data to improve the product. In exchange, you receive a 1% discount on all model usage. Off by default.","source":{"doc":"docs-data-collection","title":"Data Collection","url":"https://openrouter.ai/docs/guides/privacy/data-collection","capturedAt":"2026-11-08T21:39:42Z","sha256":"d0729cf83c414078592504daef0efe82c9e81b7a937ccb0bd1648c1b046ed3f7"}},{"quote":"**Some Model Providers may use your Inputs and Outputs for model training or improvement.**","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://openrouter.ai/privacy","capturedAt":"2026-11-08T22:28:10Z","sha256":"310e69e72c14b849378d7d256ebab9a8a90e6e295a452319bf486ca4f30d3ac0"}},{"quote":"Provide, analyze, and maintain our Service, and where applicable, for Model training and improvement by Model Providers. The legal basis is to perform a contract with you.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://openrouter.ai/privacy","capturedAt":"2026-11-08T22:28:10Z","sha256":"310e69e72c14b849378d7d256ebab9a8a90e6e295a452319bf486ca4f30d3ac0"}}]},"training_opt_out":{"summary":"Account settings (paid and free models separately) can block routing to training providers; default not stated. This relies on provider-stated policies; OpenRouter can't control training after data reaches a provider.","status":"stated","cites":[{"quote":"On your account settings page, you can set whether you would like to allow routing to providers that may train on your data (according to their own policies). There are separate settings for paid and free models.","source":{"doc":"docs-privacy-logging","title":"Provider Logging","url":"https://openrouter.ai/docs/guides/privacy/provider-logging","capturedAt":"2026-11-08T21:38:19Z","sha256":"6582d63c44c3f2bfd4350cf9f265e9b9d7aab2946794cc9c239edba8c07434a9"}},{"quote":"If you opt out of training in your account settings, OpenRouter will not route to providers that train. This setting has no bearing on OpenRouter’s own policies and what we do with your prompts.","source":{"doc":"docs-privacy-logging","title":"Provider Logging","url":"https://openrouter.ai/docs/guides/privacy/provider-logging","capturedAt":"2026-11-08T21:38:19Z","sha256":"6582d63c44c3f2bfd4350cf9f265e9b9d7aab2946794cc9c239edba8c07434a9"}},{"quote":"OpenRouter cannot control Model Provider-side training once user data is transmitted to a training-permitted Model Provider.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://openrouter.ai/privacy","capturedAt":"2026-11-08T22:28:10Z","sha256":"310e69e72c14b849378d7d256ebab9a8a90e6e295a452319bf486ca4f30d3ac0"}},{"quote":"If OpenRouter is not able to establish or ascertain a clear policy for a provider or endpoint, we take a conservative stance and assume that the endpoint both retains and trains on data and mark it as such.","source":{"doc":"docs-zdr","title":"Zero Data Retention - How OpenRouter gives you control over your data","url":"https://openrouter.ai/docs/guides/features/zdr","capturedAt":"2026-11-08T21:38:19Z","sha256":"a0a6dcc4f3c1075d888fb6855f693e75050882b6f759941206e9f34f2370be83"}},{"quote":"OpenRouter strives to accurately represent the status of prompt logging and training for each Model on our Site. However, OpenRouter is not liable for errors or misrepresentations made in any Model Terms.","source":{"doc":"terms","title":"Terms of Service","url":"https://openrouter.ai/terms","capturedAt":"2026-11-08T21:38:18Z","sha256":"aaa888c7f7173f40f94402d033784a964a78fbc10c8b3c141506e4332b9eca50"}}]},"human_review":{"summary":"People review CSAM-flagged content. Staff access uploaded files only for violations, legal process, or support. OpenRouter says it doesn't access opted-in logs, though it may re-identify stored inputs to debug.","status":"stated","cites":[{"quote":"Content flagged as potential CSAM may be retained for human review, reporting, and preservation where required by law.","source":{"doc":"docs-data-collection","title":"Data Collection","url":"https://openrouter.ai/docs/guides/privacy/data-collection","capturedAt":"2026-11-08T21:39:42Z","sha256":"d0729cf83c414078592504daef0efe82c9e81b7a937ccb0bd1648c1b046ed3f7"}},{"quote":"our personnel do not access the content of Uploaded Files except as necessary to investigate a suspected violation of our Terms of Service, respond to legal process, or provide support at your request.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://openrouter.ai/privacy","capturedAt":"2026-11-08T22:28:10Z","sha256":"310e69e72c14b849378d7d256ebab9a8a90e6e295a452319bf486ca4f30d3ac0"}},{"quote":"**Privacy**: OpenRouter does not access or use your prompt and response data logged with this feature for model training, analytics, or any other purpose.","source":{"doc":"docs-input-output-logging","title":"Input & Output Logging","url":"https://openrouter.ai/docs/guides/features/input-output-logging","capturedAt":"2026-11-08T21:39:36Z","sha256":"ce4e1f62c759d18fad8b09690bf01222d23a81f5073dec09113d532887724959"}},{"quote":"However, for purposes of de-bugging, we may re-identify your user ID with any stored Inputs.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://openrouter.ai/privacy","capturedAt":"2026-11-08T22:28:10Z","sha256":"310e69e72c14b849378d7d256ebab9a8a90e6e295a452319bf486ca4f30d3ac0"}}]},"memory":{"summary":"The captured policies describe no persistent memory or user-profile feature, and they don't cover chat-history storage in the chat interface.","status":"not_stated","cites":[]},"connector_data":{"summary":"The captured policies don't describe connecting email, calendar, or drive accounts.","status":"not_stated","cites":[]},"agent_actions":{"summary":"No agent product is described. Server tools and plugins (web search, sandboxes) follow the third-party services' policies and are outside ZDR. Storage of BYOK provider keys isn't described.","status":"stated","cites":[{"quote":"These policies cover model providers. Server tools and plugins that call third-party services, such as search engines and sandboxes, follow those services’ policies.","source":{"doc":"docs-privacy-logging","title":"Provider Logging","url":"https://openrouter.ai/docs/guides/privacy/provider-logging","capturedAt":"2026-11-08T21:38:19Z","sha256":"6582d63c44c3f2bfd4350cf9f265e9b9d7aab2946794cc9c239edba8c07434a9"}},{"quote":"These may be operated by third-party services with their own data retention policies.","source":{"doc":"docs-zdr","title":"Zero Data Retention - How OpenRouter gives you control over your data","url":"https://openrouter.ai/docs/guides/features/zdr","capturedAt":"2026-11-08T21:38:19Z","sha256":"a0a6dcc4f3c1075d888fb6855f693e75050882b6f759941206e9f34f2370be83"}}]},"input_ownership":{"summary":"You keep copyright and other rights in your inputs.","status":"stated","cites":[{"quote":"You retain copyright and any other proprietary rights that you may hold in the Input.","source":{"doc":"terms","title":"Terms of Service","url":"https://openrouter.ai/terms","capturedAt":"2026-11-08T21:38:18Z","sha256":"aaa888c7f7173f40f94402d033784a964a78fbc10c8b3c141506e4332b9eca50"}}]},"output_ownership":{"summary":"OpenRouter doesn't assign output ownership. Each model provider's own terms decide it.","status":"stated","cites":[{"quote":"Your ownership rights in the Output are set forth in the Model Terms for each Model you use.","source":{"doc":"terms","title":"Terms of Service","url":"https://openrouter.ai/terms","capturedAt":"2026-11-08T21:38:18Z","sha256":"aaa888c7f7173f40f94402d033784a964a78fbc10c8b3c141506e4332b9eca50"}}]},"license_to_provider":{"summary":"Base license covers running the Service. Opting into prompt logging adds a perpetual, irrevocable license, including selling anonymized content. Everyone grants a perpetual anonymized-inputs license for metrics. Section 6 survives.","status":"stated","cites":[{"quote":"you hereby grant to OpenRouter a non-exclusive, transferable, worldwide, royalty-free license, with the right to sublicense, to use, host, cache, store, reproduce, transmit, publicly display, publicly perform, publish, distribute and modify (for formatting purposes only), your User Content solely in connection with operating and providing the Service","source":{"doc":"terms","title":"Terms of Service","url":"https://openrouter.ai/terms","capturedAt":"2026-11-08T21:38:18Z","sha256":"aaa888c7f7173f40f94402d033784a964a78fbc10c8b3c141506e4332b9eca50"}},{"quote":"If you have opted into prompt logging in your account settings, chat logging is also automatically enabled, and you grant OpenRouter a worldwide, perpetual, irrevocable, non-exclusive, royalty-free, fully paid right and license (with the right to sublicense)","source":{"doc":"terms","title":"Terms of Service","url":"https://openrouter.ai/terms","capturedAt":"2026-11-08T21:38:18Z","sha256":"aaa888c7f7173f40f94402d033784a964a78fbc10c8b3c141506e4332b9eca50"}},{"quote":"(3) license or sell your User Content in anonymized form, where your User Content is not associated with you or your account.","source":{"doc":"terms","title":"Terms of Service","url":"https://openrouter.ai/terms","capturedAt":"2026-11-08T21:38:18Z","sha256":"aaa888c7f7173f40f94402d033784a964a78fbc10c8b3c141506e4332b9eca50"}},{"quote":"In using the Service, you grant to OpenRouter a worldwide, perpetual, irrevocable, non-exclusive, royalty-free, fully paid right and license (with the right to sublicense) to use, host, reproduce, and prepare derivative works of, your Inputs in anonymized form, solely for tracking and sharing user metrics on the Site","source":{"doc":"terms","title":"Terms of Service","url":"https://openrouter.ai/terms","capturedAt":"2026-11-08T21:38:18Z","sha256":"aaa888c7f7173f40f94402d033784a964a78fbc10c8b3c141506e4332b9eca50"}},{"quote":"Upon termination of these Terms, Sections 2, 4, 6, and 10 through 21, along with the Privacy Policy, Data Processing Agreement and any other accompanying agreements, will survive.","source":{"doc":"terms","title":"Terms of Service","url":"https://openrouter.ai/terms","capturedAt":"2026-11-08T21:38:18Z","sha256":"aaa888c7f7173f40f94402d033784a964a78fbc10c8b3c141506e4332b9eca50"}}]},"third_party_sharing":{"summary":"Prompts go to the chosen provider, which may keep or train on them. OpenRouter says it never sold prompt data. Uses targeted ads and analytics; shares de-identified inputs with consent.","status":"stated","cites":[{"quote":"Model Providers process your Inputs to generate Outputs and may, depending on their own terms and data practices, retain and use your Inputs and Outputs for their own purposes, such as model training and improvement.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://openrouter.ai/privacy","capturedAt":"2026-11-08T22:28:10Z","sha256":"310e69e72c14b849378d7d256ebab9a8a90e6e295a452319bf486ca4f30d3ac0"}},{"quote":"OpenRouter has never sold or licensed prompt data.","source":{"doc":"docs-data-collection","title":"Data Collection","url":"https://openrouter.ai/docs/guides/privacy/data-collection","capturedAt":"2026-11-08T21:39:42Z","sha256":"d0729cf83c414078592504daef0efe82c9e81b7a937ccb0bd1648c1b046ed3f7"}},{"quote":"We do not \"sell\" your personal data as that term is defined by applicable laws and regulations.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://openrouter.ai/privacy","capturedAt":"2026-11-08T22:28:10Z","sha256":"310e69e72c14b849378d7d256ebab9a8a90e6e295a452319bf486ca4f30d3ac0"}},{"quote":"With your consent, we may disclose Inputs in aggregated, de-identified form, where those Inputs are disassociated from your user ID, in connection with a contractual relationship with corporate partners.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://openrouter.ai/privacy","capturedAt":"2026-11-08T22:28:10Z","sha256":"310e69e72c14b849378d7d256ebab9a8a90e6e295a452319bf486ca4f30d3ac0"}},{"quote":"Delivering interest-based ads (also known as personalized ads or targeted ads).","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://openrouter.ai/privacy","capturedAt":"2026-11-08T22:28:10Z","sha256":"310e69e72c14b849378d7d256ebab9a8a90e6e295a452319bf486ca4f30d3ac0"}},{"quote":"In collecting clickstream data, we use PostHog, a web and products analytics platform that may also utilize session replay features.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://openrouter.ai/privacy","capturedAt":"2026-11-08T22:28:10Z","sha256":"310e69e72c14b849378d7d256ebab9a8a90e6e295a452319bf486ca4f30d3ac0"}},{"quote":"Vendors, service providers, and affiliates to process in accordance with our instructions, including to Model Providers","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://openrouter.ai/privacy","capturedAt":"2026-11-08T22:28:10Z","sha256":"310e69e72c14b849378d7d256ebab9a8a90e6e295a452319bf486ca4f30d3ac0"}}]},"data_location":{"summary":"Data may go to US servers or elsewhere outside the EEA/UK. Opted-in logs sit in Google Cloud Storage. EU/US in-region routing requires a Business or Enterprise plan.","status":"stated","cites":[{"quote":"your personal data may be transferred to our servers in the US, or to other countries outside the European Economic Area","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://openrouter.ai/privacy","capturedAt":"2026-11-08T22:28:10Z","sha256":"310e69e72c14b849378d7d256ebab9a8a90e6e295a452319bf486ca4f30d3ac0"}},{"quote":"**Storage**: Prompt and response data is stored in an isolated Google Cloud Storage project with separate access controls.","source":{"doc":"docs-input-output-logging","title":"Input & Output Logging","url":"https://openrouter.ai/docs/guides/features/input-output-logging","capturedAt":"2026-11-08T21:39:36Z","sha256":"ce4e1f62c759d18fad8b09690bf01222d23a81f5073dec09113d532887724959"}},{"quote":"On the Business and Enterprise plans, OpenRouter supports in-region routing in the EU and US.","source":{"doc":"docs-privacy-logging","title":"Provider Logging","url":"https://openrouter.ai/docs/guides/privacy/provider-logging","capturedAt":"2026-11-08T21:38:19Z","sha256":"6582d63c44c3f2bfd4350cf9f265e9b9d7aab2946794cc9c239edba8c07434a9"}}]},"enterprise_controls":{"summary":"Organization admins set logging, ZDR, and training settings for members, apply guardrails per key or member, and lock which keys are logged. They see all logged content.","status":"stated","cites":[{"quote":"Authorized Users may only use the Service as configured by the Admin User, with such configurations which may include, without limitation, enabling prompt logging, chat logging, zero data retention, model training, and other settings.","source":{"doc":"terms","title":"Terms of Service","url":"https://openrouter.ai/terms","capturedAt":"2026-11-08T21:38:18Z","sha256":"aaa888c7f7173f40f94402d033784a964a78fbc10c8b3c141506e4332b9eca50"}},{"quote":"This lets you apply different ZDR policies to different API keys or organization members.","source":{"doc":"docs-zdr","title":"Zero Data Retention - How OpenRouter gives you control over your data","url":"https://openrouter.ai/docs/guides/features/zdr","capturedAt":"2026-11-08T21:38:19Z","sha256":"a0a6dcc4f3c1075d888fb6855f693e75050882b6f759941206e9f34f2370be83"}},{"quote":"For organizations, admins can lock these filters so members cannot modify them.","source":{"doc":"docs-input-output-logging","title":"Input & Output Logging","url":"https://openrouter.ai/docs/guides/features/input-output-logging","capturedAt":"2026-11-08T21:39:36Z","sha256":"ce4e1f62c759d18fad8b09690bf01222d23a81f5073dec09113d532887724959"}},{"quote":"For organization accounts, org admins can view stored prompt and response content for every request in the organization.","source":{"doc":"docs-input-output-logging","title":"Input & Output Logging","url":"https://openrouter.ai/docs/guides/features/input-output-logging","capturedAt":"2026-11-08T21:39:36Z","sha256":"ce4e1f62c759d18fad8b09690bf01222d23a81f5073dec09113d532887724959"}}]}}},{"id":"business","name":"OpenRouter Business / Enterprise (organizations under the DPA)","surface":"enterprise","facts":{"default_retention":{"summary":"Under the DPA, inputs and outputs are deleted promptly after the output is generated, unless the customer opted into prompt/chat logging. Other personal data is kept as long as necessary.","status":"stated","cites":[{"quote":"Except where required by law or as necessary to address malicious use of the Service, and only if Customer has not opted into prompt and/or chat logging, OpenRouter will delete Inputs and Outputs promptly following generation of the relevant Output.","source":{"doc":"data-processing-agreement","title":"Data Processing Agreement","url":"https://openrouter.ai/data-processing-agreement","capturedAt":"2026-11-08T22:28:13Z","sha256":"62a312be4c0d1c271d7eb43493fed1cefb34dd05584fb82b0d164a18b96fe983"}},{"quote":"Prompts are not logged by default, and OpenRouter retains content only if you opt in to logging or it is flagged for CSAM review.","source":{"doc":"enterprise","title":"OpenRouter AI Gateway for Enterprise","url":"https://openrouter.ai/enterprise","capturedAt":"2026-11-08T21:39:35Z","sha256":"1e293823a7ddce3055ad6785b94c4af898739d544e773858974d6cbafeee3dd0"}},{"quote":"Personal Data will be retained for as long as necessary taking into account the purpose of the Processing, and in compliance with applicable laws, including laws on the statute of limitations and Data Protection Laws.","source":{"doc":"data-processing-agreement","title":"Data Processing Agreement","url":"https://openrouter.ai/data-processing-agreement","capturedAt":"2026-11-08T22:28:13Z","sha256":"62a312be4c0d1c271d7eb43493fed1cefb34dd05584fb82b0d164a18b96fe983"}}]},"deletion_window":{"summary":"Ask for deletion by email. OpenRouter deletes customer data from datastores and backups within 30 business days and confirms by email.","status":"stated","cites":[{"quote":"Customer may request deletion of Customer Data at any time by emailing [support@openrouter.ai](mailto:support@openrouter.ai). OpenRouter deletes Customer Data from the datastores and backups within 30 business days of request and supplies notification of completion via email.","source":{"doc":"data-processing-agreement","title":"Data Processing Agreement","url":"https://openrouter.ai/data-processing-agreement","capturedAt":"2026-11-08T22:28:13Z","sha256":"62a312be4c0d1c271d7eb43493fed1cefb34dd05584fb82b0d164a18b96fe983"}}]},"retention_exceptions":{"summary":"Exceptions: legal requirements, malicious-use handling, transient buffering/caching, CSAM-flagged content, and metadata outside 'API Payload' (account data, security logs, abuse-monitoring metadata). No durations are stated.","status":"stated","cites":[{"quote":"except for transient processing in memory, short-lived buffering or caching strictly necessary to transmit, secure, or complete the request, and records required by law.","source":{"doc":"data-processing-agreement","title":"Data Processing Agreement","url":"https://openrouter.ai/data-processing-agreement","capturedAt":"2026-11-08T22:28:13Z","sha256":"62a312be4c0d1c271d7eb43493fed1cefb34dd05584fb82b0d164a18b96fe983"}},{"quote":"OpenRouter may apply automated risk classification to Inputs and Outputs prior to deletion solely to detect violations of this Agreement; such classification does not result in retention of API payload content beyond the deletion timeline.","source":{"doc":"data-processing-agreement","title":"Data Processing Agreement","url":"https://openrouter.ai/data-processing-agreement","capturedAt":"2026-11-08T22:28:13Z","sha256":"62a312be4c0d1c271d7eb43493fed1cefb34dd05584fb82b0d164a18b96fe983"}},{"quote":"but excluding account data, billing records, authentication data, security logs, abuse monitoring metadata, and other operational records that do not contain the content of the API request or response.","source":{"doc":"data-processing-agreement","title":"Data Processing Agreement","url":"https://openrouter.ai/data-processing-agreement","capturedAt":"2026-11-08T22:28:13Z","sha256":"62a312be4c0d1c271d7eb43493fed1cefb34dd05584fb82b0d164a18b96fe983"}},{"quote":"OpenRouter will screen all inference requests, including ZDR traffic, for child sexual abuse material (CSAM) in flight. Content flagged as potential CSAM may be retained for human review, reporting, and preservation where required by law.","source":{"doc":"docs-zdr","title":"Zero Data Retention - How OpenRouter gives you control over your data","url":"https://openrouter.ai/docs/guides/features/zdr","capturedAt":"2026-11-08T21:38:19Z","sha256":"a0a6dcc4f3c1075d888fb6855f693e75050882b6f759941206e9f34f2370be83"}}]},"zdr":{"summary":"The DPA defines ZDR and commits to ZDR-only routing when enabled. Enterprise accounts default to ZDR only, so Safety Retention endpoints are excluded. Provider compliance isn't guaranteed.","status":"stated","cites":[{"quote":"\"**Zero Data Retention**\" or \"**ZDR**\" means OpenRouter does not persistently store API Payloads after completion of the applicable API request and response","source":{"doc":"data-processing-agreement","title":"Data Processing Agreement","url":"https://openrouter.ai/data-processing-agreement","capturedAt":"2026-11-08T22:28:13Z","sha256":"62a312be4c0d1c271d7eb43493fed1cefb34dd05584fb82b0d164a18b96fe983"}},{"quote":"When ZDR-only routing is enabled by Customer, OpenRouter will not route Customer API requests to AI Model Providers that are not designated as ZDR-eligible in OpenRouter's provider registry.","source":{"doc":"data-processing-agreement","title":"Data Processing Agreement","url":"https://openrouter.ai/data-processing-agreement","capturedAt":"2026-11-08T22:28:13Z","sha256":"62a312be4c0d1c271d7eb43493fed1cefb34dd05584fb82b0d164a18b96fe983"}},{"quote":"it does not constitute OpenRouter's guarantee of AI Model Provider compliance.","source":{"doc":"data-processing-agreement","title":"Data Processing Agreement","url":"https://openrouter.ai/data-processing-agreement","capturedAt":"2026-11-08T22:28:13Z","sha256":"62a312be4c0d1c271d7eb43493fed1cefb34dd05584fb82b0d164a18b96fe983"}},{"quote":"If you haven’t chosen, self-serve accounts allow Safety Retention and enterprise accounts use ZDR only.","source":{"doc":"docs-zdr","title":"Zero Data Retention - How OpenRouter gives you control over your data","url":"https://openrouter.ai/docs/guides/features/zdr","capturedAt":"2026-11-08T21:38:19Z","sha256":"a0a6dcc4f3c1075d888fb6855f693e75050882b6f759941206e9f34f2370be83"}}]},"training_default":{"summary":"OpenRouter doesn't train on inputs or outputs. With a DPA, provider training limits come from the DPA and OpenRouter's agreements with providers. EU API payloads aren't trained on unless instructed.","status":"stated","cites":[{"quote":"If you have a Data Processing Agreement with us, the terms of that agreement and our separate agreements with Model Providers govern how your data is handled by each Model Provider, including any restrictions on model training.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://openrouter.ai/privacy","capturedAt":"2026-11-08T22:28:10Z","sha256":"310e69e72c14b849378d7d256ebab9a8a90e6e295a452319bf486ca4f30d3ac0"}},{"quote":"**OpenRouter does not use your Inputs or Outputs for model training.**","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://openrouter.ai/privacy","capturedAt":"2026-11-08T22:28:10Z","sha256":"310e69e72c14b849378d7d256ebab9a8a90e6e295a452319bf486ca4f30d3ac0"}},{"quote":"(ii) not use API Payloads submitted through the EU API to train, fine-tune, improve, or develop models or services except as expressly instructed by Customer in writing","source":{"doc":"data-processing-agreement","title":"Data Processing Agreement","url":"https://openrouter.ai/data-processing-agreement","capturedAt":"2026-11-08T22:28:13Z","sha256":"62a312be4c0d1c271d7eb43493fed1cefb34dd05584fb82b0d164a18b96fe983"}}]},"training_opt_out":{"summary":"Uses the same account settings as self-serve: exclude providers that train, or particular model providers. Training policies are as providers represent them; OpenRouter doesn't guarantee compliance.","status":"stated","cites":[{"quote":"Customer may configure in Customer's account settings to exclude Processing by certain AI Model Providers.","source":{"doc":"data-processing-agreement","title":"Data Processing Agreement","url":"https://openrouter.ai/data-processing-agreement","capturedAt":"2026-11-08T22:28:13Z","sha256":"62a312be4c0d1c271d7eb43493fed1cefb34dd05584fb82b0d164a18b96fe983"}},{"quote":"Inclusion on such list reflects the AI Model Provider's published or represented policy of \"no retention and no training\" on zero-data-retention API payloads","source":{"doc":"data-processing-agreement","title":"Data Processing Agreement","url":"https://openrouter.ai/data-processing-agreement","capturedAt":"2026-11-08T22:28:13Z","sha256":"62a312be4c0d1c271d7eb43493fed1cefb34dd05584fb82b0d164a18b96fe983"}},{"quote":"If you opt out of training in your account settings, OpenRouter will not route to providers that train.","source":{"doc":"docs-privacy-logging","title":"Provider Logging","url":"https://openrouter.ai/docs/guides/privacy/provider-logging","capturedAt":"2026-11-08T21:38:19Z","sha256":"6582d63c44c3f2bfd4350cf9f265e9b9d7aab2946794cc9c239edba8c07434a9"}}]},"human_review":{"summary":"Only personnel who perform the Service may access personal data, under confidentiality obligations. CSAM-flagged content may be reviewed by people.","status":"stated","cites":[{"quote":"OpenRouter shall ensure that OpenRouter's access to Personal Data is limited to those personnel performing the Service in accordance with the Agreement.","source":{"doc":"data-processing-agreement","title":"Data Processing Agreement","url":"https://openrouter.ai/data-processing-agreement","capturedAt":"2026-11-08T22:28:13Z","sha256":"62a312be4c0d1c271d7eb43493fed1cefb34dd05584fb82b0d164a18b96fe983"}},{"quote":"Content flagged as potential CSAM may be retained for human review, reporting, and preservation where required by law.","source":{"doc":"docs-zdr","title":"Zero Data Retention - How OpenRouter gives you control over your data","url":"https://openrouter.ai/docs/guides/features/zdr","capturedAt":"2026-11-08T21:38:19Z","sha256":"a0a6dcc4f3c1075d888fb6855f693e75050882b6f759941206e9f34f2370be83"}}]},"memory":{"summary":"The captured policies describe no persistent memory or user-profile feature.","status":"not_stated","cites":[]},"connector_data":{"summary":"The captured policies don't describe connecting email, calendar, or drive accounts.","status":"not_stated","cites":[]},"agent_actions":{"summary":"No agent product is described. Server tools and plugins follow the third-party services' policies and are outside ZDR enforcement.","status":"stated","cites":[{"quote":"ZDR enforcement only applies to provider routing for inference requests. It does not apply to [plugins](/docs/guides/features/plugins) and tools you choose to enable","source":{"doc":"docs-zdr","title":"Zero Data Retention - How OpenRouter gives you control over your data","url":"https://openrouter.ai/docs/guides/features/zdr","capturedAt":"2026-11-08T21:38:19Z","sha256":"a0a6dcc4f3c1075d888fb6855f693e75050882b6f759941206e9f34f2370be83"}}]},"input_ownership":{"summary":"Inferred: the DPA is part of the Terms, where you keep rights in inputs. A separate enterprise contract may differ, but none was captured.","status":"inferred","cites":[{"quote":"forms a part of the Terms of Service or other electronic agreement between OpenRouter, Inc.","source":{"doc":"data-processing-agreement","title":"Data Processing Agreement","url":"https://openrouter.ai/data-processing-agreement","capturedAt":"2026-11-08T22:28:13Z","sha256":"62a312be4c0d1c271d7eb43493fed1cefb34dd05584fb82b0d164a18b96fe983"}},{"quote":"You retain copyright and any other proprietary rights that you may hold in the Input.","source":{"doc":"terms","title":"Terms of Service","url":"https://openrouter.ai/terms","capturedAt":"2026-11-08T21:38:18Z","sha256":"aaa888c7f7173f40f94402d033784a964a78fbc10c8b3c141506e4332b9eca50"}}]},"output_ownership":{"summary":"Inferred: since the DPA is part of the Terms, output rights likely follow each model's terms as for self-serve. No enterprise contract was captured.","status":"inferred","cites":[{"quote":"Your ownership rights in the Output are set forth in the Model Terms for each Model you use.","source":{"doc":"terms","title":"Terms of Service","url":"https://openrouter.ai/terms","capturedAt":"2026-11-08T21:38:18Z","sha256":"aaa888c7f7173f40f94402d033784a964a78fbc10c8b3c141506e4332b9eca50"}}]},"license_to_provider":{"summary":"The DPA limits personal-data processing to the customer's documented instructions. Inferred: the Terms' content licenses, including the perpetual opt-in logging license, likely still apply. The captured policies don't reconcile them.","status":"inferred","cites":[{"quote":"OpenRouter shall treat Personal Data as Confidential Information and shall Process Personal Data on behalf of and only in accordance with Customer's documented instructions","source":{"doc":"data-processing-agreement","title":"Data Processing Agreement","url":"https://openrouter.ai/data-processing-agreement","capturedAt":"2026-11-08T22:28:13Z","sha256":"62a312be4c0d1c271d7eb43493fed1cefb34dd05584fb82b0d164a18b96fe983"}},{"quote":"If you have opted into prompt logging in your account settings, chat logging is also automatically enabled, and you grant OpenRouter a worldwide, perpetual, irrevocable, non-exclusive, royalty-free, fully paid right and license (with the right to sublicense)","source":{"doc":"terms","title":"Terms of Service","url":"https://openrouter.ai/terms","capturedAt":"2026-11-08T21:38:18Z","sha256":"aaa888c7f7173f40f94402d033784a964a78fbc10c8b3c141506e4332b9eca50"}}]},"third_party_sharing":{"summary":"Subprocessors (trust.openrouter.ai) get only strictly necessary access and are barred from other purposes. You can subscribe to 30 days' notice of new ones; model providers are excluded from that notice.","status":"stated","cites":[{"quote":"Authorized Sub-processors are provided [here](https://trust.openrouter.ai/).","source":{"doc":"data-processing-agreement","title":"Data Processing Agreement","url":"https://openrouter.ai/data-processing-agreement","capturedAt":"2026-11-08T22:28:13Z","sha256":"62a312be4c0d1c271d7eb43493fed1cefb34dd05584fb82b0d164a18b96fe983"}},{"quote":"excluding processing by AI Model Providers, OpenRouter shall provide thirty (30) days notification of a new Subprocessor(s) before authorizing any new Subprocessor(s) to Process Personal Data","source":{"doc":"data-processing-agreement","title":"Data Processing Agreement","url":"https://openrouter.ai/data-processing-agreement","capturedAt":"2026-11-08T22:28:13Z","sha256":"62a312be4c0d1c271d7eb43493fed1cefb34dd05584fb82b0d164a18b96fe983"}},{"quote":"OpenRouter will restrict the onward Subprocessor's access to Personal Data only to what is strictly necessary to provide the Service, and OpenRouter will prohibit the Subprocessor from Processing the Personal Data for any other purpose.","source":{"doc":"data-processing-agreement","title":"Data Processing Agreement","url":"https://openrouter.ai/data-processing-agreement","capturedAt":"2026-11-08T22:28:13Z","sha256":"62a312be4c0d1c271d7eb43493fed1cefb34dd05584fb82b0d164a18b96fe983"}}]},"data_location":{"summary":"Hosted on GCP in US regions. EU/US in-region routing keeps prompts and completions in-region; account and billing records may be in the US. An EU-only addendum covers API payloads.","status":"stated","cites":[{"quote":"Google Cloud Platform hosting in US regions; data at rest is region-restricted.","source":{"doc":"data-processing-agreement","title":"Data Processing Agreement","url":"https://openrouter.ai/data-processing-agreement","capturedAt":"2026-11-08T22:28:13Z","sha256":"62a312be4c0d1c271d7eb43493fed1cefb34dd05584fb82b0d164a18b96fe983"}},{"quote":"send a request to `https://eu.openrouter.ai` or `https://us.openrouter.ai`, and its prompts and completions are processed within that region and do not leave it.","source":{"doc":"docs-privacy-logging","title":"Provider Logging","url":"https://openrouter.ai/docs/guides/privacy/provider-logging","capturedAt":"2026-11-08T21:38:19Z","sha256":"6582d63c44c3f2bfd4350cf9f265e9b9d7aab2946794cc9c239edba8c07434a9"}},{"quote":"Account and billing records may be stored or processed in the US.","source":{"doc":"enterprise","title":"OpenRouter AI Gateway for Enterprise","url":"https://openrouter.ai/enterprise","capturedAt":"2026-11-08T21:39:35Z","sha256":"1e293823a7ddce3055ad6785b94c4af898739d544e773858974d6cbafeee3dd0"}},{"quote":"this EU-only restriction applies solely to API Payloads; it does not restrict the location of account data, billing records, authentication data, security logs, abuse monitoring metadata, or other operational records","source":{"doc":"data-processing-agreement","title":"Data Processing Agreement","url":"https://openrouter.ai/data-processing-agreement","capturedAt":"2026-11-08T22:28:13Z","sha256":"62a312be4c0d1c271d7eb43493fed1cefb34dd05584fb82b0d164a18b96fe983"}},{"quote":"At this time, Input & Output Logging does **not** apply to requests routed through `eu.openrouter.ai` or `us.openrouter.ai`.","source":{"doc":"docs-input-output-logging","title":"Input & Output Logging","url":"https://openrouter.ai/docs/guides/features/input-output-logging","capturedAt":"2026-11-08T21:39:36Z","sha256":"ce4e1f62c759d18fad8b09690bf01222d23a81f5073dec09113d532887724959"}}]},"enterprise_controls":{"summary":"Offers SSO/SCIM, org-wide data policies, guardrails, exportable request reports, a DPA (theirs or yours), a yearly audit right, and 72-hour breach notice. Custom retention periods aren't mentioned.","status":"stated","cites":[{"quote":"Add SSO, SCIM, and org-wide data policies","source":{"doc":"enterprise","title":"OpenRouter AI Gateway for Enterprise","url":"https://openrouter.ai/enterprise","capturedAt":"2026-11-08T21:39:35Z","sha256":"1e293823a7ddce3055ad6785b94c4af898739d544e773858974d6cbafeee3dd0"}},{"quote":"View and export all API requests across all users.","source":{"doc":"enterprise","title":"OpenRouter AI Gateway for Enterprise","url":"https://openrouter.ai/enterprise","capturedAt":"2026-11-08T21:39:35Z","sha256":"1e293823a7ddce3055ad6785b94c4af898739d544e773858974d6cbafeee3dd0"}},{"quote":"Our DPA, or we review yours","source":{"doc":"enterprise","title":"OpenRouter AI Gateway for Enterprise","url":"https://openrouter.ai/enterprise","capturedAt":"2026-11-08T21:39:35Z","sha256":"1e293823a7ddce3055ad6785b94c4af898739d544e773858974d6cbafeee3dd0"}},{"quote":"no more than once a year by Customer and performed by an independent auditor as agreed upon by Customer and OpenRouter.","source":{"doc":"data-processing-agreement","title":"Data Processing Agreement","url":"https://openrouter.ai/data-processing-agreement","capturedAt":"2026-11-08T22:28:13Z","sha256":"62a312be4c0d1c271d7eb43493fed1cefb34dd05584fb82b0d164a18b96fe983"}},{"quote":"shall notify Customer without undue delay, and in any case, within seventy-two (72) hours after becoming aware of the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to Personal Data","source":{"doc":"data-processing-agreement","title":"Data Processing Agreement","url":"https://openrouter.ai/data-processing-agreement","capturedAt":"2026-11-08T22:28:13Z","sha256":"62a312be4c0d1c271d7eb43493fed1cefb34dd05584fb82b0d164a18b96fe983"}}]}}}],"notes":[{"text":"OpenRouter has two separate opt-ins for storing content. Input & Output Logging (Observability settings) is private, offers no discount, and OpenRouter says it doesn't use the data. 'OpenRouter Use of Inputs/Outputs' (Privacy settings) lets OpenRouter use your data to improve the product, for a 1% discount. Both are off by default.","cites":[{"quote":"Enabling OpenRouter to use your inputs/outputs is an independent setting, enabled in Privacy, that allows OpenRouter to use your data to improve the product in exchange for a 1% discount on all model usage. You can enable one, the other, or both.","source":{"doc":"docs-input-output-logging","title":"Input & Output Logging","url":"https://openrouter.ai/docs/guides/features/input-output-logging","capturedAt":"2026-11-08T21:39:36Z","sha256":"ce4e1f62c759d18fad8b09690bf01222d23a81f5073dec09113d532887724959"}},{"quote":"Off by default. Enable it in your [Observability settings](https://openrouter.ai/workspaces/default/observability).","source":{"doc":"docs-data-collection","title":"Data Collection","url":"https://openrouter.ai/docs/guides/privacy/data-collection","capturedAt":"2026-11-08T21:39:42Z","sha256":"d0729cf83c414078592504daef0efe82c9e81b7a937ccb0bd1648c1b046ed3f7"}}]},{"text":"The Terms and the docs pull in different directions. Opting into 'prompt logging' in the Terms grants a perpetual, irrevocable license that includes selling anonymized content. The docs say OpenRouter has never sold or licensed prompt data, and doesn't use logged data. The Terms don't say which of the docs' settings counts as 'prompt logging'.","cites":[{"quote":"(3) license or sell your User Content in anonymized form, where your User Content is not associated with you or your account.","source":{"doc":"terms","title":"Terms of Service","url":"https://openrouter.ai/terms","capturedAt":"2026-11-08T21:38:18Z","sha256":"aaa888c7f7173f40f94402d033784a964a78fbc10c8b3c141506e4332b9eca50"}},{"quote":"OpenRouter has never sold or licensed prompt data.","source":{"doc":"docs-data-collection","title":"Data Collection","url":"https://openrouter.ai/docs/guides/privacy/data-collection","capturedAt":"2026-11-08T21:39:42Z","sha256":"d0729cf83c414078592504daef0efe82c9e81b7a937ccb0bd1648c1b046ed3f7"}},{"quote":"If you have enabled Private Prompt Storage, you grant OpenRouter a worldwide, revocable, non-exclusive, royalty-free, fully paid right and license to host, store, copy, and use your User Content solely for purposes of displaying the User Content to you.","source":{"doc":"terms","title":"Terms of Service","url":"https://openrouter.ai/terms","capturedAt":"2026-11-08T21:38:18Z","sha256":"aaa888c7f7173f40f94402d033784a964a78fbc10c8b3c141506e4332b9eca50"}}]},{"text":"The upstream provider policy table lists 97 providers. By retention: 59 'Zero retention', 11 'Retained for 30 days' (including Anthropic), 1 at 55 days (Google AI Studio), and 26 'retained for unknown period' (including OpenAI). By training: 4 are marked 'May train' (DeepSeek, Liquid, NVIDIA, Stealth). Apart from ZDR enforcement, retention doesn't affect routing; users filter providers themselves.","cites":[{"quote":"OpenRouter does not have routing rules that change based on data retention policies of providers, but the retention policies as reflected in each provider’s terms are shown below.","source":{"doc":"docs-privacy-logging","title":"Provider Logging","url":"https://openrouter.ai/docs/guides/privacy/provider-logging","capturedAt":"2026-11-08T21:38:19Z","sha256":"6582d63c44c3f2bfd4350cf9f265e9b9d7aab2946794cc9c239edba8c07434a9"}},{"quote":"| DeepSeek                | Prompts are retained for unknown period | ✕ May train      |","source":{"doc":"docs-privacy-logging","title":"Provider Logging","url":"https://openrouter.ai/docs/guides/privacy/provider-logging","capturedAt":"2026-11-08T21:38:19Z","sha256":"6582d63c44c3f2bfd4350cf9f265e9b9d7aab2946794cc9c239edba8c07434a9"}},{"quote":"| Google AI Studio        | Retained for 55 days                    | ✓ Does not train |","source":{"doc":"docs-privacy-logging","title":"Provider Logging","url":"https://openrouter.ai/docs/guides/privacy/provider-logging","capturedAt":"2026-11-08T21:38:19Z","sha256":"6582d63c44c3f2bfd4350cf9f265e9b9d7aab2946794cc9c239edba8c07434a9"}}]},{"text":"The ZDR-eligible endpoint list has about 1,116 model/provider rows across about 65 provider labels. DeepInfra, Azure, Google, Bedrock, and Mistral have the most rows. Only Google endpoints (56 rows) are marked Safety Retention. First-party Anthropic and OpenAI endpoints are absent; their models are available through Bedrock, Vertex, or Azure.","cites":[{"quote":"It also includes Safety Retention endpoints, which are used only if you [allow Safety Retention](#allowing-or-excluding-safety-retention).","source":{"doc":"docs-zdr","title":"Zero Data Retention - How OpenRouter gives you control over your data","url":"https://openrouter.ai/docs/guides/features/zdr","capturedAt":"2026-11-08T21:38:19Z","sha256":"a0a6dcc4f3c1075d888fb6855f693e75050882b6f759941206e9f34f2370be83"}},{"quote":"| **Anthropic**        | Removes first-party Anthropic endpoints (Bedrock and Vertex remain available)","source":{"doc":"docs-zdr","title":"Zero Data Retention - How OpenRouter gives you control over your data","url":"https://openrouter.ai/docs/guides/features/zdr","capturedAt":"2026-11-08T21:38:19Z","sha256":"a0a6dcc4f3c1075d888fb6855f693e75050882b6f759941206e9f34f2370be83"}},{"quote":"| **OpenAI**           | Removes first-party OpenAI endpoints (Azure remains available)","source":{"doc":"docs-zdr","title":"Zero Data Retention - How OpenRouter gives you control over your data","url":"https://openrouter.ai/docs/guides/features/zdr","capturedAt":"2026-11-08T21:38:19Z","sha256":"a0a6dcc4f3c1075d888fb6855f693e75050882b6f759941206e9f34f2370be83"}}]},{"text":"The pages conflict on Google Vertex. The provider table claims three tiers including Safety Retention, but no row is labeled Safety Retention, and it lists Google Vertex as 'Zero retention'. The ZDR page says Google has required Safety Retention on Vertex since October 18, 2026.","cites":[{"quote":"| Google Vertex           | Zero retention                          | ✓ Does not train |","source":{"doc":"docs-privacy-logging","title":"Provider Logging","url":"https://openrouter.ai/docs/guides/privacy/provider-logging","capturedAt":"2026-11-08T21:38:19Z","sha256":"6582d63c44c3f2bfd4350cf9f265e9b9d7aab2946794cc9c239edba8c07434a9"}},{"quote":"Starting October 18, 2026, Google requires Safety Retention for Google models served through Vertex.","source":{"doc":"docs-zdr","title":"Zero Data Retention - How OpenRouter gives you control over your data","url":"https://openrouter.ai/docs/guides/features/zdr","capturedAt":"2026-11-08T21:38:19Z","sha256":"a0a6dcc4f3c1075d888fb6855f693e75050882b6f759941206e9f34f2370be83"}},{"quote":"The [provider logging](/docs/guides/privacy/provider-logging#data-retention--logging) table shows which providers use Safety Retention.","source":{"doc":"docs-zdr","title":"Zero Data Retention - How OpenRouter gives you control over your data","url":"https://openrouter.ai/docs/guides/features/zdr","capturedAt":"2026-11-08T21:38:19Z","sha256":"a0a6dcc4f3c1075d888fb6855f693e75050882b6f759941206e9f34f2370be83"}}]},{"text":"CSAM screening now covers ZDR traffic, and the docs say the related terms are being updated. The DPA's ZDR definition (updated August 26, 2026) doesn't mention a CSAM exception.","cites":[{"quote":"We’re updating this page and our related terms.","source":{"doc":"docs-zdr","title":"Zero Data Retention - How OpenRouter gives you control over your data","url":"https://openrouter.ai/docs/guides/features/zdr","capturedAt":"2026-11-08T21:38:19Z","sha256":"a0a6dcc4f3c1075d888fb6855f693e75050882b6f759941206e9f34f2370be83"}},{"quote":"except for transient processing in memory, short-lived buffering or caching strictly necessary to transmit, secure, or complete the request, and records required by law.","source":{"doc":"data-processing-agreement","title":"Data Processing Agreement","url":"https://openrouter.ai/data-processing-agreement","capturedAt":"2026-11-08T22:28:13Z","sha256":"62a312be4c0d1c271d7eb43493fed1cefb34dd05584fb82b0d164a18b96fe983"}}]},{"text":"OpenRouter samples some prompts to categorize them for its rankings, using a zero-retention model. For users who haven't opted in, the results are stored anonymously.","cites":[{"quote":"OpenRouter samples a small number of prompts for categorization to power our reporting and model ranking. If you are not opted in to OpenRouter use of inputs/outputs, any categorization of your prompts is stored completely anonymously and never associated with your account or user ID.","source":{"doc":"docs-data-collection","title":"Data Collection","url":"https://openrouter.ai/docs/guides/privacy/data-collection","capturedAt":"2026-11-08T21:39:42Z","sha256":"d0729cf83c414078592504daef0efe82c9e81b7a937ccb0bd1648c1b046ed3f7"}}]},{"text":"On BYOK keys and private endpoints, ZDR status depends on the customer's own attestation, which OpenRouter doesn't verify.","cites":[{"quote":"A declaration is your attestation about your agreement with the upstream. OpenRouter records it and routes on it, and does not independently verify the upstream’s contractual behavior.","source":{"doc":"docs-zdr","title":"Zero Data Retention - How OpenRouter gives you control over your data","url":"https://openrouter.ai/docs/guides/features/zdr","capturedAt":"2026-11-08T21:38:19Z","sha256":"a0a6dcc4f3c1075d888fb6855f693e75050882b6f759941206e9f34f2370be83"}}]},{"text":"The privacy policy's GDPR/state-law table gives 'to perform a contract with you' as the legal basis for providing the Service 'and where applicable, for Model training and improvement by Model Providers'. OpenRouter's own research relies on legitimate interest.","cites":[{"quote":"Provide, analyze, and maintain our Service, and where applicable, for Model training and improvement by Model Providers. The legal basis is to perform a contract with you.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://openrouter.ai/privacy","capturedAt":"2026-11-08T22:28:10Z","sha256":"310e69e72c14b849378d7d256ebab9a8a90e6e295a452319bf486ca4f30d3ac0"}},{"quote":"Improve and develop our Service and conduct research. The legal basis is a legitimate interest.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://openrouter.ai/privacy","capturedAt":"2026-11-08T22:28:10Z","sha256":"310e69e72c14b849378d7d256ebab9a8a90e6e295a452319bf486ca4f30d3ac0"}}]},{"text":"DPA Schedule 1 bars subprocessors from processing personal data for any other purpose. The DPA doesn't say outright whether upstream AI Model Providers count as Subprocessors, though it excludes them from the new-subprocessor notice.","cites":[{"quote":"OpenRouter will restrict the onward Subprocessor's access to Personal Data only to what is strictly necessary to provide the Service, and OpenRouter will prohibit the Subprocessor from Processing the Personal Data for any other purpose.","source":{"doc":"data-processing-agreement","title":"Data Processing Agreement","url":"https://openrouter.ai/data-processing-agreement","capturedAt":"2026-11-08T22:28:13Z","sha256":"62a312be4c0d1c271d7eb43493fed1cefb34dd05584fb82b0d164a18b96fe983"}},{"quote":"excluding processing by AI Model Providers, OpenRouter shall provide thirty (30) days notification of a new Subprocessor(s)","source":{"doc":"data-processing-agreement","title":"Data Processing Agreement","url":"https://openrouter.ai/data-processing-agreement","capturedAt":"2026-11-08T22:28:13Z","sha256":"62a312be4c0d1c271d7eb43493fed1cefb34dd05584fb82b0d164a18b96fe983"}}]},{"text":"Under the DPA, personal data covers names, contact details, IP addresses, timestamps, API keys, account IDs and anything in Inputs. No sensitive-data processing is intended; the customer must notify OpenRouter if it sends any.","cites":[{"quote":"Name, contact information, online identifiers (including without limitation, IP address and timestamps, API keys), account/user IDs, any information provided by Authorized Users in unstructured data (including in Inputs), and other information necessary to provide the Service under the Agreement.","source":{"doc":"data-processing-agreement","title":"Data Processing Agreement","url":"https://openrouter.ai/data-processing-agreement","capturedAt":"2026-11-08T22:28:13Z","sha256":"62a312be4c0d1c271d7eb43493fed1cefb34dd05584fb82b0d164a18b96fe983"}},{"quote":"No processing of Sensitive Data or any special categories is intended","source":{"doc":"data-processing-agreement","title":"Data Processing Agreement","url":"https://openrouter.ai/data-processing-agreement","capturedAt":"2026-11-08T22:28:13Z","sha256":"62a312be4c0d1c271d7eb43493fed1cefb34dd05584fb82b0d164a18b96fe983"}},{"quote":"Customer is solely responsible for determining and notifying OpenRouter of such processing and additional restrictions and/or security measures (if any) that are needed to be applied to the Sensitive Data transferred by Customer.","source":{"doc":"data-processing-agreement","title":"Data Processing Agreement","url":"https://openrouter.ai/data-processing-agreement","capturedAt":"2026-11-08T22:28:13Z","sha256":"62a312be4c0d1c271d7eb43493fed1cefb34dd05584fb82b0d164a18b96fe983"}}]}],"gaps":["Default state of the account settings that allow routing to providers that may train (paid and free models): not stated. Likely on the privacy settings page or provider-selection docs.","How long OpenRouter keeps per-request metadata: not stated. The privacy policy's state-disclosures table, now captured, lists categories, uses and disclosures but no retention periods; the logs/activity docs might say.","How long OpenRouter keeps CSAM-flagged content and its own Safety Retention data: not stated. Likely in the CSAM screening announcement (openrouter.ai/blog/announcements/csam-screening).","Retention period, and which uses count as 'improve the product', for data shared under 'OpenRouter Use of Inputs/Outputs' (1% discount); also which setting Terms 6.2 'prompt logging' refers to. Not stated; would need a Privacy settings help page or a clarified Terms.","Deletion timeframe for individual (non-DPA) users, and whether Input & Output Logging data is deleted when an account closes. Not stated beyond 'request deletion'.","Whether and how long chat-interface conversations are stored: not stated. Likely in chat/playground docs.","Retention of temporarily stored batch/large-request content (Terms 6.3(b)): documentation is referenced but wasn't captured.","Each upstream provider's actual terms and retention details: only summarized here. The provider-selection#terms-of-service page aggregates them.","The subprocessor list and SOC 2 report at trust.openrouter.ai weren't captured.","Any enterprise Subscription Agreement terms (ownership, licenses, custom retention) weren't captured.","How BYOK provider keys and Broadcast destination credentials are stored and secured: not stated. Likely in BYOK and Broadcast docs."],"documents":[{"doc":"docs-data-collection","title":"Data Collection","url":"https://openrouter.ai/docs/guides/privacy/data-collection","capturedAt":"2026-11-08T21:39:42Z","sha256":"d0729cf83c414078592504daef0efe82c9e81b7a937ccb0bd1648c1b046ed3f7"},{"doc":"data-processing-agreement","title":"Data Processing Agreement","url":"https://openrouter.ai/data-processing-agreement","capturedAt":"2026-11-08T22:28:13Z","sha256":"62a312be4c0d1c271d7eb43493fed1cefb34dd05584fb82b0d164a18b96fe983"},{"doc":"docs-input-output-logging","title":"Input & Output Logging","url":"https://openrouter.ai/docs/guides/features/input-output-logging","capturedAt":"2026-11-08T21:39:36Z","sha256":"ce4e1f62c759d18fad8b09690bf01222d23a81f5073dec09113d532887724959"},{"doc":"enterprise","title":"OpenRouter AI Gateway for Enterprise","url":"https://openrouter.ai/enterprise","capturedAt":"2026-11-08T21:39:35Z","sha256":"1e293823a7ddce3055ad6785b94c4af898739d544e773858974d6cbafeee3dd0"},{"doc":"privacy-policy","title":"Privacy Policy","url":"https://openrouter.ai/privacy","capturedAt":"2026-11-08T22:28:10Z","sha256":"310e69e72c14b849378d7d256ebab9a8a90e6e295a452319bf486ca4f30d3ac0"},{"doc":"docs-privacy-logging","title":"Provider Logging","url":"https://openrouter.ai/docs/guides/privacy/provider-logging","capturedAt":"2026-11-08T21:38:19Z","sha256":"6582d63c44c3f2bfd4350cf9f265e9b9d7aab2946794cc9c239edba8c07434a9"},{"doc":"terms","title":"Terms of Service","url":"https://openrouter.ai/terms","capturedAt":"2026-11-08T21:38:18Z","sha256":"aaa888c7f7173f40f94402d033784a964a78fbc10c8b3c141506e4332b9eca50"},{"doc":"docs-zdr","title":"Zero Data Retention - How OpenRouter gives you control over your data","url":"https://openrouter.ai/docs/guides/features/zdr","capturedAt":"2026-11-08T21:38:19Z","sha256":"a0a6dcc4f3c1075d888fb6855f693e75050882b6f759941206e9f34f2370be83"}],"url":"https://gjalla.io/data-policies/openrouter/"},{"id":"town","provider":"town","name":"Town","category":"agent-assistant","checkedOn":"2026-11-08","products":[{"id":"town-assistant","name":"Town assistant (Townie), individual and Team plans under the standard Terms","surface":"agent","facts":{"default_retention":{"summary":"No fixed period: personal information is kept while you have an account, plus an unspecified time after. Email and file content isn't stored 'beyond what's necessary' (undefined).","status":"stated","cites":[{"quote":"For example, we will retain your personal information for as long as you have an account with us or keep using our services, and the length of time thereafter during which we may have a legitimate need to reference your personal information to address issues that may arise.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://www.town.com/privacy-policy","capturedAt":"2026-11-08T22:04:57Z","sha256":"4f044e6d1640358a2566d30cf93d47b07b8dc4c10cf5c4c435db7080e04f3667"}},{"quote":"We don't store email content beyond what's necessary, and we never browse your inbox for any other purpose.","source":{"doc":"security","title":"Security, privacy, and approvals by design","url":"https://www.town.com/features/security","capturedAt":"2026-11-08T22:04:57Z","sha256":"2338cd79f3eb80aec104185e15d98e27789a6e1a028ee50b7feb557da1dce637"}},{"quote":"Files are not stored beyond what's necessary.","source":{"doc":"security","title":"Security, privacy, and approvals by design","url":"https://www.town.com/features/security","capturedAt":"2026-11-08T22:04:57Z","sha256":"2338cd79f3eb80aec104185e15d98e27789a6e1a028ee50b7feb557da1dce637"}}]},"deletion_window":{"summary":"You delete your account in Settings. It is soft-deleted immediately (routines stop, sessions revoked) and all data is permanently removed within 30 days, apart from narrow exceptions.","status":"stated","cites":[{"quote":"**We soft-delete immediately.** The moment you delete, your account is deactivated, your routines stop, and your Town sessions are revoked.","source":{"doc":"docs-safety","title":"Trust & Security \\u2013 Town Docs","url":"https://www.town.com/docs/safety","capturedAt":"2026-11-08T22:04:56Z","sha256":"fec4f6aec4560a25614a8bc40c183081969fde1f8aeac1c875ba85d38ea2a40e"}},{"quote":"**Everything is permanently removed within 30 days.**","source":{"doc":"docs-safety","title":"Trust & Security \\u2013 Town Docs","url":"https://www.town.com/docs/safety","capturedAt":"2026-11-08T22:04:56Z","sha256":"fec4f6aec4560a25614a8bc40c183081969fde1f8aeac1c875ba85d38ea2a40e"}},{"quote":"Go to Settings to delete your account. We soft-delete immediately and permanently remove all data within 30 days.","source":{"doc":"security","title":"Security, privacy, and approvals by design","url":"https://www.town.com/features/security","capturedAt":"2026-11-08T22:04:57Z","sha256":"2338cd79f3eb80aec104185e15d98e27789a6e1a028ee50b7feb557da1dce637"}}]},"retention_exceptions":{"summary":"Exceptions are active legal holds and some required security/audit records, with no durations given. Memory Data may be kept de-identified after termination. Backups are not mentioned.","status":"stated","cites":[{"quote":"The only exceptions are narrow ones — for example, if there’s an active legal hold, or a small set of security/audit records we’re required to retain.","source":{"doc":"docs-safety","title":"Trust & Security \\u2013 Town Docs","url":"https://www.town.com/docs/safety","capturedAt":"2026-11-08T22:04:56Z","sha256":"fec4f6aec4560a25614a8bc40c183081969fde1f8aeac1c875ba85d38ea2a40e"}},{"quote":"Upon termination of this Agreement, Town will cease using Memory Data in a manner personally associated with you but may retain Memory Data in de-identified or aggregated form for product improvement purposes.","source":{"doc":"terms","title":"Terms of Service","url":"https://www.town.com/terms-of-service","capturedAt":"2026-11-08T22:04:56Z","sha256":"4b11109c0602ce06642446ebc633a8093f1cbd49ef54154aed27f05166081bb0"}},{"quote":"We generally retain personal information to fulfill the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements, to establish or defend legal claims, for fraud prevention purposes, or otherwise in line with our agreements with you.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://www.town.com/privacy-policy","capturedAt":"2026-11-08T22:04:57Z","sha256":"4f044e6d1640358a2566d30cf93d47b07b8dc4c10cf5c4c435db7080e04f3667"}},{"quote":"we may delete Your Content associated therewith from our live databases.","source":{"doc":"terms","title":"Terms of Service","url":"https://www.town.com/terms-of-service","capturedAt":"2026-11-08T22:04:56Z","sha256":"4b11109c0602ce06642446ebc633a8093f1cbd49ef54154aed27f05166081bb0"}}]},"zdr":{"summary":"The captured policies describe no zero-data-retention option for Town's own storage.","status":"not_stated","cites":[]},"training_default":{"summary":"The pages conflict. The docs say Town's training is off by default (opt-in), but the privacy policy says Town may train its models (opt-out). Google data is never used.","status":"stated","cites":[{"quote":"Using your data for AI training is off by default, and we configure our [AI model providers ](https://www.town.com/ai-model-providers) so your inputs and outputs aren’t used to train their models either.","source":{"doc":"docs-safety","title":"Trust & Security \\u2013 Town Docs","url":"https://www.town.com/docs/safety","capturedAt":"2026-11-08T22:04:56Z","sha256":"fec4f6aec4560a25614a8bc40c183081969fde1f8aeac1c875ba85d38ea2a40e"}},{"quote":"As set out in the How We Use Personal Information section, we may use your personal information to train our AI models and for other machine learning purposes.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://www.town.com/privacy-policy","capturedAt":"2026-11-08T22:04:57Z","sha256":"4f044e6d1640358a2566d30cf93d47b07b8dc4c10cf5c4c435db7080e04f3667"}},{"quote":"we do NOT use Google user data to train machine learning models","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://www.town.com/privacy-policy","capturedAt":"2026-11-08T22:04:57Z","sha256":"4f044e6d1640358a2566d30cf93d47b07b8dc4c10cf5c4c435db7080e04f3667"}},{"quote":"We may use your personal information for research and development purposes, as well as to create anonymized, de-identified, or synthetic data to develop, analyze and improve our products and services, including to train our AI models","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://www.town.com/privacy-policy","capturedAt":"2026-11-08T22:04:57Z","sha256":"4f044e6d1640358a2566d30cf93d47b07b8dc4c10cf5c4c435db7080e04f3667"}}]},"training_opt_out":{"summary":"Use the 'Improve Town for everyone' toggle in Settings → Privacy. It doesn't cover de-identified or aggregated data, Performance Data, or Memory Data kept de-identified after termination.","status":"stated","cites":[{"quote":"If you ever want to help improve Town, you can opt in with the **Improve Town for everyone** toggle in **Settings** → **Privacy**.","source":{"doc":"docs-safety","title":"Trust & Security \\u2013 Town Docs","url":"https://www.town.com/docs/safety","capturedAt":"2026-11-08T22:04:56Z","sha256":"fec4f6aec4560a25614a8bc40c183081969fde1f8aeac1c875ba85d38ea2a40e"}},{"quote":"You may opt-out of our use of your personal information for AI training purposes by using the toggle feature provided in your account settings.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://www.town.com/privacy-policy","capturedAt":"2026-11-08T22:04:57Z","sha256":"4f044e6d1640358a2566d30cf93d47b07b8dc4c10cf5c4c435db7080e04f3667"}},{"quote":"We may use this anonymous or de-identified data and share it with third parties for any lawful business purposes.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://www.town.com/privacy-policy","capturedAt":"2026-11-08T22:04:57Z","sha256":"4f044e6d1640358a2566d30cf93d47b07b8dc4c10cf5c4c435db7080e04f3667"}},{"quote":"In addition, Town may aggregate and de-identify data or create synthetic data derived from your use of the Services, and Town may use such aggregated and de-identified data for any lawful business purpose, including to improve, develop, and enhance Town’s products and services","source":{"doc":"terms","title":"Terms of Service","url":"https://www.town.com/terms-of-service","capturedAt":"2026-11-08T22:04:56Z","sha256":"4b11109c0602ce06642446ebc633a8093f1cbd49ef54154aed27f05166081bb0"}}]},"human_review":{"summary":"Docs: staff see data only with your support approval, or a CEO/CPO-authorized look during incidents. For Google data, the policy also permits human reading for security or legal compliance.","status":"stated","cites":[{"quote":"**No one at Town can access your data by default** — it’s encrypted at rest and in transit. Access only happens two ways: you approve it for support, or our CEO/CPO authorizes a one-time look at a single session during a security incident (very rare).","source":{"doc":"docs-safety","title":"Trust & Security \\u2013 Town Docs","url":"https://www.town.com/docs/safety","capturedAt":"2026-11-08T22:04:56Z","sha256":"fec4f6aec4560a25614a8bc40c183081969fde1f8aeac1c875ba85d38ea2a40e"}},{"quote":"**No Town team member has production database access.** Full stop.","source":{"doc":"docs-safety","title":"Trust & Security \\u2013 Town Docs","url":"https://www.town.com/docs/safety","capturedAt":"2026-11-08T22:04:56Z","sha256":"fec4f6aec4560a25614a8bc40c183081969fde1f8aeac1c875ba85d38ea2a40e"}},{"quote":"we do NOT allow humans to read the data unless we obtain your affirmative agreement to view specific messages, files, or other data, it is necessary of security purposes or to comply with law, or the data is aggregated and used for internal operations.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://www.town.com/privacy-policy","capturedAt":"2026-11-08T22:04:57Z","sha256":"4f044e6d1640358a2566d30cf93d47b07b8dc4c10cf5c4c435db7080e04f3667"}}]},"memory":{"summary":"The Town Wiki holds your profile, preferences, style, work patterns, goals and projects. You can view and edit it. Memory Data can't be exported and may persist de-identified.","status":"stated","cites":[{"quote":"Your profile, preferences, communication style, and work patterns — plus the goals and projects moving through your work and life. It’s a living synthesis that your Townie updates over time, and you can correct anything that’s out of date.","source":{"doc":"docs-wiki","title":"Wiki \\u2013 Town Docs","url":"https://www.town.com/docs/features/wiki","capturedAt":"2026-11-08T22:05:00Z","sha256":"e0e1d252337c7fd2764b8749ed0f415765ec5b4fd0e4afaa31ca7f610a0941a6"}},{"quote":"Your Wiki is maintained in the background, using your profile, saved memories, and recent activity.","source":{"doc":"docs-wiki","title":"Wiki \\u2013 Town Docs","url":"https://www.town.com/docs/features/wiki","capturedAt":"2026-11-08T22:05:00Z","sha256":"e0e1d252337c7fd2764b8749ed0f415765ec5b4fd0e4afaa31ca7f610a0941a6"}},{"quote":"Edit any section yourself, or use **Edit with chat** to have your Townie rewrite it. You’re not the only editor, though: your Townie maintains it and makes it better over time. See exactly what changed under **Recent updates**.","source":{"doc":"docs-wiki","title":"Wiki \\u2013 Town Docs","url":"https://www.town.com/docs/features/wiki","capturedAt":"2026-11-08T22:05:00Z","sha256":"e0e1d252337c7fd2764b8749ed0f415765ec5b4fd0e4afaa31ca7f610a0941a6"}},{"quote":"Memory Data constitutes Your Content; provided, however, that you acknowledge that Memory Data is stored in a format integral to the Services and may not be exported or transferred to third-party platforms.","source":{"doc":"terms","title":"Terms of Service","url":"https://www.town.com/terms-of-service","capturedAt":"2026-11-08T22:04:56Z","sha256":"4b11109c0602ce06642446ebc633a8093f1cbd49ef54154aed27f05166081bb0"}},{"quote":"Town may generate and store information derived from your interactions with the Services, including your preferences, communication styles, and working patterns (collectively, **“Memory Data”**) to personalize the Services.","source":{"doc":"terms","title":"Terms of Service","url":"https://www.town.com/terms-of-service","capturedAt":"2026-11-08T22:04:56Z","sha256":"4b11109c0602ce06642446ebc633a8093f1cbd49ef54154aed27f05166081bb0"}}]},"connector_data":{"summary":"Town may access and store email bodies, subjects, attachments, metadata and correspondents' details. Storage is limited to 'what's necessary'. Disconnecting withdraws consent, and created information is removed within 30 days.","status":"stated","cites":[{"quote":"When you connect your email account(s) to the Service, this may include message content (such as body text, subject lines, and attachments), sender and recipient information (such as names and email addresses), email metadata (such as dates, timestamps, and threading information), and other data contained within your email communications.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://www.town.com/privacy-policy","capturedAt":"2026-11-08T22:04:57Z","sha256":"4f044e6d1640358a2566d30cf93d47b07b8dc4c10cf5c4c435db7080e04f3667"}},{"quote":"By linking a Third-Party Account, you authorize Town to access, and where applicable store, information from your Third-Party Account to the extent necessary to provide the Services.","source":{"doc":"terms","title":"Terms of Service","url":"https://www.town.com/terms-of-service","capturedAt":"2026-11-08T22:04:56Z","sha256":"4b11109c0602ce06642446ebc633a8093f1cbd49ef54154aed27f05166081bb0"}},{"quote":"You may withdraw your consent at any time by deleting your account or, as to each third-party service account, by disconnecting those third party service accounts from the Service. Any information you have used the Service to create will be removed from the Service within 30 days, subject to the subsection in the Your Choices section below titled “Retention Period for Personal Information.”","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://www.town.com/privacy-policy","capturedAt":"2026-11-08T22:04:57Z","sha256":"4f044e6d1640358a2566d30cf93d47b07b8dc4c10cf5c4c435db7080e04f3667"}},{"quote":"we may process personal information of third parties contained in those communications, such as the names, email addresses, and other information of individuals with whom you correspond.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://www.town.com/privacy-policy","capturedAt":"2026-11-08T22:04:57Z","sha256":"4f044e6d1640358a2566d30cf93d47b07b8dc4c10cf5c4c435db7080e04f3667"}},{"quote":"You can disconnect any integration anytime from your settings — or revoke Town’s access directly from your Google, Slack, or Notion security settings.","source":{"doc":"docs-safety","title":"Trust & Security \\u2013 Town Docs","url":"https://www.town.com/docs/safety","capturedAt":"2026-11-08T22:04:56Z","sha256":"fec4f6aec4560a25614a8bc40c183081969fde1f8aeac1c875ba85d38ea2a40e"}},{"quote":"Reads docs from Drive, Notion, and other sources for task context. Files are not stored beyond what's necessary.","source":{"doc":"security","title":"Security, privacy, and approvals by design","url":"https://www.town.com/features/security","capturedAt":"2026-11-08T22:04:57Z","sha256":"2338cd79f3eb80aec104185e15d98e27789a6e1a028ee50b7feb557da1dce637"}}]},"agent_actions":{"summary":"Defaults conflict: one page says approval is required by default, but the docs say your threads and routines start in auto mode. Routines keep full action logs. Tokens are extra-encrypted.","status":"stated","cites":[{"quote":"Town never sends an email, modifies a document, or takes a destructive action without your explicit approval — unless you configure it otherwise.","source":{"doc":"security","title":"Security, privacy, and approvals by design","url":"https://www.town.com/features/security","capturedAt":"2026-11-08T22:04:57Z","sha256":"2338cd79f3eb80aec104185e15d98e27789a6e1a028ee50b7feb557da1dce637"}},{"quote":"Your own threads and threads with people you trust start in auto mode: your Townie goes ahead with what you explicitly asked for, and asks first when an action goes beyond your request or looks unsafe.","source":{"doc":"docs-safety","title":"Trust & Security \\u2013 Town Docs","url":"https://www.town.com/docs/safety","capturedAt":"2026-11-08T22:04:56Z","sha256":"fec4f6aec4560a25614a8bc40c183081969fde1f8aeac1c875ba85d38ea2a40e"}},{"quote":"Routines start in auto mode too, and run without asking; switch a routine to **Human in the Loop** to review actions other people would see.","source":{"doc":"docs-safety","title":"Trust & Security \\u2013 Town Docs","url":"https://www.town.com/docs/safety","capturedAt":"2026-11-08T22:04:56Z","sha256":"fec4f6aec4560a25614a8bc40c183081969fde1f8aeac1c875ba85d38ea2a40e"}},{"quote":"That list is opt-in and off by default — you choose exactly who it covers.","source":{"doc":"docs-safety","title":"Trust & Security \\u2013 Town Docs","url":"https://www.town.com/docs/safety","capturedAt":"2026-11-08T22:04:56Z","sha256":"fec4f6aec4560a25614a8bc40c183081969fde1f8aeac1c875ba85d38ea2a40e"}},{"quote":"Full action log for every routine. Clear reasoning for every step. Complete transparency into what happened, when, and why.","source":{"doc":"security","title":"Security, privacy, and approvals by design","url":"https://www.town.com/features/security","capturedAt":"2026-11-08T22:04:57Z","sha256":"2338cd79f3eb80aec104185e15d98e27789a6e1a028ee50b7feb557da1dce637"}},{"quote":"On top of that, especially sensitive items — like the access tokens for your connected accounts — get an extra layer of application-level AES-256 encryption.","source":{"doc":"docs-safety","title":"Trust & Security \\u2013 Town Docs","url":"https://www.town.com/docs/safety","capturedAt":"2026-11-08T22:04:56Z","sha256":"fec4f6aec4560a25614a8bc40c183081969fde1f8aeac1c875ba85d38ea2a40e"}},{"quote":"You, and not Town, will be solely responsible for your use of the Agents, including any of the Outputs and decisions made or actions taken (whether by you or an Agent) based on any Input or Output.","source":{"doc":"terms","title":"Terms of Service","url":"https://www.town.com/terms-of-service","capturedAt":"2026-11-08T22:04:56Z","sha256":"4b11109c0602ce06642446ebc633a8093f1cbd49ef54154aed27f05166081bb0"}}]},"input_ownership":{"summary":"You keep all rights in your content, including data pulled in from connected services. Town claims no ownership.","status":"stated","cites":[{"quote":"You retain all right, title, and interest in and to Your Content, including any Outputs generated through your use of the Services.","source":{"doc":"terms","title":"Terms of Service","url":"https://www.town.com/terms-of-service","capturedAt":"2026-11-08T22:04:56Z","sha256":"4b11109c0602ce06642446ebc633a8093f1cbd49ef54154aed27f05166081bb0"}},{"quote":"Any content or information uploaded or transmitted to the Services by you or users, including from Third-Party Services (defined below) and any Outputs generated by or through the Services, constitutes **“Your Content.”**","source":{"doc":"terms","title":"Terms of Service","url":"https://www.town.com/terms-of-service","capturedAt":"2026-11-08T22:04:56Z","sha256":"4b11109c0602ce06642446ebc633a8093f1cbd49ef54154aed27f05166081bb0"}},{"quote":"Everything you bring into Town — emails, documents, prompts, outputs — remains yours. We claim no ownership over your content.","source":{"doc":"security","title":"Security, privacy, and approvals by design","url":"https://www.town.com/features/security","capturedAt":"2026-11-08T22:04:57Z","sha256":"2338cd79f3eb80aec104185e15d98e27789a6e1a028ee50b7feb557da1dce637"}}]},"output_ownership":{"summary":"You own Outputs. Town owns Performance Data, which includes agents' step-by-step execution traces, tool calls and intermediate reasoning, though Town may use it only in non-identifying form.","status":"stated","cites":[{"quote":"Inputs and Outputs are both Your Content.","source":{"doc":"terms","title":"Terms of Service","url":"https://www.town.com/terms-of-service","capturedAt":"2026-11-08T22:04:56Z","sha256":"4b11109c0602ce06642446ebc633a8093f1cbd49ef54154aed27f05166081bb0"}},{"quote":"the step-by-step execution traces and task trajectories generated by Agents in the course of performing tasks, including sequences of actions, tool invocations, intermediate reasoning steps, and system-level operational data) (**“Performance Data”**). As between Town and you, all right, title, and interest in the Performance Data, and all intellectual property rights therein, belong to and are retained solely by Town.","source":{"doc":"terms","title":"Terms of Service","url":"https://www.town.com/terms-of-service","capturedAt":"2026-11-08T22:04:56Z","sha256":"4b11109c0602ce06642446ebc633a8093f1cbd49ef54154aed27f05166081bb0"}},{"quote":"Town may use Performance Data to operate, improve, analyze, and support the Services and for other lawful business purposes, provided that the Performance Data will not identify you or your Confidential Information or any user.","source":{"doc":"terms","title":"Terms of Service","url":"https://www.town.com/terms-of-service","capturedAt":"2026-11-08T22:04:56Z","sha256":"4b11109c0602ce06642446ebc633a8093f1cbd49ef54154aed27f05166081bb0"}}]},"license_to_provider":{"summary":"You grant a non-exclusive, worldwide, royalty-free license for the Term, only to provide the Services. It's not perpetual, but de-identified Memory, aggregated data and Feedback remain usable.","status":"stated","cites":[{"quote":"You hereby grant to Town a non-exclusive, worldwide, royalty-free and fully paid-up license during the Term (as defined below) to access and use Your Content to provide the Services and any accompanying support to you as set forth in this Agreement.","source":{"doc":"terms","title":"Terms of Service","url":"https://www.town.com/terms-of-service","capturedAt":"2026-11-08T22:04:56Z","sha256":"4b11109c0602ce06642446ebc633a8093f1cbd49ef54154aed27f05166081bb0"}},{"quote":"Town may use and incorporate such Feedback in connection with its business, products and services without restriction or consideration to you.","source":{"doc":"terms","title":"Terms of Service","url":"https://www.town.com/terms-of-service","capturedAt":"2026-11-08T22:04:56Z","sha256":"4b11109c0602ce06642446ebc633a8093f1cbd49ef54154aed27f05166081bb0"}},{"quote":"All provisions of this Agreement which by their nature should survive, will survive termination of the Services, including without limitation, ownership provisions, warranty disclaimers, and limitations of liability.","source":{"doc":"terms","title":"Terms of Service","url":"https://www.town.com/terms-of-service","capturedAt":"2026-11-08T22:04:56Z","sha256":"4b11109c0602ce06642446ebc633a8093f1cbd49ef54154aed27f05166081bb0"}}]},"third_party_sharing":{"summary":"Content goes to model providers: Anthropic (primary), OpenAI, Bedrock, Gemini/Vertex, OpenRouter, ElevenLabs, Vapi (Terms only). Contracts bar provider training, with carve-outs. Ad cookies may count as a 'sale'.","status":"stated","cites":[{"quote":"Large language model processing for assistant and routine features. Primary model provider.","source":{"doc":"ai-model-providers","title":"AI Model Providers \\u2014 Town","url":"https://www.town.com/ai-model-providers","capturedAt":"2026-11-08T22:05:01Z","sha256":"b5ebe240bce7e5c2150061a132e137f2b97e7aa4cd50b8c80780651b476c4212"}},{"quote":"The AI Tools are powered by foundation models provided by third-party providers, which may include Anthropic, OpenAI, OpenRouter, Amazon Bedrock, Vertex AI Platform (Google Cloud), ElevenLabs, and Vapi.","source":{"doc":"terms","title":"Terms of Service","url":"https://www.town.com/terms-of-service","capturedAt":"2026-11-08T22:04:56Z","sha256":"4b11109c0602ce06642446ebc633a8093f1cbd49ef54154aed27f05166081bb0"}},{"quote":"Town's agreements with AI model providers contractually prohibit them from using customer inputs or outputs for model training.","source":{"doc":"ai-model-providers","title":"AI Model Providers \\u2014 Town","url":"https://www.town.com/ai-model-providers","capturedAt":"2026-11-08T22:05:01Z","sha256":"b5ebe240bce7e5c2150061a132e137f2b97e7aa4cd50b8c80780651b476c4212"}},{"quote":"we contractually require such providers not to use your personal information to train their own AI models except as necessary to provide services to us.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://www.town.com/privacy-policy","capturedAt":"2026-11-08T22:04:57Z","sha256":"4f044e6d1640358a2566d30cf93d47b07b8dc4c10cf5c4c435db7080e04f3667"}},{"quote":"our use of third-party advertising cookies and pixels for interest-based advertising, as described in this Privacy Policy, may constitute a “sale” of personal information or “sharing” of personal information for cross-context behavioral advertising, as those terms are defined under applicable state law. The categories of personal information involved are the Device data and Online activity data described above.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://www.town.com/privacy-policy","capturedAt":"2026-11-08T22:04:57Z","sha256":"4f044e6d1640358a2566d30cf93d47b07b8dc4c10cf5c4c435db7080e04f3667"}},{"quote":"We never sell your data.","source":{"doc":"docs-safety","title":"Trust & Security \\u2013 Town Docs","url":"https://www.town.com/docs/safety","capturedAt":"2026-11-08T22:04:56Z","sha256":"fec4f6aec4560a25614a8bc40c183081969fde1f8aeac1c875ba85d38ea2a40e"}}]},"data_location":{"summary":"Data is hosted in the US on Convex and AWS. There's no EU data residency, and international transfers rely on SCCs in the DPA.","status":"stated","cites":[{"quote":"Town is **US-hosted** (Convex and AWS). We don’t offer EU data residency today. International data transfers are covered by the Standard Contractual Clauses (SCCs) in our [DPA ](https://www.town.com/dpa).","source":{"doc":"docs-safety","title":"Trust & Security \\u2013 Town Docs","url":"https://www.town.com/docs/safety","capturedAt":"2026-11-08T22:04:56Z","sha256":"fec4f6aec4560a25614a8bc40c183081969fde1f8aeac1c875ba85d38ea2a40e"}},{"quote":"This means that, if you use the Service, your personal information will necessarily be accessed and processed in the U.S. It may also be provided to recipients in other countries outside of your home country.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://www.town.com/privacy-policy","capturedAt":"2026-11-08T22:04:57Z","sha256":"4f044e6d1640358a2566d30cf93d47b07b8dc4c10cf5c4c435db7080e04f3667"}}]},"enterprise_controls":{"summary":"A Team admin may access, monitor, restrict or remove your content, and may disable your work-email account if you're removed. Organization-level controls are listed under enterprise.","status":"stated","cites":[{"quote":"If you are a member of a Team administered by an Organization, you acknowledge that the Team administrator may have the ability to access, monitor, restrict, or remove Your Content within the Team, and may control your access to certain features of the Services.","source":{"doc":"terms","title":"Terms of Service","url":"https://www.town.com/terms-of-service","capturedAt":"2026-11-08T22:04:56Z","sha256":"4b11109c0602ce06642446ebc633a8093f1cbd49ef54154aed27f05166081bb0"}},{"quote":"where the user’s account is associated with a work email address provided by or through the Organization, the user’s account will be downgraded to the individual tier of the Services, and the user will retain Your Content associated with such account; provided that the Organization administrator may elect to disable such account entirely.","source":{"doc":"terms","title":"Terms of Service","url":"https://www.town.com/terms-of-service","capturedAt":"2026-11-08T22:04:56Z","sha256":"4b11109c0602ce06642446ebc633a8093f1cbd49ef54154aed27f05166081bb0"}}]}}},{"id":"enterprise","name":"Town for Organizations (Enterprise Agreement / DPA customers)","surface":"enterprise","facts":{"default_retention":{"summary":"Not stated in the captured policies. Business-customer data falls outside the privacy policy and is governed by the customer agreement, which isn't captured.","status":"not_stated","cites":[]},"deletion_window":{"summary":"Inferred: the docs' 30-day account deletion statement isn't limited to individual plans, but an Enterprise Agreement or DPA (not captured) could set different terms. Terminating an Organization disables work-email accounts.","status":"inferred","cites":[{"quote":"**Everything is permanently removed within 30 days.**","source":{"doc":"docs-safety","title":"Trust & Security \\u2013 Town Docs","url":"https://www.town.com/docs/safety","capturedAt":"2026-11-08T22:04:56Z","sha256":"fec4f6aec4560a25614a8bc40c183081969fde1f8aeac1c875ba85d38ea2a40e"}},{"quote":"any Team member whose account is associated with a work email address provided by or through the Organization will have their account disabled.","source":{"doc":"terms","title":"Terms of Service","url":"https://www.town.com/terms-of-service","capturedAt":"2026-11-08T22:04:56Z","sha256":"4b11109c0602ce06642446ebc633a8093f1cbd49ef54154aed27f05166081bb0"}}]},"retention_exceptions":{"summary":"Not stated for enterprise customers specifically. That would be in the Enterprise Agreement or DPA, neither of which is captured.","status":"not_stated","cites":[]},"zdr":{"summary":"No zero-data-retention offering is described for organizations.","status":"not_stated","cites":[]},"training_default":{"summary":"The default for organizations isn't stated. An Organization's training opt-out overrides each member's own setting. Google Workspace data is never used for training.","status":"stated","cites":[{"quote":"For users under an Organization license (as provided in the Terms of Service), if the Organization’s setting has opted-out of training, this will supersede individual user settings for that Organization.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://www.town.com/privacy-policy","capturedAt":"2026-11-08T22:04:57Z","sha256":"4f044e6d1640358a2566d30cf93d47b07b8dc4c10cf5c4c435db7080e04f3667"}},{"quote":"we do NOT use Google user data to train machine learning models","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://www.town.com/privacy-policy","capturedAt":"2026-11-08T22:04:57Z","sha256":"4f044e6d1640358a2566d30cf93d47b07b8dc4c10cf5c4c435db7080e04f3667"}}]},"training_opt_out":{"summary":"There's an Organization-level setting that, once opted out, overrides individual users. How admins reach it isn't described.","status":"stated","cites":[{"quote":"if the Organization’s setting has opted-out of training, this will supersede individual user settings for that Organization.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://www.town.com/privacy-policy","capturedAt":"2026-11-08T22:04:57Z","sha256":"4f044e6d1640358a2566d30cf93d47b07b8dc4c10cf5c4c435db7080e04f3667"}}]},"human_review":{"summary":"Inferred: the docs' staff-access limits (support with approval, CEO/CPO for incidents) appear to apply company-wide. The Organization's own admin may access members' content.","status":"inferred","cites":[{"quote":"**No Town team member has production database access.** Full stop.","source":{"doc":"docs-safety","title":"Trust & Security \\u2013 Town Docs","url":"https://www.town.com/docs/safety","capturedAt":"2026-11-08T22:04:56Z","sha256":"fec4f6aec4560a25614a8bc40c183081969fde1f8aeac1c875ba85d38ea2a40e"}},{"quote":"the Team administrator may have the ability to access, monitor, restrict, or remove Your Content within the Team","source":{"doc":"terms","title":"Terms of Service","url":"https://www.town.com/terms-of-service","capturedAt":"2026-11-08T22:04:56Z","sha256":"4b11109c0602ce06642446ebc633a8093f1cbd49ef54154aed27f05166081bb0"}}]},"memory":{"summary":"Memory Data handling for organizations may be governed by the Enterprise Agreement. Its enterprise-specific terms aren't captured.","status":"inferred","cites":[{"quote":"To the extent an Enterprise Agreement has been duly executed by your Organization, Town’s collection, use, and processing of Your Content obtained in connection with your use of the Services pursuant to your relationship with such Organization may be governed by such Enterprise Agreement.","source":{"doc":"terms","title":"Terms of Service","url":"https://www.town.com/terms-of-service","capturedAt":"2026-11-08T22:04:56Z","sha256":"4b11109c0602ce06642446ebc633a8093f1cbd49ef54154aed27f05166081bb0"}}]},"connector_data":{"summary":"Team-level integrations and shared content are stripped from a member's account when they leave or the Organization terminates. Microsoft 365 admins can manage access through Entra.","status":"stated","cites":[{"quote":"provided, however, that all Team-level integrations, shared content, and Team-level features will be removed from such account","source":{"doc":"terms","title":"Terms of Service","url":"https://www.town.com/terms-of-service","capturedAt":"2026-11-08T22:04:56Z","sha256":"4b11109c0602ce06642446ebc633a8093f1cbd49ef54154aed27f05166081bb0"}},{"quote":"For Microsoft 365 tenants, admins can already manage access via [Microsoft Entra](/docs/admin-setup/microsoft-entra).","source":{"doc":"docs-safety","title":"Trust & Security \\u2013 Town Docs","url":"https://www.town.com/docs/safety","capturedAt":"2026-11-08T22:04:56Z","sha256":"fec4f6aec4560a25614a8bc40c183081969fde1f8aeac1c875ba85d38ea2a40e"}}]},"agent_actions":{"summary":"No enterprise-specific agent logging or approval controls are described beyond the per-agent, per-workflow and per-tool modes available to all users.","status":"not_stated","cites":[]},"input_ownership":{"summary":"Inferred: the Terms' rule that you keep rights in Your Content applies unless the Enterprise Agreement conflicts, since that agreement prevails.","status":"inferred","cites":[{"quote":"then the terms of such Enterprise Agreement will govern your use of and access to the Services and will supersede this Agreement to the extent of any conflict.","source":{"doc":"terms","title":"Terms of Service","url":"https://www.town.com/terms-of-service","capturedAt":"2026-11-08T22:04:56Z","sha256":"4b11109c0602ce06642446ebc633a8093f1cbd49ef54154aed27f05166081bb0"}},{"quote":"You retain all right, title, and interest in and to Your Content, including any Outputs generated through your use of the Services.","source":{"doc":"terms","title":"Terms of Service","url":"https://www.town.com/terms-of-service","capturedAt":"2026-11-08T22:04:56Z","sha256":"4b11109c0602ce06642446ebc633a8093f1cbd49ef54154aed27f05166081bb0"}}]},"output_ownership":{"summary":"Inferred: the standard Terms (you own Outputs, Town owns Performance Data) apply unless the Enterprise Agreement says otherwise.","status":"inferred","cites":[{"quote":"You acknowledge and agree that this Agreement is incorporated into any Enterprise Agreement to which you are bound, and the terms of that Enterprise Agreement prevail in the event of conflict with this Agreement.","source":{"doc":"terms","title":"Terms of Service","url":"https://www.town.com/terms-of-service","capturedAt":"2026-11-08T22:04:56Z","sha256":"4b11109c0602ce06642446ebc633a8093f1cbd49ef54154aed27f05166081bb0"}}]},"license_to_provider":{"summary":"Inferred: the Term-limited, service-only license in the standard Terms applies unless the Enterprise Agreement changes it. That agreement isn't captured.","status":"inferred","cites":[{"quote":"You hereby grant to Town a non-exclusive, worldwide, royalty-free and fully paid-up license during the Term (as defined below) to access and use Your Content to provide the Services and any accompanying support to you as set forth in this Agreement.","source":{"doc":"terms","title":"Terms of Service","url":"https://www.town.com/terms-of-service","capturedAt":"2026-11-08T22:04:56Z","sha256":"4b11109c0602ce06642446ebc633a8093f1cbd49ef54154aed27f05166081bb0"}},{"quote":"the terms of that Enterprise Agreement prevail in the event of conflict with this Agreement.","source":{"doc":"terms","title":"Terms of Service","url":"https://www.town.com/terms-of-service","capturedAt":"2026-11-08T22:04:56Z","sha256":"4b11109c0602ce06642446ebc633a8093f1cbd49ef54154aed27f05166081bb0"}}]},"third_party_sharing":{"summary":"Inferred: the same model-provider list and no-training commitment cover all customers. The DPA governs processing for Organizations, and the subprocessor list is on a separate, uncaptured page.","status":"inferred","cites":[{"quote":"The following AI model providers may process customer data when delivering Town's product features.","source":{"doc":"ai-model-providers","title":"AI Model Providers \\u2014 Town","url":"https://www.town.com/ai-model-providers","capturedAt":"2026-11-08T22:05:01Z","sha256":"b5ebe240bce7e5c2150061a132e137f2b97e7aa4cd50b8c80780651b476c4212"}},{"quote":"If you are accessing or using the Services on behalf of an Organization, Town’s Data Processing Addendum (**“DPA”**), available at [town.com/dpa](/dpa), is incorporated into and forms part of this Agreement and governs Town’s processing of personal data on behalf of such Organization in connection with the Services.","source":{"doc":"terms","title":"Terms of Service","url":"https://www.town.com/terms-of-service","capturedAt":"2026-11-08T22:04:56Z","sha256":"4b11109c0602ce06642446ebc633a8093f1cbd49ef54154aed27f05166081bb0"}}]},"data_location":{"summary":"US-hosted only, with no EU residency option and SCCs for transfers.","status":"stated","cites":[{"quote":"Town is **US-hosted** (Convex and AWS). We don’t offer EU data residency today.","source":{"doc":"docs-safety","title":"Trust & Security \\u2013 Town Docs","url":"https://www.town.com/docs/safety","capturedAt":"2026-11-08T22:04:56Z","sha256":"fec4f6aec4560a25614a8bc40c183081969fde1f8aeac1c875ba85d38ea2a40e"}}]},"enterprise_controls":{"summary":"A DPA, SOC 2 Type 2 and CASA are in place, and SSO/SAML is on the roadmap. SCIM, HIPAA/BAA and 'GDPR' are unavailable. Custom retention and audit logs aren't stated.","status":"stated","cites":[{"quote":"**SSO / SAML** — on the enterprise roadmap; no committed date yet.","source":{"doc":"docs-safety","title":"Trust & Security \\u2013 Town Docs","url":"https://www.town.com/docs/safety","capturedAt":"2026-11-08T22:04:56Z","sha256":"fec4f6aec4560a25614a8bc40c183081969fde1f8aeac1c875ba85d38ea2a40e"}},{"quote":"**SCIM (automated user provisioning)** — not supported and not currently planned.","source":{"doc":"docs-safety","title":"Trust & Security \\u2013 Town Docs","url":"https://www.town.com/docs/safety","capturedAt":"2026-11-08T22:04:56Z","sha256":"fec4f6aec4560a25614a8bc40c183081969fde1f8aeac1c875ba85d38ea2a40e"}},{"quote":"**HIPAA / BAA** — not available today.","source":{"doc":"docs-safety","title":"Trust & Security \\u2013 Town Docs","url":"https://www.town.com/docs/safety","capturedAt":"2026-11-08T22:04:56Z","sha256":"fec4f6aec4560a25614a8bc40c183081969fde1f8aeac1c875ba85d38ea2a40e"}},{"quote":"**GDPR** — not available today.","source":{"doc":"docs-safety","title":"Trust & Security \\u2013 Town Docs","url":"https://www.town.com/docs/safety","capturedAt":"2026-11-08T22:04:56Z","sha256":"fec4f6aec4560a25614a8bc40c183081969fde1f8aeac1c875ba85d38ea2a40e"}},{"quote":"**SOC 2 Type 2 — completed.**","source":{"doc":"docs-safety","title":"Trust & Security \\u2013 Town Docs","url":"https://www.town.com/docs/safety","capturedAt":"2026-11-08T22:04:56Z","sha256":"fec4f6aec4560a25614a8bc40c183081969fde1f8aeac1c875ba85d38ea2a40e"}},{"quote":"The Organization is responsible for managing Team membership, access controls, and permissions within the Team and for payment obligations associated with the Team.","source":{"doc":"terms","title":"Terms of Service","url":"https://www.town.com/terms-of-service","capturedAt":"2026-11-08T22:04:56Z","sha256":"4b11109c0602ce06642446ebc633a8093f1cbd49ef54154aed27f05166081bb0"}}]}}}],"notes":[{"text":"Training statements conflict. The docs say Town's own training is off by default and opt-in, but the privacy policy says Town may train its models and offers an opt-out toggle.","cites":[{"quote":"Using your data for AI training is off by default","source":{"doc":"docs-safety","title":"Trust & Security \\u2013 Town Docs","url":"https://www.town.com/docs/safety","capturedAt":"2026-11-08T22:04:56Z","sha256":"fec4f6aec4560a25614a8bc40c183081969fde1f8aeac1c875ba85d38ea2a40e"}},{"quote":"You may opt-out of our use of your personal information for AI training purposes by using the toggle feature provided in your account settings.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://www.town.com/privacy-policy","capturedAt":"2026-11-08T22:04:57Z","sha256":"4f044e6d1640358a2566d30cf93d47b07b8dc4c10cf5c4c435db7080e04f3667"}}]},{"text":"The provider no-training promise is worded differently on each page. The privacy policy carves out training 'as necessary to provide services to us', and the AI providers page allows it if a customer enables it.","cites":[{"quote":"we contractually require such providers not to use your personal information to train their own AI models except as necessary to provide services to us.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://www.town.com/privacy-policy","capturedAt":"2026-11-08T22:04:57Z","sha256":"4f044e6d1640358a2566d30cf93d47b07b8dc4c10cf5c4c435db7080e04f3667"}},{"quote":"We configure each provider and routing layer so customer inputs and outputs are not used to train third-party foundation models, unless a customer explicitly enables or instructs that use.","source":{"doc":"ai-model-providers","title":"AI Model Providers \\u2014 Town","url":"https://www.town.com/ai-model-providers","capturedAt":"2026-11-08T22:05:01Z","sha256":"b5ebe240bce7e5c2150061a132e137f2b97e7aa4cd50b8c80780651b476c4212"}},{"quote":"We ensure that our agreements with providers of AI Tools do not permit them to use Inputs to train their models","source":{"doc":"terms","title":"Terms of Service","url":"https://www.town.com/terms-of-service","capturedAt":"2026-11-08T22:04:56Z","sha256":"4b11109c0602ce06642446ebc633a8093f1cbd49ef54154aed27f05166081bb0"}}]},{"text":"The Terms name Vapi as a model provider, but the AI model providers page doesn't list it. Town can change providers at any time.","cites":[{"quote":"Town may add, remove, or replace third-party model providers at any time, and your continued use of the Services constitutes acceptance of the applicable acceptable use policies of any such providers.","source":{"doc":"terms","title":"Terms of Service","url":"https://www.town.com/terms-of-service","capturedAt":"2026-11-08T22:04:56Z","sha256":"4b11109c0602ce06642446ebc633a8093f1cbd49ef54154aed27f05166081bb0"}}]},{"text":"The Wiki and Memory Data cannot be exported, and after termination Town may keep Memory Data in de-identified form. That sits uneasily with 'permanently remove all data within 30 days'.","cites":[{"quote":"Memory Data is stored in a format integral to the Services and may not be exported or transferred to third-party platforms.","source":{"doc":"terms","title":"Terms of Service","url":"https://www.town.com/terms-of-service","capturedAt":"2026-11-08T22:04:56Z","sha256":"4b11109c0602ce06642446ebc633a8093f1cbd49ef54154aed27f05166081bb0"}},{"quote":"may retain Memory Data in de-identified or aggregated form for product improvement purposes.","source":{"doc":"terms","title":"Terms of Service","url":"https://www.town.com/terms-of-service","capturedAt":"2026-11-08T22:04:56Z","sha256":"4b11109c0602ce06642446ebc633a8093f1cbd49ef54154aed27f05166081bb0"}}]},{"text":"Town owns agent execution traces, including tool calls and intermediate reasoning, as 'Performance Data'.","cites":[{"quote":"As between Town and you, all right, title, and interest in the Performance Data, and all intellectual property rights therein, belong to and are retained solely by Town.","source":{"doc":"terms","title":"Terms of Service","url":"https://www.town.com/terms-of-service","capturedAt":"2026-11-08T22:04:56Z","sha256":"4b11109c0602ce06642446ebc633a8093f1cbd49ef54154aed27f05166081bb0"}}]},{"text":"Despite 'we never sell your data', the privacy policy runs interest-based advertising and session replay, and says ad cookies may legally count as a 'sale'.","cites":[{"quote":"We may also share information about our users with these companies to facilitate interest-based advertising to those or similar users on other online properties.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://www.town.com/privacy-policy","capturedAt":"2026-11-08T22:04:57Z","sha256":"4f044e6d1640358a2566d30cf93d47b07b8dc4c10cf5c4c435db7080e04f3667"}},{"quote":"**Session-replay technologies**, such as those provided by third parties that employ software code to record users’ interactions with the Service in a manner that allows us to watch video replays of those user sessions.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://www.town.com/privacy-policy","capturedAt":"2026-11-08T22:04:57Z","sha256":"4f044e6d1640358a2566d30cf93d47b07b8dc4c10cf5c4c435db7080e04f3667"}}]},{"text":"Town's total liability is capped at US$100.","cites":[{"quote":"IN NO EVENT WILL TOWN’S AGGREGATE, CUMULATIVE LIABILITY IN ANY WAY RELATING TO THIS AGREEMENT EXCEED ONE HUNDRED U.S. DOLLARS (US\\$100).","source":{"doc":"terms","title":"Terms of Service","url":"https://www.town.com/terms-of-service","capturedAt":"2026-11-08T22:04:56Z","sha256":"4b11109c0602ce06642446ebc633a8093f1cbd49ef54154aed27f05166081bb0"}}]},{"text":"Town's encryption isn't zero-knowledge, so its systems can process your content.","cites":[{"quote":"One honest note: this isn’t “zero-knowledge” encryption. Town’s systems work with your data to actually do tasks for you, so the service can process your content during normal operation.","source":{"doc":"docs-safety","title":"Trust & Security \\u2013 Town Docs","url":"https://www.town.com/docs/safety","capturedAt":"2026-11-08T22:04:56Z","sha256":"fec4f6aec4560a25614a8bc40c183081969fde1f8aeac1c875ba85d38ea2a40e"}}]}],"gaps":["What exactly happens to already-indexed or stored email, calendar and Drive data when one integration is disconnected. The security page lists the FAQ 'What happens if I disconnect an integration?' but its answer isn't captured. Likely answered by an expanded security FAQ or the docs' integration pages.","How long security/audit records, legal-hold data and backups are retained after the 30-day deletion. Likely in the DPA (town.com/dpa) or the Trust Center (trust.town.com).","How long routine action logs and conversation/thread history are kept. Likely in /docs/safety/modes-approvals or /docs/safety/security.","Which training default actually applies (opt-in per the docs vs opt-out per the privacy policy), and whether the toggle covers Wiki/Memory Data. Likely in Settings → Privacy help docs or a future privacy-policy update.","How saved memories are stored and deleted individually. Likely in /docs/features/context-and-memory, which the Wiki page links to.","Enterprise retention, deletion, sub-processor and breach-notice terms. Likely in the DPA (town.com/dpa) and the subprocessor list (town.com/subprocessors).","Whether model providers' own abuse-monitoring retention applies, and for how long. Likely in each provider's commercial terms linked from /ai-model-providers."],"documents":[{"doc":"ai-model-providers","title":"AI Model Providers \\u2014 Town","url":"https://www.town.com/ai-model-providers","capturedAt":"2026-11-08T22:05:01Z","sha256":"b5ebe240bce7e5c2150061a132e137f2b97e7aa4cd50b8c80780651b476c4212"},{"doc":"privacy-policy","title":"Privacy Policy","url":"https://www.town.com/privacy-policy","capturedAt":"2026-11-08T22:04:57Z","sha256":"4f044e6d1640358a2566d30cf93d47b07b8dc4c10cf5c4c435db7080e04f3667"},{"doc":"security","title":"Security, privacy, and approvals by design","url":"https://www.town.com/features/security","capturedAt":"2026-11-08T22:04:57Z","sha256":"2338cd79f3eb80aec104185e15d98e27789a6e1a028ee50b7feb557da1dce637"},{"doc":"terms","title":"Terms of Service","url":"https://www.town.com/terms-of-service","capturedAt":"2026-11-08T22:04:56Z","sha256":"4b11109c0602ce06642446ebc633a8093f1cbd49ef54154aed27f05166081bb0"},{"doc":"docs-safety","title":"Trust & Security \\u2013 Town Docs","url":"https://www.town.com/docs/safety","capturedAt":"2026-11-08T22:04:56Z","sha256":"fec4f6aec4560a25614a8bc40c183081969fde1f8aeac1c875ba85d38ea2a40e"},{"doc":"docs-wiki","title":"Wiki \\u2013 Town Docs","url":"https://www.town.com/docs/features/wiki","capturedAt":"2026-11-08T22:05:00Z","sha256":"e0e1d252337c7fd2764b8749ed0f415765ec5b4fd0e4afaa31ca7f610a0941a6"}],"url":"https://gjalla.io/data-policies/town/"},{"id":"typesafe-jev","provider":"typesafe-jev","name":"Typesafe (Jev)","category":"decision-api","checkedOn":"2026-11-08","products":[{"id":"api","name":"Jev API and Playground","surface":"api","facts":{"default_retention":{"summary":"No fixed period. The privacy policy keeps data as long as reasonably needed for the Services or business purposes; the DPA keeps customer personal data 'as long as necessary'.","status":"stated","cites":[{"quote":"We retain personal data about you for as long as reasonably necessary to provide you with the Services, or otherwise in support of our business or commercial purposes.","source":{"doc":"privacy-policy","title":"Privacy policy","url":"https://typesafe.ai/legal/privacy-policy","capturedAt":"2026-11-08T21:38:20Z","sha256":"ef41e39051651e1c302bcc4d9ea8bd84606d725311dc2903d266ff182426e934"}},{"quote":"We collect the personal data you provide when you use the Services, including your prompts, data, instructions, and other input (“Input”).","source":{"doc":"privacy-policy","title":"Privacy policy","url":"https://typesafe.ai/legal/privacy-policy","capturedAt":"2026-11-08T21:38:20Z","sha256":"ef41e39051651e1c302bcc4d9ea8bd84606d725311dc2903d266ff182426e934"}},{"quote":"Customer Personal Data will be retained for as long as necessary taking into account the purpose of the Processing, and in compliance with applicable laws, including laws on the statute of limitations and Data Protection Law.","source":{"doc":"data-processing","title":"Data processing","url":"https://typesafe.ai/legal/data-processing","capturedAt":"2026-11-08T22:19:41Z","sha256":"b9f47b8c37263bdd0377500ea9826aa8a533df32d70ffa069992266bc9969cad"}}]},"deletion_window":{"summary":"You can request deletion; TypeSafe deletes or de-identifies data once no longer needed, unless law requires longer. No timeframe. The DPA has no deletion or return-of-data terms on termination.","status":"stated","cites":[{"quote":"When you request that we do so, we take measures to delete your personal data or keep it in a form that does not permit identifying you when this personal data is no longer reasonably necessary for the purposes for which we process it, unless we are required by law to keep this data for a longer period.","source":{"doc":"privacy-policy","title":"Privacy policy","url":"https://typesafe.ai/legal/privacy-policy","capturedAt":"2026-11-08T21:38:20Z","sha256":"ef41e39051651e1c302bcc4d9ea8bd84606d725311dc2903d266ff182426e934"}}]},"retention_exceptions":{"summary":"Data may be kept longer when law requires, and preserved for legal process, fraud or safety. The DPA adds statute-of-limitations retention. No durations or backup periods are stated.","status":"stated","cites":[{"quote":"When you request that we do so, we take measures to delete your personal data or keep it in a form that does not permit identifying you when this personal data is no longer reasonably necessary for the purposes for which we process it, unless we are required by law to keep this data for a longer period.","source":{"doc":"privacy-policy","title":"Privacy policy","url":"https://typesafe.ai/legal/privacy-policy","capturedAt":"2026-11-08T21:38:20Z","sha256":"ef41e39051651e1c302bcc4d9ea8bd84606d725311dc2903d266ff182426e934"}},{"quote":"We may access, preserve, and disclose personal data if we believe doing so is required or appropriate to:","source":{"doc":"privacy-policy","title":"Privacy policy","url":"https://typesafe.ai/legal/privacy-policy","capturedAt":"2026-11-08T21:38:20Z","sha256":"ef41e39051651e1c302bcc4d9ea8bd84606d725311dc2903d266ff182426e934"}},{"quote":"To find and prevent fraud and abuse, resolve disputes, or respond to trust and safety issues;","source":{"doc":"privacy-policy","title":"Privacy policy","url":"https://typesafe.ai/legal/privacy-policy","capturedAt":"2026-11-08T21:38:20Z","sha256":"ef41e39051651e1c302bcc4d9ea8bd84606d725311dc2903d266ff182426e934"}},{"quote":"Customer Personal Data will be retained for as long as necessary taking into account the purpose of the Processing, and in compliance with applicable laws, including laws on the statute of limitations and Data Protection Law.","source":{"doc":"data-processing","title":"Data processing","url":"https://typesafe.ai/legal/data-processing","capturedAt":"2026-11-08T22:19:41Z","sha256":"b9f47b8c37263bdd0377500ea9826aa8a533df32d70ffa069992266bc9969cad"}}]},"zdr":{"summary":"Inferred: ZDR is offered only to enterprise customers, so standard API and Playground users apparently don't get it. Neither the captured policies nor the DPA say this outright.","status":"inferred","cites":[{"quote":"Zero data retention is available for enterprise customers. Ask about the setup for your account.","source":{"doc":"enterprise","title":"TypeSafe AI","url":"https://typesafe.ai/enterprise","capturedAt":"2026-11-08T21:39:32Z","sha256":"b6f3992336d50dfb1e400d92dbe6820d16c63aa73c1a6a20cedeb8e68fa7fbfa"}}]},"training_default":{"summary":"No training. The privacy policy says TypeSafe won't train or fine-tune models on prompts or other Input. It says nothing about outputs; only the enterprise page mentions outputs.","status":"stated","cites":[{"quote":"We will not train or fine tune any artificial intelligence or machine learning models on your prompts or other Input.","source":{"doc":"privacy-policy","title":"Privacy policy","url":"https://typesafe.ai/legal/privacy-policy","capturedAt":"2026-11-08T21:38:20Z","sha256":"ef41e39051651e1c302bcc4d9ea8bd84606d725311dc2903d266ff182426e934"}},{"quote":"We (1) will not train or fine tune any artificial intelligence or machine learning models on Input, and (2) will not disclose any Input to a third party other than our service providers.","source":{"doc":"privacy-policy","title":"Privacy policy","url":"https://typesafe.ai/legal/privacy-policy","capturedAt":"2026-11-08T21:38:20Z","sha256":"ef41e39051651e1c302bcc4d9ea8bd84606d725311dc2903d266ff182426e934"}}]},"training_opt_out":{"summary":"Inferred: no opt-out needed since Input isn't trained on. The privacy policy still allows product development and aggregates; the DPA limits customer personal data to providing the Services.","status":"inferred","cites":[{"quote":"We (1) will not train or fine tune any artificial intelligence or machine learning models on Input, and (2) will not disclose any Input to a third party other than our service providers.","source":{"doc":"privacy-policy","title":"Privacy policy","url":"https://typesafe.ai/legal/privacy-policy","capturedAt":"2026-11-08T21:38:20Z","sha256":"ef41e39051651e1c302bcc4d9ea8bd84606d725311dc2903d266ff182426e934"}},{"quote":"To understand your preferences and analyze how you use the Services and develop new products, services, and technology;","source":{"doc":"privacy-policy","title":"Privacy policy","url":"https://typesafe.ai/legal/privacy-policy","capturedAt":"2026-11-08T21:38:20Z","sha256":"ef41e39051651e1c302bcc4d9ea8bd84606d725311dc2903d266ff182426e934"}},{"quote":"To generate anonymized or aggregated data that we may use for lawful purposes;","source":{"doc":"privacy-policy","title":"Privacy policy","url":"https://typesafe.ai/legal/privacy-policy","capturedAt":"2026-11-08T21:38:20Z","sha256":"ef41e39051651e1c302bcc4d9ea8bd84606d725311dc2903d266ff182426e934"}},{"quote":"Typesafe will only Process Customer Personal Data to provide the Services and in accordance with Customer’s documented instructions, which are set forth in this DPA, the Agreement, or otherwise provided by Customer to Typesafe in writing (“**Documented Instructions**”).","source":{"doc":"data-processing","title":"Data processing","url":"https://typesafe.ai/legal/data-processing","capturedAt":"2026-11-08T22:19:41Z","sha256":"b9f47b8c37263bdd0377500ea9826aa8a533df32d70ffa069992266bc9969cad"}},{"quote":"Typesafe will not (a) “sell” or “share” (as such terms are defined in the California Consumer Privacy Act (“**CCPA**”)) Customer Personal Data, (b) retain, use, or disclose Customer Personal Data for any purpose other than in accordance with the Documented Instructions","source":{"doc":"data-processing","title":"Data processing","url":"https://typesafe.ai/legal/data-processing","capturedAt":"2026-11-08T22:19:41Z","sha256":"b9f47b8c37263bdd0377500ea9826aa8a533df32d70ffa069992266bc9969cad"}}]},"human_review":{"summary":"Inferred: TypeSafe may monitor AUP compliance and investigate violations and fraud. The policies don't say whether or when staff read prompts.","status":"inferred","cites":[{"quote":"TypeSafe may monitor compliance with this AUP and investigate any violations.","source":{"doc":"acceptable-use","title":"Acceptable Use Policy","url":"https://typesafe.ai/legal/acceptable-use-policy","capturedAt":"2026-11-08T21:39:32Z","sha256":"2d7510eff31f4ee8532070edbcf1dadd8c60b28dd3a877ad44c99ccda8eabe46"}},{"quote":"To find and prevent fraud and abuse, resolve disputes, or respond to trust and safety issues;","source":{"doc":"privacy-policy","title":"Privacy policy","url":"https://typesafe.ai/legal/privacy-policy","capturedAt":"2026-11-08T21:38:20Z","sha256":"ef41e39051651e1c302bcc4d9ea8bd84606d725311dc2903d266ff182426e934"}}]},"memory":{"summary":"The captured policies describe no persistent memory or profile feature. Jev returns per-request decisions; nothing addresses stored context between calls.","status":"not_stated","cites":[]},"connector_data":{"summary":"Inferred: the policy mentions you may integrate third-party services but disclaims their privacy practices. It doesn't say what connected-account data TypeSafe stores or deletes on disconnect.","status":"inferred","cites":[{"quote":"The Services may contain links to other websites, products, or services that we do not own or operate or permit you to integrate with third-party services. We are not responsible for the privacy practices of these third parties.","source":{"doc":"privacy-policy","title":"Privacy policy","url":"https://typesafe.ai/legal/privacy-policy","capturedAt":"2026-11-08T21:38:20Z","sha256":"ef41e39051651e1c302bcc4d9ea8bd84606d725311dc2903d266ff182426e934"}}]},"agent_actions":{"summary":"The captured policies don't describe agent actions, browsing, or stored credentials or tokens.","status":"not_stated","cites":[]},"input_ownership":{"summary":"Not addressed. Product terms are in a separate agreement (the Master Customer Agreement), which isn't among the captured policies; the Terms of Use cover only the website.","status":"not_stated","cites":[]},"output_ownership":{"summary":"Not addressed. Output ownership would be in the Master Customer Agreement, which isn't among the captured policies.","status":"not_stated","cites":[]},"license_to_provider":{"summary":"No license over Input or Output appears in the captured policies. The only license shown is a perpetual, irrevocable one over website Feedback (see provider notes).","status":"not_stated","cites":[]},"third_party_sharing":{"summary":"No sale or ad sharing. Input goes only to service providers; data can reach affiliates, Google Analytics, law enforcement or acquirers. Subprocessors are listed on an uncaptured trust page.","status":"stated","cites":[{"quote":"We do not “sell” personal data nor “share” personal data for cross-contextual behavioral advertising.","source":{"doc":"privacy-policy","title":"Privacy policy","url":"https://typesafe.ai/legal/privacy-policy","capturedAt":"2026-11-08T21:38:20Z","sha256":"ef41e39051651e1c302bcc4d9ea8bd84606d725311dc2903d266ff182426e934"}},{"quote":"We (1) will not train or fine tune any artificial intelligence or machine learning models on Input, and (2) will not disclose any Input to a third party other than our service providers.","source":{"doc":"privacy-policy","title":"Privacy policy","url":"https://typesafe.ai/legal/privacy-policy","capturedAt":"2026-11-08T21:38:20Z","sha256":"ef41e39051651e1c302bcc4d9ea8bd84606d725311dc2903d266ff182426e934"}},{"quote":"Vendors and Service Providers. We may disclose personal data we receive to vendors and service providers that help us provide the Services.","source":{"doc":"privacy-policy","title":"Privacy policy","url":"https://typesafe.ai/legal/privacy-policy","capturedAt":"2026-11-08T21:38:20Z","sha256":"ef41e39051651e1c302bcc4d9ea8bd84606d725311dc2903d266ff182426e934"}},{"quote":"Affiliates. We may disclose personal data we receive to our subsidiaries and affiliates for the purposes described in this Privacy Policy.","source":{"doc":"privacy-policy","title":"Privacy policy","url":"https://typesafe.ai/legal/privacy-policy","capturedAt":"2026-11-08T21:38:20Z","sha256":"ef41e39051651e1c302bcc4d9ea8bd84606d725311dc2903d266ff182426e934"}},{"quote":"Partners. We use analytics services such as Google Analytics to collect and process analytics data.","source":{"doc":"privacy-policy","title":"Privacy policy","url":"https://typesafe.ai/legal/privacy-policy","capturedAt":"2026-11-08T21:38:20Z","sha256":"ef41e39051651e1c302bcc4d9ea8bd84606d725311dc2903d266ff182426e934"}},{"quote":"Notwithstanding anything to the contrary, including in the Agreement, TypeSafe may report any activity that it suspects violates any law or regulation to law enforcement officials, regulators, or other appropriate third parties, and cooperate with them to investigate and prosecute illegal conduct.","source":{"doc":"acceptable-use","title":"Acceptable Use Policy","url":"https://typesafe.ai/legal/acceptable-use-policy","capturedAt":"2026-11-08T21:39:32Z","sha256":"2d7510eff31f4ee8532070edbcf1dadd8c60b28dd3a877ad44c99ccda8eabe46"}},{"quote":"We may transfer your personal data to service providers, advisors, potential transactional partners, or other third parties in connection with the consideration, negotiation, or completion of a corporate transaction","source":{"doc":"privacy-policy","title":"Privacy policy","url":"https://typesafe.ai/legal/privacy-policy","capturedAt":"2026-11-08T21:38:20Z","sha256":"ef41e39051651e1c302bcc4d9ea8bd84606d725311dc2903d266ff182426e934"}},{"quote":"Customer provides general authorization for Typesafe to engage the following subprocessors as described in **https://trust.typesafe.ai/subprocessors** (“**Subprocessors**”).","source":{"doc":"data-processing","title":"Data processing","url":"https://typesafe.ai/legal/data-processing","capturedAt":"2026-11-08T22:19:41Z","sha256":"b9f47b8c37263bdd0377500ea9826aa8a533df32d70ffa069992266bc9969cad"}},{"quote":"Customer may object to the appointment of such new Subprocessor within 15 days of the date of such notice on reasonable privacy or security grounds by providing Typesafe written notice of its objection.","source":{"doc":"data-processing","title":"Data processing","url":"https://typesafe.ai/legal/data-processing","capturedAt":"2026-11-08T22:19:41Z","sha256":"b9f47b8c37263bdd0377500ea9826aa8a533df32d70ffa069992266bc9969cad"}},{"quote":"Typesafe will not (a) “sell” or “share” (as such terms are defined in the California Consumer Privacy Act (“**CCPA**”)) Customer Personal Data, (b) retain, use, or disclose Customer Personal Data for any purpose other than in accordance with the Documented Instructions","source":{"doc":"data-processing","title":"Data processing","url":"https://typesafe.ai/legal/data-processing","capturedAt":"2026-11-08T22:19:41Z","sha256":"b9f47b8c37263bdd0377500ea9826aa8a533df32d70ffa069992266bc9969cad"}}]},"data_location":{"summary":"Services are hosted in the U.S. The DPA allows continuous transfers to adequate countries or under EU SCCs and the UK Addendum. No storage regions or residency options are stated.","status":"stated","cites":[{"quote":"The Services are hosted in the United States (“U.S.”).","source":{"doc":"privacy-policy","title":"Privacy policy","url":"https://typesafe.ai/legal/privacy-policy","capturedAt":"2026-11-08T21:38:20Z","sha256":"ef41e39051651e1c302bcc4d9ea8bd84606d725311dc2903d266ff182426e934"}},{"quote":"then please note that you are transferring your personal data outside of those regions to the U.S. for storage and processing.","source":{"doc":"privacy-policy","title":"Privacy policy","url":"https://typesafe.ai/legal/privacy-policy","capturedAt":"2026-11-08T21:38:20Z","sha256":"ef41e39051651e1c302bcc4d9ea8bd84606d725311dc2903d266ff182426e934"}},{"quote":"Customer authorizes Typesafe to conduct transfers of Customer Personal Data to countries deemed to have an adequate level of data protection by the European Commission or the applicable competent regulatory authority on the basis of adequate safeguards in accordance with Data Protection Law or pursuant to (a) the contractual clauses annexed","source":{"doc":"data-processing","title":"Data processing","url":"https://typesafe.ai/legal/data-processing","capturedAt":"2026-11-08T22:19:41Z","sha256":"b9f47b8c37263bdd0377500ea9826aa8a533df32d70ffa069992266bc9969cad"}},{"quote":"On a continuous basis.","source":{"doc":"data-processing","title":"Data processing","url":"https://typesafe.ai/legal/data-processing","capturedAt":"2026-11-08T22:19:41Z","sha256":"b9f47b8c37263bdd0377500ea9826aa8a533df32d70ffa069992266bc9969cad"}}]},"enterprise_controls":{"summary":"Inferred: the DPA forms part of 'the Agreement' (the MCA or another written agreement), so it may cover API customers too. Whether self-serve API accounts get it isn't stated.","status":"inferred","cites":[{"quote":"This Typesafe Data Processing Addendum (“**DPA**”) forms part of the Agreement by and between Customer and Typesafe.","source":{"doc":"data-processing","title":"Data processing","url":"https://typesafe.ai/legal/data-processing","capturedAt":"2026-11-08T22:19:41Z","sha256":"b9f47b8c37263bdd0377500ea9826aa8a533df32d70ffa069992266bc9969cad"}},{"quote":"or any other written agreement, contract, instrument, or other writing entered into by you and TypeSafe governing the provision of the Services to you (the “**Agreement**”).","source":{"doc":"acceptable-use","title":"Acceptable Use Policy","url":"https://typesafe.ai/legal/acceptable-use-policy","capturedAt":"2026-11-08T21:39:32Z","sha256":"2d7510eff31f4ee8532070edbcf1dadd8c60b28dd3a877ad44c99ccda8eabe46"}}]}}},{"id":"enterprise","name":"Jev for Enterprise","surface":"enterprise","facts":{"default_retention":{"summary":"No fixed period. The privacy policy keeps data as long as reasonably needed for the Services or business purposes; the DPA keeps customer personal data 'as long as necessary'.","status":"stated","cites":[{"quote":"We retain personal data about you for as long as reasonably necessary to provide you with the Services, or otherwise in support of our business or commercial purposes.","source":{"doc":"privacy-policy","title":"Privacy policy","url":"https://typesafe.ai/legal/privacy-policy","capturedAt":"2026-11-08T21:38:20Z","sha256":"ef41e39051651e1c302bcc4d9ea8bd84606d725311dc2903d266ff182426e934"}},{"quote":"We collect the personal data you provide when you use the Services, including your prompts, data, instructions, and other input (“Input”).","source":{"doc":"privacy-policy","title":"Privacy policy","url":"https://typesafe.ai/legal/privacy-policy","capturedAt":"2026-11-08T21:38:20Z","sha256":"ef41e39051651e1c302bcc4d9ea8bd84606d725311dc2903d266ff182426e934"}},{"quote":"Customer Personal Data will be retained for as long as necessary taking into account the purpose of the Processing, and in compliance with applicable laws, including laws on the statute of limitations and Data Protection Law.","source":{"doc":"data-processing","title":"Data processing","url":"https://typesafe.ai/legal/data-processing","capturedAt":"2026-11-08T22:19:41Z","sha256":"b9f47b8c37263bdd0377500ea9826aa8a533df32d70ffa069992266bc9969cad"}}]},"deletion_window":{"summary":"You can request deletion; TypeSafe deletes or de-identifies data once no longer needed, unless law requires longer. No timeframe. The DPA has no deletion or return-of-data terms on termination.","status":"stated","cites":[{"quote":"When you request that we do so, we take measures to delete your personal data or keep it in a form that does not permit identifying you when this personal data is no longer reasonably necessary for the purposes for which we process it, unless we are required by law to keep this data for a longer period.","source":{"doc":"privacy-policy","title":"Privacy policy","url":"https://typesafe.ai/legal/privacy-policy","capturedAt":"2026-11-08T21:38:20Z","sha256":"ef41e39051651e1c302bcc4d9ea8bd84606d725311dc2903d266ff182426e934"}}]},"retention_exceptions":{"summary":"Data may be kept longer when law requires, and preserved for legal process, fraud or safety. The DPA adds statute-of-limitations retention. No durations or backup periods are stated.","status":"stated","cites":[{"quote":"When you request that we do so, we take measures to delete your personal data or keep it in a form that does not permit identifying you when this personal data is no longer reasonably necessary for the purposes for which we process it, unless we are required by law to keep this data for a longer period.","source":{"doc":"privacy-policy","title":"Privacy policy","url":"https://typesafe.ai/legal/privacy-policy","capturedAt":"2026-11-08T21:38:20Z","sha256":"ef41e39051651e1c302bcc4d9ea8bd84606d725311dc2903d266ff182426e934"}},{"quote":"We may access, preserve, and disclose personal data if we believe doing so is required or appropriate to:","source":{"doc":"privacy-policy","title":"Privacy policy","url":"https://typesafe.ai/legal/privacy-policy","capturedAt":"2026-11-08T21:38:20Z","sha256":"ef41e39051651e1c302bcc4d9ea8bd84606d725311dc2903d266ff182426e934"}},{"quote":"To find and prevent fraud and abuse, resolve disputes, or respond to trust and safety issues;","source":{"doc":"privacy-policy","title":"Privacy policy","url":"https://typesafe.ai/legal/privacy-policy","capturedAt":"2026-11-08T21:38:20Z","sha256":"ef41e39051651e1c302bcc4d9ea8bd84606d725311dc2903d266ff182426e934"}},{"quote":"Customer Personal Data will be retained for as long as necessary taking into account the purpose of the Processing, and in compliance with applicable laws, including laws on the statute of limitations and Data Protection Law.","source":{"doc":"data-processing","title":"Data processing","url":"https://typesafe.ai/legal/data-processing","capturedAt":"2026-11-08T22:19:41Z","sha256":"b9f47b8c37263bdd0377500ea9826aa8a533df32d70ffa069992266bc9969cad"}}]},"zdr":{"summary":"Zero data retention is available to enterprise customers on request. The enterprise page links it to the DPA, but the DPA never mentions ZDR, so eligibility and scope remain undescribed.","status":"stated","cites":[{"quote":"Zero data retention is available for enterprise customers. Ask about the setup for your account.","source":{"doc":"enterprise","title":"TypeSafe AI","url":"https://typesafe.ai/enterprise","capturedAt":"2026-11-08T21:39:32Z","sha256":"b6f3992336d50dfb1e400d92dbe6820d16c63aa73c1a6a20cedeb8e68fa7fbfa"}},{"quote":"[Data Handling & Privacy](./legal/data-processing)","source":{"doc":"enterprise","title":"TypeSafe AI","url":"https://typesafe.ai/enterprise","capturedAt":"2026-11-08T21:39:32Z","sha256":"b6f3992336d50dfb1e400d92dbe6820d16c63aa73c1a6a20cedeb8e68fa7fbfa"}}]},"training_default":{"summary":"No training. TypeSafe says it won't train or fine-tune models on prompts or other Input; the enterprise FAQ also says outputs aren't used for training.","status":"stated","cites":[{"quote":"We will not train or fine tune any artificial intelligence or machine learning models on your prompts or other Input.","source":{"doc":"privacy-policy","title":"Privacy policy","url":"https://typesafe.ai/legal/privacy-policy","capturedAt":"2026-11-08T21:38:20Z","sha256":"ef41e39051651e1c302bcc4d9ea8bd84606d725311dc2903d266ff182426e934"}},{"quote":"We (1) will not train or fine tune any artificial intelligence or machine learning models on Input, and (2) will not disclose any Input to a third party other than our service providers.","source":{"doc":"privacy-policy","title":"Privacy policy","url":"https://typesafe.ai/legal/privacy-policy","capturedAt":"2026-11-08T21:38:20Z","sha256":"ef41e39051651e1c302bcc4d9ea8bd84606d725311dc2903d266ff182426e934"}},{"quote":"No. We don’t use your inputs or outputs to train our models.","source":{"doc":"enterprise","title":"TypeSafe AI","url":"https://typesafe.ai/enterprise","capturedAt":"2026-11-08T21:39:32Z","sha256":"b6f3992336d50dfb1e400d92dbe6820d16c63aa73c1a6a20cedeb8e68fa7fbfa"}}]},"training_opt_out":{"summary":"Inferred: no opt-out needed since Input isn't trained on. The privacy policy still allows product development and aggregates; the DPA limits customer personal data to providing the Services.","status":"inferred","cites":[{"quote":"We (1) will not train or fine tune any artificial intelligence or machine learning models on Input, and (2) will not disclose any Input to a third party other than our service providers.","source":{"doc":"privacy-policy","title":"Privacy policy","url":"https://typesafe.ai/legal/privacy-policy","capturedAt":"2026-11-08T21:38:20Z","sha256":"ef41e39051651e1c302bcc4d9ea8bd84606d725311dc2903d266ff182426e934"}},{"quote":"To understand your preferences and analyze how you use the Services and develop new products, services, and technology;","source":{"doc":"privacy-policy","title":"Privacy policy","url":"https://typesafe.ai/legal/privacy-policy","capturedAt":"2026-11-08T21:38:20Z","sha256":"ef41e39051651e1c302bcc4d9ea8bd84606d725311dc2903d266ff182426e934"}},{"quote":"To generate anonymized or aggregated data that we may use for lawful purposes;","source":{"doc":"privacy-policy","title":"Privacy policy","url":"https://typesafe.ai/legal/privacy-policy","capturedAt":"2026-11-08T21:38:20Z","sha256":"ef41e39051651e1c302bcc4d9ea8bd84606d725311dc2903d266ff182426e934"}},{"quote":"Typesafe will only Process Customer Personal Data to provide the Services and in accordance with Customer’s documented instructions, which are set forth in this DPA, the Agreement, or otherwise provided by Customer to Typesafe in writing (“**Documented Instructions**”).","source":{"doc":"data-processing","title":"Data processing","url":"https://typesafe.ai/legal/data-processing","capturedAt":"2026-11-08T22:19:41Z","sha256":"b9f47b8c37263bdd0377500ea9826aa8a533df32d70ffa069992266bc9969cad"}},{"quote":"Typesafe will not (a) “sell” or “share” (as such terms are defined in the California Consumer Privacy Act (“**CCPA**”)) Customer Personal Data, (b) retain, use, or disclose Customer Personal Data for any purpose other than in accordance with the Documented Instructions","source":{"doc":"data-processing","title":"Data processing","url":"https://typesafe.ai/legal/data-processing","capturedAt":"2026-11-08T22:19:41Z","sha256":"b9f47b8c37263bdd0377500ea9826aa8a533df32d70ffa069992266bc9969cad"}}]},"human_review":{"summary":"Inferred: TypeSafe may monitor AUP compliance and investigate violations and fraud. The policies don't say whether or when staff read prompts.","status":"inferred","cites":[{"quote":"TypeSafe may monitor compliance with this AUP and investigate any violations.","source":{"doc":"acceptable-use","title":"Acceptable Use Policy","url":"https://typesafe.ai/legal/acceptable-use-policy","capturedAt":"2026-11-08T21:39:32Z","sha256":"2d7510eff31f4ee8532070edbcf1dadd8c60b28dd3a877ad44c99ccda8eabe46"}},{"quote":"To find and prevent fraud and abuse, resolve disputes, or respond to trust and safety issues;","source":{"doc":"privacy-policy","title":"Privacy policy","url":"https://typesafe.ai/legal/privacy-policy","capturedAt":"2026-11-08T21:38:20Z","sha256":"ef41e39051651e1c302bcc4d9ea8bd84606d725311dc2903d266ff182426e934"}}]},"memory":{"summary":"The captured policies describe no persistent memory or profile feature. Jev returns per-request decisions; nothing addresses stored context between calls.","status":"not_stated","cites":[]},"connector_data":{"summary":"Inferred: the policy mentions you may integrate third-party services but disclaims their privacy practices. It doesn't say what connected-account data TypeSafe stores or deletes on disconnect.","status":"inferred","cites":[{"quote":"The Services may contain links to other websites, products, or services that we do not own or operate or permit you to integrate with third-party services. We are not responsible for the privacy practices of these third parties.","source":{"doc":"privacy-policy","title":"Privacy policy","url":"https://typesafe.ai/legal/privacy-policy","capturedAt":"2026-11-08T21:38:20Z","sha256":"ef41e39051651e1c302bcc4d9ea8bd84606d725311dc2903d266ff182426e934"}}]},"agent_actions":{"summary":"The captured policies don't describe agent actions, browsing, or stored credentials or tokens.","status":"not_stated","cites":[]},"input_ownership":{"summary":"Not addressed. Product terms are in a separate agreement (the Master Customer Agreement), which isn't among the captured policies; the Terms of Use cover only the website.","status":"not_stated","cites":[]},"output_ownership":{"summary":"Not addressed. Output ownership would be in the Master Customer Agreement, which isn't among the captured policies.","status":"not_stated","cites":[]},"license_to_provider":{"summary":"No license over Input or Output appears in the captured policies. The only license shown is a perpetual, irrevocable one over website Feedback (see provider notes).","status":"not_stated","cites":[]},"third_party_sharing":{"summary":"No sale or ad sharing. Input goes only to service providers; data can reach affiliates, Google Analytics, law enforcement or acquirers. Subprocessors are listed on an uncaptured trust page.","status":"stated","cites":[{"quote":"We do not “sell” personal data nor “share” personal data for cross-contextual behavioral advertising.","source":{"doc":"privacy-policy","title":"Privacy policy","url":"https://typesafe.ai/legal/privacy-policy","capturedAt":"2026-11-08T21:38:20Z","sha256":"ef41e39051651e1c302bcc4d9ea8bd84606d725311dc2903d266ff182426e934"}},{"quote":"We (1) will not train or fine tune any artificial intelligence or machine learning models on Input, and (2) will not disclose any Input to a third party other than our service providers.","source":{"doc":"privacy-policy","title":"Privacy policy","url":"https://typesafe.ai/legal/privacy-policy","capturedAt":"2026-11-08T21:38:20Z","sha256":"ef41e39051651e1c302bcc4d9ea8bd84606d725311dc2903d266ff182426e934"}},{"quote":"Vendors and Service Providers. We may disclose personal data we receive to vendors and service providers that help us provide the Services.","source":{"doc":"privacy-policy","title":"Privacy policy","url":"https://typesafe.ai/legal/privacy-policy","capturedAt":"2026-11-08T21:38:20Z","sha256":"ef41e39051651e1c302bcc4d9ea8bd84606d725311dc2903d266ff182426e934"}},{"quote":"Affiliates. We may disclose personal data we receive to our subsidiaries and affiliates for the purposes described in this Privacy Policy.","source":{"doc":"privacy-policy","title":"Privacy policy","url":"https://typesafe.ai/legal/privacy-policy","capturedAt":"2026-11-08T21:38:20Z","sha256":"ef41e39051651e1c302bcc4d9ea8bd84606d725311dc2903d266ff182426e934"}},{"quote":"Partners. We use analytics services such as Google Analytics to collect and process analytics data.","source":{"doc":"privacy-policy","title":"Privacy policy","url":"https://typesafe.ai/legal/privacy-policy","capturedAt":"2026-11-08T21:38:20Z","sha256":"ef41e39051651e1c302bcc4d9ea8bd84606d725311dc2903d266ff182426e934"}},{"quote":"Notwithstanding anything to the contrary, including in the Agreement, TypeSafe may report any activity that it suspects violates any law or regulation to law enforcement officials, regulators, or other appropriate third parties, and cooperate with them to investigate and prosecute illegal conduct.","source":{"doc":"acceptable-use","title":"Acceptable Use Policy","url":"https://typesafe.ai/legal/acceptable-use-policy","capturedAt":"2026-11-08T21:39:32Z","sha256":"2d7510eff31f4ee8532070edbcf1dadd8c60b28dd3a877ad44c99ccda8eabe46"}},{"quote":"We may transfer your personal data to service providers, advisors, potential transactional partners, or other third parties in connection with the consideration, negotiation, or completion of a corporate transaction","source":{"doc":"privacy-policy","title":"Privacy policy","url":"https://typesafe.ai/legal/privacy-policy","capturedAt":"2026-11-08T21:38:20Z","sha256":"ef41e39051651e1c302bcc4d9ea8bd84606d725311dc2903d266ff182426e934"}},{"quote":"Customer provides general authorization for Typesafe to engage the following subprocessors as described in **https://trust.typesafe.ai/subprocessors** (“**Subprocessors**”).","source":{"doc":"data-processing","title":"Data processing","url":"https://typesafe.ai/legal/data-processing","capturedAt":"2026-11-08T22:19:41Z","sha256":"b9f47b8c37263bdd0377500ea9826aa8a533df32d70ffa069992266bc9969cad"}},{"quote":"Customer may object to the appointment of such new Subprocessor within 15 days of the date of such notice on reasonable privacy or security grounds by providing Typesafe written notice of its objection.","source":{"doc":"data-processing","title":"Data processing","url":"https://typesafe.ai/legal/data-processing","capturedAt":"2026-11-08T22:19:41Z","sha256":"b9f47b8c37263bdd0377500ea9826aa8a533df32d70ffa069992266bc9969cad"}},{"quote":"Typesafe will not (a) “sell” or “share” (as such terms are defined in the California Consumer Privacy Act (“**CCPA**”)) Customer Personal Data, (b) retain, use, or disclose Customer Personal Data for any purpose other than in accordance with the Documented Instructions","source":{"doc":"data-processing","title":"Data processing","url":"https://typesafe.ai/legal/data-processing","capturedAt":"2026-11-08T22:19:41Z","sha256":"b9f47b8c37263bdd0377500ea9826aa8a533df32d70ffa069992266bc9969cad"}}]},"data_location":{"summary":"Services are hosted in the U.S. The DPA allows continuous transfers to adequate countries or under EU SCCs and the UK Addendum. No storage regions or residency options are stated.","status":"stated","cites":[{"quote":"The Services are hosted in the United States (“U.S.”).","source":{"doc":"privacy-policy","title":"Privacy policy","url":"https://typesafe.ai/legal/privacy-policy","capturedAt":"2026-11-08T21:38:20Z","sha256":"ef41e39051651e1c302bcc4d9ea8bd84606d725311dc2903d266ff182426e934"}},{"quote":"then please note that you are transferring your personal data outside of those regions to the U.S. for storage and processing.","source":{"doc":"privacy-policy","title":"Privacy policy","url":"https://typesafe.ai/legal/privacy-policy","capturedAt":"2026-11-08T21:38:20Z","sha256":"ef41e39051651e1c302bcc4d9ea8bd84606d725311dc2903d266ff182426e934"}},{"quote":"Customer authorizes Typesafe to conduct transfers of Customer Personal Data to countries deemed to have an adequate level of data protection by the European Commission or the applicable competent regulatory authority on the basis of adequate safeguards in accordance with Data Protection Law or pursuant to (a) the contractual clauses annexed","source":{"doc":"data-processing","title":"Data processing","url":"https://typesafe.ai/legal/data-processing","capturedAt":"2026-11-08T22:19:41Z","sha256":"b9f47b8c37263bdd0377500ea9826aa8a533df32d70ffa069992266bc9969cad"}},{"quote":"On a continuous basis.","source":{"doc":"data-processing","title":"Data processing","url":"https://typesafe.ai/legal/data-processing","capturedAt":"2026-11-08T22:19:41Z","sha256":"b9f47b8c37263bdd0377500ea9826aa8a533df32d70ffa069992266bc9969cad"}}]},"enterprise_controls":{"summary":"SOC 2 report, ZDR and higher limits. The DPA adds processor-only terms, 72-hour breach notice, annual audits at customer cost and subprocessor objections. SSO, custom retention and BAA aren't described.","status":"stated","cites":[{"quote":"Visit our Trust Center to request access to the SOC 2 Type II report.","source":{"doc":"enterprise","title":"TypeSafe AI","url":"https://typesafe.ai/enterprise","capturedAt":"2026-11-08T21:39:32Z","sha256":"b6f3992336d50dfb1e400d92dbe6820d16c63aa73c1a6a20cedeb8e68fa7fbfa"}},{"quote":"Zero data retention is available for enterprise customers. Ask about the setup for your account.","source":{"doc":"enterprise","title":"TypeSafe AI","url":"https://typesafe.ai/enterprise","capturedAt":"2026-11-08T21:39:32Z","sha256":"b6f3992336d50dfb1e400d92dbe6820d16c63aa73c1a6a20cedeb8e68fa7fbfa"}},{"quote":"Talk to us about higher limits, data requirements, or getting started.","source":{"doc":"enterprise","title":"TypeSafe AI","url":"https://typesafe.ai/enterprise","capturedAt":"2026-11-08T21:39:32Z","sha256":"b6f3992336d50dfb1e400d92dbe6820d16c63aa73c1a6a20cedeb8e68fa7fbfa"}},{"quote":"Customer is the “controller” and “business” (as such terms are defined under applicable Data Protection Law), and Typesafe is the “processor” and “service provider”","source":{"doc":"data-processing","title":"Data processing","url":"https://typesafe.ai/legal/data-processing","capturedAt":"2026-11-08T22:19:41Z","sha256":"b9f47b8c37263bdd0377500ea9826aa8a533df32d70ffa069992266bc9969cad"}},{"quote":"Typesafe will notify Customer without undue delay and in any case within 72 hours after becoming aware of any accidental or unauthorized access to, or disclosure or use of, Customer Personal Data (“**Security Incident**”).","source":{"doc":"data-processing","title":"Data processing","url":"https://typesafe.ai/legal/data-processing","capturedAt":"2026-11-08T22:19:41Z","sha256":"b9f47b8c37263bdd0377500ea9826aa8a533df32d70ffa069992266bc9969cad"}},{"quote":"Upon Customer’s written request, no more than once every 12 months, Typesafe will permit Customer to audit Typesafe’s controls applicable to its Processing of Customer Personal Data and compliance with this DPA (“**Audit**”)","source":{"doc":"data-processing","title":"Data processing","url":"https://typesafe.ai/legal/data-processing","capturedAt":"2026-11-08T22:19:41Z","sha256":"b9f47b8c37263bdd0377500ea9826aa8a533df32d70ffa069992266bc9969cad"}},{"quote":"Customer may object to the appointment of such new Subprocessor within 15 days of the date of such notice on reasonable privacy or security grounds by providing Typesafe written notice of its objection.","source":{"doc":"data-processing","title":"Data processing","url":"https://typesafe.ai/legal/data-processing","capturedAt":"2026-11-08T22:19:41Z","sha256":"b9f47b8c37263bdd0377500ea9826aa8a533df32d70ffa069992266bc9969cad"}}]}}}],"notes":[{"text":"The privacy policy covers the Playground web interface and the APIs together and doesn't treat them differently, so they're one product here. The captured policies describe no chat app.","cites":[{"quote":"our web-based interface(s) (the “Playground”), application programming interfaces (“APIs”), and other services that link to this Privacy Policy (collectively, the “Services”).","source":{"doc":"privacy-policy","title":"Privacy policy","url":"https://typesafe.ai/legal/privacy-policy","capturedAt":"2026-11-08T21:38:20Z","sha256":"ef41e39051651e1c302bcc4d9ea8bd84606d725311dc2903d266ff182426e934"}},{"quote":"Jev returns typed decisions with calibrated probabilities, so your software can account for uncertainty.","source":{"doc":"home","title":"Home","url":"https://typesafe.ai/","capturedAt":"2026-11-08T21:38:21Z","sha256":"b153b5decd673e1e1579f292af7742924e5bcc8b16d879376e9251a838f43f98"}}]},{"text":"The Terms of Use cover only the marketing website. Product use is governed by a separate agreement (the Master Customer Agreement), which wasn't captured.","cites":[{"quote":"If you enter into a separate agreement with TypeSafe for the use of any TypeSafe products or services, including products or services offered through the Site, the terms of that separate agreement will govern your access to and use of those products and service.","source":{"doc":"terms","title":"Terms of use","url":"https://typesafe.ai/legal/terms","capturedAt":"2026-11-08T21:38:20Z","sha256":"c9a83b8dab2cbd8f2c8c1fe9b394467017a7a9b6d6f0c018457737165d8a3c8a"}},{"quote":"Capitalized terms not defined in this AUP have the meanings given in the TypeSafe Master Customer Agreement","source":{"doc":"acceptable-use","title":"Acceptable Use Policy","url":"https://typesafe.ai/legal/acceptable-use-policy","capturedAt":"2026-11-08T21:39:32Z","sha256":"2d7510eff31f4ee8532070edbcf1dadd8c60b28dd3a877ad44c99ccda8eabe46"}}]},{"text":"The 'no disclosure of Input except to service providers' promise sits beside clauses allowing disclosure for objectionable content and AUP reports to law enforcement 'notwithstanding anything to the contrary'.","cites":[{"quote":"We (1) will not train or fine tune any artificial intelligence or machine learning models on Input, and (2) will not disclose any Input to a third party other than our service providers.","source":{"doc":"privacy-policy","title":"Privacy policy","url":"https://typesafe.ai/legal/privacy-policy","capturedAt":"2026-11-08T21:38:20Z","sha256":"ef41e39051651e1c302bcc4d9ea8bd84606d725311dc2903d266ff182426e934"}},{"quote":"For the avoidance of doubt, the disclosure of personal data may occur if you input any objectionable content on or through with the Services.","source":{"doc":"privacy-policy","title":"Privacy policy","url":"https://typesafe.ai/legal/privacy-policy","capturedAt":"2026-11-08T21:38:20Z","sha256":"ef41e39051651e1c302bcc4d9ea8bd84606d725311dc2903d266ff182426e934"}},{"quote":"Notwithstanding anything to the contrary, including in the Agreement, TypeSafe may report any activity that it suspects violates any law or regulation to law enforcement officials, regulators, or other appropriate third parties, and cooperate with them to investigate and prosecute illegal conduct.","source":{"doc":"acceptable-use","title":"Acceptable Use Policy","url":"https://typesafe.ai/legal/acceptable-use-policy","capturedAt":"2026-11-08T21:39:32Z","sha256":"2d7510eff31f4ee8532070edbcf1dadd8c60b28dd3a877ad44c99ccda8eabe46"}}]},{"text":"Feedback about the website is licensed to TypeSafe perpetually and irrevocably, for any purpose.","cites":[{"quote":"you hereby grant TypeSafe an unrestricted, perpetual, irrevocable, non-exclusive, fully paid-up, royalty-free, transferable, sublicensable right to exploit the Feedback in any manner and for any purpose, including to improve the Site and create other products and services.","source":{"doc":"terms","title":"Terms of use","url":"https://typesafe.ai/legal/terms","capturedAt":"2026-11-08T21:38:20Z","sha256":"c9a83b8dab2cbd8f2c8c1fe9b394467017a7a9b6d6f0c018457737165d8a3c8a"}}]},{"text":"The no-training promise covers model training on Input only. Personal data may still be used to improve the Services and develop new products, and to create anonymized or aggregated data.","cites":[{"quote":"We (1) will not train or fine tune any artificial intelligence or machine learning models on Input, and (2) will not disclose any Input to a third party other than our service providers.","source":{"doc":"privacy-policy","title":"Privacy policy","url":"https://typesafe.ai/legal/privacy-policy","capturedAt":"2026-11-08T21:38:20Z","sha256":"ef41e39051651e1c302bcc4d9ea8bd84606d725311dc2903d266ff182426e934"}},{"quote":"To understand your preferences and analyze how you use the Services and develop new products, services, and technology;","source":{"doc":"privacy-policy","title":"Privacy policy","url":"https://typesafe.ai/legal/privacy-policy","capturedAt":"2026-11-08T21:38:20Z","sha256":"ef41e39051651e1c302bcc4d9ea8bd84606d725311dc2903d266ff182426e934"}},{"quote":"To generate anonymized or aggregated data that we may use for lawful purposes;","source":{"doc":"privacy-policy","title":"Privacy policy","url":"https://typesafe.ai/legal/privacy-policy","capturedAt":"2026-11-08T21:38:20Z","sha256":"ef41e39051651e1c302bcc4d9ea8bd84606d725311dc2903d266ff182426e934"}}]},{"text":"The DPA makes TypeSafe a processor for customer personal data: it uses that data only to provide the Services per the customer's instructions, and the DPA overrides conflicting Agreement terms.","cites":[{"quote":"Customer is the “controller” and “business” (as such terms are defined under applicable Data Protection Law), and Typesafe is the “processor” and “service provider”","source":{"doc":"data-processing","title":"Data processing","url":"https://typesafe.ai/legal/data-processing","capturedAt":"2026-11-08T22:19:41Z","sha256":"b9f47b8c37263bdd0377500ea9826aa8a533df32d70ffa069992266bc9969cad"}},{"quote":"Typesafe will only Process Customer Personal Data to provide the Services and in accordance with Customer’s documented instructions, which are set forth in this DPA, the Agreement, or otherwise provided by Customer to Typesafe in writing (“**Documented Instructions**”).","source":{"doc":"data-processing","title":"Data processing","url":"https://typesafe.ai/legal/data-processing","capturedAt":"2026-11-08T22:19:41Z","sha256":"b9f47b8c37263bdd0377500ea9826aa8a533df32d70ffa069992266bc9969cad"}},{"quote":"If there is any inconsistency or conflict between terms of this DPA and the other terms of the Agreement, the terms of this DPA will control to the extent of such inconsistency or conflict.","source":{"doc":"data-processing","title":"Data processing","url":"https://typesafe.ai/legal/data-processing","capturedAt":"2026-11-08T22:19:41Z","sha256":"b9f47b8c37263bdd0377500ea9826aa8a533df32d70ffa069992266bc9969cad"}}]},{"text":"The DPA's processor limits look narrower than the privacy policy, which allows retention for business purposes and use to develop new products. The captured policies don't say which governs customer data.","cites":[{"quote":"Typesafe will not (a) “sell” or “share” (as such terms are defined in the California Consumer Privacy Act (“**CCPA**”)) Customer Personal Data, (b) retain, use, or disclose Customer Personal Data for any purpose other than in accordance with the Documented Instructions","source":{"doc":"data-processing","title":"Data processing","url":"https://typesafe.ai/legal/data-processing","capturedAt":"2026-11-08T22:19:41Z","sha256":"b9f47b8c37263bdd0377500ea9826aa8a533df32d70ffa069992266bc9969cad"}},{"quote":"We retain personal data about you for as long as reasonably necessary to provide you with the Services, or otherwise in support of our business or commercial purposes.","source":{"doc":"privacy-policy","title":"Privacy policy","url":"https://typesafe.ai/legal/privacy-policy","capturedAt":"2026-11-08T21:38:20Z","sha256":"ef41e39051651e1c302bcc4d9ea8bd84606d725311dc2903d266ff182426e934"}},{"quote":"To understand your preferences and analyze how you use the Services and develop new products, services, and technology;","source":{"doc":"privacy-policy","title":"Privacy policy","url":"https://typesafe.ai/legal/privacy-policy","capturedAt":"2026-11-08T21:38:20Z","sha256":"ef41e39051651e1c302bcc4d9ea8bd84606d725311dc2903d266ff182426e934"}}]},{"text":"The enterprise page links its zero-data-retention claim to the data-processing page, but that page (the DPA) says nothing about ZDR.","cites":[{"quote":"Zero data retention is available for enterprise customers. Ask about the setup for your account.","source":{"doc":"enterprise","title":"TypeSafe AI","url":"https://typesafe.ai/enterprise","capturedAt":"2026-11-08T21:39:32Z","sha256":"b6f3992336d50dfb1e400d92dbe6820d16c63aa73c1a6a20cedeb8e68fa7fbfa"}},{"quote":"[Data Handling & Privacy](./legal/data-processing)","source":{"doc":"enterprise","title":"TypeSafe AI","url":"https://typesafe.ai/enterprise","capturedAt":"2026-11-08T21:39:32Z","sha256":"b6f3992336d50dfb1e400d92dbe6820d16c63aa73c1a6a20cedeb8e68fa7fbfa"}}]},{"text":"The DPA gives a 72-hour breach notice and lets customers object to new subprocessors within 15 days, but objections only lead to good-faith talks, with no stated right to terminate.","cites":[{"quote":"Typesafe will notify Customer without undue delay and in any case within 72 hours after becoming aware of any accidental or unauthorized access to, or disclosure or use of, Customer Personal Data (“**Security Incident**”).","source":{"doc":"data-processing","title":"Data processing","url":"https://typesafe.ai/legal/data-processing","capturedAt":"2026-11-08T22:19:41Z","sha256":"b9f47b8c37263bdd0377500ea9826aa8a533df32d70ffa069992266bc9969cad"}},{"quote":"In the event that Customer objects to Typesafe’s appointment of a new Subprocessor, Customer and Typesafe will work together in good faith to address any such objection.","source":{"doc":"data-processing","title":"Data processing","url":"https://typesafe.ai/legal/data-processing","capturedAt":"2026-11-08T22:19:41Z","sha256":"b9f47b8c37263bdd0377500ea9826aa8a533df32d70ffa069992266bc9969cad"}}]}],"gaps":["Concrete retention period for API Input and Output, plus logs: neither the privacy policy nor the DPA gives one; likely in the Master Customer Agreement (typesafe.ai/legal/mca, still not captured) or API docs (docs.typesafe.ai).","Input/Output ownership and the license granted to TypeSafe over customer content: not in the DPA; likely in the Master Customer Agreement (typesafe.ai/legal/mca), which is still not captured.","What ZDR covers, who qualifies and how it's configured: the DPA, which the enterprise page links for this, is silent. Possibly the MCA, an order form, or the Trust Center (trust.typesafe.ai).","The subprocessor list (trust.typesafe.ai/subprocessors) and Security Measures (trust.typesafe.ai) are referenced by the DPA but not captured; SSO, audit logs, and BAA availability also remain unaddressed.","Deletion or return of customer data at termination, deletion timeframes, and backup retention: not in the DPA or privacy policy; likely in the MCA.","Whether the DPA applies automatically to self-serve API and Playground accounts, or only to customers with a signed agreement: depends on the MCA's definition of 'Agreement'.","Answers to the enterprise FAQ (ZDR, where data is processed, VPC/on-prem deployment, BAA) were collapsed and not captured in the enterprise captured policy.","Whether humans review API Input for abuse or safety: the DPA is silent; possibly the MCA.","Provenance: the data-processing captured policy is a user-saved MHTML capture with an empty page title, not a direct fetch; worth re-fetching to confirm it matches the live page."],"documents":[{"doc":"acceptable-use","title":"Acceptable Use Policy","url":"https://typesafe.ai/legal/acceptable-use-policy","capturedAt":"2026-11-08T21:39:32Z","sha256":"2d7510eff31f4ee8532070edbcf1dadd8c60b28dd3a877ad44c99ccda8eabe46"},{"doc":"data-processing","title":"Data processing","url":"https://typesafe.ai/legal/data-processing","capturedAt":"2026-11-08T22:19:41Z","sha256":"b9f47b8c37263bdd0377500ea9826aa8a533df32d70ffa069992266bc9969cad"},{"doc":"home","title":"Home","url":"https://typesafe.ai/","capturedAt":"2026-11-08T21:38:21Z","sha256":"b153b5decd673e1e1579f292af7742924e5bcc8b16d879376e9251a838f43f98"},{"doc":"privacy-policy","title":"Privacy policy","url":"https://typesafe.ai/legal/privacy-policy","capturedAt":"2026-11-08T21:38:20Z","sha256":"ef41e39051651e1c302bcc4d9ea8bd84606d725311dc2903d266ff182426e934"},{"doc":"terms","title":"Terms of use","url":"https://typesafe.ai/legal/terms","capturedAt":"2026-11-08T21:38:20Z","sha256":"c9a83b8dab2cbd8f2c8c1fe9b394467017a7a9b6d6f0c018457737165d8a3c8a"},{"doc":"enterprise","title":"TypeSafe AI","url":"https://typesafe.ai/enterprise","capturedAt":"2026-11-08T21:39:32Z","sha256":"b6f3992336d50dfb1e400d92dbe6820d16c63aa73c1a6a20cedeb8e68fa7fbfa"}],"url":"https://gjalla.io/data-policies/typesafe-jev/"},{"id":"xai","provider":"xai","name":"xAI (Grok, Grok Bot)","category":"frontier-lab","checkedOn":"2026-11-08","products":[{"id":"grok-consumer","name":"Grok (grok.com and Grok iOS/Android apps)","surface":"consumer","facts":{"default_retention":{"summary":"Conversations stay in your account until you delete them. The policy says data is kept while there is a 'legitimate business need' and gives no fixed period.","status":"stated","cites":[{"quote":"You are in control of how long your data is on SpaceXSI’s systems. You can keep your data on your SpaceXSI account for as long as you wish.","source":{"doc":"legal-faq","title":"Consumer FAQs","url":"https://x.ai/legal/faq","capturedAt":"2026-11-08T22:04:34Z","sha256":"2b1ad7ca60c15069e543f34bfb9d533b9105761e69bf7ec11ef9a55f924497ed"}},{"quote":"We retain your personal information where we have an ongoing legitimate business need to do so.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://x.ai/legal/privacy-policy","capturedAt":"2026-11-08T21:38:09Z","sha256":"07887bdc61d17858a3659bbe78ff0ef42af54632f7106f43b0f6446148a10b78"}}]},"deletion_window":{"summary":"Deleted chats, deleted accounts and Private Chat conversations are removed within 30 days, apart from the exceptions listed under retention_exceptions.","status":"stated","cites":[{"quote":"Further, if you choose to delete any or all of your conversations or if you choose to delete your account, we will delete the data within 30 days unless it is necessary to retain the data for legal, compliance, or safety purposes.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://x.ai/legal/privacy-policy","capturedAt":"2026-11-08T21:38:09Z","sha256":"07887bdc61d17858a3659bbe78ff0ef42af54632f7106f43b0f6446148a10b78"}},{"quote":"After you indicate that you want your data deleted, it will take up to 30 days to delete from SpaceXSI systems.","source":{"doc":"legal-faq","title":"Consumer FAQs","url":"https://x.ai/legal/faq","capturedAt":"2026-11-08T22:04:34Z","sha256":"2b1ad7ca60c15069e543f34bfb9d533b9105761e69bf7ec11ef9a55f924497ed"}}]},"retention_exceptions":{"summary":"Kept past 30 days for legal, compliance, safety or security reasons (court orders, complaints, misuse, litigation). De-identified copies cut off from your account are exempt. No durations given.","status":"stated","cites":[{"quote":"When we have a legal obligation to do so (e.g., if we receive a court order, we would retain your information for longer than our usual retention periods);","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://x.ai/legal/privacy-policy","capturedAt":"2026-11-08T21:38:09Z","sha256":"07887bdc61d17858a3659bbe78ff0ef42af54632f7106f43b0f6446148a10b78"}},{"quote":"To protect the safety, security, and integrity of our business and the Service, as well as to protect our rights and property and those of others (e.g., if we detect misuse of our Service or otherwise detect unusual activity on your account or in your interactions with us); and","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://x.ai/legal/privacy-policy","capturedAt":"2026-11-08T21:38:09Z","sha256":"07887bdc61d17858a3659bbe78ff0ef42af54632f7106f43b0f6446148a10b78"}},{"quote":"If you delete conversations from your account or if you use Private Chat, conversations will be removed from our systems within 30 days, unless they have been de-identified or pseudoanonymized and disassociated from your account or we have to retain them for safety, security, or legal reasons.","source":{"doc":"legal-faq","title":"Consumer FAQs","url":"https://x.ai/legal/faq","capturedAt":"2026-11-08T22:04:34Z","sha256":"2b1ad7ca60c15069e543f34bfb9d533b9105761e69bf7ec11ef9a55f924497ed"}}]},"zdr":{"summary":"Inferred: zero data retention appears only for the business API. The closest consumer option, Private Chat, still keeps conversations up to 30 days.","status":"inferred","cites":[{"quote":"when Private Chat is turned on, conversations will not appear in your conversation history and your conversations will be deleted from SpaceXSI systems within 30 days unless it is necessary that they be kept longer for legal, compliance, or safety purposes.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://x.ai/legal/privacy-policy","capturedAt":"2026-11-08T21:38:09Z","sha256":"07887bdc61d17858a3659bbe78ff0ef42af54632f7106f43b0f6446148a10b78"}},{"quote":"Except when Customer elects to use SpaceXSI’s Zero Data Retention-enabled APIs (“**ZDR-Enabled API**” or “**ZDR**”)","source":{"doc":"terms-enterprise","title":"Terms of Service - Enterprise","url":"https://x.ai/legal/terms-of-service-enterprise","capturedAt":"2026-11-08T22:04:34Z","sha256":"748bad38da5035571eb54fe90fd0e12268e04fafd2981e310e7efd13adc1dd4a"}}]},"training_default":{"summary":"Inferred: yes. xAI may train on prompts and responses, and the control is an opt-out toggle. Logged-out users in some non-EU/UK regions can't opt out.","status":"inferred","cites":[{"quote":"We may use your content and interactions with Grok (e.g., prompts, searches, and other materials you submit) along with Grok's responses to train our models.","source":{"doc":"legal-faq","title":"Consumer FAQs","url":"https://x.ai/legal/faq","capturedAt":"2026-11-08T22:04:34Z","sha256":"2b1ad7ca60c15069e543f34bfb9d533b9105761e69bf7ec11ef9a55f924497ed"}},{"quote":"As a result, in some regions (excluding the EU/UK), when you use Grok without logging in, you won’t have the option to opt out of model training.","source":{"doc":"legal-faq","title":"Consumer FAQs","url":"https://x.ai/legal/faq","capturedAt":"2026-11-08T22:04:34Z","sha256":"2b1ad7ca60c15069e543f34bfb9d533b9105761e69bf7ec11ef9a55f924497ed"}},{"quote":"Where available, you may access our Service without logging in; when doing so, where permitted, you grant us full rights to use any data you provide to or obtain from our Service for product development and model training purposes.","source":{"doc":"terms-consumer","title":"Terms of Service - Consumer","url":"https://x.ai/legal/terms-of-service","capturedAt":"2026-11-08T21:39:57Z","sha256":"002227073b4f3e73203e178b111ac7038f87c6f6185a4385dc61806e180c0b41"}}]},"training_opt_out":{"summary":"Turn off 'Improve the model' in Settings, or use Private Chat. This covers new conversations only. Feedback you give (thumbs up/down) can still be used for training.","status":"stated","cites":[{"quote":"On the mobile app, to select or deselect using your content for model training, go to Settings, Data Controls, and select or deselect “Improve the model.”","source":{"doc":"legal-faq","title":"Consumer FAQs","url":"https://x.ai/legal/faq","capturedAt":"2026-11-08T22:04:34Z","sha256":"2b1ad7ca60c15069e543f34bfb9d533b9105761e69bf7ec11ef9a55f924497ed"}},{"quote":"Once you select that your data should not be used for training, your new conversations will not be used to train our models.","source":{"doc":"legal-faq","title":"Consumer FAQs","url":"https://x.ai/legal/faq","capturedAt":"2026-11-08T22:04:34Z","sha256":"2b1ad7ca60c15069e543f34bfb9d533b9105761e69bf7ec11ef9a55f924497ed"}},{"quote":"Please note that, even if you opt out of model training, when you subsequently decide to voluntarily provide feedback, that feedback may be used for training purposes.","source":{"doc":"legal-faq","title":"Consumer FAQs","url":"https://x.ai/legal/faq","capturedAt":"2026-11-08T22:04:34Z","sha256":"2b1ad7ca60c15069e543f34bfb9d533b9105761e69bf7ec11ef9a55f924497ed"}}]},"human_review":{"summary":"Yes. Automated classifiers scan usage, and a limited number of authorized staff may read your conversations to improve the model, investigate security incidents or misuse, and meet legal obligations.","status":"stated","cites":[{"quote":"A limited number of our authorized personnel may review your conversations with Grok for specific business purposes, including improving model performance, investigating security incidents and potential misuse of our services, and complying with our legal obligations.","source":{"doc":"legal-faq","title":"Consumer FAQs","url":"https://x.ai/legal/faq","capturedAt":"2026-11-08T22:04:34Z","sha256":"2b1ad7ca60c15069e543f34bfb9d533b9105761e69bf7ec11ef9a55f924497ed"}},{"quote":"Automated systems that analyze your use of the Service and User Content may be used for business, safety, and compliance purposes.","source":{"doc":"terms-consumer","title":"Terms of Service - Consumer","url":"https://x.ai/legal/terms-of-service","capturedAt":"2026-11-08T21:39:57Z","sha256":"002227073b4f3e73203e178b111ac7038f87c6f6185a4385dc61806e180c0b41"}}]},"memory":{"summary":"No memory feature is described. A 'Personalize Grok using X' toggle uses your X data. How that profile is stored, viewed or deleted is not stated.","status":"stated","cites":[{"quote":"Yes, your Grok experience can be personalized if you allow your X data and interactions to be used for personalization.","source":{"doc":"legal-faq","title":"Consumer FAQs","url":"https://x.ai/legal/faq","capturedAt":"2026-11-08T22:04:34Z","sha256":"2b1ad7ca60c15069e543f34bfb9d533b9105761e69bf7ec11ef9a55f924497ed"}},{"quote":"You can elect to allow your X data to be used for personalization on the Grok mobile app by going to Settings, Data Controls, and then toggle on or off “Personalize Grok using X”.","source":{"doc":"legal-faq","title":"Consumer FAQs","url":"https://x.ai/legal/faq","capturedAt":"2026-11-08T22:04:34Z","sha256":"2b1ad7ca60c15069e543f34bfb9d533b9105761e69bf7ec11ef9a55f924497ed"}}]},"connector_data":{"summary":"OAuth connectors (Gmail, Drive, Outlook, Teams, Salesforce, custom MCP and others) let Grok fetch data on demand. Google content isn't used for training. Storage and disconnect handling: not stated.","status":"stated","cites":[{"quote":"Each one authenticates via OAuth, so you connect once and Grok can access your data on demand.","source":{"doc":"grok-connectors","title":"Connectors","url":"https://docs.x.ai/grok/connectors","capturedAt":"2026-11-08T22:04:31Z","sha256":"55236a22fe664b1702cb6a19fed8545d351192194cb048866ab76b662a13e783"}},{"quote":"For users who opt to connect to Google Apps via Google OAuth, SpaceXSI shall not use any Google Apps content for any of its internal AI or other training purposes (such as training its machine learning models), including developing new products or services based on such content.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://x.ai/legal/privacy-policy","capturedAt":"2026-11-08T21:38:09Z","sha256":"07887bdc61d17858a3659bbe78ff0ef42af54632f7106f43b0f6446148a10b78"}},{"quote":"If you select a feature that involves sending your User Content to, or accessing your User Content hosted on, such a third-party service, you are instructing and authorizing SpaceXSI to send your User Content out of the Service.","source":{"doc":"terms-consumer","title":"Terms of Service - Consumer","url":"https://x.ai/legal/terms-of-service","capturedAt":"2026-11-08T21:39:57Z","sha256":"002227073b4f3e73203e178b111ac7038f87c6f6185a4385dc61806e180c0b41"}}]},"agent_actions":{"summary":"Grok can take 'Agentic Actions' (browsing, code, sending messages, banking), and you're responsible for them. Third-party login may store your credentials or tokens. Action-log retention: not stated.","status":"stated","cites":[{"quote":"Certain features of the Service may enable Grok to take autonomous actions on your behalf (“**Agentic Actions**”), including but not limited to web browsing, code execution, sending communications, modifying files, tool invocation, data processing, or interactions with third-party services, including financial institutions.","source":{"doc":"terms-consumer","title":"Terms of Service - Consumer","url":"https://x.ai/legal/terms-of-service","capturedAt":"2026-11-08T21:39:57Z","sha256":"002227073b4f3e73203e178b111ac7038f87c6f6185a4385dc61806e180c0b41"}},{"quote":"You are responsible for User Content and Agentic Actions, including ensuring that it does not violate any applicable law or these Terms and any consequences, costs, or liabilities arising therefrom.","source":{"doc":"terms-consumer","title":"Terms of Service - Consumer","url":"https://x.ai/legal/terms-of-service","capturedAt":"2026-11-08T21:39:57Z","sha256":"002227073b4f3e73203e178b111ac7038f87c6f6185a4385dc61806e180c0b41"}},{"quote":"you give us permission to access, use, and store your information from that service, as permitted by that service, which may include log-in credentials and/or access tokens for that service.","source":{"doc":"terms-consumer","title":"Terms of Service - Consumer","url":"https://x.ai/legal/terms-of-service","capturedAt":"2026-11-08T21:39:57Z","sha256":"002227073b4f3e73203e178b111ac7038f87c6f6185a4385dc61806e180c0b41"}}]},"input_ownership":{"summary":"You keep ownership of your inputs 'as between you and SpaceXSI', to the extent the law allows.","status":"stated","cites":[{"quote":"To the extent permitted by applicable law, and as between you and SpaceXSI, you retain your ownership rights to the User Content.","source":{"doc":"terms-consumer","title":"Terms of Service - Consumer","url":"https://x.ai/legal/terms-of-service","capturedAt":"2026-11-08T21:39:57Z","sha256":"002227073b4f3e73203e178b111ac7038f87c6f6185a4385dc61806e180c0b41"}},{"quote":"You own the Inputs and Outputs.","source":{"doc":"legal-faq","title":"Consumer FAQs","url":"https://x.ai/legal/faq","capturedAt":"2026-11-08T22:04:34Z","sha256":"2b1ad7ca60c15069e543f34bfb9d533b9105761e69bf7ec11ef9a55f924497ed"}}]},"output_ownership":{"summary":"You own outputs and may use them commercially, but xAI asks you to credit Grok. Grokipedia output and system metadata/logs are excluded, and outputs may not be unique to you.","status":"stated","cites":[{"quote":"You are free to use Grok’s Outputs (including generated images) from your conversations as you wish, including for commercial use.","source":{"doc":"legal-faq","title":"Consumer FAQs","url":"https://x.ai/legal/faq","capturedAt":"2026-11-08T22:04:34Z","sha256":"2b1ad7ca60c15069e543f34bfb9d533b9105761e69bf7ec11ef9a55f924497ed"}},{"quote":"receive output from the Service (excluding output from Grokipedia and excluding system metadata and logs) based on the Input (“**Output**”).","source":{"doc":"terms-consumer","title":"Terms of Service - Consumer","url":"https://x.ai/legal/terms-of-service","capturedAt":"2026-11-08T21:39:57Z","sha256":"002227073b4f3e73203e178b111ac7038f87c6f6185a4385dc61806e180c0b41"}},{"quote":"When using Output or SpaceXSI’s name, logos, trademarks, or other brand elements, you are required to obtain our permission and attribute your generation of the Output to the Service, as detailed in our [Brand Guidelines](/legal/brand-guidelines).","source":{"doc":"terms-consumer","title":"Terms of Service - Consumer","url":"https://x.ai/legal/terms-of-service","capturedAt":"2026-11-08T21:39:57Z","sha256":"002227073b4f3e73203e178b111ac7038f87c6f6185a4385dc61806e180c0b41"}}]},"license_to_provider":{"summary":"Very broad: an irrevocable, perpetual, transferable, sublicensable worldwide license over your inputs for any purpose, including likeness and voice. Usage Data and Feedback are assigned to xAI.","status":"stated","cites":[{"quote":"you grant an irrevocable, perpetual, transferable, sublicensable, royalty-free, and worldwide right to SpaceXSI to use, copy, store, modify, process, adapt, transmit, distribute, reproduce, publish, upload, download, display in public forums, list information regarding, make derivative works of, and distribute such Content","source":{"doc":"terms-consumer","title":"Terms of Service - Consumer","url":"https://x.ai/legal/terms-of-service","capturedAt":"2026-11-08T21:39:57Z","sha256":"002227073b4f3e73203e178b111ac7038f87c6f6185a4385dc61806e180c0b41"}},{"quote":"To the extent the User Content includes a person’s image, likeness, voice, or other similar attributes, you grant SpaceXSI the same rights to use those attributes as part of the User Content as described above.","source":{"doc":"terms-consumer","title":"Terms of Service - Consumer","url":"https://x.ai/legal/terms-of-service","capturedAt":"2026-11-08T21:39:57Z","sha256":"002227073b4f3e73203e178b111ac7038f87c6f6185a4385dc61806e180c0b41"}},{"quote":"All Usage Data is and will be owned solely and exclusively by us","source":{"doc":"terms-consumer","title":"Terms of Service - Consumer","url":"https://x.ai/legal/terms-of-service","capturedAt":"2026-11-08T21:39:57Z","sha256":"002227073b4f3e73203e178b111ac7038f87c6f6185a4385dc61806e180c0b41"}}]},"third_party_sharing":{"summary":"Shared with service providers, related companies, buyers in business transfers, and for legal reasons. Cookies serve targeted advertising. xAI says it doesn't sell your data.","status":"stated","cites":[{"quote":"we provide your personal information to service providers including providers of hosting, cloud, analytics, content delivery, support and safety monitoring, payment and transaction, and other technology services, for the purposes described above.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://x.ai/legal/privacy-policy","capturedAt":"2026-11-08T21:38:09Z","sha256":"07887bdc61d17858a3659bbe78ff0ef42af54632f7106f43b0f6446148a10b78"}},{"quote":"Deliver relevant content and targeted advertising;","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://x.ai/legal/privacy-policy","capturedAt":"2026-11-08T21:38:09Z","sha256":"07887bdc61d17858a3659bbe78ff0ef42af54632f7106f43b0f6446148a10b78"}},{"quote":"No. We do not sell your data to third parties as defined by applicable laws.","source":{"doc":"legal-faq","title":"Consumer FAQs","url":"https://x.ai/legal/faq","capturedAt":"2026-11-08T22:04:34Z","sha256":"2b1ad7ca60c15069e543f34bfb9d533b9105761e69bf7ec11ef9a55f924497ed"}},{"quote":"(e) to share analytics and other derived Usage Data with third-parties","source":{"doc":"terms-consumer","title":"Terms of Service - Consumer","url":"https://x.ai/legal/terms-of-service","capturedAt":"2026-11-08T21:39:57Z","sha256":"002227073b4f3e73203e178b111ac7038f87c6f6185a4385dc61806e180c0b41"}}]},"data_location":{"summary":"Personal information is transferred to and processed in the United States. No residency options are described. A separate Europe addendum is referenced but wasn't captured.","status":"stated","cites":[{"quote":"your personal information will be transferred to, and/or processed in, the United States.","source":{"doc":"terms-consumer","title":"Terms of Service - Consumer","url":"https://x.ai/legal/terms-of-service","capturedAt":"2026-11-08T21:39:57Z","sha256":"002227073b4f3e73203e178b111ac7038f87c6f6185a4385dc61806e180c0b41"}},{"quote":"SpaceXSI is a US-based company","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://x.ai/legal/privacy-policy","capturedAt":"2026-11-08T21:38:09Z","sha256":"07887bdc61d17858a3659bbe78ff0ef42af54632f7106f43b0f6446148a10b78"}}]},"enterprise_controls":{"summary":"Not an enterprise product. Signing up with a work email may link your account to your employer's Grok Enterprise subscription, whose admin can access and monitor it.","status":"stated","cites":[{"quote":"If you use an email address associated with your employer or other organization, your account may be linked to that organization’s Grok Enterprise subscription. In such cases, the organization’s administrator may access, monitor and control your account","source":{"doc":"terms-consumer","title":"Terms of Service - Consumer","url":"https://x.ai/legal/terms-of-service","capturedAt":"2026-11-08T21:39:57Z","sha256":"002227073b4f3e73203e178b111ac7038f87c6f6185a4385dc61806e180c0b41"}}]}}},{"id":"grok-on-x","name":"Grok on X (governed by X Corp. terms and privacy policy)","surface":"consumer","facts":{"default_retention":{"summary":"Inferred: X keeps 'usage information' for the life of your account or until removed. It doesn't say this covers Grok chats. xAI's retention of shared data: not stated.","status":"inferred","cites":[{"quote":"We keep your usage information, such as the content you post, your interactions with other users’ content and how you interact with others on the platform for the duration of your account or until such content is removed.","source":{"doc":"x-privacy-policy","title":"X Privacy Policy","url":"https://x.com/en/privacy","capturedAt":"2026-11-08T21:38:08Z","sha256":"11efac212754da81f5cab1eba273c38ad00d783ec3a936ef56fdd9fc74cf2eb8"}}]},"deletion_window":{"summary":"You can delete all Grok conversation history at once in X settings. Deleted conversations are removed within 30 days, unless kept for security or legal reasons.","status":"stated","cites":[{"quote":"Deleted conversations are removed from our systems within 30 days, unless we have to keep them for security or legal reasons.","source":{"doc":"x-help-about-grok","title":"X help about grok","url":"https://help.x.com/en/using-x/about-grok","capturedAt":"2026-11-08T22:19:41Z","sha256":"f05c0dfde39196395da3f8109082103be437ac42bd75a7352f36558e01037067"}}]},"retention_exceptions":{"summary":"X may keep data longer for legal process, litigation and safety or abuse work. Suspended accounts' identifiers may be kept indefinitely. No Grok-specific durations given.","status":"stated","cites":[{"quote":"We may need to keep certain information longer than our policies specify in order to comply with legal requirements and for safety and security reasons.","source":{"doc":"x-privacy-policy","title":"X Privacy Policy","url":"https://x.com/en/privacy","capturedAt":"2026-11-08T21:38:08Z","sha256":"11efac212754da81f5cab1eba273c38ad00d783ec3a936ef56fdd9fc74cf2eb8"}},{"quote":"Where you violate our Rules and your account is suspended, we may keep the identifiers you used to create the account (such as your email address or phone number) indefinitely to prevent repeat policy offenders from creating new accounts.","source":{"doc":"x-privacy-policy","title":"X Privacy Policy","url":"https://x.com/en/privacy","capturedAt":"2026-11-08T21:38:08Z","sha256":"11efac212754da81f5cab1eba273c38ad00d783ec3a936ef56fdd9fc74cf2eb8"}}]},"zdr":{"summary":"Not stated. The X captured policies describe no zero-retention option for Grok on X.","status":"not_stated","cites":[]},"training_default":{"summary":"Inferred: yes. X may share your public data and Grok inputs and results with xAI for training, and the control is an opt-out setting.","status":"inferred","cites":[{"quote":"may share with [xAI](https://x.ai/) your public \\>x\\< data as well as your user interactions, inputs and results with Grok on \\>x\\< to train and fine-tune Grok and other generative AI models.","source":{"doc":"x-help-about-grok","title":"X help about grok","url":"https://help.x.com/en/using-x/about-grok","capturedAt":"2026-11-08T22:19:41Z","sha256":"f05c0dfde39196395da3f8109082103be437ac42bd75a7352f36558e01037067"}},{"quote":"You agree that this license includes the right for us to (i) analyze text and other information you provide and to otherwise provide, promote, and improve the Services, including, for example, for use with and training of our machine learning and artificial intelligence models, whether generative or another type","source":{"doc":"x-terms","title":"X Terms of Service","url":"https://x.com/en/tos","capturedAt":"2026-11-08T21:39:35Z","sha256":"9176f4fa2dcea244b79e7a6baf68c1ec2a6409e2f9602d0080299badf10dcc01"}}]},"training_opt_out":{"summary":"Untick data sharing under X Privacy & Safety > Grok & Third-party Collaborators. Deployed models still learn from Grok-powered X features, and feedback can still be used.","status":"stated","cites":[{"quote":"However, please note that when you use an \\>x\\< feature that is powered by Grok (e.g. \\>x\\< recommendations), Grok will learn from your interactions and the opt-out does not prevent a deployed model from learning as a result of its normal use.","source":{"doc":"x-help-about-grok","title":"X help about grok","url":"https://help.x.com/en/using-x/about-grok","capturedAt":"2026-11-08T22:19:41Z","sha256":"f05c0dfde39196395da3f8109082103be437ac42bd75a7352f36558e01037067"}},{"quote":"If you provide such feedback, \\>x\\< and xAI may use that conversation and any such conversation related data to train and fine-tune Grok and improve your experience.","source":{"doc":"x-help-about-grok","title":"X help about grok","url":"https://help.x.com/en/using-x/about-grok","capturedAt":"2026-11-08T22:19:41Z","sha256":"f05c0dfde39196395da3f8109082103be437ac42bd75a7352f36558e01037067"}},{"quote":"Please note that you additionally may also prevent your posts from being used for such fine-tuning and training by making your account private.","source":{"doc":"x-help-about-grok","title":"X help about grok","url":"https://help.x.com/en/using-x/about-grok","capturedAt":"2026-11-08T22:19:41Z","sha256":"f05c0dfde39196395da3f8109082103be437ac42bd75a7352f36558e01037067"}}]},"human_review":{"summary":"Inferred: X reserves the right to access and read any information for legal, enforcement and security reasons. Nothing says people read Grok chats specifically.","status":"inferred","cites":[{"quote":"We also reserve the right to access, read, preserve, and disclose any information as we reasonably believe is necessary to (i) satisfy any applicable law, regulation, legal process or governmental request; (ii) enforce the Terms, including investigation of potential violations hereof;","source":{"doc":"x-terms","title":"X Terms of Service","url":"https://x.com/en/tos","capturedAt":"2026-11-08T21:39:35Z","sha256":"9176f4fa2dcea244b79e7a6baf68c1ec2a6409e2f9602d0080299badf10dcc01"}},{"quote":"data sets reviewed and curated by AI Tutors who are human reviewers","source":{"doc":"x-help-about-grok","title":"X help about grok","url":"https://help.x.com/en/using-x/about-grok","capturedAt":"2026-11-08T22:19:41Z","sha256":"f05c0dfde39196395da3f8109082103be437ac42bd75a7352f36558e01037067"}}]},"memory":{"summary":"Grok Personalization shares your X profile, posts, interests and Grok inputs (including voice transcripts) with xAI. You can turn it off in X settings. Retention: not stated.","status":"stated","cites":[{"quote":"may share your \\>x\\< data, for example, public profile, public posts, top posts, engagement, and your interests, including how you interact with Grok, what you input, and the results you receive, with xAI.","source":{"doc":"x-help-about-grok","title":"X help about grok","url":"https://help.x.com/en/using-x/about-grok","capturedAt":"2026-11-08T22:19:41Z","sha256":"f05c0dfde39196395da3f8109082103be437ac42bd75a7352f36558e01037067"}},{"quote":"If you opt-out, you can still use Grok on the \\>x\\< platform, but your personal data will not be used to personalize your Grok experience.","source":{"doc":"x-help-about-grok","title":"X help about grok","url":"https://help.x.com/en/using-x/about-grok","capturedAt":"2026-11-08T22:19:41Z","sha256":"f05c0dfde39196395da3f8109082103be437ac42bd75a7352f36558e01037067"}}]},"connector_data":{"summary":"Not stated. The X captured policies don't describe Grok on X connecting to email, calendar or drive accounts.","status":"not_stated","cites":[]},"agent_actions":{"summary":"X Terms make you responsible for 'features that perform autonomous actions'. Logs, browsing records and stored credentials for Grok on X are not described.","status":"stated","cites":[{"quote":"You are responsible for your use of the Services, including any features that perform autonomous actions","source":{"doc":"x-terms","title":"X Terms of Service","url":"https://x.com/en/tos","capturedAt":"2026-11-08T21:39:35Z","sha256":"9176f4fa2dcea244b79e7a6baf68c1ec2a6409e2f9602d0080299badf10dcc01"}}]},"input_ownership":{"summary":"You keep your rights in Content you submit or input, including prompts.","status":"stated","cites":[{"quote":"You retain your rights to any Content, including anything referenced therein, you submit, input, create, generate, post, or display on or through the Services.","source":{"doc":"x-terms","title":"X Terms of Service","url":"https://x.com/en/tos","capturedAt":"2026-11-08T21:39:35Z","sha256":"9176f4fa2dcea244b79e7a6baf68c1ec2a6409e2f9602d0080299badf10dcc01"}}]},"output_ownership":{"summary":"X Terms say you keep rights to Content you 'create' or 'generate', which covers Grok outputs. You are also responsible for outputs.","status":"stated","cites":[{"quote":"You retain your rights to any Content, including anything referenced therein, you submit, input, create, generate, post, or display on or through the Services.","source":{"doc":"x-terms","title":"X Terms of Service","url":"https://x.com/en/tos","capturedAt":"2026-11-08T21:39:35Z","sha256":"9176f4fa2dcea244b79e7a6baf68c1ec2a6409e2f9602d0080299badf10dcc01"}},{"quote":"including any inputs, prompts, outputs, and/or information obtained or created through the Services","source":{"doc":"x-terms","title":"X Terms of Service","url":"https://x.com/en/tos","capturedAt":"2026-11-08T21:39:35Z","sha256":"9176f4fa2dcea244b79e7a6baf68c1ec2a6409e2f9602d0080299badf10dcc01"}}]},"license_to_provider":{"summary":"A worldwide, royalty-free, sublicensable license to use your Content for any purpose, including AI training. It survives termination but isn't called perpetual or irrevocable.","status":"stated","cites":[{"quote":"you grant us a worldwide, non-exclusive, royalty-free license (with the right to sublicense) to use, copy, reproduce, process, adapt, modify, publish, transmit, display, upload, download, and distribute such Content, including anything referenced therein, in any and all media or distribution methods now known or later developed, for any purpose.","source":{"doc":"x-terms","title":"X Terms of Service","url":"https://x.com/en/tos","capturedAt":"2026-11-08T21:39:35Z","sha256":"9176f4fa2dcea244b79e7a6baf68c1ec2a6409e2f9602d0080299badf10dcc01"}},{"quote":"except that the following sections shall continue to apply: 2, 3, 5, 6, and the misuse provisions of Section 4 (“Misuse of the Services”).","source":{"doc":"x-terms","title":"X Terms of Service","url":"https://x.com/en/tos","capturedAt":"2026-11-08T21:39:35Z","sha256":"9176f4fa2dcea244b79e7a6baf68c1ec2a6409e2f9602d0080299badf10dcc01"}}]},"third_party_sharing":{"summary":"X shares Grok data with xAI. Unless you opt out, 'third-party collaborators' may train their own AI on it. Also shared with service providers, advertisers and affiliates. No sale.","status":"stated","cites":[{"quote":"If you do not opt out, in some instances the recipients of the information may use it for their own independent purposes in addition to those stated in X’s Privacy Policy, including, for example, to train their artificial intelligence models, whether generative or otherwise.","source":{"doc":"x-privacy-policy","title":"X Privacy Policy","url":"https://x.com/en/privacy","capturedAt":"2026-11-08T21:38:08Z","sha256":"11efac212754da81f5cab1eba273c38ad00d783ec3a936ef56fdd9fc74cf2eb8"}},{"quote":"We may share information amongst our [*affiliates*](https://help.x.com/rules-and-policies/x-services-and-corporate-affiliates) to provide our products and services.","source":{"doc":"x-privacy-policy","title":"X Privacy Policy","url":"https://x.com/en/privacy","capturedAt":"2026-11-08T21:38:08Z","sha256":"11efac212754da81f5cab1eba273c38ad00d783ec3a936ef56fdd9fc74cf2eb8"}},{"quote":"No. We do not sell your data.","source":{"doc":"x-help-about-grok","title":"X help about grok","url":"https://help.x.com/en/using-x/about-grok","capturedAt":"2026-11-08T22:19:41Z","sha256":"f05c0dfde39196395da3f8109082103be437ac42bd75a7352f36558e01037067"}}]},"data_location":{"summary":"Data may go to the US, Ireland and other countries under SCCs and the Data Privacy Framework. The EU/UK controller is X Internet Unlimited Company. No residency choice.","status":"stated","cites":[{"quote":"including the transfer of this information to the United States, Ireland, and/or other countries for storage, processing and use by us and our affiliates.","source":{"doc":"x-terms","title":"X Terms of Service","url":"https://x.com/en/tos","capturedAt":"2026-11-08T21:39:35Z","sha256":"9176f4fa2dcea244b79e7a6baf68c1ec2a6409e2f9602d0080299badf10dcc01"}},{"quote":"If you live in the European Union, EFTA States, or the United Kingdom, the data controller responsible for your personal data is X Internet Unlimited Company","source":{"doc":"x-privacy-policy","title":"X Privacy Policy","url":"https://x.com/en/privacy","capturedAt":"2026-11-08T21:38:08Z","sha256":"11efac212754da81f5cab1eba273c38ad00d783ec3a936ef56fdd9fc74cf2eb8"}}]},"enterprise_controls":{"summary":"Not stated. Grok on X is described only as a consumer feature of X accounts.","status":"not_stated","cites":[]}}},{"id":"api","name":"xAI API (Enterprise Terms, DPA)","surface":"api","facts":{"default_retention":{"summary":"Inputs and outputs are deleted automatically no later than 30 days after the session ends, unless a different period is agreed or set in self-service tools.","status":"stated","cites":[{"quote":"All User Content will be automatically and permanently deleted no later than 30 days after the end of the interaction or session in which it was submitted unless a different retention period is:","source":{"doc":"terms-enterprise","title":"Terms of Service - Enterprise","url":"https://x.ai/legal/terms-of-service-enterprise","capturedAt":"2026-11-08T22:04:34Z","sha256":"748bad38da5035571eb54fe90fd0e12268e04fafd2981e310e7efd13adc1dd4a"}},{"quote":"Inputs and outputs are automatically deleted within 30 days, unless (a) otherwise agreed in writing, (b) SpaceXSI is legally required to retain them because, for example, they are flagged as potentially violating our Terms of Service or AUP.","source":{"doc":"legal-faq-enterprise","title":"Enterprise FAQs","url":"https://x.ai/legal/faq-enterprise","capturedAt":"2026-11-08T22:04:36Z","sha256":"d054689d0d3c3ac61ae5c1c1c093e19784448122cf9eecdee7120210950e6925"}},{"quote":"Our data retention period is at our customer's discretion as it regards their user data, subject to legal requirements.","source":{"doc":"data-processing-addendum","title":"Data processing addendum","url":"https://x.ai/legal/data-processing-addendum","capturedAt":"2026-11-08T22:28:17Z","sha256":"933628ebc7fa169756fbf1de72ecf44d3482ab5e21ed0a4a411d9206a271b91c"}}]},"deletion_window":{"summary":"Customers can delete data at will; after a deletion request, login data, prompt/response pairs and billing info are deleted 'typically within 30 days'. On termination, deletion follows the Agreement.","status":"stated","cites":[{"quote":"Upon termination of the Agreement, we shall delete any Personal Data in our possession in accordance with the Agreement, except to the extent that we are required to retain copies under applicable laws","source":{"doc":"data-processing-addendum","title":"Data processing addendum","url":"https://x.ai/legal/data-processing-addendum","capturedAt":"2026-11-08T22:28:17Z","sha256":"933628ebc7fa169756fbf1de72ecf44d3482ab5e21ed0a4a411d9206a271b91c"}},{"quote":"SpaceXSI shall have no obligation to retain, maintain, or provide access to Customer data beyond what is required by applicable law or this Agreement.","source":{"doc":"terms-enterprise","title":"Terms of Service - Enterprise","url":"https://x.ai/legal/terms-of-service-enterprise","capturedAt":"2026-11-08T22:04:34Z","sha256":"748bad38da5035571eb54fe90fd0e12268e04fafd2981e310e7efd13adc1dd4a"}},{"quote":"Customers are able to delete their data at will. Following a data deletion request, our systems automatically delete all login data, prompt/response pairs, and billing information stored within our systems typically within 30 days.","source":{"doc":"data-processing-addendum","title":"Data processing addendum","url":"https://x.ai/legal/data-processing-addendum","capturedAt":"2026-11-08T22:28:17Z","sha256":"933628ebc7fa169756fbf1de72ecf44d3482ab5e21ed0a4a411d9206a271b91c"}}]},"retention_exceptions":{"summary":"Kept longer if law requires or for safety, security, moderation or abuse investigations (minimum, until the reason ends). User Content is continuously backed up and versioned; backup retention isn't stated.","status":"stated","cites":[{"quote":"(b) required by applicable law; or (c) reasonably necessary for safety, security, compliance, moderation, abuse prevention, or investigation of suspected violations of this Agreement, in each of which cases SpaceXSI will retain only the minimum data necessary and will permanently delete it promptly when the justification no longer applies.","source":{"doc":"terms-enterprise","title":"Terms of Service - Enterprise","url":"https://x.ai/legal/terms-of-service-enterprise","capturedAt":"2026-11-08T22:04:34Z","sha256":"748bad38da5035571eb54fe90fd0e12268e04fafd2981e310e7efd13adc1dd4a"}},{"quote":"User Content is continuously backed up, and access controls are implemented to prevent unauthorized modification or access.","source":{"doc":"data-processing-addendum","title":"Data processing addendum","url":"https://x.ai/legal/data-processing-addendum","capturedAt":"2026-11-08T22:28:17Z","sha256":"933628ebc7fa169756fbf1de72ecf44d3482ab5e21ed0a4a411d9206a271b91c"}},{"quote":"User Content is versioned and encrypted such that it is possible to revert to a previous state, while verifying integrity.","source":{"doc":"data-processing-addendum","title":"Data processing addendum","url":"https://x.ai/legal/data-processing-addendum","capturedAt":"2026-11-08T22:28:17Z","sha256":"933628ebc7fa169756fbf1de72ecf44d3482ab5e21ed0a4a411d9206a271b91c"}}]},"zdr":{"summary":"Opt-in ZDR-Enabled APIs delete content on delivery or within an hour, with no logs or backups, even for legal needs. Personal data and PHI (plus a BAA) must use ZDR.","status":"stated","cites":[{"quote":"SpaceXSI will delete all such User Content, including any transient storage or processing artifacts, upon the earlier of (a) one hour after completion of the applicable inference request; or (b) delivery of the response; and no logs, backups, persistent copies, or other durable storage containing User Content will thereafter be retained for any purpose, including safety, debugging, or legal compliance.","source":{"doc":"terms-enterprise","title":"Terms of Service - Enterprise","url":"https://x.ai/legal/terms-of-service-enterprise","capturedAt":"2026-11-08T22:04:34Z","sha256":"748bad38da5035571eb54fe90fd0e12268e04fafd2981e310e7efd13adc1dd4a"}},{"quote":"SpaceXSI requires that Customer does not submit Personal Data to SpaceXSI’s non-ZDR Services.","source":{"doc":"data-processing-addendum","title":"Data processing addendum","url":"https://x.ai/legal/data-processing-addendum","capturedAt":"2026-11-08T22:28:17Z","sha256":"933628ebc7fa169756fbf1de72ecf44d3482ab5e21ed0a4a411d9206a271b91c"}},{"quote":"unless Customer has first entered into a Business Associate Agreement or Amendment (“**BAA**”) with SpaceXSI that amends this Agreement and also uses SpaceXSI’s ZDR-Enabled API to submit that data.","source":{"doc":"terms-enterprise","title":"Terms of Service - Enterprise","url":"https://x.ai/legal/terms-of-service-enterprise","capturedAt":"2026-11-08T22:04:34Z","sha256":"748bad38da5035571eb54fe90fd0e12268e04fafd2981e310e7efd13adc1dd4a"}}]},"training_default":{"summary":"No. Business inputs and outputs aren't used for training, 'subject to disclosures to Customer and Customer-controlled user settings'. Some customers trade training rights for free credits.","status":"stated","cites":[{"quote":"SpaceXSI will not use any User Content to train any foundation models, large language models, or other artificial intelligence systems or to develop any new products, services, or features, subject to disclosures to Customer and Customer-controlled user settings.","source":{"doc":"terms-enterprise","title":"Terms of Service - Enterprise","url":"https://x.ai/legal/terms-of-service-enterprise","capturedAt":"2026-11-08T22:04:34Z","sha256":"748bad38da5035571eb54fe90fd0e12268e04fafd2981e310e7efd13adc1dd4a"}},{"quote":"In some instances we may offer free credits in exchange for you agreeing to permit us to train on your business data.","source":{"doc":"legal-faq-enterprise","title":"Enterprise FAQs","url":"https://x.ai/legal/faq-enterprise","capturedAt":"2026-11-08T22:04:36Z","sha256":"d054689d0d3c3ac61ae5c1c1c093e19784448122cf9eecdee7120210950e6925"}}]},"training_opt_out":{"summary":"No opt-out needed because training is off by default. Outside ZDR, xAI may still create and own de-identified, aggregated usage data for any lawful purpose.","status":"stated","cites":[{"quote":"Except when Customer elects to use SpaceXSI’s Zero Data Retention-enabled APIs (“**ZDR-Enabled API**” or “**ZDR**”), SpaceXSI may create and use, for any lawful purpose, de-identified and/or aggregated data derived from Customer’s use of the Services","source":{"doc":"terms-enterprise","title":"Terms of Service - Enterprise","url":"https://x.ai/legal/terms-of-service-enterprise","capturedAt":"2026-11-08T22:04:34Z","sha256":"748bad38da5035571eb54fe90fd0e12268e04fafd2981e310e7efd13adc1dd4a"}}]},"human_review":{"summary":"Automated classifiers scan usage. Authorized staff may review data when legally required (e.g. incidents, misuse), under confidentiality agreements; the DPA says User Content is accessed de-identified.","status":"stated","cites":[{"quote":"A limited number of authorized SpaceXSI personnel may review your data when legally required, such as investigating security incidents and potential misuse of our services.","source":{"doc":"legal-faq-enterprise","title":"Enterprise FAQs","url":"https://x.ai/legal/faq-enterprise","capturedAt":"2026-11-08T22:04:36Z","sha256":"d054689d0d3c3ac61ae5c1c1c093e19784448122cf9eecdee7120210950e6925"}},{"quote":"SpaceXSI may monitor usage of the Services for compliance with this Agreement.","source":{"doc":"terms-enterprise","title":"Terms of Service - Enterprise","url":"https://x.ai/legal/terms-of-service-enterprise","capturedAt":"2026-11-08T22:04:34Z","sha256":"748bad38da5035571eb54fe90fd0e12268e04fafd2981e310e7efd13adc1dd4a"}},{"quote":"Access to User Content is restricted to authorized personnel only, and all personnel with access are subject to confidentiality agreements.","source":{"doc":"data-processing-addendum","title":"Data processing addendum","url":"https://x.ai/legal/data-processing-addendum","capturedAt":"2026-11-08T22:28:17Z","sha256":"933628ebc7fa169756fbf1de72ecf44d3482ab5e21ed0a4a411d9206a271b91c"}},{"quote":"Only the information necessary to provide services is collected during your use of SpaceXSI systems, and all User Content is accessed in a de-identified manner.","source":{"doc":"data-processing-addendum","title":"Data processing addendum","url":"https://x.ai/legal/data-processing-addendum","capturedAt":"2026-11-08T22:28:17Z","sha256":"933628ebc7fa169756fbf1de72ecf44d3482ab5e21ed0a4a411d9206a271b91c"}}]},"memory":{"summary":"Not stated. The enterprise terms, DPA and enterprise FAQ describe no persistent memory for the API.","status":"not_stated","cites":[]},"connector_data":{"summary":"Inferred: data sent 'via any third-party integration' counts as Input and is treated like other content. Third-party services follow their own terms. Disconnect handling: not stated.","status":"inferred","cites":[{"quote":"that Customer, its Permitted Users, or End Users submit to or process through the Services (directly or via any third-party integration).","source":{"doc":"terms-enterprise","title":"Terms of Service - Enterprise","url":"https://x.ai/legal/terms-of-service-enterprise","capturedAt":"2026-11-08T22:04:34Z","sha256":"748bad38da5035571eb54fe90fd0e12268e04fafd2981e310e7efd13adc1dd4a"}},{"quote":"Third-Party Services are governed by the terms between Customer and the applicable third-party provider (“**Third-Party Terms**”).","source":{"doc":"terms-enterprise","title":"Terms of Service - Enterprise","url":"https://x.ai/legal/terms-of-service-enterprise","capturedAt":"2026-11-08T22:04:34Z","sha256":"748bad38da5035571eb54fe90fd0e12268e04fafd2981e310e7efd13adc1dd4a"}}]},"agent_actions":{"summary":"Not stated. The API terms don't address logs of agent or tool actions, browsing, or stored credentials.","status":"not_stated","cites":[]},"input_ownership":{"summary":"The customer keeps all rights in its inputs.","status":"stated","cites":[{"quote":"Customer (a) retains all right, title, and interest (including all intellectual-property rights) in and to the Input","source":{"doc":"terms-enterprise","title":"Terms of Service - Enterprise","url":"https://x.ai/legal/terms-of-service-enterprise","capturedAt":"2026-11-08T22:04:34Z","sha256":"748bad38da5035571eb54fe90fd0e12268e04fafd2981e310e7efd13adc1dd4a"}}]},"output_ownership":{"summary":"The customer owns outputs permanently, and xAI assigns its rights in them, excluding xAI technology. You may not use outputs to train AI models unless an Order Form allows it.","status":"stated","cites":[{"quote":"(b) owns all right, title, and interest in the Output in perpetuity and, to the fullest extent possible under applicable law, SpaceXSI hereby assigns to Customer all of its right, title, and interest in such Output","source":{"doc":"terms-enterprise","title":"Terms of Service - Enterprise","url":"https://x.ai/legal/terms-of-service-enterprise","capturedAt":"2026-11-08T22:04:34Z","sha256":"748bad38da5035571eb54fe90fd0e12268e04fafd2981e310e7efd13adc1dd4a"}},{"quote":"use any Output to train any foundation models, large language models, or other artificial intelligence systems except as may be expressly permitted in an Order Form","source":{"doc":"terms-enterprise","title":"Terms of Service - Enterprise","url":"https://x.ai/legal/terms-of-service-enterprise","capturedAt":"2026-11-08T22:04:34Z","sha256":"748bad38da5035571eb54fe90fd0e12268e04fafd2981e310e7efd13adc1dd4a"}}]},"license_to_provider":{"summary":"An irrevocable, worldwide, transferable license limited to running the service, fighting fraud and abuse, and safety and compliance work. Feedback gets a separate perpetual license.","status":"stated","cites":[{"quote":"Customer hereby grants to SpaceXSI a non-exclusive, worldwide, irrevocable, transferable, fully paid-up, royalty-free right and license to, store, use, transmit, modify, and otherwise process User Content as reasonably necessary to: (i) provide the Services to Customer; (ii) detect, prevent, or address fraud, security risks, abuse, non-compliance with this Agreement, and (iii) conduct safety or compliance operations.","source":{"doc":"terms-enterprise","title":"Terms of Service - Enterprise","url":"https://x.ai/legal/terms-of-service-enterprise","capturedAt":"2026-11-08T22:04:34Z","sha256":"748bad38da5035571eb54fe90fd0e12268e04fafd2981e310e7efd13adc1dd4a"}}]},"third_party_sharing":{"summary":"Subprocessors are listed publicly, with 15 days' notice and a right to object. Personal data is not sold or shared under US privacy laws. xAI is liable for subcontractors.","status":"stated","cites":[{"quote":"SpaceXSI will notify you if we add or replace Subprocessors at least fifteen (15) days before such changes take effect.","source":{"doc":"data-processing-addendum","title":"Data processing addendum","url":"https://x.ai/legal/data-processing-addendum","capturedAt":"2026-11-08T22:28:17Z","sha256":"933628ebc7fa169756fbf1de72ecf44d3482ab5e21ed0a4a411d9206a271b91c"}},{"quote":"not (i) \"sell\" or \"share\" Customer Personal Data (as defined by the CCPA or equivalent concepts under U.S. Privacy Laws)","source":{"doc":"data-processing-addendum","title":"Data processing addendum","url":"https://x.ai/legal/data-processing-addendum","capturedAt":"2026-11-08T22:28:17Z","sha256":"933628ebc7fa169756fbf1de72ecf44d3482ab5e21ed0a4a411d9206a271b91c"}},{"quote":"No. We do not sell your data to third parties as defined by applicable laws.","source":{"doc":"legal-faq-enterprise","title":"Enterprise FAQs","url":"https://x.ai/legal/faq-enterprise","capturedAt":"2026-11-08T22:04:36Z","sha256":"d054689d0d3c3ac61ae5c1c1c093e19784448122cf9eecdee7120210950e6925"}}]},"data_location":{"summary":"Data may be processed worldwide, including the US and wherever subprocessors operate. SCCs and the UK Addendum cover transfers out of Europe. No data-residency option is described.","status":"stated","cites":[{"quote":"You acknowledge and agree that SpaceXSI may transfer and process Personal Data on a global basis outside Europe as necessary to provide the Services, including in the United States and other countries where SpaceXSI and its Subprocessors maintain data processing operations.","source":{"doc":"data-processing-addendum","title":"Data processing addendum","url":"https://x.ai/legal/data-processing-addendum","capturedAt":"2026-11-08T22:28:17Z","sha256":"933628ebc7fa169756fbf1de72ecf44d3482ab5e21ed0a4a411d9206a271b91c"}}]},"enterprise_controls":{"summary":"DPA included automatically, BAA by questionnaire, custom retention via Order Form or self-service, audit documents on request, breach notice within 48h where feasible. SSO and audit logs: not stated.","status":"stated","cites":[{"quote":"Yes, if you submit personal data to our Services, our Data Processing Addendum (DPA) applies and is automatically incorporated into our Enterprise Terms of Service.","source":{"doc":"legal-faq-enterprise","title":"Enterprise FAQs","url":"https://x.ai/legal/faq-enterprise","capturedAt":"2026-11-08T22:04:36Z","sha256":"d054689d0d3c3ac61ae5c1c1c093e19784448122cf9eecdee7120210950e6925"}},{"quote":"To inquire about a Business Associate Agreement (BAA), please complete our BAA Questionnaire.","source":{"doc":"legal-faq-enterprise","title":"Enterprise FAQs","url":"https://x.ai/legal/faq-enterprise","capturedAt":"2026-11-08T22:04:36Z","sha256":"d054689d0d3c3ac61ae5c1c1c093e19784448122cf9eecdee7120210950e6925"}},{"quote":"explicitly agreed in an Order Form, Documentation, or conspicuous notices within the Services or otherwise selected by Customer via self-service tools made available by SpaceXSI","source":{"doc":"terms-enterprise","title":"Terms of Service - Enterprise","url":"https://x.ai/legal/terms-of-service-enterprise","capturedAt":"2026-11-08T22:04:34Z","sha256":"748bad38da5035571eb54fe90fd0e12268e04fafd2981e310e7efd13adc1dd4a"}},{"quote":"We will notify you without undue delay, and where feasible, no later than 48 hours, after we become aware of any Security Incident.","source":{"doc":"data-processing-addendum","title":"Data processing addendum","url":"https://x.ai/legal/data-processing-addendum","capturedAt":"2026-11-08T22:28:17Z","sha256":"933628ebc7fa169756fbf1de72ecf44d3482ab5e21ed0a4a411d9206a271b91c"}},{"quote":"Workspace administrators (customers) are able to authorize additional parties as they see fit.","source":{"doc":"data-processing-addendum","title":"Data processing addendum","url":"https://x.ai/legal/data-processing-addendum","capturedAt":"2026-11-08T22:28:17Z","sha256":"933628ebc7fa169756fbf1de72ecf44d3482ab5e21ed0a4a411d9206a271b91c"}}]}}},{"id":"enterprise","name":"Grok Business / Grok Enterprise","surface":"enterprise","facts":{"default_retention":{"summary":"Inferred: the Enterprise Terms cover 'related SpaceXSI Services (including Grok)' for businesses, so the 30-day auto-deletion likely applies. No Grok Business-specific retention page was captured.","status":"inferred","cites":[{"quote":"These terms are for enterprise (business) users of the SpaceXSI API and related SpaceXSI Services (including Grok) who are at least 18 years old.","source":{"doc":"terms-enterprise","title":"Terms of Service - Enterprise","url":"https://x.ai/legal/terms-of-service-enterprise","capturedAt":"2026-11-08T22:04:34Z","sha256":"748bad38da5035571eb54fe90fd0e12268e04fafd2981e310e7efd13adc1dd4a"}},{"quote":"All User Content will be automatically and permanently deleted no later than 30 days after the end of the interaction or session in which it was submitted unless a different retention period is:","source":{"doc":"terms-enterprise","title":"Terms of Service - Enterprise","url":"https://x.ai/legal/terms-of-service-enterprise","capturedAt":"2026-11-08T22:04:34Z","sha256":"748bad38da5035571eb54fe90fd0e12268e04fafd2981e310e7efd13adc1dd4a"}}]},"deletion_window":{"summary":"Inferred from the DPA, which covers business services: deletion requests are processed 'typically within 30 days', and data is deleted on termination per the Agreement. Workspace-chat timing isn't stated.","status":"inferred","cites":[{"quote":"Upon termination of the Agreement, we shall delete any Personal Data in our possession in accordance with the Agreement, except to the extent that we are required to retain copies under applicable laws","source":{"doc":"data-processing-addendum","title":"Data processing addendum","url":"https://x.ai/legal/data-processing-addendum","capturedAt":"2026-11-08T22:28:17Z","sha256":"933628ebc7fa169756fbf1de72ecf44d3482ab5e21ed0a4a411d9206a271b91c"}},{"quote":"Customers are able to delete their data at will. Following a data deletion request, our systems automatically delete all login data, prompt/response pairs, and billing information stored within our systems typically within 30 days.","source":{"doc":"data-processing-addendum","title":"Data processing addendum","url":"https://x.ai/legal/data-processing-addendum","capturedAt":"2026-11-08T22:28:17Z","sha256":"933628ebc7fa169756fbf1de72ecf44d3482ab5e21ed0a4a411d9206a271b91c"}}]},"retention_exceptions":{"summary":"Inferred from the Enterprise Terms: data may be kept when the law requires or for safety, security, moderation or abuse investigations. Only the minimum, until the reason ends.","status":"inferred","cites":[{"quote":"reasonably necessary for safety, security, compliance, moderation, abuse prevention, or investigation of suspected violations of this Agreement, in each of which cases SpaceXSI will retain only the minimum data necessary and will permanently delete it promptly when the justification no longer applies.","source":{"doc":"terms-enterprise","title":"Terms of Service - Enterprise","url":"https://x.ai/legal/terms-of-service-enterprise","capturedAt":"2026-11-08T22:04:34Z","sha256":"748bad38da5035571eb54fe90fd0e12268e04fafd2981e310e7efd13adc1dd4a"}}]},"zdr":{"summary":"Inferred: ZDR is defined only as 'ZDR-Enabled APIs'. The captured policies don't say whether Grok Business or Enterprise workspaces can use it.","status":"inferred","cites":[{"quote":"Except when Customer elects to use SpaceXSI’s Zero Data Retention-enabled APIs (“**ZDR-Enabled API**” or “**ZDR**”)","source":{"doc":"terms-enterprise","title":"Terms of Service - Enterprise","url":"https://x.ai/legal/terms-of-service-enterprise","capturedAt":"2026-11-08T22:04:34Z","sha256":"748bad38da5035571eb54fe90fd0e12268e04fafd2981e310e7efd13adc1dd4a"}}]},"training_default":{"summary":"No. Business user content isn't used to train models, subject to disclosures and customer-controlled settings. The consumer FAQ also says business and enterprise content isn't used to improve models.","status":"stated","cites":[{"quote":"SpaceXSI will not use any User Content to train any foundation models, large language models, or other artificial intelligence systems or to develop any new products, services, or features, subject to disclosures to Customer and Customer-controlled user settings.","source":{"doc":"terms-enterprise","title":"Terms of Service - Enterprise","url":"https://x.ai/legal/terms-of-service-enterprise","capturedAt":"2026-11-08T22:04:34Z","sha256":"748bad38da5035571eb54fe90fd0e12268e04fafd2981e310e7efd13adc1dd4a"}},{"quote":"Similarly, we do not use content from our business and enterprise customers to improve our models.","source":{"doc":"legal-faq","title":"Consumer FAQs","url":"https://x.ai/legal/faq","capturedAt":"2026-11-08T22:04:34Z","sha256":"2b1ad7ca60c15069e543f34bfb9d533b9105761e69bf7ec11ef9a55f924497ed"}}]},"training_opt_out":{"summary":"Training is off by default. xAI can still create and own de-identified or aggregated usage data (outside ZDR), and some customers get free credits for opting in to training.","status":"stated","cites":[{"quote":"SpaceXSI may create and use, for any lawful purpose, de-identified and/or aggregated data derived from Customer’s use of the Services","source":{"doc":"terms-enterprise","title":"Terms of Service - Enterprise","url":"https://x.ai/legal/terms-of-service-enterprise","capturedAt":"2026-11-08T22:04:34Z","sha256":"748bad38da5035571eb54fe90fd0e12268e04fafd2981e310e7efd13adc1dd4a"}},{"quote":"In some instances we may offer free credits in exchange for you agreeing to permit us to train on your business data.","source":{"doc":"legal-faq-enterprise","title":"Enterprise FAQs","url":"https://x.ai/legal/faq-enterprise","capturedAt":"2026-11-08T22:04:36Z","sha256":"d054689d0d3c3ac61ae5c1c1c093e19784448122cf9eecdee7120210950e6925"}}]},"human_review":{"summary":"Inferred from the enterprise FAQ: automated classifiers, plus review by authorized staff when legally required (incidents, misuse). Admins may also monitor linked accounts.","status":"inferred","cites":[{"quote":"A limited number of authorized SpaceXSI personnel may review your data when legally required, such as investigating security incidents and potential misuse of our services.","source":{"doc":"legal-faq-enterprise","title":"Enterprise FAQs","url":"https://x.ai/legal/faq-enterprise","capturedAt":"2026-11-08T22:04:36Z","sha256":"d054689d0d3c3ac61ae5c1c1c093e19784448122cf9eecdee7120210950e6925"}},{"quote":"the organization’s administrator may access, monitor and control your account","source":{"doc":"terms-consumer","title":"Terms of Service - Consumer","url":"https://x.ai/legal/terms-of-service","capturedAt":"2026-11-08T21:39:57Z","sha256":"002227073b4f3e73203e178b111ac7038f87c6f6185a4385dc61806e180c0b41"}}]},"memory":{"summary":"Not stated. No captured policy describes memory or profiles for Grok Business or Enterprise.","status":"not_stated","cites":[]},"connector_data":{"summary":"A team admin must first provision each connector in the cloud console before members can use it. What connector data is stored, and what happens on disconnect, is not stated.","status":"stated","cites":[{"quote":"For Grok Business and Enterprise users, a team admin must first provision a connector in the [cloud console](/grok/connector-management) before it is available to members of the organization.","source":{"doc":"grok-connectors","title":"Connectors","url":"https://docs.x.ai/grok/connectors","capturedAt":"2026-11-08T22:04:31Z","sha256":"55236a22fe664b1702cb6a19fed8545d351192194cb048866ab76b662a13e783"}}]},"agent_actions":{"summary":"Not stated for business workspaces. The Agentic Actions terms appear only in the consumer terms.","status":"not_stated","cites":[]},"input_ownership":{"summary":"The customer keeps all rights in its inputs.","status":"stated","cites":[{"quote":"Customer (a) retains all right, title, and interest (including all intellectual-property rights) in and to the Input","source":{"doc":"terms-enterprise","title":"Terms of Service - Enterprise","url":"https://x.ai/legal/terms-of-service-enterprise","capturedAt":"2026-11-08T22:04:34Z","sha256":"748bad38da5035571eb54fe90fd0e12268e04fafd2981e310e7efd13adc1dd4a"}},{"quote":"You own the Inputs and Outputs.","source":{"doc":"legal-faq-enterprise","title":"Enterprise FAQs","url":"https://x.ai/legal/faq-enterprise","capturedAt":"2026-11-08T22:04:36Z","sha256":"d054689d0d3c3ac61ae5c1c1c093e19784448122cf9eecdee7120210950e6925"}}]},"output_ownership":{"summary":"The customer owns outputs permanently, and xAI assigns its rights in them. xAI asks you to credit Grok.","status":"stated","cites":[{"quote":"(b) owns all right, title, and interest in the Output in perpetuity and, to the fullest extent possible under applicable law, SpaceXSI hereby assigns to Customer all of its right, title, and interest in such Output","source":{"doc":"terms-enterprise","title":"Terms of Service - Enterprise","url":"https://x.ai/legal/terms-of-service-enterprise","capturedAt":"2026-11-08T22:04:34Z","sha256":"748bad38da5035571eb54fe90fd0e12268e04fafd2981e310e7efd13adc1dd4a"}},{"quote":"We do ask that you attribute the generated work to Grok as provided in SpaceXSI's Brand Guidelines.","source":{"doc":"legal-faq-enterprise","title":"Enterprise FAQs","url":"https://x.ai/legal/faq-enterprise","capturedAt":"2026-11-08T22:04:36Z","sha256":"d054689d0d3c3ac61ae5c1c1c093e19784448122cf9eecdee7120210950e6925"}}]},"license_to_provider":{"summary":"Irrevocable, transferable, worldwide license limited to running the service, preventing fraud and abuse, and safety and compliance. Feedback is assigned to xAI with a perpetual license.","status":"stated","cites":[{"quote":"Customer hereby grants to SpaceXSI a non-exclusive, worldwide, irrevocable, transferable, fully paid-up, royalty-free right and license to, store, use, transmit, modify, and otherwise process User Content as reasonably necessary to","source":{"doc":"terms-enterprise","title":"Terms of Service - Enterprise","url":"https://x.ai/legal/terms-of-service-enterprise","capturedAt":"2026-11-08T22:04:34Z","sha256":"748bad38da5035571eb54fe90fd0e12268e04fafd2981e310e7efd13adc1dd4a"}},{"quote":"grants (and will cause its Permitted Users to grant) to SpaceXSI a perpetual, irrevocable, worldwide, royalty-free, fully paid-up, sublicensable license to use, reproduce, modify, distribute, create derivative works of, and otherwise exploit the Feedback","source":{"doc":"terms-enterprise","title":"Terms of Service - Enterprise","url":"https://x.ai/legal/terms-of-service-enterprise","capturedAt":"2026-11-08T22:04:34Z","sha256":"748bad38da5035571eb54fe90fd0e12268e04fafd2981e310e7efd13adc1dd4a"}}]},"third_party_sharing":{"summary":"Same DPA terms: a public subprocessor list with 15 days' notice of changes, and no selling or sharing of personal data. Connected third-party services fall under their own terms.","status":"stated","cites":[{"quote":"SpaceXSI's list of general Subprocessors is available at <https://x.ai/legal/subprocessor-list> (\"**Subprocessor List**\").","source":{"doc":"data-processing-addendum","title":"Data processing addendum","url":"https://x.ai/legal/data-processing-addendum","capturedAt":"2026-11-08T22:28:17Z","sha256":"933628ebc7fa169756fbf1de72ecf44d3482ab5e21ed0a4a411d9206a271b91c"}},{"quote":"To the extent of any conflict between this Agreement and applicable Third-Party Terms, the Third-Party Terms will govern with respect to the relevant Third-Party Services.","source":{"doc":"terms-enterprise","title":"Terms of Service - Enterprise","url":"https://x.ai/legal/terms-of-service-enterprise","capturedAt":"2026-11-08T22:04:34Z","sha256":"748bad38da5035571eb54fe90fd0e12268e04fafd2981e310e7efd13adc1dd4a"}}]},"data_location":{"summary":"Data may be processed globally, including the US. SCCs cover transfers out of Europe. No residency option is described.","status":"stated","cites":[{"quote":"SpaceXSI may transfer and process Personal Data on a global basis outside Europe as necessary to provide the Services, including in the United States","source":{"doc":"data-processing-addendum","title":"Data processing addendum","url":"https://x.ai/legal/data-processing-addendum","capturedAt":"2026-11-08T22:28:17Z","sha256":"933628ebc7fa169756fbf1de72ecf44d3482ab5e21ed0a4a411d9206a271b91c"}}]},"enterprise_controls":{"summary":"Admins provision connectors and can monitor accounts linked by work email. Custom retention via Order Form, DPA, BAA and audit documents are available. SSO and audit logs: not stated.","status":"stated","cites":[{"quote":"If you use an email address associated with your employer or other organization, your account may be linked to that organization’s Grok Enterprise subscription.","source":{"doc":"terms-consumer","title":"Terms of Service - Consumer","url":"https://x.ai/legal/terms-of-service","capturedAt":"2026-11-08T21:39:57Z","sha256":"002227073b4f3e73203e178b111ac7038f87c6f6185a4385dc61806e180c0b41"}},{"quote":"Upon written request, and subject to reasonable notice and confidentiality agreements, we will provide access to documentation that adequately demonstrates our compliance with this DPA, including copies of certifications, audit reports, and/or other relevant documentation.","source":{"doc":"data-processing-addendum","title":"Data processing addendum","url":"https://x.ai/legal/data-processing-addendum","capturedAt":"2026-11-08T22:28:17Z","sha256":"933628ebc7fa169756fbf1de72ecf44d3482ab5e21ed0a4a411d9206a271b91c"}},{"quote":"Workspace administrators (customers) are able to authorize additional parties as they see fit.","source":{"doc":"data-processing-addendum","title":"Data processing addendum","url":"https://x.ai/legal/data-processing-addendum","capturedAt":"2026-11-08T22:28:17Z","sha256":"933628ebc7fa169756fbf1de72ecf44d3482ab5e21ed0a4a411d9206a271b91c"}}]}}},{"id":"grok-bot","name":"Grok Bot (AI teammate in X Chat)","surface":"agent","facts":{"default_retention":{"summary":"Your data is kept for the life of your Grok Bot account unless you delete it.","status":"stated","cites":[{"quote":"Unless otherwise deleted by you as set forth below your data will be retained for the life of your Grok Bot account.","source":{"doc":"x-help-about-grok","title":"X help about grok","url":"https://help.x.com/en/using-x/about-grok","capturedAt":"2026-11-08T22:19:41Z","sha256":"f05c0dfde39196395da3f8109082103be437ac42bd75a7352f36558e01037067"}}]},"deletion_window":{"summary":"You can delete your Grok Bot account in Grok Bot settings. How long deletion takes is not stated.","status":"stated","cites":[{"quote":"You can delete your Grok Bot account in your Grok Bot setting.","source":{"doc":"x-help-about-grok","title":"X help about grok","url":"https://help.x.com/en/using-x/about-grok","capturedAt":"2026-11-08T22:19:41Z","sha256":"f05c0dfde39196395da3f8109082103be437ac42bd75a7352f36558e01037067"}}]},"retention_exceptions":{"summary":"Not stated. The X help page gives no legal, safety or backup exceptions for Grok Bot, and the Cursor Privacy Policy that governs it wasn't captured.","status":"not_stated","cites":[]},"zdr":{"summary":"Not stated.","status":"not_stated","cites":[]},"training_default":{"summary":"Inferred: Grok Bot chats in X Chat may be used for training. The control is an X opt-out setting, but the default is never stated.","status":"inferred","cites":[{"quote":"You can control whether your interactions with Grok Bot in \\>x\\< Chat are used to train and improve AI models.","source":{"doc":"x-help-about-grok","title":"X help about grok","url":"https://help.x.com/en/using-x/about-grok","capturedAt":"2026-11-08T22:19:41Z","sha256":"f05c0dfde39196395da3f8109082103be437ac42bd75a7352f36558e01037067"}}]},"training_opt_out":{"summary":"Untick the same X setting used for Grok on X (Grok & Third-party Collaborators). Opting out means your data isn't used for training.","status":"stated","cites":[{"quote":"Opting out means your data will not be used for training. You can still use Grok Bot normally.","source":{"doc":"x-help-about-grok","title":"X help about grok","url":"https://help.x.com/en/using-x/about-grok","capturedAt":"2026-11-08T22:19:41Z","sha256":"f05c0dfde39196395da3f8109082103be437ac42bd75a7352f36558e01037067"}}]},"human_review":{"summary":"Not stated.","status":"not_stated","cites":[]},"memory":{"summary":"Not stated.","status":"not_stated","cites":[]},"connector_data":{"summary":"Grok Bot signs in to tools you choose, and you're responsible for its third-party access. The captured policies don't say what data it stores from those tools or how long.","status":"stated","cites":[{"quote":"Use \\>x\\< Chat to message your Grok Bot to sign in to the tools you select, work through tasks you direct, and to message back results.","source":{"doc":"x-help-about-grok","title":"X help about grok","url":"https://help.x.com/en/using-x/about-grok","capturedAt":"2026-11-08T22:19:41Z","sha256":"f05c0dfde39196395da3f8109082103be437ac42bd75a7352f36558e01037067"}},{"quote":"You remain responsible for the requests you make, any third party access by Grok Bot, and for reviewing what Grok Bot proposes as an action.","source":{"doc":"x-help-about-grok","title":"X help about grok","url":"https://help.x.com/en/using-x/about-grok","capturedAt":"2026-11-08T22:19:41Z","sha256":"f05c0dfde39196395da3f8109082103be437ac42bd75a7352f36558e01037067"}}]},"agent_actions":{"summary":"Grok Bot proposes actions, and you allow once, always allow similar actions, or deny. Action logs and credential storage are covered on an approvals/security docs page that wasn't captured.","status":"stated","cites":[{"quote":"You can allow an action once, set similar actions to always allow, or deny them.","source":{"doc":"x-help-about-grok","title":"X help about grok","url":"https://help.x.com/en/using-x/about-grok","capturedAt":"2026-11-08T22:19:41Z","sha256":"f05c0dfde39196395da3f8109082103be437ac42bd75a7352f36558e01037067"}},{"quote":"For more details, see Grok Bot [Approvals, Security and Privacy](https://docs.x.ai/grok-bot/approvals-security-and-privacy).","source":{"doc":"x-help-about-grok","title":"X help about grok","url":"https://help.x.com/en/using-x/about-grok","capturedAt":"2026-11-08T22:19:41Z","sha256":"f05c0dfde39196395da3f8109082103be437ac42bd75a7352f36558e01037067"}}]},"input_ownership":{"summary":"Not stated. No Grok Bot terms of service were captured.","status":"not_stated","cites":[]},"output_ownership":{"summary":"Not stated. No Grok Bot terms of service were captured.","status":"not_stated","cites":[]},"license_to_provider":{"summary":"Not stated. No Grok Bot terms of service were captured.","status":"not_stated","cites":[]},"third_party_sharing":{"summary":"Grok Bot falls under the Cursor Privacy Policy, not xAI's, and X activity remains under X's policy. Cursor's terms weren't captured, so sharing details are unknown.","status":"stated","cites":[{"quote":"Use of Grok Bot is governed by the [Cursor Privacy Policy](https://cursor.com/privacy). When you use Grok Bot in \\>x\\< Chat, your activity on \\>x\\< is also subject to the [\\>x\\< Privacy Policy](https://x.com/privacy).","source":{"doc":"x-help-about-grok","title":"X help about grok","url":"https://help.x.com/en/using-x/about-grok","capturedAt":"2026-11-08T22:19:41Z","sha256":"f05c0dfde39196395da3f8109082103be437ac42bd75a7352f36558e01037067"}}]},"data_location":{"summary":"Not stated.","status":"not_stated","cites":[]},"enterprise_controls":{"summary":"Not stated.","status":"not_stated","cites":[]}}}],"notes":[{"text":"In these captured policies xAI's policies name the company SpaceX Super Intelligence LLC ('SpaceXSI'). X's pages say 'xAI' or 'SpaceXAI'. Grok on X falls under X Corp.'s policies, not xAI's.","cites":[{"quote":"For example, your use of X (previously Twitter), including use of Grok on the X platform, is governed by the [X Privacy Policy](https://x.com/en/privacy) and [X Terms](https://x.com/en/tos), not this SpaceXSI Privacy Policy.","source":{"doc":"privacy-policy","title":"Privacy Policy","url":"https://x.ai/legal/privacy-policy","capturedAt":"2026-11-08T21:38:09Z","sha256":"07887bdc61d17858a3659bbe78ff0ef42af54632f7106f43b0f6446148a10b78"}}]},{"text":"The consumer license on inputs is irrevocable, perpetual, transferable and sublicensable 'for any purpose'. Business customers get only a license limited to running the service, and xAI assigns outputs to them.","cites":[{"quote":"you grant an irrevocable, perpetual, transferable, sublicensable, royalty-free, and worldwide right to SpaceXSI","source":{"doc":"terms-consumer","title":"Terms of Service - Consumer","url":"https://x.ai/legal/terms-of-service","capturedAt":"2026-11-08T21:39:57Z","sha256":"002227073b4f3e73203e178b111ac7038f87c6f6185a4385dc61806e180c0b41"}},{"quote":"SpaceXSI hereby assigns to Customer all of its right, title, and interest in such Output","source":{"doc":"terms-enterprise","title":"Terms of Service - Enterprise","url":"https://x.ai/legal/terms-of-service-enterprise","capturedAt":"2026-11-08T22:04:34Z","sha256":"748bad38da5035571eb54fe90fd0e12268e04fafd2981e310e7efd13adc1dd4a"}}]},{"text":"API ZDR is unusually strict. Content is deleted within an hour (or on delivery) with no logs or backups, even for legal holds or subpoenas. The DPA requires any personal data to go only through ZDR.","cites":[{"quote":"once deleted, User Content cannot be recovered or produced by SpaceXSI under any circumstances (including subpoenas, regulatory requests, or legal process)","source":{"doc":"terms-enterprise","title":"Terms of Service - Enterprise","url":"https://x.ai/legal/terms-of-service-enterprise","capturedAt":"2026-11-08T22:04:34Z","sha256":"748bad38da5035571eb54fe90fd0e12268e04fafd2981e310e7efd13adc1dd4a"}},{"quote":"Customer agrees that it will process Personal Data through the Services only using SpaceXSI’s ZDR-Enabled API (as such term is defined in the Agreement).","source":{"doc":"data-processing-addendum","title":"Data processing addendum","url":"https://x.ai/legal/data-processing-addendum","capturedAt":"2026-11-08T22:28:17Z","sha256":"933628ebc7fa169756fbf1de72ecf44d3482ab5e21ed0a4a411d9206a271b91c"}}]},{"text":"Grok Bot falls under Cursor's privacy policy, not xAI's. Adding @Grok to an end-to-end-encrypted X Chat group gives X and xAI every later message until Grok is removed.","cites":[{"quote":"Use of Grok Bot is governed by the [Cursor Privacy Policy](https://cursor.com/privacy).","source":{"doc":"x-help-about-grok","title":"X help about grok","url":"https://help.x.com/en/using-x/about-grok","capturedAt":"2026-11-08T22:19:41Z","sha256":"f05c0dfde39196395da3f8109082103be437ac42bd75a7352f36558e01037067"}},{"quote":"If you add @Grok as a member of a Chat conversation, X and SpaceXAI (to provide the feature) will get access to all the messages sent in that conversation after Grok is added, up until the moment Grok is removed.","source":{"doc":"x-help-about-grok","title":"X help about grok","url":"https://help.x.com/en/using-x/about-grok","capturedAt":"2026-11-08T22:19:41Z","sha256":"f05c0dfde39196395da3f8109082103be437ac42bd75a7352f36558e01037067"}}]},{"text":"Signing in to Grok with X lets xAI import your X profile, post history (including protected posts you can view), usage data and Grok on X chat history.","cites":[{"quote":"X post history (your X posts viewable on your X account including posts to and from all accounts (public or protected) that you can view), X usage data, and your Grok on X conversation history to your SpaceXSI account.","source":{"doc":"terms-consumer","title":"Terms of Service - Consumer","url":"https://x.ai/legal/terms-of-service","capturedAt":"2026-11-08T21:39:57Z","sha256":"002227073b4f3e73203e178b111ac7038f87c6f6185a4385dc61806e180c0b41"}}]},{"text":"xAI may delete consumer accounts inactive for more than 120 days. Using a work email can link a personal account to an employer's Grok Enterprise subscription, which the admin can monitor.","cites":[{"quote":"Your account has been inactive for more than 120 days.","source":{"doc":"terms-consumer","title":"Terms of Service - Consumer","url":"https://x.ai/legal/terms-of-service","capturedAt":"2026-11-08T21:39:57Z","sha256":"002227073b4f3e73203e178b111ac7038f87c6f6185a4385dc61806e180c0b41"}}]},{"text":"The consumer and enterprise FAQs (May 2025 and Feb 2025) are much older than the October 2026 terms and privacy policy, so they may be out of date. Where they differ, rely on the terms.","cites":[{"quote":"Last updated: February 25, 2025","source":{"doc":"legal-faq-enterprise","title":"Enterprise FAQs","url":"https://x.ai/legal/faq-enterprise","capturedAt":"2026-11-08T22:04:36Z","sha256":"d054689d0d3c3ac61ae5c1c1c093e19784448122cf9eecdee7120210950e6925"}}]},{"text":"DPA Appendix 2 (security measures) says all User Content is continuously backed up and versioned so it can be reverted, with no carve-out for ZDR. The Enterprise Terms say ZDR keeps no logs or backups; the captured policies don't reconcile the two.","cites":[{"quote":"User Content is continuously backed up, and access controls are implemented to prevent unauthorized modification or access.","source":{"doc":"data-processing-addendum","title":"Data processing addendum","url":"https://x.ai/legal/data-processing-addendum","capturedAt":"2026-11-08T22:28:17Z","sha256":"933628ebc7fa169756fbf1de72ecf44d3482ab5e21ed0a4a411d9206a271b91c"}},{"quote":"User Content is versioned and encrypted such that it is possible to revert to a previous state, while verifying integrity.","source":{"doc":"data-processing-addendum","title":"Data processing addendum","url":"https://x.ai/legal/data-processing-addendum","capturedAt":"2026-11-08T22:28:17Z","sha256":"933628ebc7fa169756fbf1de72ecf44d3482ab5e21ed0a4a411d9206a271b91c"}},{"quote":"no logs, backups, persistent copies, or other durable storage containing User Content will thereafter be retained for any purpose, including safety, debugging, or legal compliance.","source":{"doc":"terms-enterprise","title":"Terms of Service - Enterprise","url":"https://x.ai/legal/terms-of-service-enterprise","capturedAt":"2026-11-08T22:04:34Z","sha256":"748bad38da5035571eb54fe90fd0e12268e04fafd2981e310e7efd13adc1dd4a"}}]},{"text":"Per DPA Appendix 2, User Content is de-identified with per-customer hashed identifiers and encrypted with per-customer keys that no employee can access.","cites":[{"quote":"All User Content is de-identified using per customer hashed identifiers, and encrypted at rest and in transit, using industry standard encryption (AES-256 encryption for data at rest and TLS 1.3 for data in transit).","source":{"doc":"data-processing-addendum","title":"Data processing addendum","url":"https://x.ai/legal/data-processing-addendum","capturedAt":"2026-11-08T22:28:17Z","sha256":"933628ebc7fa169756fbf1de72ecf44d3482ab5e21ed0a4a411d9206a271b91c"}},{"quote":"User Content at rest is encrypted with per customer AES-256 keys. These keys are handled only by machine-based services, and not made available to any employees.","source":{"doc":"data-processing-addendum","title":"Data processing addendum","url":"https://x.ai/legal/data-processing-addendum","capturedAt":"2026-11-08T22:28:17Z","sha256":"933628ebc7fa169756fbf1de72ecf44d3482ab5e21ed0a4a411d9206a271b91c"}}]},{"text":"Appendix 1 says sensitive data may be included incidentally in Inputs and Outputs and points to Appendix 2 for safeguards, but Appendix 2 has no sensitive-data-specific measure.","cites":[{"quote":"See Appendix 2 for applied restrictions and safeguards for sensitive data.","source":{"doc":"data-processing-addendum","title":"Data processing addendum","url":"https://x.ai/legal/data-processing-addendum","capturedAt":"2026-11-08T22:28:17Z","sha256":"933628ebc7fa169756fbf1de72ecf44d3482ab5e21ed0a4a411d9206a271b91c"}}]}],"gaps":["Grok Bot: no Grok Bot terms, Cursor Privacy Policy, or docs.x.ai/grok-bot pages (Approvals, Security and Privacy; Bots) were captured. Ownership, license, human review, retention exceptions, credential storage and data location are all unknown. Capture cursor.com/privacy and docs.x.ai/grok-bot/approvals-security-and-privacy.","Connectors: what Grok stores or indexes from Gmail, Drive, Outlook and the others, how long it keeps OAuth tokens, and what happens on disconnect. Likely in the per-connector docs (docs.x.ai/grok/connectors/*) and connector-management docs.","Memory: whether Grok has a memory feature and how to view or delete it. Likely on a Grok user guide page (docs.x.ai/grok/user-guide).","Grok Business / Enterprise: no workspace-specific retention, SSO, audit log, admin export or ZDR terms were captured. Likely on the Grok Business docs or x.ai/enterprise pages.","Consumer de-identified data: how long de-identified or pseudonymized conversations kept after deletion are retained. Also the Europe Privacy Policy Addendum (x.ai/legal/europe-privacy-policy-addendum) and Cookie Policy were not captured.","Grok on X: how long xAI (as opposed to X) keeps Grok on X data that X shares with it. The xAI privacy policy excludes Grok on X, and the X pages don't say.","Subprocessor list (x.ai/legal/subprocessor-list) was not captured. Also not stated: how long backups of deleted or ZDR User Content are kept (DPA Appendix 2 describes continuous backups).","API ZDR: how to enable ZDR (self-serve or by contract) and who qualifies. Likely in docs.x.ai.","Agentic Actions on consumer Grok: retention of action logs, browsing sessions, and stored credentials."],"documents":[{"doc":"grok-connectors","title":"Connectors","url":"https://docs.x.ai/grok/connectors","capturedAt":"2026-11-08T22:04:31Z","sha256":"55236a22fe664b1702cb6a19fed8545d351192194cb048866ab76b662a13e783"},{"doc":"legal-faq","title":"Consumer FAQs","url":"https://x.ai/legal/faq","capturedAt":"2026-11-08T22:04:34Z","sha256":"2b1ad7ca60c15069e543f34bfb9d533b9105761e69bf7ec11ef9a55f924497ed"},{"doc":"data-processing-addendum","title":"Data processing addendum","url":"https://x.ai/legal/data-processing-addendum","capturedAt":"2026-11-08T22:28:17Z","sha256":"933628ebc7fa169756fbf1de72ecf44d3482ab5e21ed0a4a411d9206a271b91c"},{"doc":"legal-faq-enterprise","title":"Enterprise FAQs","url":"https://x.ai/legal/faq-enterprise","capturedAt":"2026-11-08T22:04:36Z","sha256":"d054689d0d3c3ac61ae5c1c1c093e19784448122cf9eecdee7120210950e6925"},{"doc":"privacy-policy","title":"Privacy Policy","url":"https://x.ai/legal/privacy-policy","capturedAt":"2026-11-08T21:38:09Z","sha256":"07887bdc61d17858a3659bbe78ff0ef42af54632f7106f43b0f6446148a10b78"},{"doc":"terms-consumer","title":"Terms of Service - Consumer","url":"https://x.ai/legal/terms-of-service","capturedAt":"2026-11-08T21:39:57Z","sha256":"002227073b4f3e73203e178b111ac7038f87c6f6185a4385dc61806e180c0b41"},{"doc":"terms-enterprise","title":"Terms of Service - Enterprise","url":"https://x.ai/legal/terms-of-service-enterprise","capturedAt":"2026-11-08T22:04:34Z","sha256":"748bad38da5035571eb54fe90fd0e12268e04fafd2981e310e7efd13adc1dd4a"},{"doc":"x-help-about-grok","title":"X help about grok","url":"https://help.x.com/en/using-x/about-grok","capturedAt":"2026-11-08T22:19:41Z","sha256":"f05c0dfde39196395da3f8109082103be437ac42bd75a7352f36558e01037067"},{"doc":"x-privacy-policy","title":"X Privacy Policy","url":"https://x.com/en/privacy","capturedAt":"2026-11-08T21:38:08Z","sha256":"11efac212754da81f5cab1eba273c38ad00d783ec3a936ef56fdd9fc74cf2eb8"},{"doc":"x-terms","title":"X Terms of Service","url":"https://x.com/en/tos","capturedAt":"2026-11-08T21:39:35Z","sha256":"9176f4fa2dcea244b79e7a6baf68c1ec2a6409e2f9602d0080299badf10dcc01"}],"url":"https://gjalla.io/data-policies/xai/"}]}