Hugging Face
What Hugging Face keeps, for how long, whether it trains on it, and what rights you grant, for Inference Providers (routed API to external providers), Inference Endpoints (dedicated deployments), Hugging Face Hub with Team & Enterprise plans. Each answer quotes Hugging Face's own policy.
- Inference Providers (routed API to external providers)
- Inference Endpoints (dedicated deployments)
- Hugging Face Hub with Team & Enterprise plans
- Notes
- Open questions
- Documents
Inference Providers (routed API to external providers) API
- Default retention How long prompts and chats are kept
-
Stated Hugging Face says it doesn't store request bodies or responses when routing. Debug logs are kept up to 30 days without user data or tokens. Each provider's own retention applies.
What the policies say (2 quotes)
"We do not store the request body or response when routing requests through Hugging Face. Logs are kept for debugging purposes for up to 30 days, but no user data or tokens are stored."
Security & Compliance \u00b7 Hugging Facehuggingface.cocaptured 2026-11-08"For more information on how your data is handled, please refer to the Data Security Policies of each provider."
Security & Compliance \u00b7 Hugging Facehuggingface.cocaptured 2026-11-08 - After you delete How long until it is gone
-
Stated No deletion process for routing logs is described. When you cancel your account, Hugging Face uses reasonable efforts to delete your information within 90 days.
What the policy says
"Upon cancellation of your Account, we will use commercially **reasonable efforts to delete** your information and Content of your own Repositories, whether public or private, within 90 days."
Terms of Service \u2013 Hugging Facehuggingface.cocaptured 2026-11-08 - Kept longer when Safety flags, legal holds, backups
-
Stated Hugging Face may keep information for legal or regulatory compliance and in standard archiving and backup processes. No durations are given.
What the policy says
"We also reserve the **right to retain** **your information** for legal or regulatory compliance, pursuant to standard archiving, recovery, and back-up processes and practices, and pursuant to our Privacy Policy."
Terms of Service \u2013 Hugging Facehuggingface.cocaptured 2026-11-08 - Zero data retention Whether it exists and who can get it
-
Inferred There is no named ZDR program. Inferred: Hugging Face stores no payloads and its logs exclude user data, so its layer is near-zero retention. Upstream providers set their own terms.
What the policies say (2 quotes)
"We do not store the request body or response when routing requests through Hugging Face."
Security & Compliance \u00b7 Hugging Facehuggingface.cocaptured 2026-11-08"For more information on how your data is handled, please refer to the Data Security Policies of each provider."
Security & Compliance \u00b7 Hugging Facehuggingface.cocaptured 2026-11-08 - Trains on your data By default
-
Stated Hugging Face says it doesn't store user data for training. Whether upstream providers train on requests depends on their own policies, which aren't captured.
What the policy says
"Hugging Face does not store any user data for training purposes."
Security & Compliance \u00b7 Hugging Facehuggingface.cocaptured 2026-11-08 - Opting out How, and what it doesn't cover
-
Not stated No opt-out is described, either for Hugging Face or for the upstream providers.
- Human review Whether people read conversations
-
Not stated The captured policies don't say whether people review routed requests.
- Memory Remembered facts and profiles
-
Not stated No memory or profile feature is described.
- Connected apps Email, calendar, drive
-
Not stated No connected-account data handling is described.
- Agent actions Actions taken, browsing, credentials
-
Not stated No agent action logging or credential storage is described.
- Your inputs Who owns them
-
Inferred The Terms say you own the Content you create. Inferred to cover API inputs: Content means material on the Website or Hub, and API requests aren't mentioned.
What the policy says
"**You own the Content you create**!"
Terms of Service \u2013 Hugging Facehuggingface.cocaptured 2026-11-08 - Outputs Who owns them
-
Not stated Who owns model outputs isn't stated.
- License you grant Scope, and whether it is perpetual
-
Inferred Content you make available on the Website carries a worldwide, royalty-free license to Hugging Face to provide Services. Inferred: the Terms don't say whether this covers API payloads.
What the policy says
"You hereby **grant us** a worldwide, royalty-free and non-exclusive license to use, display, publish, reproduce, distribute, and make derivative works of such Content **to provide Services** and as otherwise permitted under these Terms and our Privacy Policy; and,"
Terms of Service \u2013 Hugging Facehuggingface.cocaptured 2026-11-08 - Sharing Model providers, subprocessors, ads
-
Stated Requests go to external inference providers, which handle data and security under their own policies. Hugging Face lists infrastructure subprocessors and says it won't sell personal information.
What the policies say (2 quotes)
"External providers are responsible for their own security measures, so please refer to their respective security policies for more details."
Security & Compliance \u00b7 Hugging Facehuggingface.cocaptured 2026-11-08"The Company will not sell, rent or lease your Personal Information except as provided for by this Policy."
Privacy Policy \u2013 Hugging Facehuggingface.cocaptured 2026-11-08 - Where data lives Regions and residency
-
Stated Hugging Face's servers are in the US, and data may be processed in other countries. Where upstream providers process requests isn't stated.
What the policies say (2 quotes)
"The Company and its servers are located in the United States."
Privacy Policy \u2013 Hugging Facehuggingface.cocaptured 2026-11-08"Personal Information collected by the Services may be stored and processed in the United States or any other country in which the Company or its affiliates, subsidiaries or agents maintain facilities."
Privacy Policy \u2013 Hugging Facehuggingface.cocaptured 2026-11-08 - Enterprise controls Retention settings, DPA, SSO
-
Stated Team/Enterprise plans add organization billing, usage analytics and spending limits for Inference Providers. Routing is encrypted with TLS.
What the policies say (2 quotes)
"Enable organization billing for Inference Providers, monitor usage with analytics, and manage spending limits."
Team & Enterprise Planshuggingface.cocaptured 2026-11-08"Inference Provider routing uses TLS/SSL to encrypt data in transit."
Security & Compliance \u00b7 Hugging Facehuggingface.cocaptured 2026-11-08
Inference Endpoints (dedicated deployments) API
- Default retention How long prompts and chats are kept
-
Stated Hugging Face says it doesn't store payloads or tokens sent to an endpoint. It keeps logs for 30 days, and the page doesn't say what those logs contain.
What the policy says
"Hugging Face does not store any customer data in terms of payloads or tokens that are passed to the Inference Endpoint. We are storing logs for 30 days."
Security & Compliance \u00b7 Hugging Facehuggingface.cocaptured 2026-11-08 - After you delete How long until it is gone
-
Stated Customers can delete their endpoints. When you cancel your account, Hugging Face uses reasonable efforts to delete your information and repository content within 90 days.
What the policies say (2 quotes)
""**Inference Endpoint Service**" refers to the Hugging Face Hub service through which the Customer can create, edit, manage and delete Managed Endpoints."
Terms of Service \u2013 Hugging Facehuggingface.cocaptured 2026-11-08"Upon cancellation of your Account, we will use commercially **reasonable efforts to delete** your information and Content of your own Repositories, whether public or private, within 90 days."
Terms of Service \u2013 Hugging Facehuggingface.cocaptured 2026-11-08 - Kept longer when Safety flags, legal holds, backups
-
Stated Hugging Face may keep information for legal compliance and in archiving and backup processes. No durations are given.
What the policy says
"We also reserve the **right to retain** **your information** for legal or regulatory compliance, pursuant to standard archiving, recovery, and back-up processes and practices, and pursuant to our Privacy Policy."
Terms of Service \u2013 Hugging Facehuggingface.cocaptured 2026-11-08 - Zero data retention Whether it exists and who can get it
-
Inferred There is no named ZDR program. Inferred: payloads aren't stored, but logs are kept 30 days and their contents aren't described.
What the policy says
"Hugging Face does not store any customer data in terms of payloads or tokens that are passed to the Inference Endpoint. We are storing logs for 30 days."
Security & Compliance \u00b7 Hugging Facehuggingface.cocaptured 2026-11-08 - Trains on your data By default
-
Inferred Probably not, but inferred: the page says payloads aren't stored, yet never directly addresses training.
What the policy says
"Hugging Face does not store any customer data in terms of payloads or tokens that are passed to the Inference Endpoint."
Security & Compliance \u00b7 Hugging Facehuggingface.cocaptured 2026-11-08 - Opting out How, and what it doesn't cover
-
Not stated No training opt-out is described.
- Human review Whether people read conversations
-
Not stated The captured policies don't say whether people review endpoint traffic.
- Memory Remembered facts and profiles
-
Not stated No memory or profile feature is described.
- Connected apps Email, calendar, drive
-
Not stated No connected-account data handling is described.
- Agent actions Actions taken, browsing, credentials
-
Not stated No agent action logging or credential storage is described.
- Your inputs Who owns them
-
Stated Hugging Face says it doesn't own models or data you upload to the Hub. The page doesn't specifically address endpoint payloads.
What the policy says
"Hugging Face does not own any model or data you upload to the Hugging Face hub."
Security & Compliance \u00b7 Hugging Facehuggingface.cocaptured 2026-11-08 - Outputs Who owns them
-
Not stated Who owns endpoint outputs isn't stated.
- License you grant Scope, and whether it is perpetual
-
Inferred Content made available on the Website carries a worldwide, royalty-free license to provide Services. Inferred to cover model repos you deploy. The Terms don't say whether it covers payloads.
What the policy says
"You hereby **grant us** a worldwide, royalty-free and non-exclusive license to use, display, publish, reproduce, distribute, and make derivative works of such Content **to provide Services** and as otherwise permitted under these Terms and our Privacy Policy; and,"
Terms of Service \u2013 Hugging Facehuggingface.cocaptured 2026-11-08 - Sharing Model providers, subprocessors, ads
-
Stated Private endpoints connect over AWS or Azure PrivateLink. AWS and Google Cloud appear in the general subprocessor list. Hugging Face says it won't sell personal information.
What the policies say (3 quotes)
"A Private Endpoint is only available through an intra-region secured AWS or Azure PrivateLink connection."
Security & Compliance \u00b7 Hugging Facehuggingface.cocaptured 2026-11-08"Amazon Web Services, Inc. \| Hosting/Infrastructure \| United States"
Privacy Policy \u2013 Hugging Facehuggingface.cocaptured 2026-11-08"The Company will not sell, rent or lease your Personal Information except as provided for by this Policy."
Privacy Policy \u2013 Hugging Facehuggingface.cocaptured 2026-11-08 - Where data lives Regions and residency
-
Stated Private endpoints use intra-region PrivateLink. The captured policies don't describe region choices. The general policy says servers are in the US, with possible processing elsewhere.
What the policies say (2 quotes)
"A Private Endpoint is only available through an intra-region secured AWS or Azure PrivateLink connection. Private Endpoints are not accessible from the internet."
Security & Compliance \u00b7 Hugging Facehuggingface.cocaptured 2026-11-08"The Company and its servers are located in the United States."
Privacy Policy \u2013 Hugging Facehuggingface.cocaptured 2026-11-08 - Enterprise controls Retention settings, DPA, SSO
-
Stated Three access levels (public, protected, private). A GDPR DPA comes with Enterprise Hub. SOC2 Type 2 and role-based access control are offered, and AWS PrivateLink is recommended.
What the policies say (2 quotes)
"Hugging Face also offers GDPR data processing agreement through an Enterprise Hub subscription."
Security & Compliance \u00b7 Hugging Facehuggingface.cocaptured 2026-11-08"The Hugging Face Hub, and Inference Endpoints, is SOC2 Type 2 certified. The Hugging Face Hub also offers Role Based Access Control."
Security & Compliance \u00b7 Hugging Facehuggingface.cocaptured 2026-11-08
Hugging Face Hub with Team & Enterprise plans Enterprise
- Default retention How long prompts and chats are kept
-
Stated Data is kept as long as needed for the Services, legal requirements, security and legitimate interests. No fixed period is given. Repository content stays until you delete it or cancel.
What the policy says
"We retain your Information for as long as necessary to deliver the Services, to comply with any applicable legal requirements, to maintain security and prevent incidents and, in general, to pursue our legitimate interests."
Privacy Policy \u2013 Hugging Facehuggingface.cocaptured 2026-11-08 - After you delete How long until it is gone
-
Stated After cancellation, Hugging Face uses reasonable efforts to delete your information and own repos within 90 days. Contributions to others' repos stay. Full erasure needs an email request.
What the policies say (2 quotes)
"Upon cancellation of your Account, we will use commercially **reasonable efforts to delete** your information and Content of your own Repositories, whether public or private, within 90 days. We will **not delete the Content that you contributed** to other Users' Repositories, or copies made by us or other Users."
Terms of Service \u2013 Hugging Facehuggingface.cocaptured 2026-11-08"If you wish to request the erasure of all of your Personal Information that we process, you may do so by sending a written request to <privacy@huggingface.co>."
Privacy Policy \u2013 Hugging Facehuggingface.cocaptured 2026-11-08 - Kept longer when Safety flags, legal holds, backups
-
Stated Information may be kept for legal or regulatory compliance and in standard archiving, recovery and backup processes. No durations are given.
What the policy says
"We also reserve the **right to retain** **your information** for legal or regulatory compliance, pursuant to standard archiving, recovery, and back-up processes and practices, and pursuant to our Privacy Policy."
Terms of Service \u2013 Hugging Facehuggingface.cocaptured 2026-11-08 - Zero data retention Whether it exists and who can get it
-
Not stated Not applicable to Hub storage, and no zero-retention option is described.
- Trains on your data By default
-
Not stated The captured policies don't say whether Hub content (private repos, datasets) is used to train models.
- Opting out How, and what it doesn't cover
-
Not stated No training opt-out is described.
- Human review Whether people read conversations
-
Stated Private content is confidential, but Hugging Face may access it with your consent, or without consent for security or legal compliance.
What the policy says
"The Company also reserves the right to access this information with your consent, or without your consent only for the purposes of pursuing legitimate interests such as maintaining security on its Services or complying with any legal or regulatory obligations."
Privacy Policy \u2013 Hugging Facehuggingface.cocaptured 2026-11-08 - Memory Remembered facts and profiles
-
Not stated No memory or profile feature is described.
- Connected apps Email, calendar, drive
-
Not stated No connected-account data handling is described.
- Agent actions Actions taken, browsing, credentials
-
Not stated No agent features are described. Audit logs of org actions and centralized token management are offered, but these cover user activity, not agent actions.
- Your inputs Who owns them
-
Stated You own the Content you create, and Hugging Face doesn't own models or data you upload. Hugging Face says it won't sell your Content.
What the policies say (2 quotes)
"**You own the Content you create**! We will not sell your Content, nor will we use it in any other way as permitted under these Terms."
Terms of Service \u2013 Hugging Facehuggingface.cocaptured 2026-11-08"Hugging Face does not own any model or data you upload to the Hugging Face hub."
Security & Compliance \u00b7 Hugging Facehuggingface.cocaptured 2026-11-08 - Outputs Who owns them
-
Not stated Ownership of models trained on the platform (for example, AutoTrain) or other outputs isn't separately stated.
- License you grant Scope, and whether it is perpetual
-
Stated You grant Hugging Face a worldwide, royalty-free, non-exclusive license to provide Services. Public repos also grant every user a perpetual, irrevocable license. Feedback is licensed perpetually and irrevocably.
What the policies say (3 quotes)
"You hereby **grant us** a worldwide, royalty-free and non-exclusive license to use, display, publish, reproduce, distribute, and make derivative works of such Content **to provide Services** and as otherwise permitted under these Terms and our Privacy Policy; and,"
Terms of Service \u2013 Hugging Facehuggingface.cocaptured 2026-11-08"If you decide to set your Repository **public**, you **grant each User** a perpetual, irrevocable, worldwide, royalty-free, non-exclusive license to use, display, publish, reproduce, distribute, and make derivative works of your Content through our Services and functionalities;"
Terms of Service \u2013 Hugging Facehuggingface.cocaptured 2026-11-08"you hereby grant us a perpetual, irrevocable, worldwide, royalty-free, and non-exclusive right and license to exploit and commercialize the Feedback, improve the Services, and develop and/or commercialize new offerings, which we will solely and exclusively own."
Terms of Service \u2013 Hugging Facehuggingface.cocaptured 2026-11-08 - Sharing Model providers, subprocessors, ads
-
Stated There's no sale of personal info. Data is shared with affiliates and listed subprocessors (AWS, GCP, MongoDB, Stripe and others). Anonymous aggregate data may go to advertisers.
What the policies say (3 quotes)
"The Company will not sell, rent or lease your Personal Information except as provided for by this Policy."
Privacy Policy \u2013 Hugging Facehuggingface.cocaptured 2026-11-08"The Company may disclose Anonymous Information (with or without compensation) to third parties, including advertisers and partners, for purposes including, but not limited to, targeting advertisements."
Privacy Policy \u2013 Hugging Facehuggingface.cocaptured 2026-11-08"Google Cloud Platform \| Hosting/Infrastructure \| United States/EMEA"
Privacy Policy \u2013 Hugging Facehuggingface.cocaptured 2026-11-08 - Where data lives Regions and residency
-
Stated Enterprise plans let you select, manage and audit where repository data is stored. Otherwise servers are in the US, and data may be transferred to other countries.
What the policies say (2 quotes)
"Select, manage, and audit the location of your repository data."
Team & Enterprise Planshuggingface.cocaptured 2026-11-08"The Company and its servers are located in the United States."
Privacy Policy \u2013 Hugging Facehuggingface.cocaptured 2026-11-08 - Enterprise controls Retention settings, DPA, SSO
-
Stated Plans offer SSO, storage regions, audit logs, resource groups, token management and org-wide security policies. GDPR DPAs and Business Associate Addendums are available on the Enterprise Plan.
What the policies say (4 quotes)
"Connect securely to your identity provider with SSO integration."
Team & Enterprise Planshuggingface.cocaptured 2026-11-08"Stay in control with comprehensive logs that report on actions taken."
Team & Enterprise Planshuggingface.cocaptured 2026-11-08"Centralized token control and custom approval policies for organization access."
Team & Enterprise Planshuggingface.cocaptured 2026-11-08"Hugging Face can also offer Business Associate Addendums or GDPR data processing agreements through an [Enterprise Plan](https://huggingface.co/pricing)."
Security \u00b7 Hugging Facehuggingface.cocaptured 2026-11-08
Notes
-
Making a repository public grants every user a perpetual, irrevocable license to your content, so deleting your account later doesn't revoke it. Contributions to others' repos also aren't deleted.
What the policies say (2 quotes)
"If you decide to set your Repository **public**, you **grant each User** a perpetual, irrevocable, worldwide, royalty-free, non-exclusive license to use, display, publish, reproduce, distribute, and make derivative works of your Content through our Services and functionalities;"
Terms of Service \u2013 Hugging Facehuggingface.cocaptured 2026-11-08"We will **not delete the Content that you contributed** to other Users' Repositories, or copies made by us or other Users."
Terms of Service \u2013 Hugging Facehuggingface.cocaptured 2026-11-08 -
Inference Providers is a router. Hugging Face says it keeps no payloads, but defers retention and training to each upstream provider's policy, and none of those are in the captured policies.
What the policy says
"For more information on how your data is handled, please refer to the Data Security Policies of each provider."
Security & Compliance \u00b7 Hugging Facehuggingface.cocaptured 2026-11-08 -
Hugging Face may disclose anonymous or aggregated information to advertisers and partners, possibly for compensation, including for ad targeting.
What the policy says
"The Company may disclose Anonymous Information (with or without compensation) to third parties, including advertisers and partners, for purposes including, but not limited to, targeting advertisements."
Privacy Policy \u2013 Hugging Facehuggingface.cocaptured 2026-11-08 -
The Terms let Hugging Face aggregate, anonymize or otherwise learn from data about your use of the Services. Whether this reaches content as well as usage isn't spelled out.
What the policy says
"In addition and subject to our Privacy Policy, we may **aggregate**, anonymize, or otherwise learn from data relating to your use of the Services, and use the foregoing to improve those Services."
Terms of Service \u2013 Hugging Facehuggingface.cocaptured 2026-11-08 -
The policies are old (Privacy Policy effective March 2023, Terms September 2022). Changes take effect 10 days after posting.
What the policies say (2 quotes)
"**🗓 Effective Date: March 28, 2023**"
Privacy Policy \u2013 Hugging Facehuggingface.cocaptured 2026-11-08"Changes will be effective 10 days following posting on the Website."
Terms of Service \u2013 Hugging Facehuggingface.cocaptured 2026-11-08
Open questions
Questions the captured policies leave unanswered, and where the answer probably lives.
HuggingChat: no captured policy covers it (retention, training, memory, deletion). It would need the HuggingChat privacy page (huggingface.co/chat/privacy) to be captured.
Upstream provider retention and training policies for Inference Providers: not in the captured policies. Each provider's data security policy is linked from the Inference Providers docs.
What the 30-day Inference Endpoints logs contain (for example, whether request content appears in container or application logs): not stated. Likely in the Inference Endpoints logs/monitoring docs.
Whether Hub content (private repos, datasets) can be used to train Hugging Face models: not stated. Likely in the Supplemental Terms PDF or the Content Policy.
Whether the Services license to Hugging Face ends when content is deleted or the account terminates: not stated. Likely in the Supplemental Terms or the Enterprise DPA.
Storage-region options and DPA terms for Enterprise Hub: only feature blurbs are captured. Likely in docs/hub/storage-regions and the Enterprise DPA.
Documents read
-
Privacy Policy \u2013 Hugging Face
huggingface.co captured 2026-11-08 sha256 6906e8cf8d27 -
Security \u00b7 Hugging Face
huggingface.co captured 2026-11-08 sha256 365d1db89948 -
Security & Compliance \u00b7 Hugging Face
huggingface.co captured 2026-11-08 sha256 7bd88df08f37 -
Security & Compliance \u00b7 Hugging Face
huggingface.co captured 2026-11-08 sha256 8a1196958384 -
Team & Enterprise Plans
huggingface.co captured 2026-11-08 sha256 226ae78c6494 -
Terms of Service \u2013 Hugging Face
huggingface.co captured 2026-11-08 sha256 316d42672bc9