Microsoft Copilot
- Your data trains their AI unless you switch it off in settings.
- Your data is used for personalized ads, including by third-party ad companies.
- The documents do not say whether your data is sold or shared.
- Staff may review your content; the policy does not describe an opt-out.
They can read chats, use your content to improve Copilot, show ads, and cut access without notice; U.S.
Agent Trust Hub uses AI and may make mistakes. Review reports and confirm their contents before relying on them.
Collected
Your prompts (text, files, voice, images, video), a Microsoft account, and lots of Windows device and usage data.
Read the exact line
Terms of service
“A “Prompt” is the content – text, audio, images, files, voice, or video – that you send to or share with Copilot.”
Training
They use your chats to run and improve Copilot; unpaid Copilot may show ads; humans may review what you send.
Read the exact line
Terms of service
“We don’t own Your Content, but we may use Your Content to operate Copilot and improve it.”
Sharing
Microsoft staff or contractors may review chats; shopping shares info with merchants; Windows ads can involve ad networks.
Read the exact line
Terms of service
“Copilot may include both automated and manual (human) processing of data. You shouldn’t share any information with Copilot that you don’t want us to review.”
Kept
The documents do not say how long Copilot chats are kept after you delete them.
Read the exact line
Terms of service
“The personal information, including health information, that you provide to Copilot Health is collected, processed, and stored in accordance with the Microsoft Privacy Statement”
Controls
They mention privacy options in Copilot and Windows settings, but not a full in-app delete timeline.
Read the exact line
Terms of service
“The Microsoft Privacy Statement explains how we use Your Content, and the privacy options in Copilot give you control over some of those uses.”
Fine print
They can cut access with no notice; you them; U.S.
Read the exact line
Terms of service
“Unless prohibited by law, we may limit, suspend, or permanently revoke your access to or use of Copilot (and potentially all other Services) in our sole discretion, at any time and without notice.”
Expand “Read the exact line” to see the source alongside the explanation.
What you can turn off
The controls and opt-outs their own documents describe, and where they say to find them.
Use Copilot privacy options to limit some uses of your content
Privacy options in Copilot (as referenced in the Copilot Terms)
Turn off Windows advertising ID
Windows Settings app (advertising ID setting)
Report a legal concern or restriction mistake
Report a Concern page / form described in the Copilot Terms
Stop using Copilot if you reject updated terms
Copilot terms page; they say you must stop using Copilot if you disagree
If a switch is not where they say, the deletion request above still applies.
Line by line
The lines that matter most, worst first.
People at Microsoft may read what you type or upload, not only a computer.
Read the exact line
Terms of service
“Copilot may include both automated and manual (human) processing of data. You shouldn’t share any information with Copilot that you don’t want us to review.”
For example, a private journal entry you paste into Copilot could be seen by a reviewer.
They can shut off Copilot, and maybe other Microsoft services, without warning.
Read the exact line
Terms of service
“Unless prohibited by law, we may limit, suspend, or permanently revoke your access to or use of Copilot (and potentially all other Services) in our sole discretion, at any time and without notice.”
For example, your Copilot history could become unreachable overnight with no email first.
If someone sues over what you did with Copilot, you may have to pay Microsoft’s legal bills.
Read the exact line
Terms of service
“You agree to us and hold us harmless (including our affiliates, employees and any other agents) from and against any claims, losses, and expenses (including attorneys' fees) arising from or relating to your use of Copilot”
For example, if you publish a Copilot image and someone sues, they can ask you to cover their lawyers.
They get broad rights to your prompts and answers so they can run and improve the product, including sharing with vendors.
Read the exact line
Terms of service
“By using Copilot, you grant us permission to use Your Content, which means we can copy, distribute, transmit, publicly display, publicly perform, edit, translate, and reformat it, and we can give those same rights to others who work on our behalf.”
For example, a story you wrote with Copilot could be copied internally to improve the service.
Free Copilot can show ads.
Read the exact line
Terms of service
“If you use Copilot without a paid Microsoft 365 subscription, Copilot may include advertising.”
For example, a chat about travel might sit next to product ads.
Kids under 13 are not allowed; you state your age yourself.
Read the exact line
Terms of service
“To use Copilot you must have a Microsoft Account, and you need to be old enough at least 13, but sometimes older, depending on your country’s laws.”
For example, a 12-year-old is not supposed to sign up even if they type a fake birthday.
They usually give 30 days’ notice on the terms page before new rules start.
Read the exact line
Terms of service
“Otherwise, we’ll post the updated Terms to this page at least 30 days before they take effect.”
For example, you could check the Copilot terms page and see a future effective date.
Health chats in Copilot Health are carved out from ads and model training, according to these terms.
Read the exact line
Terms of service
“For example, the information you provide to Copilot Health is not used for advertising purposes, and it is not used to develop or train AI models.”
For example, a symptom you type in Copilot Health should not be used to train the main AI, they say.
On Windows you can switch off the advertising ID used for personalized ads in some apps.
Read the exact line
Privacy policy
“You can turn off use of the advertising ID in the Windows Settings app.”
For example, you can open Windows Settings and turn off advertising ID so apps get a less personal ad ID.
Words to know
Legal words from the lines above, in plain English.
- personal data
- Any information that is about you or can be linked to you, from your name to your phone's ID. For example, your email, your IP address and the list of apps on your phone are all personal data.
- indemnify
- You promise to pay the company's legal costs and losses if your use of the service gets it sued. For example, if you post a song you do not own and the label sues the app, you owe the app's lawyer bills.
- affiliates
- Other companies owned by or connected to the same parent company. For example, if you use one app, its sister apps under the same owner may also get your data.
- model training
- Using your content and conversations as examples to teach an AI system, which can then echo them in future answers. For example, a story you write in a chatbot may be studied by the company to make the next version of the bot.
- device identifiers
- Codes that single out your phone or computer, used to recognise you across apps and sites. For example, the advertising ID on your phone lets two unrelated apps know they are seeing the same person.
How we got here · grade F · score 29/100 · 15 of 15 policy answers backed by a verified quote · 3 not stated
What does the app collect beyond what it needs to work?
The privacy text describes Windows collecting diagnostics, advertising IDs, location, browsing history, and more, beyond a simple chatbot. Copilot prompts can include files, voice, and video.
Does it record your voice, face or body, and what happens to that?
Voice and audio can be sent as Copilot prompts, and they say they may use Your Content to operate and improve Copilot. Windows cloud speech also collects voice recordings.
Are your chats and uploads used to train AI models, and is that off by default?
They use Your Content to operate and improve Copilot by default, and say Copilot privacy options give control over some of those uses. Copilot Health is not used to train models.
Can employees or contractors read your conversations, and when?
They say Copilot may include human processing and you should not share anything you do not want reviewed. No review opt-out is described.
Are you profiled or tracked for advertising?
Free Copilot may include advertising. Windows generates an advertising ID that Microsoft, third-party apps, and ad networks can use.
Do they sell or share your data, and can you opt out?
Not stated in the documents.
What rights do they take over what you type and what the AI makes?
They say they do not own Your Content but you grant rights to copy, display, edit, and share it with people working for them to operate and improve Copilot.
How long do they keep your data after you delete it, and can you delete it in the app?
Not stated in the documents.
Does it build a lasting memory or profile of you, and can you see, edit or turn it off?
Copilot may offer responses for things you asked it to remember, but these pages do not describe view, edit, or off switches for memory.
Do they commit to basic security, and have they leaked data?
The privacy text describes device encryption and other Windows security features in general terms, not a Copilot-specific audit.
Is there a real age gate, and are teens protected?
You must be at least 13 (or older by local law) and give a real birthday if asked. Under 18, some features may be limited.
Will they tell you when the rules change, and is the policy specific?
They say they will post updated Copilot terms at least 30 days before they take effect and include the effective date. Continued use means you agree.
Can they close your account without warning, and can you get your data out first?
They may limit, suspend, or permanently revoke Copilot (and potentially other services) at any time without notice.
If something goes wrong, who pays?
They disclaim warranties for Copilot and require you to indemnify them for claims related to your use, including sharing responses.
Do subscriptions renew on their own, and can you get a refund?
Not stated in the documents.
If this app can act for you, does it warn you about scams?
May transact on unsafe websites on your behalf. Microsoft tells you how to spot phishing yourself and does not say Copilot refuses an unsafe site. This line is not from the privacy policy. We did not test the product. Protect yourself from phishing (2026)
The privacy policy is 9,751 words at a college level (Flesch reading ease 46.4); the terms are 2,676 words at a professional or legal expert level.
