Microsoft account
- The documents do not say whether your data trains AI.
- Your data is used for personalized ads, including by third-party ad companies.
- Data is shared with partners and affiliates; you can opt out.
- The documents do not say who can read your content.
Windows and Microsoft sites collect lots of device and usage data, use an ad ID, and can change rules or cut access without notice.
Agent Trust Hub uses AI and may make mistakes. Review reports and confirm their contents before relying on them.
Collected
Device details, diagnostics, usage, location, and sometimes browsing, voice, and contacts—not just what you type.
Read the exact line
Privacy policy
“To provide this computing experience, we collect data about you, your device, and the way you use Windows.”
Training
They use data to run Windows, fix problems, personalize tips and ads, and (if you allow) cloud speech.
Read the exact line
Privacy policy
“If you choose to turn on Personalized offers, we will use information about your device and how you use it, including Windows diagnostic data”
Sharing
Microsoft, your workplace if it manages the PC, ad networks via the advertising ID, and some hardware partners.
Read the exact line
Privacy policy
“Windows generates an advertising ID for each user on a device, which Microsoft, third-party apps, and advertising networks can use to provide relevant ads”
Kept
The documents do not say one clear time limit for how long they keep most account data.
Read the exact line
Privacy policy
“This location information can be viewed or deleted from your Microsoft account privacy dashboard.”
Controls
Windows Settings let you limit apps, ads, diagnostics, speech, and location; some features stay on for safety.
Read the exact line
Privacy policy
“You can turn off use of the advertising ID in the Windows Settings app.”
Fine print
They can change website terms without notice, end access without notice, and limit what they pay if things go wrong.
Read the exact line
Terms of service
“Microsoft reserves the right to update and modify the TOU at any time without notice to you.”
Expand “Read the exact line” to see the source alongside the explanation.
What you can turn off
The controls and opt-outs their own documents describe, and where they say to find them.
Turn off the advertising ID
Windows Settings app (advertising ID setting)
Turn off Personalized offers
Search for Personalized offers in the Windows Settings app
Review location saved to the cloud
Microsoft account privacy dashboard
Turn off online speech recognition
Windows speech settings; Microphone Privacy Settings for Get Help
If a switch is not where they say, the deletion request above still applies.
Line by line
The lines that matter most, worst first.
They can change the website rules whenever they want and do not have to warn you first.
Read the exact line
Terms of service
“Microsoft reserves the right to update and modify the TOU at any time without notice to you.”
For example, a new limit on how you use a Microsoft site could apply the next time you visit, even if you never saw an email.
They can cut off forums, chat, or similar features instantly and do not have to tell you why.
Read the exact line
Terms of service
“Microsoft reserves the right to terminate your access to any or all of the Communication Services at any time, without notice, for any reason whatsoever.”
For example, a community account could disappear overnight with no chance to save posts first.
Your PC has an ID that apps and ad networks can use to show ads aimed at you unless you turn it off.
Read the exact line
Privacy policy
“Windows generates an advertising ID for each user on a device, which Microsoft, third-party apps, and advertising networks can use to provide relevant ads and personalized experiences”
For example, a Store app could use that ID to show you ads based on other apps you use.
If you send optional diagnostic data, Edge browsing history and searches can go to Microsoft.
Read the exact line
Privacy policy
“Browser activity, including browsing history and search terms, in Microsoft Edge.”
For example, sites you visited in Edge could be included in optional diagnostics sent from your PC.
If you post material on Microsoft sites, they get broad rights to copy, show, and it.
Read the exact line
Terms of service
“by posting, uploading, inputting, providing or submitting ("Posting") your Submission you are granting Microsoft, its affiliated companies and necessary permission to use your Submission”
For example, feedback you upload could be copied and shown in other Microsoft services without extra pay.
Site information is offered with no promise it is correct or will work for you.
Read the exact line
Terms of service
“All such documents and related graphics are provided "as is" of any kind.”
For example, if a help page is wrong and you lose time or data, they say they are not on the hook for that.
Turning on online speech sends your voice to Microsoft’s cloud so it can turn speech into text.
Read the exact line
Privacy policy
“When you use our cloud-based speech recognition technologies, we collect and use your voice recordings and create a text transcription of the spoken words in the voice data.”
For example, dictation with online speech on can send what you say to Microsoft’s servers.
Windows Hello face or fingerprint templates stay on your PC, not in Microsoft’s cloud.
Read the exact line
Privacy policy
“Biometric verification data that's used when you sign in doesn't leave your device and remains on your device until you remove it.”
For example, your face template used to unlock the laptop is stored locally until you delete it in Settings.
Live captions that turn speech into text stay on the PC.
Read the exact line
Privacy policy
“Voice data that is captioned is only processed on your device and is not shared to the cloud or with Microsoft.”
For example, captions of a local video are not uploaded just because you used Live captions.
Windows Recall snapshots stay on a Copilot+ PC unless you choose to send them.
Read the exact line
Privacy policy
“This information is never transmitted off your device unless you take action, such as copying a snapshot to another app or submitting feedback”
For example, a screenshot of a bank page in Recall is not uploaded unless you attach it to Feedback Hub.
Kids under 13 are supposed to get a parent’s OK or be blocked, based on what they enter at signup.
Read the exact line
Privacy policy
“For users under the age of 13 or as specified by law in their , certain Microsoft products and services will either block users under that age or will ask them to obtain consent or authorization from a parent or guardian”
For example, a 12-year-old creating an account is asked to enter an adult’s email for consent.
Words to know
Legal words from the lines above, in plain English.
- device identifiers
- Codes that single out your phone or computer, used to recognise you across apps and sites. For example, the advertising ID on your phone lets two unrelated apps know they are seeing the same person.
- third parties
- Any company or person other than you and the app, such as advertisers, partners or analytics firms. For example, an analytics company that receives a record of every screen you tap is a third party.
- affiliates
- Other companies owned by or connected to the same parent company. For example, if you use one app, its sister apps under the same owner may also get your data.
- sublicensable
- The company can pass its rights over your content on to other companies without asking you. For example, an app can let an advertiser or a partner reuse your video under the licence you gave.
- as is
- You get the service in whatever state it is in, with no promise that it works or will keep working. For example, if the app deletes your photos by mistake, it is not promising to fix that or pay you back.
- warranty
- A promise that a product will work as described; most apps say they make no such promise at all. For example, if a paid feature never works on your phone, a no-warranty clause says that is your problem.
- biometric
- Measurements of your body that identify you, like your face, fingerprint or voice. For example, a selfie used to unlock the app or a voice recording matched to you.
- governing law
- Which country's or state's laws are used to settle any dispute, no matter where you live. For example, a user in Ohio may find the terms are judged under California law.
- consent
- Your clear agreement to something, given by an action like ticking a box or tapping Accept. For example, a pop-up asking if the app may use your location is asking for consent.
How we got here · grade F · score 30/100 · 14 of 15 policy answers backed by a verified quote · 3 not stated
What does the app collect beyond what it needs to work?
Windows collection goes well beyond account and the text you type. It includes device IDs, diagnostics, location, and optional browsing history.
Does it record your voice, face or body, and what happens to that?
Cloud speech collects voice recordings if you turn it on. Windows Hello templates stay on the device until you remove them. Live captions stay on-device.
Are your chats and uploads used to train AI models, and is that off by default?
Not stated in the documents.
Can employees or contractors read your conversations, and when?
Not stated in the documents.
Are you profiled or tracked for advertising?
Windows creates an advertising ID that Microsoft, third-party apps, and advertising networks can use. You can turn that ID off in Settings; other cookie ads may continue.
Do they sell or share your data, and can you opt out?
They share some diagnostic data with hardware partners and let ad networks use the advertising ID. You can turn the advertising ID off in Windows Settings.
What rights do they take over what you type and what the AI makes?
They say they do not claim ownership of what you post, but posting grants Microsoft and sublicensees rights to copy, display, and reuse it for their internet businesses.
How long do they keep your data after you delete it, and can you delete it in the app?
Not stated in the documents.
Does it build a lasting memory or profile of you, and can you see, edit or turn it off?
Personalized offers and the advertising ID build a picture of the device and usage. You can turn those off in Windows Settings and manage ads on the Personalized ads and offers page.
Do they commit to basic security, and have they leaked data?
They describe encryption, Defender, SmartScreen, and that Hello biometrics stay on the device. No independent audit is described in these pages.
Is there a real age gate, and are teens protected?
Under-13 users are blocked or asked to get a parent’s consent during signup. That depends on what age they enter.
Will they tell you when the rules change, and is the policy specific?
They can change the website terms at any time without notice. Using the site after a new version is posted means you agree. The privacy excerpt has no date line.
Can they close your account without warning, and can you get your data out first?
They can end access to communication services at any time, without notice, for any reason. No export step is described there.
If something goes wrong, who pays?
Documents and software-related info are as-is. They disclaim warranties and say they are not liable for special or consequential damages from use of the services.
Do subscriptions renew on their own, and can you get a refund?
These documents do not describe Microsoft account subscriptions, auto-renewal, or refunds.
The privacy policy is 9,751 words at a college level (Flesch reading ease 46.4); the terms are 3,256 words at a college graduate level.
