“It is not used to develop or train generative AI models, and it is not used for advertising or marketing purposes.”
“To opt out of promotional emails or SMS, follow the directions in the message.”
“With appropriate safeguards for individuals’ rights and freedoms, we use data for research, including AI and machine learning, for public interest and scientific purposes.”
“We process authenticated deletion requests within 30 days of receipt.”
“Personal data collected by Microsoft may be stored and processed in your region, in the United States, and in any other jurisdiction where Microsoft or its affiliates, subsidiaries, or service providers operate facilities.”
Downstream
Who's behind Microsoft 365, as listed in its own subprocessor documents. No subprocessors identified · coverage incomplete: no subprocessor document is on file; the names below come from other documents, if any.
Model providers
- none listed
Hyperscalers
- none listed
Other subprocessors
- none listed
Reviewer notes
Extracted by deterministic rules (rules/v1), no language model. Coverage is limited to recognisable clauses and a gazetteer of common subprocessors; absent values mean 'not matched', not 'not present'. conflicting sentences: also "As part of our efforts to improve and develop our products, we may use your data to develop and train our AI models."
Documents read
- privacy policy https://www.microsoft.com/en-us/privacy/privacystatementHTTP 200 · 2026-09-10
Document changes
- high 2026-09-10 · privacy policy +13 / −12 lines
show diff
+ Last Updated: September 2026+ * Device and usage data. Data about your device and product features you use, hardware and software details, product performance, your interactions with our websites and apps, and your settings. For example:+ * Microsoft Copilot. If you are signed into Microsoft Copilot with your Microsoft account, you can view, access, export and delete Copilot activity history from your privacy dashboard. You can also use in-product controls to manage your data within the Microsoft Copilot website or app.+ When we receive parental consent or authorization, the child's account is treated much like any other account, and the child will be able to use Microsoft services such as Outlook, Bing, and XBOX, and communicate or share data with other users. We will not knowingly ask children under the age of consent to provide more data than is necessary to provide the product.+ The Microsoft Copilot website and app (on Windows, Mac, iOS, and Android) are the core of the consumer Copilot experience, where you can search the web, create content, and interact with features like Copilot Vision, as well as let Microsoft Copilot interact with other apps, services, and websites to take actions on your behalf. When you use Microsoft Copilot, it will use your prompts, location, language, and related settings to provide helpful responses and improve services.+ For users in some markets, Microsoft Copilot can use your conversation history (including any memories you save) to personalize your experience. We may also offer you the ability to personalize your Microsoft Copilot experience using your interactions with our other products and services, like Bing, Edge, and MSN. You can manage your memories and control personalization features using the settings in Microsoft Copilot at any time.+ Microsoft Copilot also uses prompts and related data to provide and improve services, including relevant advertising. You can manage your prompt history in product and on the Microsoft Privacy Dashboard, and can adjust your location, language, and other additional privacy settings in product. For more information about these capabilities and your choices, see Microsoft Copilot for individuals: your privacy controls and choices.+ We also use your conversation data to monitor performance, troubleshoot and fix bugs and issues, prevent abuse, and to provide and improve Microsoft Copilot. Please review the Transparency Note for Microsoft Copilot for information on our safety practices and our efforts to ensure that Microsoft Copilot is consistent with our Responsible AI principles.+ For enterprise customers, Microsoft Copilot offers enhanced data protection and customization. Data is collected and used as described in the Enterprise and Developer Products section.+ The Microsoft Copilot features that appear in Microsoft 365 apps as part of a Microsoft 365 Personal, Microsoft 365 Family, or Microsoft 365 Premium subscription provide AI-powered productivity capabilities through real-time conversational experiences. We do so by applying large language model (LLM) processing on the content you choose to provide in Microsoft 365 apps including Word, Excel, OneNote, Outlook, and PowerPoint. Microsoft Copilot in Microsoft 365 is not available for use in Office desktop licenses. When used with available Microsoft 365 apps, Microsoft Copilot will use the content in your files only when you ask it to perform a specific action on that specific content – for example, when you ask Microsoft Copilot to help you rewrite a paragraph in a Word document or ask Microsoft Copilot to generate a to-do list from your notes in OneNote. Similar to connected experiences, required service data is collected during your use of Microsoft Copilot which includes information related to its operation that is needed to keep the underlying service secure, up to date, and performing as expected. If you use Microsoft Copilot features in Microsoft 365 apps, Microsoft Copilot handles data as described in the Productivity and Communications section of this privacy statement.+ See the Microsoft Copilot Privacy Center and Frequently asked questions about Copilot in Microsoft 365 subscriptions for more information.+ XBOX diagnostic data. Diagnostic data has two categories: required and optional. Required diagnostic data for XBOX includes information about your device, service performance, how you use our products, apps and services, game activity, and your settings and capabilities.+ If your child uses an XBOX console, only the minimum required diagnostic data is sent to Microsoft to help keep XBOX safe, secure, and performing as expected. Optional diagnostic data collection is turned off for child accounts. Please see the Diagnostic data section for more information.− Last Updated: July 2026− * Device and usage data. Data about your device and product features you use, hardware and software details, product performance, and your settings. For example:− * Microsoft Copilot and Microsoft 365 Copilot. If you are signed into Microsoft Copilot or Microsoft 365 Copilot with your Microsoft account, you can view, access, export and delete Copilot activity history from your privacy dashboard. You can also use in-product controls to manage your data within the Microsoft Copilot website or app.− When we receive parental consent or authorization, the child's account is treated much like any other account, and the child will be able to use Microsoft services such as Outlook, Bing, Copilot, and XBOX, and communicate or share data with other users. We will not knowingly ask children under the age of consent to provide more data than is necessary to provide the product.− The Microsoft Copilot website and app (on Windows, Mac, iOS, and Android) are the core of the consumer Copilot experience, where you can search the web, create content, and interact with features like Copilot Vision, as well as let Microsoft Copilot interact with other apps, services, and websites to take actions on your behalf. When you use Microsoft Copilot, it will use your prompts, location, language, and related settings to provide helpful responses and improve services (including to provide relevant advertising).− For signed-in users in some markets, Microsoft Copilot can use your conversation history to personalize your experience. You can opt-out of personalization at any time. Microsoft Copilot also uses prompts and related data to provide and improve services, including relevant advertising. You can manage your prompt history in product and on the Microsoft Privacy Dashboard, and can adjust your location, language, and other additional privacy settings in product. For more information about these capabilities and your choices, see the Microsoft Copilot FAQ.− We will also use your conversation data to monitor performance, troubleshoot and fix bugs and issues, prevent abuse, and to provide and improve Microsoft Copilot. In some markets, this data can help train our AI models in Microsoft Copilot unless you opt out. Learn more about your choices and data protection here. Please also review the Transparency Note for Microsoft Copilot for information on our safety practices and our efforts to ensure that Copilot is consistent with our Responsible AI principles.− Microsoft 365 Copilot is a consumer Copilot offering available to Microsoft 365 Family and Microsoft 365 Personal subscribers. When integrated with Microsoft 365, Copilot handles data as described in the Productivity and Communications section of this privacy statement.− For enterprise customers, Microsoft 365 Copilot offers enhanced data protection and customization. Data is collected and used as described in the Enterprise and Developer Products section.− The Copilot features that appear in Microsoft 365 apps as part of a Microsoft 365 Personal, Microsoft 365 Family, or Microsoft 365 Premium subscription provide AI-powered productivity capabilities through real-time conversational experiences. We do so by applying large language model (LLM) processing on the content you choose to provide in Microsoft 365 apps including Word, Excel, OneNote, Outlook, and PowerPoint. Copilot in Microsoft 365 is not available for use in Office desktop licenses. When used with available Microsoft 365 apps, Copilot will use the content in your files only when you ask it to perform a specific action on that specific content – for example, when you ask Copilot to help you rewrite a paragraph in a Word document or ask Copilot to generate a to-do list from your notes in OneNote. Similar to connected experiences, required service data is collected during your use of Copilot which includes information related to its operation that is needed to keep the underlying service secure, up to date, and performing as expected.− See Copilot in Microsoft 365 apps for your home: your data and privacy – Microsoft Support and Frequently asked questions about Copilot in Microsoft 365 subscriptions for more information.− XBOX diagnostic data. Diagnostic data has two categories: required and optional. If your child uses an XBOX console, only the minimum required diagnostic data is sent to Microsoft to help keep XBOX safe, secure, and performing as expected. Optional diagnostic data collection is turned off for child accounts. Please see the Diagnostic data section for more information. - low 2026-09-05 · privacy policy +0 / −2 lines
show diff
− This is the Trace Id: 6c2ed7fa60d23fcf9437b4be2601e5af− * esctx, _RequestVerificationToken, .AspNetCore.Correlation, and .AspNetCore.Nonce. Assist with the security of your website visit and stability of the services provided to you by helping prevent fraud and malicious attacks. - low 2026-09-05 · privacy policy +1 / −1 lines
show diff
+ This is the Trace Id: 6c2ed7fa60d23fcf9437b4be2601e5af− This is the Trace Id: d46561f1e31d7035bea8ab6d26ab3494
Fact changes
- high 2026-09-10 · 1 field change(s), +0/−0 subprocessors, +0 model providers
Corrections
No correction requests. Anyone may dispute a fact with a source; requests and resolutions are public and ledger-entered.
Facts are as stated in Microsoft 365's public documents on the date read. This is a record, not legal advice. Work for Microsoft 365? Claim this profile · Something wrong? Request a correction.