Old version
April 29, 2026 08:11 UTC
488bfdf480383ee43b05d2cf0606a0cf1bd886fdba3687b6917cb988cc203cb6
CA-V-001018
New version
May 2, 2026 06:38 UTC
870c6ae4fbd23c19db8bd5f5ce33d2fee2f5d3575a37fb4561db279652ba948d
CA-V-002113
Share 𝕏 Share in Share
Change Summary
Cohere updated its privacy policy on May 2, 2026 to add specific retention timelines and procedures for handling personal information. The revised policy now explicitly states that inputs and outputs on the Platform are retained for 30 days for Enterprise Users, clarifies that Trial Users and Researchers should not be providing personal information, and establishes a process for requesting deletion of inadvertently included personal data by emailing privacy@cohere.com with a typical one-month response time. The policy also added guidance for requests related to training data, directing users to a separate Model Training Privacy Notice and noting that Cohere does not intentionally collect personal information for training purposes.
low severity
16 Sentences added
0 Sentences removed
2 Sentences modified
225 Sentences before
241 Sentences after
Added
Removed
Modified
BeforeAfter
0Last Updated: January 30, 2026 Cohere Privacy Policy Cohere Inc.0Last Updated: May 1, 2026 Cohere Privacy Policy Cohere Inc.
90Retention practices for the Platform can be reviewed here . 5.90Enterprise Users of the Platform can consult retention practices for inputs and outputs on the Platform here .
91Retention of inputs and outputs on the Platform is generally 30 days for Enterprise Users.
92For Trial Users and Researchers, the Platform is not intended to process personal information.
93If personal information is inadvertently included in an input, deletion can be requested by emailing privacy@cohere.com as set out below. 5.
225We normally respond within one month, or up to three months if your request is complex.
226If your request is not associated with an account, then it's likely we will need to request further information to attempt to locate your personal information, if any, and verify you as the data subject.
227If your request is in relation to training data, please first review our Model Training Privacy Notice .
228As we explain in that notice, as an enterprise AI company, Cohere does not intentionally collect personal information for training purposes.
229We are likely to require further information from you for this type of request, like about personal information that appears in a Cohere model output, screenshots or links to such outputs, and reasons why this information should not appear.
230We assess each request in accordance with applicable laws.
231Where a right is limited under applicable laws, we may decline a request in accordance with these lawful limitations.
235International Transfers Cohere is a Canadian company subject to Canadian federal privacy laws, and so personal information transferred from the UK or the EEA to Cohere in Canada is made pursuant to adequacy regulations (for the UK, see here ; for the EEA, see here ).
236To the extent Cohere further transfers personal information to sub-processors or affiliates for the purpose of providing the Website, Cohere Products, or in the process of developing its models, such transfers are subject to and protected by appropriate security measures in accordance with Canadian privacy laws.
237We also ensure our sub-processors are subject to appropriate transfer mechanisms recognized under UK and EU laws.
238Our cloud infrastructure provided by GCP in the United States, for instance, is protected under the EU-US Data Privacy Framework , including its UK extension.
239Controller-to-processor Standard Contractual Clause agreements are used as an alternative mechanism where the transfer is not otherwise subject to an adequacy determination or derogation under applicable laws.
240Users of the Platform or Cohere APIs can consult our list of sub-processors , which includes data processing locations.
Stay ahead of the changes

Watch this before it changes again

Follow unlimited companies, monitor the clauses that matter across every platform, and get the full institutional analysis on what each change obligates you to do.