Anthropic · Anthropic Privacy Policy

Controller vs. Processor Boundary

Medium severity
Share 𝕏 Share in Share

What it is

This Privacy Policy does not apply where Anthropic acts as a data processor and processes personal data on behalf of commercial customers using Anthropic's Commercial Services – for example, your employer has provisioned you a Claude for Work account, or you're using an app that is powered on the back-end with Claude. In those cases, the commercial customer is the controller, and you can review their policies for more information about how they handle your personal data.

Why it matters

Many users may not realize that when using Claude through an employer or third-party app, this Privacy Policy does not protect them, and their data rights are governed by a different entity's policies.

Consumer impact

Anthropic collects your conversation content (prompts and AI responses), device identifiers, browsing behavior, and any personal data you include in messages to Claude, and may use this data to train its AI models. Users who opt out of model training should be aware that conversations flagged for safety or policy review can still be used for training without their consent, representing a meaningful limitation on the opt-out right. You can opt out of having your conversations used for model training by navigating to your Claude.ai account settings, or submit a data deletion request by emailing privacy@anthropic.com.

Applicable agencies

  • FTC
    Misclassification of controller/processor roles or failure to adequately disclose data handling responsibilities to consumers can constitute an unfair or deceptive practice under FTC Act Section 5.
    File a complaint →

Provision details

Document information
Document
Anthropic Privacy Policy
Entity
Anthropic
Document last updated
March 24, 2026
Tracking information
First tracked
March 6, 2026
Last verified
April 4, 2026
Record ID
CA-P-002126
Document ID
CA-D-00012
Evidence Provenance
Source URL
Wayback Machine
SHA-256
55f589f5c2a5a187a9d045dc6c7e4954a2dbf9ac00fb6e3ea782dbcf9ad69387
Verified
✓ Snapshot stored   ✓ Change verified
How to Cite
ConductAtlas Policy Archive
Entity: Anthropic | Document: Anthropic Privacy Policy | Record: CA-P-002126
Captured: 2026-03-06 20:00:36 UTC | SHA-256: 55f589f5c2a5a187…
URL: https://conductatlas.com/platform/anthropic/anthropic-privacy-policy/controller-vs-processor-boundary/
Accessed: April 4, 2026
Classification
Severity
Medium
Categories

Other provisions in this document