Anthropic Privacy Policy

This Privacy Policy, effective January 12, 2026, governs Anthropic's collection, use, disclosure, and processing of personal data when Anthropic acts as a data controller across its consumer-facing Services (including Claude.ai) and Commercial Services (including Claude Team plan); it expressly excludes scenarios where Anthropic acts as a data processor on behalf of commercial customers. The policy states that Inputs (prompts), Outputs (AI responses), device identifiers, browsing activity, IP address-derived location data, and usage information are collected; the terms authorize use of Inputs and Outputs to train AI models unless users opt out, with a carve-out permitting training use even after opt-out when conversations are flagged for safety review or explicitly reported via feedback mechanisms. The opt-out carve-out for safety-flagged conversations is operationally distinct in that it permits continued model training use of user content without user consent in circumstances defined unilaterally by Anthropic, which may require evaluation under GDPR lawful basis requirements and CCPA-equivalent frameworks depending on jurisdiction. The policy engages GDPR (for EEA users), CCPA and California privacy statutes, Brazilian LGPD, Canadian PIPEDA or provincial equivalents, South Korean PIPA, and Washington State consumer health data law; regional supplemental disclosures are provided for Canada, Brazil, and the Republic of Korea, and a separate Consumer Health Data Privacy Policy applies to Washington State users who integrate third-party health applications.