Key Facts
What do Cohere and its third-party advertising partners use advertisement cookies for?
Cohere and its third-party advertising partners use data collected by advertisement cookies about users' online interactions on and off the website to build a profile of users' interests.
Do Cohere and its third-party advertising partners use data about users' online interactions on and off the website?
Cohere and its third-party advertising partners use data collected by advertisement cookies about users' online interactions on and off the website to build a profile of users' interests.
Does Cohere's Privacy Policy cover personal information that Cohere handles as a service provider to its enterprise customers?
Cohere's Privacy Policy does not cover personal information that Cohere handles as a service provider to its enterprise customers.
May Cohere's use of cookies for advertising purposes be considered a sale or sharing under California privacy law?
Cohere states that its use of cookies for advertising purposes may be considered a sale or sharing under California privacy law.
Does Cohere's Privacy Policy apply to Customer Data associated with Enterprise Users' use?
Cohere's Privacy Policy does not apply to Customer Data — defined as inputs and outputs — associated with Enterprise Users' use of Cohere Products under an enterprise agreement.
Do Enterprise Users control how Cohere trains on their data?
Cohere allows Enterprise Users to control how Cohere trains on their data.
Does Cohere's Privacy Policy apply to End Users?
Cohere's Privacy Policy does not apply to End Users, because in that context Cohere is generally the processor or service provider and not the responsible decision maker in relation to their personal information.
Is Cohere generally the processor or the responsible decision maker in relation to End Users' personal information?
Cohere's Privacy Policy does not apply to End Users, because in that context Cohere is generally the processor or service provider and not the responsible decision maker in relation to their personal information.
Does Cohere have access to data processed in Private Deployments?
Cohere does not have access to data processed in connection with the use of Cohere models or products in Private Deployments or Deployments on Third-Party Managed AI services.
Does Cohere have access to data processed in Deployments on Third-Party Managed AI services?
Cohere does not have access to data processed in connection with the use of Cohere models or products in Private Deployments or Deployments on Third-Party Managed AI services.
Summary
This Privacy Policy explains what Cohere collects and does with your data when you use its products directly — but it does not cover you if you are an enterprise customer, an end user of an enterprise's Cohere-powered product, or accessing Cohere through a private deployment. Cohere and its advertising partners track your online activity across sites to build an interest profile, and Cohere says this may count as selling or sharing your data under California law. If you are a Trial User or Researcher, Cohere may use what you submit for research and development, so Cohere advises you not to enter personal information in those environments.
Analysis
Cohere's Privacy Policy establishes the scope, data practices, and user rights applicable to individuals who interact with Cohere directly, while explicitly excluding from its coverage Enterprise Users' Customer Data (inputs and outputs governed by enterprise agreements), End Users for whom Cohere acts as processor or service provider, and data processed in Private Deployments or on third-party managed AI services. For those within scope — including Trial Users and Researchers — Cohere may use submitted inputs and outputs for research and development, and both Cohere and its third-party advertising partners use cross-site behavioral data to build interest profiles, a practice Cohere acknowledges may constitute a sale or sharing under California privacy law. The Policy grants Enterprise Users control over how Cohere trains on their data and generally retains Enterprise User inputs and outputs on the Platform for 30 days. Cohere's website honors the Global Privacy Control signal on qualifying browsers as an opt-out of cookie-based data sale or sharing.
What this means for you
For individual users within scope of this Policy, Cohere and its third-party advertising partners build interest profiles using behavioral data collected on and off Cohere's website, and Cohere acknowledges this cookie-based advertising activity may qualify as a sale or sharing of personal data. Trial Users and Researchers should be aware that their inputs and outputs may be used by Cohere for research and development, and Cohere instructs them not to submit personal information as inputs. Users who want to opt out of cookie-based data sale or sharing can activate the Global Privacy Control signal on a qualifying browser, which Cohere's website will treat as an opt-out without requiring a separate manual request.
2 important changes detected
2 versions captured · Last updated: May 2026
What changed
Cohere updated its privacy policy on May 2, 2026 to add specific retention timelines and procedures for handling personal information. The revised policy now explicitly states that inputs and outputs on the Platform are retained for 30 days for Enterprise Users, clarifies that Trial Users and Researchers should not be providing personal information, and establishes a process for requesting deletion of inadvertently included personal data by emailing privacy@cohere.com with a typical one-month response time. The policy also added guidance for requests related to training data, directing users to a separate Model Training Privacy Notice and noting that Cohere does not intentionally collect personal information for training purposes.
Why this matters
The updated policy establishes a concrete 30-day retention timeline for enterprise users' inputs and outputs on the Platform, whereas the previous version referenced retention practices without specific durations. The policy now provides an explicit process for requesting deletion of inadvertently included personal information by emailing privacy@cohere.com, with Cohere stating it normally responds within one month or up to three months for complex requests. You can request deletion of personal data by contacting privacy@cohere.com with details about the information and reasons it should not appear.
View full change record →
What changed
Cohere removed 16 sentences from its privacy policy that previously specified data retention practices for different user types and procedures for requesting deletion of personal information inadvertently included in platform inputs. The updated policy now provides only a general reference to retention practices without specifying the 30-day retention period for Enterprise Users, the non-processing of personal information for Trial and Researcher accounts, response timelines for deletion requests, or guidance on training data deletion. This creates operational ambiguity about what retention periods currently apply to different user categories and how deletion requests are handled.
Why this matters
The updated policy removes explicit language describing data retention timelines and deletion request procedures that were previously available. The prior policy stated that Enterprise Users' inputs and outputs were retained for 30 days, that Trial Users and Researchers were not intended to process personal information, and that deletion requests would normally be responded to within one month (up to three months for complex requests). The updated policy now contains only a general reference to 'retention practices' without specifying these timelines, response windows, or user-type distinctions. Users cannot determine from the updated policy what retention periods apply to their account category or what timeline to expect for deletion requests.
View full change record →
Archival ProvenanceSource & Archival Record
Last Captured
May 2, 2026 06:38 UTC
Capture Method
Automated scheduled archival capture
Document ID
CA-D-000440
Version ID
CA-V-002113
SHA-256
870c6ae4fbd23c19db8bd5f5ce33d2fee2f5d3575a37fb4561db279652ba948d
✓ Snapshot stored
✓ Text extracted
✓ Change verified
✓ Hash verified