This is Hugging Face's privacy policy — the document that explains what personal information the company collects when you use its AI tools and website, how it uses that information, and who it might share it with. Hugging Face collects things like your email, IP address, payment details, and how you use the platform, and uses this to run the service, improve it, and communicate with you. If you are in the EU, you have rights to access, delete, or move your data, and you can contact privacy@huggingface.co to exercise them.
This Privacy Policy, effective March 28, 2023, governs Hugging Face, Inc.'s collection, use, and sharing of Personal Information from users of its AI/ML platform services. The policy establishes legal bases for processing under GDPR (consent, contractual necessity, and legitimate interests), describes data collection categories including account data, usage data, cookies, and third-party sourced data, and outlines sharing with affiliates, service providers, and government authorities. Notable provisions include a 10-day policy change notice period with implied consent upon continued use, GDPR-aligned user rights (access, correction, deletion, portability, and objection), and explicit commitments to honor Do Not Track signals and refrain from selling personal data. The policy designates privacy@huggingface.co as the primary contact for data rights requests and discloses that data may be transferred internationally with appropriate safeguards.
This policy explicitly engages GDPR (EU) 2016/679 as its primary regulatory framework, citing consent, contractual necessity, and legitimate interests as processing bases, and enumerates data subject…
This policy explicitly engages GDPR (EU) 2016/679 as its primary regulatory framework, citing consent, contractual necessity, and legitimate interests as processing bases, and enumerates data subject rights including access, rectification, erasure, restriction, portability, and objection. Complianc…
Compliance intelligence locked
Regulatory exposure, material risk, and due diligence action items.