Microsoft Privacy

This is Microsoft's global Privacy Statement, covering data collection and use across consumer and enterprise products including Windows, Microsoft 365, Copilot AI services, Azure, Bing, Edge, Teams, Xbox, and OneDrive. The statement discloses that Microsoft collects and uses personal data including voice clips, biometric identifiers, AI prompts and conversation history, browsing and search history, location data, and file content to provide services, train and fine-tune AI models including large language models, and deliver personalized advertising on Microsoft and third-party platforms. Users whose birthdate in their Microsoft account identifies them as under 18 are excluded from personalized advertising, and health data submitted to Copilot Health is stated to not be used for AI model training or advertising.

This document is Microsoft's global Privacy Statement, last updated June 2026, governing the collection, use, storage, and disclosure of personal data across Microsoft's consumer and enterprise product portfolio, including Azure, Microsoft 365, Copilot AI services, Windows, Xbox, Bing, Edge, Teams, OneDrive, and associated services. The statement asserts that Microsoft collects identifiers, contact details, payment data, biometric data, voice data, browsing and search history, location data, device and usage data, content from files and communications, and AI interaction data including prompts, conversation history, and uploaded files, and the terms authorize use of this data to provide services, improve and develop products, train and fine-tune AI models including large language models, and deliver personalized advertising on Microsoft and third-party properties. The statement covers data transfers internationally including to jurisdictions the European Commission has not deemed adequate, with Standard Contractual Clauses cited as the primary transfer mechanism, and Microsoft asserts compliance with the EU-U.S., UK Extension, and Swiss-U.S. Data Privacy Frameworks; the document also states that in enterprise and developer product contexts, agreement terms with customers control over this privacy statement, which creates materially distinct data governance obligations for enterprise versus consumer users. The statement engages GDPR, CCPA, LGPD, COPPA, U.S. state data privacy laws, Japan's Act on the Protection of Personal Information, and the EU AI Act regulatory environment; jurisdiction-dependent compliance obligations are acknowledged throughout, including separate U.S. State Data Privacy Notice and Consumer Health Data Privacy Policy references for U.S. users, and the document designates Microsoft Ireland Operations Limited as the EU, UK, and Swiss data controller.

The agreement authorizes Microsoft to collect voice data, biometric identifiers, AI prompt and conversation history, browsing and search history, precise and imprecise location data, and file content across its consumer product portfolio, and states that this data may be used to develop, train, and fine-tune AI models including large language models. Under these terms, personalized advertising is delivered on Microsoft and third-party properties using behavioral, demographic, and cross-device data, with opt-out available via the Microsoft Personalized Ads and Offers page; the statement also discloses that Microsoft receives and responds to the Global Privacy Control browser opt-out signal in certain jurisdictions. You can access, export, delete, or restrict certain personal data through the Microsoft Privacy Dashboard at account.microsoft.com/privacy, submit data protection requests via the privacy support and requests page, opt out of personalized advertising at the Microsoft Personalized Ads and Offers page, and opt out of AI training data use in markets where that option is disclosed.