Microsoft uses data from your interactions with Copilot and other AI-powered features — including your prompts and the content you provide — to improve its AI models and services.
Your conversations with AI tools like Copilot may be retained and used to train Microsoft's AI systems, which means sensitive or personal content you share could become training data.
AI data use for model training must be assessed against GDPR Art. 6 lawful basis requirements and Art. 22 automated decision-making provisions; enterprise customers should review whether standard consumer privacy terms extend to commercial Copilot deployments or whether the DPA governs.
Compliance intelligence locked
Regulatory citations, enforcement risk, and due diligence action items.
Watcher: regulatory citations. Professional: full compliance memo.
Microsoft collects extensive personal data — including location, voice recordings, typed content, browsing history, and health-related data — across its entire product ecosystem, and uses this data for personalised advertising, product improvement, and AI model training. Data may be shared with third-party partners, advertisers, and other Microsoft-affiliated companies, and some data may be retained even after account deletion. You can review, download, or delete your personal data by visiting account.microsoft.com/privacy and adjusting settings via the Microsoft Privacy Dashboard.