This analysis describes what Microsoft's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The updated privacy statement clarifies that Microsoft Copilot collects data about your interactions with Microsoft websites and apps, in addition to previously disclosed device and product usage data. The policy now states that Copilot may use your conversation history, including saved memories, to personalize your experience across Microsoft products such as Bing, Edge, and MSN. You can manage your memories and control personalization features using the settings in Microsoft Copilot at any time.
View change record →How other platforms handle this
If you reside in the United Kingdom ("UK"), Patreon, Inc. acts as a controller of your personal data and Patreon DLC Limited is Patreon's UK GDPR Article 27 Representative.
We transfer personal data from the European Economic Area and Switzerland to other countries, some of which have not been determined by the European Commission to have an adequate level of data protection. When we do so, we use a variety of legal mechanisms, including contracts
For all processing activities related to users in Brazil, the controller is Reddit, Inc., located at 548 Market St. #16093, San Francisco, California 94104, United States.
"When Microsoft is a controller, unless otherwise stated, Microsoft Corporation and, for those in the European Economic Area, the United Kingdom, and Switzerland, Microsoft Ireland Operations Limited are the data controllers for personal data we collect through the products subject to this statement.Excerpt from Microsoft's Privacy Statement (Legacy)
Get the weekly coverage letter
Companies change their terms without announcing it. We capture governance documents, compare each new version with the last, and publish what changed, with the source text behind it. One email a week on what we found and what we could not reach.
The clause states: “When Microsoft is a controller, unless otherwise stated, Microsoft Corporation and, for those in the European Economic Area, the United Kingdom, and Switzerland, Microsoft Ireland Operations Limited are the data controllers for personal data we collect through the products subject to this statement.”
ConductAtlas has identified this type of provision across 264 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Microsoft.