The document states that Copilot retains personal details relevant to users and that users can manage their privacy preferences through Copilot Privacy settings.
This analysis describes what Microsoft's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision discloses that Copilot stores user-specific information and establishes that a privacy preference management interface is available to users. The operational scope of what data is retained and for how long is not specified within this document.
Cross-platform context
See how other platforms handle Copilot Privacy Settings and Data Control and similar clauses.
Compare across platforms →"Microsoft Copilot remembers details that matter to your daily life while keeping your personal data secure and protecting your privacy. You can always manage your privacy preferences in your Copilot Privacy settings.Excerpt from Microsoft's Responsible AI Standard
REGULATORY LANDSCAPE: The retention of personal user data by Copilot engages GDPR obligations for EU and EEA users, including lawful basis for processing, data subject rights, and retention period requirements.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision discloses that Copilot stores user-specific information and establishes that a privacy preference management interface is available to users. The operational scope of what data is retained and for how long is not specified within this document.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Microsoft.