Get the weekly research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.
The policy states that NVIDIA collects the full content of chatbot messages, including any personal information contained within them such as names and email addresses, along with the web page context, and retains this data for record keeping and future customer service continuity purposes.
This analysis describes what NVIDIA NIM's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision authorizes collection and retention of chatbot message content, including any personal information users voluntarily include in messages, for product improvement, customer service, and future contact purposes. The policy discloses that third-party chatbot vendors such as Drift process this data as data processors under NVIDIA's instructions.
The updated Privacy Policy removes all disclosure language about how NVIDIA and third-party partners use cookies and other tracking technologies. Previously, the policy stated that cookies were used 'to collect and record information' for 'performance improvement, analytics, and to assist in our marketing efforts' and described consent mechanisms like 'Accept All' and 'Manage Settings'. The updated policy contains no equivalent disclosure of these tracking practices, data collection methods, or consent options. You can review NVIDIA's full Privacy Policy at their Privacy Center, though the updated version no longer describes cookie and tracking technology practices that were previously disclosed.
View change record →Under this clause, messages sent to NVIDIA chatbots, including any personal information contained within them, are collected, stored, and may be used for product improvement and future customer service contact. The agreement states that third-party vendors supporting chatbot platforms, such as Drift, will process this data as data processors.
Cross-platform context
See how other platforms handle Chatbot Message Content Collection and similar clauses.
Compare across platforms →Monitoring
NVIDIA NIM has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"When you interact with any of our chatbots on our web site or mobile apps we collect your messages, including the personal information included in the messages, such as your name and email address (if provided), along with the web page you are on. We use this data to improve our products and services, and to support our customer service efforts. We also use your contact information to communicate with you about your requests. We store this information for purposes of record keeping and to support our customer service efforts, including to continue our chatbot communications if we end up connecting at a future date.Excerpt from NVIDIA NIM's NVIDIA Privacy Policy
1) REGULATORY LANDSCAPE: Chatbot message content collection engages GDPR's requirements for consent as a lawful basis for collecting personal information voluntarily submitted through conversational interfaces. The policy states it relies on consent for chatbot message collection. CCPA may apply to the collection and retention of personal information submitted through chatbot interactions by California residents. If chatbot messages incidentally capture sensitive categories of information, GDPR special category processing requirements may be implicated. 2) GOVERNANCE EXPOSURE: Low to Medium. The policy discloses the collection and retention of chatbot message content with consent as the stated basis, and identifies third-party vendors as data processors. The open-ended nature of chatbot input means that users may submit personal information beyond what is anticipated, including sensitive data, which creates data minimization compliance considerations. 3) JURISDICTION FLAGS: EU and UK users have the right to withdraw consent for chatbot data collection under GDPR, which should trigger cessation of processing for that purpose. California residents may have access and deletion rights under CCPA with respect to chatbot message content retained by NVIDIA. The retention of chatbot data for future contact purposes should be assessed against applicable data retention requirements. 4) CONTRACT AND VENDOR IMPLICATIONS: The policy identifies Drift as an example third-party chatbot vendor that processes this data as a data processor. Organizations using NVIDIA chatbots should confirm whether data processing agreements with NVIDIA address the scope of chatbot data processing and vendor sub-processing arrangements. Drift's own data processing practices and security standards warrant independent vendor assessment. 5) COMPLIANCE CONSIDERATIONS: Legal teams should confirm that consent mechanisms for chatbot interactions are operationally effective and that consent withdrawal mechanisms are available to users. Data retention policies for chatbot message content should be assessed against applicable requirements, particularly for EU and UK users. Data mapping exercises should capture chatbot message content as a distinct data category with its own retention and sharing profile.
This provision authorizes collection and retention of chatbot message content, including any personal information users voluntarily include in messages, for product improvement, customer service, and future contact purposes. The policy discloses that third-party chatbot vendors such as Drift process this data as data processors under NVIDIA's instructions.
Under this clause, messages sent to NVIDIA chatbots, including any personal information contained within them, are collected, stored, and may be used for product improvement and future customer service contact. The agreement states that third-party vendors supporting chatbot platforms, such as Drift, will process this data as data processors.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by NVIDIA NIM.