X · X Privacy Policy · View original document ↗

AI and Machine Learning Training Use of Personal Data

High severity Medium confidence Explicitdocumentlanguage Rare · 1 of 325 platforms
Share 𝕏 Share in Share 🔒 PDF
Monitor governance changes for X Create a free account to receive the weekly governance digest and monitor one platform for governance changes.
Create free account No credit card required.
Document Record

What it is

X states that personal data you provide or generate through platform use, including your posts, interactions, and uploaded content, may be used to train X's AI and machine learning models.

This analysis describes what X's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

This provision authorizes X to use broad categories of personal data, including content you create and how you interact with the platform, to develop and improve AI systems, which is a use that may extend beyond what users typically anticipate from a social media service.

Interpretive note: The policy does not specify whether a separate opt-out mechanism exists for AI training use specifically, and it is unclear from the document text alone whether existing data controls fully address this processing purpose.

Consumer impact (what this means for users)

Under this provision, posts you write, images you share, and interactions you generate on X may be used to train AI models operated by X. The policy does not describe a standalone opt-out mechanism specific to AI training use within this provision.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.
  • Delete Your Data
    Navigate to Settings and Support, then Settings and Privacy, then Privacy and Safety on x.com to review data controls. For a formal data deletion or objection request, use the privacy request form referenced in X's Privacy Center at https://privacy.twitter.com.

How other platforms handle this

Klarna Medium

We use your personal data to develop, train, and improve our artificial intelligence and machine learning models. This includes using your transaction data, behavioral data, and interaction data to enhance our fraud detection, credit assessment, and personalization capabilities. We take steps to pro...

Stripe Medium

We use Personal Data to detect and prevent fraud, and to develop and improve our fraud detection models and other machine learning systems. This may include using transaction data, device information, and other Personal Data to train and refine our systems.

Hulu Medium

engage in any of the foregoing in connection with any use, creation, development, modification, prompting, fine-tuning, training, testing, benchmarking or validation of any artificial intelligence or machine learning tool, model, system, algorithm, product or other technology ("AI Tool").

See all platforms with this clause type →

Monitoring

X has changed this document before.

Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.

Start Watcher free trial Or create a free account →
▸ View Original Clause Language DOCUMENT RECORD
"
We may use the information we collect to train our machine learning or artificial intelligence models. For example, information you share with us, or content you create or interact with on our services, may be used to improve our ability to understand natural language, to improve our ability to understand content in images, or to improve the relevance of content and features we surface to you on our services.

— Excerpt from X's X Privacy Policy

ConductAtlas Analysis

Institutional analysis (Compliance & governance intelligence)

REGULATORY LANDSCAPE: This provision engages the EU GDPR's purpose limitation principle and lawful basis requirements, particularly Article 5(1)(b) and Article 6, as use of personal data to train AI models may require a separate or compatible lawful basis from the original collection purpose. The EU AI Act introduces additional obligations for providers of general-purpose AI models, including transparency and data governance requirements. The California Privacy Rights Act addresses the use of sensitive personal information and automated decision-making, which may intersect with AI training use cases. GOVERNANCE EXPOSURE: High. The authorization to use personal data for AI training is broad and not clearly limited to anonymized or aggregated data; it references content users create and interactions they generate, which constitutes personal data under GDPR and CCPA definitions. The absence of a clearly described opt-out mechanism specific to this use within the document creates a potential gap in consent and rights-management obligations under multiple frameworks. JURISDICTION FLAGS: EU and EEA users present the highest exposure given GDPR's strict purpose limitation and lawful basis requirements. UK users face similar exposure under UK GDPR. California residents may invoke CPRA rights to limit use of personal information for certain automated processing. Illinois and other states with emerging AI or biometric privacy laws may create additional exposure if uploaded images or voice data are involved. CONTRACT AND VENDOR IMPLICATIONS: Organizations that integrate X's API or embed X functionality in their products should evaluate whether downstream AI training use of data flowing through their integrations creates independent compliance obligations. B2B contracts that reference X's data handling may need to be reviewed for consistency with this provision. COMPLIANCE CONSIDERATIONS: Compliance teams should evaluate whether X's stated lawful basis for AI training use is documented and defensible under GDPR Article 6, and whether data subjects have been provided adequate transparency and, where required, opportunity to object under Article 21. Teams should also assess whether existing privacy impact assessments account for AI training as a secondary processing purpose.

Full compliance analysis

Regulatory citations, enforcement risk, and due diligence action items.

Track 1 platform — free Try Watcher free for 14 days

Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.

Applicable agencies

  • FTC
    The FTC has jurisdiction over X's US data practices under Section 5 of the FTC Act, including whether the use of personal data for AI training constitutes an unfair or deceptive practice, particularly in light of prior regulatory commitments.
    File a complaint →

Applicable regulations

Colorado AI Act
US-CO
GDPR
European Union
Texas AI Act
Texas, USA
UK GDPR
United Kingdom

Provision details

Document information
Document
X Privacy Policy
Entity
X
Document last updated
May 5, 2026
Tracking information
First tracked
May 8, 2026
Last verified
May 12, 2026
Record ID
CA-P-006637
Document ID
CA-D-00030
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
0f23df42ef3cddb4de37fa368ab31f32853cb55b59dcc25c699bf64703e25d81
Analysis generated
May 8, 2026 12:18 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: X
Document: X Privacy Policy
Record ID: CA-P-006637
Captured: 2026-05-08 12:18:24 UTC
SHA-256: 0f23df42ef3cddb4…
URL: https://conductatlas.com/platform/x/x-privacy-policy/ai-and-machine-learning-training-use-of-personal-data/
Accessed: May 13, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
High
Categories

Other risks in this policy

Related Analysis

Professional Governance Intelligence

Need to monitor specific governance provisions?

Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.

Arbitration clauses AI governance Data rights Indemnification Retention policies
Start Professional free trial

Or start with Watcher →

Built from archived source documents, structured governance mappings, and historical version tracking.

Frequently Asked Questions

What does X's AI and Machine Learning Training Use of Personal Data clause do?

This provision authorizes X to use broad categories of personal data, including content you create and how you interact with the platform, to develop and improve AI systems, which is a use that may extend beyond what users typically anticipate from a social media service.

How does this clause affect you?

Under this provision, posts you write, images you share, and interactions you generate on X may be used to train AI models operated by X. The policy does not describe a standalone opt-out mechanism specific to AI training use within this provision.

How many platforms have this type of clause?

ConductAtlas has identified this type of provision across 1 platforms. See the full comparison.

Is ConductAtlas affiliated with X?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by X.