Copilot privacy and security

If personalization is enabled for you, Copilot will start remembering key details from your conversations and will use those memories in future conversations to provide you with a more tailored and relevant experience. To prevent Copilot from remembering conversations on Copilot.com:

1. Go to Copilot.com and select your profile name.

2. Select Privacy > Personalization.

In Copilot for Windows and MacOS:

1. Select your profile icon.

2. Select Account > Privacy > Personalization.

To prevent Copilot from remembering conversations in the Copilot mobile app:

1. Open the menu.
2. Select your profile icon.

3. Select Account > Privacy > Personalization.

Learn more about AI personalization and memory here.

Your personal interactions with our services are kept private and are not disclosed without your permission. Before training AI models, we remove information that may identify you, like:

• Names
• Phone numbers
• Device or account identifiers
• Sensitive personal data
• Physical addresses

• Email addresses

Your data remains private when using our services. We will protect your personal data as explained in the Microsoft Privacy Statement and in compliance with privacy laws around the world.

At Microsoft, we take our commitment to responsible AI seriously. Copilot is developed in accordance with our AI principles, which demonstrate our commitment to making sure AI systems are developed responsibly and in ways that warrant people’s trust. We've designed the Copilot user experience to keep humans at the center and developed safeguards to minimize errors and avoid misuse. We are continually improving the experience while ensuring your AI privacy and security. To learn more about how to use Copilot responsibly, please review our Terms of Use and Transparency Note.

To learn more about Microsoft’s commitment to privacy, visit the Microsoft Privacy Statement and Privacy at Microsoft.

By default, the conversations you have with Copilot are saved, and you can view and access past conversations. For example, if you’ve created a detailed trip itinerary with Copilot, the conversation you have will be saved. You can return to and reference that conversation by selecting the ‘time machine’ icon from the Copilot home page.

Your privacy and trust are paramount to us. Microsoft will only use your conversations for the limited purposes explained in the Microsoft Privacy Statement: to monitor performance, troubleshoot problems, diagnose bugs, prevent abuse, and other product performance analytics necessary to provide and improve Copilot.

We give you the power to decide if you want us to use your conversations for other purposes:

• You control whether we use your conversations to personalize your experience with Copilot and provide you a more tailored and useful experience that meets your needs. You can disable personalization at any time. See Personalize your Copilot experience.

• You control whether we use your conversations to train our AI models to create a better experience for you and others. You can opt out of use of your conversations for model training at any time. Learn more about Copilot privacy controls.

By default, we store conversations for 18 months. You can delete individual conversations or your entire conversation history at any time.

Absolutely. To delete an individual conversation, click the ‘time machine’ icon from the Copilot home page to view your conversation history and delete individual conversations.

To delete your entire conversation history, the steps vary depending on how you’ve signed in to Copilot.
If you are signed in with your Microsoft Account:

• Click your profile name (or “Account”) in the settings menu, then select Privacy > Export or delete history. Or, in your Microsoft Privacy Dashboard, click ‘Copilot’ and click ‘Delete all activity history’ under the Copilot app activity history section.

• If you want to delete chats from Copilot before 10/01/2024 (legacy experience), in your Microsoft Privacy Dashboard, click ‘Browsing and search’, scroll down to the Copilot activity history section and click ‘Clear all Copilot activity history and search history’.

If you are signed in with an Apple ID:

• From the settings menu, select Account > Privacy > Clear my history. (Please note that if you have merged your Microsoft Account-based and Apple ID-based Copilot accounts, this option will delete all conversation history associated with both accounts.)

• If you want to completely delete your Apple ID-based Copilot account, from the settings menu, select Account > Privacy > Delete my account.

No, nothing you say to Copilot will be made public. Your conversations and data will never be shared with other users, unless you choose to share the conversation.

If you share a file with Copilot (for example, uploading a document and asking Copilot to summarize it), the file will be stored securely for up to 30 days and then automatically deleted. Regardless of your privacy settings, we do not train our Copilot generative models on your uploaded files. And any conversations you have about the file will be treated just like any other conversation, subject to your choices about whether to permit model training and personalization, and which you can delete at any time.

We are exploring options to allow users to store their files for a longer time. Check back for updates!

Whether you use Copilot Vision or upload an image, Copilot helps safeguard your data and protect your privacy. Images you upload or capture with Vision are processed only to respond to your request—they aren’t used to train AI models or personalize your experience. Screenshots and camera images shared with Vision aren’t stored after your session ends.

If you share an image in chat or use it for image generation or editing, it’s processed to complete your request and may be retained for up to 30 days, or until you delete it—whichever comes first.

Text transcripts of your interactions may be saved so you can revisit them later and to help monitor for abuse. These transcripts aren’t used for advertising or personalization, and you can delete them at any time.

Copilot clearly shows when Vision is active, and you’re always in control. You can delete uploaded images or your activity history through your Microsoft account settings.

Copilot may ask for your permission to process biometric data—like faces or hands—when you use features such as Copilot Vision or image upload. Consent for biometric processing applies anytime you upload or capture an image or video while using Copilot. This includes through your use of Copilot Vision, and image generation and editing tools. You only need to give consent once, and it applies across all Copilot experiences that involve image or video input and capture.

Biometric data is only processed if you upload or capture it, and it’s used solely to respond to your request. For example, if you snap a selfie and ask Copilot for help choosing a new hairstyle, or learning how to whistle, it may analyze your facial features to help craft a response.

You’re always in control of what you share. If you prefer not to have biometric data processed, simply avoid using these features. Do not share images of others without their consent.

You shouldn’t provide any confidential or sensitive personal data that you would not want Microsoft to use for purposes explained in this FAQ and in the Microsoft Privacy Statement: This includes data that might reveal:

• Your race
• Religion
• Sexual orientation

• Health status

At any time, you can delete a prior Copilot conversation from your chat history. You can also control whether Copilot uses your conversations for model training or to personalize your experience.

If you are the original sharer, you can remove the shared conversation at any time. To remove a previously shared conversation:

1. Open Copilot (web or mobile).
2. Open your conversation history:
   • Web: Use the left-side pane.
   • Mobile app: Tap the top-left button to open history.
3. Find the conversation you previously shared.

4. Delete the conversation (choose Delete and confirm).

Once deleted, the public link within Copilot will become inaccessible to anyone who tries to view it from that point forward.

In addition, shared links automatically expire after 28 days for anonymous users, and 18 months for signed in users. You can share the same content to generate a new link at any time.