Microsoft Copilot
Is Microsoft Copilot safe?
- Made by
- Microsoft
- Company based in
- United States
- Trains on your chats
- No
- People can read chats
- Yes
- Temporary chat mode
- No
- Chats used for ads
- Yes
- Minimum age
- 13
- Regulator actions listed
- 0
- Checked on
For the updated Copilot app released on August 18, 2026, Microsoft says prompts, responses and uploaded files are not used to train its foundation models. Older help pages, still online, describe training by default with an opt-out and 18-month storage of conversations, so check which app version you use.
Conversations can be read by people: Microsoft’s terms say Copilot may include “manual (human) processing”, and a help page says humans may review chats for safety, legal, product improvement or troubleshooting reasons. Without a Microsoft 365 subscription, Copilot shows ads chosen from the current chat, and personalised ads can use your chat history and saved memories unless you turn off “Allow ads personalization”. Uploaded files are deleted after up to 30 days.
We found no data protection regulator action against consumer Copilot on regulators’ own sites.
- Company responsible for your data
- Microsoft Corporation; Microsoft Ireland Operations Limited for the EEA, UK and Switzerland
- What is used for training
- For the updated Copilot app (from August 18, 2026) Microsoft states: "Prompts, responses, and your file contents when using the Microsoft Copilot app aren't used to train foundation models." Optional feedback may be used to improve Copilot but not to train foundation models. (Older app versions: conversations used for training unless you opt out, with exclusions e.g. under-18s, signed-out users, and users in Brazil, China, Israel, Nigeria, South Korea, Vietnam.)
- How to turn training off
- Not needed in the updated app (no training on prompts/responses stated). Legacy app: profile icon > profile name > Privacy > 'Training on conversation activity' and 'Training on voice conversations' (copilot.com); Settings > Privacy on Windows/macOS; menu > profile icon > Account > Privacy on mobile.
- Business and API plans
- Copilot with a work/school (Entra) account is out of scope of the consumer terms; for Microsoft 365 Copilot, stored interaction data 'isn't used to train foundation LLMs'.
- How long chats are kept
- Updated app: no retention period stated; chats are kept so you can revisit them until you delete them. Legacy app/FAQ: 'By default, we store conversation activity for 18 months.' Uploaded files stored 'for up to 30 days and then automatically deleted'.
- After you delete a chat or account
- You can delete individual chats (Chats list > ... More > Delete) or all activity history in the Microsoft privacy dashboard; Microsoft does not state a timeframe for removal from its systems after deletion.
- Human review
- Yes. Terms: 'Copilot may include both automated and manual (human) processing of data.' Young-people page: 'Humans may review your conversations in Copilot for safety, legal, product improvement, or troubleshooting.' Legacy FAQ: an opt-out of human review 'is not available'.
- Where data is stored
- Microsoft may store and process personal data 'in your region, in the United States, and in any other jurisdiction' where it or its providers operate; 'typically, the primary storage location is in your region or in the United States'.
- Age rules
- 13 (higher in some countries); a Microsoft account is required
- Ads
- Yes, for users without a Microsoft 365 subscription. Generic ads are chosen from the current conversation; personalized ads 'might use your chat history, saved memories' and other data. Toggle: Settings > Personalization > 'Allow ads personalization'. No personalized ads for under-18s.
- Privacy policy
- microsoft.com
- Terms
- microsoft.com
- Data controls help page
- support.microsoft.com
- Sources
Page URL Copilot for individuals: your privacy controls and choices (updated app, Aug 2026) https://support.microsoft.com/en-us/privacy/microsoft-copilot/privacy-controls Copilot for individuals: your activity history https://support.microsoft.com/en-us/privacy/microsoft-copilot/activity-history Copilot for individuals: Copilot for young people https://support.microsoft.com/en-us/privacy/microsoft-copilot/young-people Copilot for individuals: overview https://support.microsoft.com/en-us/privacy/microsoft-copilot/overview Microsoft Copilot Supplemental Terms of Use (effective Aug 18, 2026) https://www.microsoft.com/en-us/microsoft-copilot/for-individuals/termsofuse Microsoft Privacy Statement (controllers) https://www.microsoft.com/en-us/privacy/privacystatement Microsoft Privacy Statement (data storage locations) https://www.microsoft.com/en-ca/privacy/privacystatement Microsoft Copilot privacy controls (legacy app) https://support.microsoft.com/en-US/microsoft-copilot/microsoft-copilot-privacy-controls Privacy FAQ for Microsoft Copilot (legacy app) https://support.microsoft.com/en-us/microsoft-copilot/privacy-faq-for-microsoft-copilot Copilot privacy and security (for individuals) https://www.microsoft.com/en-us/microsoft-copilot/for-individuals/privacy Manage your Copilot activity history in the privacy dashboard https://support.microsoft.com/en-us/privacy/manage-your-copilot-activity-history-in-the-privacy-dashboard Data, privacy and security for Microsoft 365 Copilot https://learn.microsoft.com/en-us/microsoft-365/copilot/microsoft-365-copilot-privacy MSRC CVE-2026-24301 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-24301 MSRC CVE-2026-55946 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55946