Skip to content

What AI vendors do with your data

17 vendors, seven questions, 63 answers quoted word for word from their own terms and docs. 11 say they do not train on API data. 39 pages checked every day.

17 of 17 vendors

What each vendor says, question by question
VendorAPI: Does it train on API and business data?App: Does it train on consumer app data?Keep: How long are API inputs kept?Opt: How do you opt out of training?ZDR: Is zero data retention available?Subs: Is there a public subprocessor list?Geo: Where is data processed and stored?
AnthropicNo, unless you opt inYes, unless you opt outDeleted within 30 daysAccount settingsBy arrangement, eligible APIsNot statedinference_geo per request
AWSNoNot statedProviders never see promptsNot statedNot statedNot statedStored in your Region
CohereOpt out in settingsNot statedDeleted after 30 daysData Controls in settingsEnterprise onlyNot statedNot stated
CursorNot statedYes, unless Privacy Mode is onNot statedPrivacy ModeZDR with model providersPublished on trust portalNo infrastructure in China
DeepSeekNot statedYes, unless you opt outNot statedImprove the model toggleNot statedNot statedStored in China
Fireworks AINo, unless you opt inNot statedStored data deleted after 30 daysNot statedOn by defaultNot statedNot stated
GitHubNoYes since April 24, 2026, unless you opt outNot statedCopilot settingsNot statedNot statedNot stated
GoogleNo on paid servicesYes on unpaid servicesLogged for a limited periodNot statedThrough Vertex AIPublished listNot stated
GroqNot statedNot statedLogs up to 30 daysNot statedSelf-serve for all customersNot statedUnited States
MicrosoftNoNot statedAbuse review store, can be waivedNot statedModified abuse monitoring on approvalNot statedCustomer-specified geography
Mistral AIPaid API: you can opt outYes, unless you opt outNot statedPrivacy toggle, admin panelPay-as-you-go, stateless callsNot statedNot stated
OpenAINo, unless you opt inYes, unless you opt outAbuse logs up to 30 daysSettings or privacy portalOn approvalPublished listRegions for eligible customers
OpenRouterDepends on the providerNot statedNot statedSkip providers that trainZDR-only routingNot statedEU or US, enterprise only
PerplexityNoNot statedNot statedNot statedNot statedNot statedNot stated
SnowflakeNoNot statedNot statedNot statedNot statedNot statedNot stated
Together AINo, unless you opt inNot statedNot statedPrivacy & Security settingSelf-serve settingNot statedNot stated
xAINoYes, to train modelsDeleted within 30 daysNot statedZDR-enabled APINot statedNot stated

ProtectiveDependsUses your dataNot stated on the watched pages

Recent changes

All changes
Change
OpenRouter: Zero Data RetentionZero Data Retention (ZDR) means that a provider will not store your data for any period of time. OpenRouter has privacy settings that, when enabled, only allow you to route to endpoints that have a Zero Data Retention policy. You can enforcSep 24, 2026 · +24 / -11 paragraphs
OpenRouter: Provider logging and data policiesEach AI provider on OpenRouter has its own data handling policies for logging and retention. This page explains how to control which providers can access your data.Sep 24, 2026 · +6 / -13 paragraphs
Mistral AI: Do you use my user data to train your AI models?How do you use submitted feedback?Sep 24, 2026 · +1 / -1 paragraphs
Mistral AI: Can I opt out of my input or output data being used for training?🔑 Vibe: users are not opted out by default and can opt out at any time in their settings.Sep 24, 2026 · +3 / -1 paragraphs
Microsoft: Data, privacy, and security for Models sold by AzureNon-English translations are provided for convenience only. Please consult the EN-US version of this document for the definitive version.Sep 24, 2026 · +45 / -37 paragraphs
Google: Gemini Enterprise Agent Platform and zero data retentionAgent Platform Sandbox Snapshots : If you use the Snapshot API to persist Sandbox state, these snapshots are stored only for the duration of the Sandbox TTL. To achieve zero-data-retention, don't use the Sandbox API.Sep 24, 2026 · +1 / -0 paragraphs
Google: Zero data retention in the Gemini Developer APIPrompt logging for abuse monitoring : As outlined in the Gemini API Additional Terms of Service , for Paid Services, Google logs prompts and responses for a limited period of time solely for detecting violations of the Prohibited Use PolicySep 24, 2026 · +3 / -3 paragraphs
OpenAI: Data controls in the OpenAI platformAbuse monitoring logs: Logs generated from your use of the platform, necessary for OpenAI to enforce our Usage Policies and agreements and mitigate harmful uses of AI.Sep 24, 2026 · +59 / -26 paragraphs

Questions

Which AI APIs train on my data?

OpenAI, Anthropic, Google (the paid Gemini API), Microsoft, AWS Bedrock, xAI, Perplexity, Together AI, Fireworks AI, GitHub (Copilot Business and Enterprise) and Snowflake say on their own pages that they do not train on API or business data by default. Mistral AI and Cohere let API customers opt out in settings. The consumer products are different: ChatGPT, Claude, the free Gemini API and AI Studio, Mistral Vibe, Grok, DeepSeek, Copilot Free and Pro, and Cursor without Privacy Mode may train on what you send unless you opt out.

How is an answer checked?

Every answer quotes the clause it rests on, word for word, with a link to the page. Every day the site reads each page again, hashes its readable text and, when the hash changes, looks for each quoted clause. A clause that is no longer there is flagged on the answer until a person re-reads the page.

How are changes found?

Each watched page is read every day and reduced to its text. When the text changes the site stores the new version and shows the added and removed paragraphs. Older changes come from Internet Archive captures of the same page, dated by the capture that first shows them.

Is this legal advice?

No. It is a quick way to find the clause that answers a common question and to see when it changed. Your contract, order form or data processing addendum decides, and it can differ from the public page.

Where are certifications like SOC 2 and ISO 27001?

On Compliance (compliance.fru.dev), the sister site: which certifications and attestations each vendor holds, with evidence. Terms covers what the vendor says it does with your data.

Terms changes by email

Mondays, only in weeks when a watched page changed.

Double opt-in. Unsubscribe any time.