Question 1

Does Hugging Face train on API and business data?

Accepted Answer

No training on user data. "Hugging Face does not store any user data for training purposes."

Question 2

Hugging Face: how long are API inputs kept?

Accepted Answer

Request bodies not stored. "We do not store the request body or response when routing requests through Hugging Face."

Question 3

Hugging Face: is zero data retention available?

Accepted Answer

Payloads never stored. "Hugging Face does not store any customer data in terms of payloads or tokens that are passed to the Inference Endpoint."

Question 4

Hugging Face: is there a public subprocessor list?

Accepted Answer

Published list. "We may share your information with Third-Party Service Providers, and when we do, we ensure that they access your information in compliance with applicable data protection laws."

Question 5

Hugging Face: where is data processed and stored?

Accepted Answer

US or EU on Team/Enterprise. "For non-Team or Enterprise users, repositories are always stored in the US."

Question	Question, answer and clauseAnswer and clause
Does it train on API and business data?	Does it train on API and business data?No training on user data(Protective) “Hugging Face does not store any user data for training purposes.” Security & Compliance (Inference Providers) On the page Sep 25, 2026
Does it train on consumer app data?	Does it train on consumer app data?Not stated on the watched pages.
How long are API inputs kept?	How long are API inputs kept?Request bodies not stored(Protective) “We do not store the request body or response when routing requests through Hugging Face.” Security & Compliance (Inference Providers) On the page Sep 25, 2026
How do you opt out of training?	How do you opt out of training?Not stated on the watched pages.
Is zero data retention available?	Is zero data retention available?Payloads never stored(Protective) “Hugging Face does not store any customer data in terms of payloads or tokens that are passed to the Inference Endpoint.” Security & Compliance (Inference Endpoints) On the page Sep 25, 2026
Is there a public subprocessor list?	Is there a public subprocessor list?Published list(Protective) “We may share your information with Third-Party Service Providers, and when we do, we ensure that they access your information in compliance with applicable data protection laws.” Privacy Policy On the page Sep 25, 2026
Where is data processed and stored?	Where is data processed and stored?US or EU on Team/Enterprise(Depends) “For non-Team or Enterprise users, repositories are always stored in the US.” Storage Regions on the Hub On the page Sep 25, 2026

Page	Kind	Changed	Checked
Privacy Policyhuggingface.co	Privacy policy	No change seen	Sep 25, 2026live page
Security & Compliance (Inference Endpoints)huggingface.co	Documentation	No change seen	Sep 25, 2026live page
Security & Compliance (Inference Providers)huggingface.co	Documentation	No change seen	Sep 25, 2026live page
Storage Regions on the Hubhuggingface.co	Documentation	No change seen	Sep 25, 2026live page

Hugging Face data terms: training, retention, opt-out

What the terms say

Changes

Watched pages

Terms changes by email