Bing Copilot
Graded against 804 verified platforms, from its own policy text. Automated assessment against a published rubric — not legal advice.
“Microsoft will only use your Microsoft Copilot conversations to monitor performance, troubleshoot problems, diagnose bugs, prevent abuse, and to provide and improve Microsoft Copilot. In certain markets, we use conversation data to train the generative AI models in Copilot, unless you choose to opt-out of such training. More information about how your data…”
Watch: Commercial use
Start here. These are the highest-risk verified clauses AIRIN found in the platform's own policy text.
Restricts use of Skype to personal and noncommercial purposes, while granting a limited exception permitting use at work for the user's own business communications.
Restricts use of Bing Maps Bird's eye imagery of specified countries for governmental purposes without separate written approval from Microsoft, imposing a specific geographic and use-based limitation.
This segment restricts the use of microphone data to capturing support questions and clarifies that Get Help does not use location data, while also incorporating the Feedback Hub section's rules for feedback data handling, limiting the scope of data collection.
How to read this page: Overall risk rates what Bing Copilot's own policy terms mean for your prompts, outputs, and data. The benchmark bands below grade those same verified terms relative to peers — a platform in a risky-by-default category can rate HIGH risk and still grade STRONG against its peer set. Both trace to the cited findings.
Policy benchmark
rubric v1.0 — how this is scoredBased on 860 verified, verbatim-cited findings below — read the citations.
Based on 941 verified, verbatim-cited findings below — read the citations.
Automated assessment against a published rubric — not legal advice.
Fully verified — complete core corpus captured and read in full.
- Privacy PolicyVerified - read in full - 451 citationsstaticLast captured 2026-08-10
- Terms of ServiceVerified - read in full - 52 citationsstaticLast captured 2026-08-10
Only citation-backed plan differences are shown here; absent cells mean AIRIN has not verified a tier-specific claim.
Grants Microsoft a worldwide, royalty-free intellectual property license to use, copy, retain, transmit, reformat, display, and distribute user content to the extent necessary to provide and improve Microsoft products and services, including use in promotional materials, which may encompass training AI and other services.
" b. To the extent necessary to provide the Services to you and others, to protect you and the Services, and to improve Microsoft products and services, you grant to Microsoft a worldwide and royalty-free intellectual property license to use..."
Grants Microsoft, its affiliates, and sublicensees a free, worldwide right to use, modify, reproduce, distribute, broadcast, share, and display user-submitted content and personal identifiers (name, gamertag, motto, avatar) posted to Xbox Services.
" iii. Your Content. As part of building the Xbox Services community, you grant to Microsoft, its affiliates and sublicensees a free and worldwide right to use, modify, reproduce, distribute, broadcast, share and display Your Content or your..."
Restricts use of Skype to personal and noncommercial purposes, while granting a limited exception permitting use at work for the user's own business communications.
" v. Personal/Noncommercial Use. The use of Skype is for your personal and noncommercial use. You are permitted to use Skype at work for your own business communications."
Clarifies that the MPEG LA codec notice does not restrict normal internal business uses of the software under the Terms, provided such use does not involve redistribution to third parties or creation of VIDEO STANDARDS-compliant material for third-party distribution.
" For clarification purposes only, this notice does not limit or inhibit the use of the software provided under these Terms for normal business uses that are personal to that business which do not include (i) redistribution of the software t..."
Grants limited permission to copy and use any provided documentation for personal reference purposes, and imposes an obligation to comply with applicable technology control and export laws and regulations governing the application.
" 4. DOCUMENTATION. If documentation is provided with the application, you may copy and use the documentation for personal reference purposes. 5. TECHNOLOGY AND EXPORT RESTRICTIONS. The application may be subject to United States or i..."
Requires users who wish to broadcast using Skype or use Skype APIs to comply with separately referenced licensing terms, imposing compliance obligations as a condition of those use cases.
" iii. APIs or Broadcasting. If you want to use Skype in connection with any broadcast, you must comply with the "Broadcast TOS" at https://www.skype.com/go/legal.broadcast . If you want to use any application program interface ( "API" ) exp..."
This clause enumerates the specific circumstances—legal compliance, safety protection, security maintenance, and rights protection—under which Microsoft is obligated or permitted to retain and disclose personal data, including to law enforcement and government agencies.
" Comply with applicable law or respond to valid legal process, including from law enforcement or other government agencies. Protect the safety of our customers, organizations, and the public — for example, to prevent spam or attempts to de..."
This segment describes how Copilot in Microsoft 365 uses LLM processing on user-provided content within Microsoft 365 apps, establishing the scope of data processing obligations for the Copilot AI feature under specific subscription tiers, and notes inapplicability to Office desktop licenses.
" Copilot in Microsoft 365 . The Copilot features that appear in Microsoft 365 apps as part of a Microsoft 365 Personal, Microsoft 365 Family, or Microsoft 365 Premium subscription provide AI-powered productivity capabilities through real-ti..."
Clause A describes 'Tailored experiences' (which include personalized suggestions and ads) as a general offering, while Clause B states that 'Personalized offers' (which are described identically) are only provided if the user explicitly chooses to turn them on.
" Tailored experiences include suggestions on how to customize and optimize Windows, as well as ads and recommendations for Microsoft and third-party products and services, features, apps, and hardware for your Windows experiences. For example, to help you get the most out of your device, we may tell you about features you may not know about or that are new. If you are having a problem with your Windows device, you may be offered a solution. You may be offered a chance to customize your lock screen with pictures, or to be shown more pictures of the kind you like, or fewer of the ones you do not. If you stream movies in your browser, you may be recommended an app from the Microsoft Store that streams more efficiently. Or, if you are running out of space on your hard drive, Windows may recommend you try OneDrive or purchase hardware to gain more space. Learn more about tailored experiences in Windows ."
" If you choose to turn on Personalized offers , we will use information about your device and how you use it, including Windows diagnostic data, in combination with your account info and data collected by other Microsoft products and services to offer you personalized tips, ads, and recommendations to enhance your Windows experiences. Personalized offers include suggestions on how to customize and optimize Windows, as well as ads and recommendations for Microsoft and third-party products and services, features, apps, and hardware to enhance your Windows experiences. For example, Windows might tell you about new features to help you get the most out of your device. If you stream movies in your browser, Windows might recommend an app from the Microsoft Store that streams more efficiently. Or, if you are running out of space on your hard drive, Windows might recommend you try OneDrive or purchase hardware to add more storage."
Within one documentClause A states that if a device qualifies, Smart App Control is automatically enabled, whereas Clause B states 'Smart App Control is not enabled and', which directly opposes the automatic enablement for qualifying devices.
" Where supported, Smart App Control helps check software that is installed and runs on your device to determine if it is malicious, potentially unwanted, or poses other threats to you and your device. On a supported device, Smart App Control starts in evaluation mode and the data we collect for Microsoft Defender SmartScreen such as file name, a hash of the file’s contents, the download location, and the file’s digital certificates, is used to help determine whether your device is a good candidate to use Smart App Control for additional security protection. Smart App Control is not enabled and will not block during evaluation mode. Some devices may not be good candidates if Smart App Control would otherwise get in the way and interfere with a user’s otherwise intended and legitimate tasks – for instance, developers who use a lot of unsigned files. If you are a good candidate for Smart App Control, then it will automatically be turned on, and will provide additional protection to your device beyond Microsoft Defender SmartScreen. Otherwise, Smart App Control will be unavailable and permanently turned off. If your device is unsupported or not a good candidate for Smart App Control, Microsoft Defender SmartScreen will continue to help protect your device. When Smart App Control is enabled and identifies an app as malicious, potentially unwanted, or unknown and unsigned, it will block and notify you prior to opening, running, or installing the app. Learn more about Smart App Control ."
Within one document
Evidence appendix
Showing priority citations first. The full appendix is available for audit trails; not every citation is a severe risk.
" v. Personal/Noncommercial Use. The use of Skype is for your personal and noncommercial use. You are permitted to use Skype at work for your own business communications."
Restricts use of Skype to personal and noncommercial purposes, while granting a limited exception permitting use at work for the user's own business communications.
AI-generated interpretation, not legal advice.
" ii. Bing Maps. You may not use Bird’s eye imagery of the United States, Canada, Mexico, New Zealand, Australia or Japan for governmental use without our separate written approval."
Restricts use of Bing Maps Bird's eye imagery of specified countries for governmental purposes without separate written approval from Microsoft, imposing a specific geographic and use-based limitation.
AI-generated interpretation, not legal advice.
" If permitted by system settings, the system microphone may be used to capture the support question instead of your needing to type. You can control this in the “Microphone Privacy Settings” in the Windows Settings application. Get Help will also access your Application List to aid in opening the Feedback Hub to the correct app if you choose to start the feedback process within Get Help. All feedback will be entered and controlled by the Feedback Hub, as described in the Feedback Hub section of this Privacy Statement. Get Help does not use your location data as part of its services."
This segment restricts the use of microphone data to capturing support questions and clarifies that Get Help does not use location data, while also incorporating the Feedback Hub section's rules for feedback data handling, limiting the scope of data collection.
AI-generated interpretation, not legal advice.
" Advertising allows us to provide, support, and improve some of our products. Microsoft does not use what you say in email, human-to-human chat, video calls or voice mail, or your documents, photos, or other personal files to target ads to you. We use other data, detailed below, for advertising on our Microsoft properties and on third-party properties. For example:"
This segment restricts Microsoft from using email content, chat, video calls, voicemail, documents, photos, or personal files for ad targeting, while permitting use of other collected data for advertising on Microsoft and third-party properties.
AI-generated interpretation, not legal advice.
" For example, your gamertag and scores that show on game leaderboards are considered public and cannot be hidden. For other data, you can adjust your privacy settings on consoles and at Xbox.com to limit or block what is shared with the public or with friends."
Restricts certain data (leaderboard scores and gamertags) from being hidden while granting users the right to adjust privacy settings to limit other data sharing, balancing mandatory public disclosure with user control rights.
AI-generated interpretation, not legal advice.
" Finally, Microsoft products often contain web beacons or similar technologies from third-party analytics providers, which help us compile aggregated statistics about the effectiveness of our promotional campaigns or other operations. These technologies enable the analytics providers to set or read their own cookies or other identifiers on your device, through which they can collect information about your online activities across applications, websites, or other products. However, we prohibit these analytics providers from using web beacons on our sites to collect or access information that directly identifies you (such as your name or email address). You can opt out of data collection or use by some of these analytics providers by visiting any of the following sites: Adjust , AppsFlyer , Clicktale , Flurry Analytics , Google Analytics (requires you to install a browser add-on), Kissmetrics , Mixpanel , Nielsen , Acuity Ads , WebTrends , or Optimizely ."
This clause restricts third-party analytics providers from using web beacons on Microsoft sites to collect or access information that directly identifies users, while permitting aggregated statistics collection for promotional campaign effectiveness.
AI-generated interpretation, not legal advice.
"For example, we may predict your interest in gaming and communicate with you about new games you may like. Advertising . Microsoft does not use what you say in email, human-to-human chat, video calls, or voice mail, or your documents, photos, or other personal files to target ads to you. We use data we collect through our interactions with you, through some of our first-party products, services, apps, and web properties (Microsoft properties), and on third-party web properties, for advertising on our Microsoft properties and on third-party properties. We may use automated processes to help make advertising more relevant to you. For more information about how your data is used for advertising, see the Advertising section of this privacy statement. Prize promotions and events . We use your data to administer prize promotions and events available in our physical Microsoft Stores. For example, if you enter into a prize promotion, we may use your data to select a winner and provide the prize to you if you win. Or, if you register for a coding workshop or gaming event, we will add your name to the list of expected attendees. Transacting commerce . We use data to carry out your transactions with us. For example, we process payment information to provide customers with product subscriptions and use contact information to deliver goods purchased from the Microsoft Store. Reporting and business operations . We use data to analyze our operations and perform business intelligence. "
This clause restricts Microsoft from using email, chat, video call, voice mail, documents, photos, or personal files to target advertisements, while permitting use of interaction data from Microsoft properties and third-party properties for advertising purposes.
AI-generated interpretation, not legal advice.
" For these purposes, we combine data we collect from different contexts (for example, from your use of two Microsoft products). For example, Microsoft Store uses information about the apps and services you use to make personalized app recommendations. However, we have built in technological and procedural safeguards designed to prevent certain data combinations where required by law. For example, where required by law, we store data we collect from you when you are unauthenticated (not signed in) separately from any account information that directly identifies you, such as your name, email address, or phone number."
Permits combining data across contexts for personalization while imposing a restriction requiring separation of unauthenticated user data from identified account data where required by law, establishing a procedural safeguard against unlawful data combination.
AI-generated interpretation, not legal advice.
" In some cases, your ability to access or control your personal data will be limited, as required or permitted by applicable law."
This clause limits the scope of users' data access and control rights, stating they may be restricted as required or permitted by applicable law, qualifying the rights enumerated in surrounding segments.
AI-generated interpretation, not legal advice.
" Contextual data from your device and some basic account data are used to show you appropriate messaging in Windows regardless of whether the Personalized offers setting or the use of data from other Microsoft products to personalize offers are turned off. For example, this data is used to make sure content is in the correct language and appropriate for your age group."
This clause establishes an exception whereby contextual device data and basic account data are used for appropriate messaging (language, age-appropriateness) regardless of whether Personalized Offers or cross-product data use settings are turned off.
AI-generated interpretation, not legal advice.
" Desktop apps are a specific type of app whose location permissions are controlled through your Windows location settings and won’t appear in the list that allows you to choose those apps that can use your location. They can be downloaded from the Microsoft Store, downloaded from the internet, or installed with some type of media (such as a CD, DVD, or USB storage device). Learn more about third-party desktop apps and how they may still be able to determine your device’s location when the device’s location setting is off ."
This segment identifies desktop apps as an exception to the standard location permission controls, explaining they are not listed in the location permissions interface and may still determine device location even when the setting is off.
AI-generated interpretation, not legal advice.
" If you add an account provided by an organization (such as your employer or school), the owner of the organizational domain can implement policies and controls (for example, requiring multi-factor authentication or the ability to remotely wipe data from your device) that can affect your use of Outlook."
This segment restricts user control over Outlook by noting that organizational account owners can implement policies affecting data handling and device access, which limits individual user rights in enterprise contexts.
AI-generated interpretation, not legal advice.
" b. To the extent necessary to provide the Services to you and others, to protect you and the Services, and to improve Microsoft products and services, you grant to Microsoft a worldwide and royalty-free intellectual property license to use Your Content, for example, to make copies of, retain, transmit, reformat, display, and distribute via communication tools Your Content on the Services. If you publish Your Content in areas of the Service where it is available broadly online without restrictions, Your Content may appear in demonstrations or materials that promote the Service. Some of the Services are supported by advertising. Controls for how Microsoft personalizes advertising are available at https://choice.live.com (https://go.microsoft.com/fwlink/?LinkId=286759). We do not use what you say in email, chat, video calls or voice mail, or your documents, photos or other personal files, to target advertising to you. Our advertising policies are covered in detail in the Privacy Statement."
Grants Microsoft a worldwide, royalty-free intellectual property license to use, copy, retain, transmit, reformat, display, and distribute user content to the extent necessary to provide and improve Microsoft products and services, including use in promotional materials, which may encompass training AI and other services.
AI-generated interpretation, not legal advice.
" a. When you share Your Content with other people, you understand that they may be able to, on a worldwide basis, use, save, record, reproduce, broadcast, transmit, share and display Your Content for the purpose that you made Your Content available on the Services without compensating you. If you do not want others to have that ability, do not use the Services to share Your Content. You represent and warrant that for the duration of these Terms, you have (and will have) all the rights necessary for Your Content that is uploaded, stored, or shared on or through the Services and that the collection, use, and retention of Your Content will not violate any law or rights of others. Microsoft cannot be held responsible for Your Content or the material others upload, store or share using the Services."
Imposes a representation and warranty obligation on users that they hold all necessary rights to content uploaded or shared, and informs users that sharing content grants other users broad worldwide rights to use, reproduce, and display that content without compensation, establishing the scope of user consent to third-party use.
AI-generated interpretation, not legal advice.
" vi. Skype Number/Skype To Go. If Skype provides you with a Skype Number or Skype To Go number, you agree that you do not own the number or have a right to retain that number forever. For more details on Skype Number see https://secure.skype.com/en/skype-number/ ."
Clarifies that users do not own or have a perpetual right to retain a Skype Number or Skype To Go number, disclaiming any ownership or retention rights in assigned telephone numbers.
AI-generated interpretation, not legal advice.
" Microsoft will only use your Microsoft Copilot conversations to monitor performance, troubleshoot problems, diagnose bugs, prevent abuse, and to provide and improve Microsoft Copilot. In certain markets, we use conversation data to train the generative AI models in Copilot, unless you choose to opt-out of such training. More information about how your data is protected and the controls we offer in Microsoft Copilot is available here ."
Restricts use of Copilot conversation data to specified purposes (performance monitoring, troubleshooting, abuse prevention, service improvement) and conditions model training on conversation data on a market-specific basis with opt-out rights, creating both a use restriction and a training-use permission with procedural opt-out.
AI-generated interpretation, not legal advice.
" We will also use your conversation data to monitor performance, troubleshoot and fix bugs and issues, prevent abuse, and to provide and improve Microsoft Copilot. In some markets, this data can help train our AI models in Microsoft Copilot unless you opt out. Learn more about your choices and data protection here . Please also review the Transparency Note for Microsoft Copilot for information on our safety practices and our efforts to ensure that Copilot is consistent with our Responsible AI principles."
Permits Microsoft to use conversation data to monitor performance, fix bugs, prevent abuse, improve Copilot, and in some markets to train AI models, subject to an opt-out right; the opt-out mechanism is user-favorable but the default is a permission grant for training use.
AI-generated interpretation, not legal advice.
" When you opt in to share with us, SwiftKey collects device and usage data and uses de-identified device data, usage data, and model data to analyze service performance and improve products. You can also choose to share your SwiftKey language and typing data to help improve Microsoft products and services. If you opt in, SwiftKey may send short, de-identified snippets of what and how you type, along with related correction data to our servers for processing. These text snippets are used in automated processes to validate prediction services and enhance product features. To protect your privacy, these snippets are never linked to your SwiftKey account. You can manage your choices at any time in SwiftKey Settings."
States that upon opt-in, SwiftKey collects device and usage data and may send de-identified snippets of typing and correction data to Microsoft servers; these snippets are used in automated processes to validate prediction services and enhance product features, conditioning data use for product improvement on user opt-in consent.
AI-generated interpretation, not legal advice.
Common questions about Bing Copilot's policies
- Does Bing Copilot train its AI models on your data?
- Training possible — conditions or opt-outs apply — based on 10 verified findings from Bing Copilot's published policy. Informational only, not legal advice.
- Who owns the content you create with Bing Copilot?
- You own outputs — with license carve-outs — based on 7 verified findings from Bing Copilot's published policy. Informational only, not legal advice.
- Can you use Bing Copilot's output commercially?
- Commercial use allowed — with conditions — based on 27 verified findings from Bing Copilot's published policy. Informational only, not legal advice.
Clause detail — protections, your obligations, and coverage
Every clause below is a verbatim quote from Bing Copilot's own published policy, read in full and linked to its exact location. Protections and user obligations are reported separately from risk because they are different kinds of clause — an obligation on you is not a risk to your data. Informational only, not legal advice.
✅ Protections found
98 verified clausesClauses in Bing Copilot's policies that work in your favour — commitments the platform made to you.
- Privacy & data use
“Bing. If you are signed into Bing, you can view and clear your stored search and chat history on your privacy dashboard . If you are not signed into Bing, you can view and clear stored search history associated to your device in your Bing settings . Micros…”
This clause describes specific procedures for accessing, viewing, clearing, and controlling personal data across Bing, Microsoft account, and MSDN products, detailing how users can exercise their data rights for each ser…
📍 Privacy Policy › “How to access and control your personal data”Jump to exact text → - Privacy & data usesensitive data (biometric/location/health)
“Recall is a Windows feature only available in CoPilot+ PCs that allows users to find things they've seen on their device using the text and visual clues they remember. To use Recall, a user must opt-in to save snapshots on their Copilot+ PC, which are images o…”
This segment defines the Windows Recall feature, describing what data it collects (snapshots, metadata), how it is stored (locally, protected by Windows Hello ESS), and the opt-in requirement, establishing the foundation…
📍 Privacy Policy › “Windows Recall”Jump to exact text → - Privacy & data usebreach notification promises
“Microsoft collects data necessary to provide features you request in Microsoft Edge. When signed into Microsoft Edge using your Microsoft personal account or work or school account, Microsoft Edge will sync your browser data saved on your device across other s…”
This segment establishes that when signed into Microsoft Edge, browsing data (favorites, history, extensions, passwords, payment info, etc.) will be synced across devices, and gives users the right to choose which data t…
📍 Privacy Policy › “Microsoft Edge”Jump to exact text → - Privacy & data useads & tracking use
“You can choose whether you wish to receive promotional communications from Microsoft by email, SMS, physical mail, and telephone. If you receive promotional email or SMS messages from us and would like to opt out, you can do so by following the directions in t…”
This clause establishes users' right to opt out of promotional communications from Microsoft via email, SMS, physical mail, and telephone, and describes the procedures for managing those preferences through account setti…
📍 Privacy Policy › “Your communications preferences”Jump to exact text → - Privacy & data useproduct telemetry/usage tracking
“Office Enterprise – Android Devices. Link to Windows allows you to insert photos into web and desktop versions of select Microsoft 365 apps, such as PowerPoint, Excel, and Word directly from your mobile phone. This requires your IT Administrator to have enabl…”
Describes the procedure for using the Office Enterprise photo-insert feature, including IT administrator prerequisites, account association, and the 15-minute session limit for photo transfer, defining conditions and dat…
📍 Privacy Policy › “Phone Link - Link to Windows”Jump to exact text → - Privacy & data useproduct telemetry/usage tracking
“Inking and typing Recognition . You also can choose to help Microsoft improve inking and typing recognition by sending inking and typing diagnostic data. If you choose to do so, Microsoft will collect samples of the content you type or write to improve feature…”
This clause permits Microsoft to collect inking and typing diagnostic data samples—when the user opts in—to improve handwriting recognition, autocompletion, and spelling features, while describing the processing procedur…
📍 Privacy Policy › “Diagnostics”Jump to exact text →
+ 92 more verified clauses of this kind on this platform, cited in full in the report.
📋 Rules you must follow
8 verified clausesWhat Bing Copilot requires of YOU. These are your obligations, not risks to your data or IP, so they are cited here and excluded from this platform's risk rating.
- Commercial useconduct restrictions
“For clarification purposes only, this notice does not limit or inhibit the use of the software provided under these Terms for normal business uses that are personal to that business which do not include (i) redistribution of the software to third parties, or (…”
Clarifies that the MPEG LA codec notice does not restrict normal internal business uses of the software under the Terms, provided such use does not involve redistribution to third parties or creation of VIDEO STANDARDS-c…
📍 Terms of Service › “NOTICES”Jump to exact text → - Commercial useconduct restrictions
“ii. Reverse Engineering. You may not use the AI services to discover any underlying components of the models, algorithms, and systems. For example, you may not try to determine and remove the weights of models or extract any parts of the AI services from your…”
Restricts users from using AI services to reverse-engineer underlying model components, algorithms, weights, or system architecture, prohibiting extraction of any AI service elements from the user's device or otherwise.
📍 Terms of Service › “AI Services”Jump to exact text → - Model trainingdoes-not-train
“iv. Limits on use of data from the AI Services. You may not use the AI services, or data from the AI services, to create, train, or improve (directly or indirectly) any AI technology.”
Prohibits users from using the AI services or data derived from them to create, train, or improve any AI technology, directly or indirectly, restricting competitive or derivative AI development using Microsoft's AI servi…
📍 Terms of Service › “AI Services”Jump to exact text → - Commercial useconduct restrictions
“ii. Bing Maps. You may not use Bird’s eye imagery of the United States, Canada, Mexico, New Zealand, Australia or Japan for governmental use without our separate written approval.”
Restricts use of Bing Maps Bird's eye imagery of specified countries for governmental purposes without separate written approval from Microsoft, imposing a specific geographic and use-based limitation.
📍 Terms of Service › “Bing and MSN”Jump to exact text → - Commercial useconduct restrictions
“iii. Extracting Data. Unless explicitly permitted, you may not use web scraping, web harvesting, or web data extraction methods to extract data from the AI services.”
Restricts users from employing web scraping, web harvesting, or data extraction methods to extract data from AI services unless explicitly permitted, limiting unauthorized data collection from the AI platform.
📍 Terms of Service › “AI Services”Jump to exact text →
+ 3 more verified clauses of this kind on this platform, cited in full in the report.
What the policies actually cover
11 topics- Product telemetry & usage tracking29 protective207 clauses
- Advertising & tracking10 protective62 clauses
- Sale or sharing of personal data3 protective3 clauses
- Sensitive data (biometric, location, health)10 protective28 clauses
- Children's data6 protective20 clauses
- Government & law-enforcement disclosure1 clause
- Data shared with other AI providers2 clauses
- Does not train on your content3 protective1 obligation4 clauses
- Trains by default, opt-out available1 clause
- Breach-notification promises4 protective5 clauses
- Conduct restrictions7 obligations7 clauses
163 further verified clauses are cited on this page but not yet assigned a topic.
Cross-clause notes
Verified training clauses point in different directions: the Privacy Policy, Privacy Policy › “Artificial Intelligence and Copilot capabilities” describes use of content for training or improvement, while the Privacy Policy, Privacy Policy › “Collection of data from children” states content is not used for training. The clauses may govern different products, tiers, or data categories — the documents' text alone does not resolve it. Surfaced as an ambiguity, treated as Caution.
Automated cross-reference against the published rubric — not legal advice.
Clause intelligence
Canonical clauses and stance patterns extracted from the same gate-verified citations shown on this page.
The clause restricts commercial use.
“f. Bing and MSN. i. Bing and MSN Materials. The articles, text, photos, maps, videos, video players, and third-party material available on Bing and MSN, including through Microsoft bots, applications and programs, are for your noncommercial, personal use only. Other uses, including downloading, copying, or redistributing these materials, or using these materials or products to build your own products, are permitte...”Open source citation
The clause restricts commercial use.
“a. If you comply with these Terms, we grant you the right to install and use one copy of the software per device on a worldwide basis for use by only one person at a time as part of your use of the Services. For certain devices, such software may be pre-installed for your personal, non-commercial use of the Services. The software or website that is part of the Services may include third-party code. Any third-party...”Open source citation
The clause restricts commercial use.
“h. Microsoft 365 Apps and Services. i. Use Terms. Microsoft 365 Family, Microsoft 365 Personal, Microsoft 365 Basic, Sway, OneNote.com and any other Microsoft 365 app or Service or Office-branded Service is for your personal, noncommercial use, unless you have commercial use rights under a separate agreement with Microsoft. Use of apps such as Word, Excel, PowerPoint, Outlook, OneDrive, Access, and Publisher in Mi...”Open source citation
The clause restricts commercial use.
“THIS PRODUCT IS LICENSED UNDER THE H.264/AVC, AND THE VC-1 PATENT PORTFOLIO LICENSES FOR THE PERSONAL AND NONCOMMERCIAL USE OF A CONSUMER TO (A) ENCODE VIDEO IN COMPLIANCE WITH THE STANDARDS ("VIDEO STANDARDS") AND/OR (B) DECODE H.264/AVC, AND VC-1 VIDEO THAT WAS ENCODED BY A CONSUMER ENGAGED IN A PERSONAL AND NONCOMMERCIAL ACTIVITY AND/OR WAS OBTAINED FROM A VIDEO PROVIDER LICENSED TO PROVIDE SUCH VIDEO. ...”Open source citation
The clause restricts commercial use.
“Stock quotes and index data (including index values). Financial information provided through the Services is for your personal, noncommercial use only. You may not use any of the finance data or marks of any third-party licensor in connection with the issuance, creation, sponsorship, trading, marketing, or promotion of any financial instruments or investment products (for example, indices, derivatives, structured ...”Open source citation
Tier matrix
Plan-level conditions detected from citation-backed clauses. Empty tiers mean AIRIN has not captured decisive tier language yet.
| Tier | Surface | Verdict | Risk | Citations |
|---|---|---|---|---|
| All applicable tiers | commercial use | conditional | MEDIUM | 15 |
| All applicable tiers | data retention | conditional | MEDIUM | 16 |
| All applicable tiers | governing law disputes | conditional | MEDIUM | 6 |
| Basic | commercial use | conditional | MEDIUM | 3 |
| Team / Business | commercial use | conditional | MEDIUM | 2 |
| Team / Business | data retention | conditional | MEDIUM | 7 |
| Team / Business | governing law disputes | conditional | MEDIUM | 1 |
Policy evolution
Open full timelineBefore/after stance changes across captured policy versions. When no material delta exists yet, AIRIN shows the latest citation-backed stance events instead.
model training worsened from low/no training claim to high/training permitted.
“iv. Limits on use of data from the AI Services. You may not use the AI services, or data from the AI services, to create, train, or improve (directly or indirectly) any AI technology.”Before citation
“Our processing of personal data involves both automated and manual (human) methods, which often work together. For example, to build, train, and improve the accuracy of our automated systems – such as AI - we manually review some of the results against the underlying data.”After citation
model training improved from high/training permitted to low/no training claim.
“Our processing of personal data involves both automated and manual (human) methods, which often work together. For example, to build, train, and improve the accuracy of our automated systems – such as AI - we manually review some of the results against the underlying data.”Before citation
“iv. Limits on use of data from the AI Services. You may not use the AI services, or data from the AI services, to create, train, or improve (directly or indirectly) any AI technology.”After citation
data sharing improved from high/sale or sell to medium/third party or vendor sharing.
“not collect or use student personal data beyond that needed for authorized educational or school purposes; not sell or rent student personal data; not use or share student personal data for advertising or similar commercial purposes, such as providing personalized advertising to students; not build a personal profile of a student, other than for supporting authorized educational or school purposes or as authorized by the parent, guardian, or student of appropriate age; and require that our vendors who receive student personal data in order to provide our educational services to implement these same commitments for student personal data.”Before citation
“When you submit feedback about a problem to Microsoft, diagnostic data is sent to help improve Microsoft products and services. The Feedback Hub will either send this data automatically or give you the option to send it, depending on your diagnostic data settings in the Diagnostics & feedback section of Windows settings. Additional personal data may be collected based on the type of feedback you provide to better troubleshoot specific issues – for example, location data when providing feedback about location services. Microsoft may also share your feedback and related data with partners, like device manufacturers or firmware developers to assist in resolving issues with products and services that work with Windows. Learn more about diagnostic data in Windows .”After citation
model training worsened from low/no training claim to high/training permitted.
“iv. Limits on use of data from the AI Services. You may not use the AI services, or data from the AI services, to create, train, or improve (directly or indirectly) any AI technology.”Before citation
“Our processing of personal data involves both automated and manual (human) methods, which often work together. For example, to build, train, and improve the accuracy of our automated systems – such as AI - we manually review some of the results against the underlying data.”After citation
data sharing worsened from medium/third party or vendor sharing to high/sale or sell.
“not collect or use student personal data beyond that needed for authorized educational or school purposes; not sell or rent student personal data; not use or share student personal data for advertising or similar commercial purposes, such as providing personalized advertising to students; not build a personal profile of a student, other than for supporting authorized educational or school purposes or as authorized by the parent, guardian, or student of appropriate age; and require that our vendors who receive student personal data in order to provide our educational services to implement these same commitments for student personal data.”After citation
model training improved from high/training permitted to low/no training claim.
“Provide our products, which includes updating, securing, and troubleshooting, as well as providing support and making recommendations. Improve and develop our products. As part of our efforts to improve and develop our products, we may use your data to develop and train our AI models. Learn more here . Advertise and market to you, which includes sending promotional communications, personalized advertising, and presenting relevant offers.”Before citation
“iv. Limits on use of data from the AI Services. You may not use the AI services, or data from the AI services, to create, train, or improve (directly or indirectly) any AI technology.”After citation
Latest stance: third party or vendor sharing on data retention
“A third-party account is a Microsoft account that you or your service provider (such as a cable or internet service provider) create that is tied to your email address with your service provider’s domain. Your service provider has control over your account, including the ability to access or delete your account. You should carefully review the terms the third party provided to you to help you understand what the service provider can do with your account and data.”Open timeline citation
Latest stance: third party or vendor sharing on subprocessors data sharing
“Emergency calling from the Skype Dial Pad in the United States. If you enable location sharing for emergency calling, your location will be periodically collected to enable Microsoft to share your location with emergency calling service providers if you dial 911. Your location information is only shared if you enable location sharing for emergency calling and you initiate a 911 call.”Open timeline citation
Latest stance: third party or vendor sharing on privacy data use
“We process your personal data with your consent and/or when it’s necessary to provide the products you use, operate our business, meet our contractual and legal obligations, protect the security and safety of our systems and our customers, or pursue our legitimate interests or those of third parties. Our reasons for using your data are described here and in the Reasons we disclose personal data section. Our legal basis for processing may vary depending on how and across what products or services we process your data. When we rely on legitimate interests, we consider and balance those interests against your rights and freedoms and will only process your data if these interests are not outweighed by your own.”Open timeline citation
Latest stance: third party or vendor sharing on subprocessors data sharing
“If you sign into a service offered by a third party with your Microsoft account, Microsoft shares account data with that third party according to the third party’s privacy policy.”Open timeline citation
Capture recency
- Privacy Policy:Last captured 2026-08-10· verified 2026-08-10
- Terms of Service:Last captured 2026-08-10· verified 2026-08-03
Dates state when our pipeline captured and verified each document — not when the vendor last changed it. Documents are re-scanned on a recurring cadence; a document verified once says so until a re-scan confirms it again.
↓ 28 fewer findings this quarter vs last (486 vs 514). First scan: June 2026.
Compare and stack are saved in your browser. Open compare · View your stack. A correction triggers an automated re-read of Bing Copilot's policies — no human edits the data.
Need this for procurement or legal diligence?
Free shows today's risk. A Stack Audit gives you a citable, verbatim-sourced PDF across your whole AI stack — and flags the moment a vendor's terms change.
Every finding above is a verbatim quote from Bing Copilot's own published policy, captured to an immutable snapshot and read in full through a two-gate verification pipeline. Confidence labels and any analysis are AI-generated and informational only — not legal advice.
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.