Skip to main content
Platform Review
PricingSign in
← All platforms
Enterprise Search / Productivity · bing.com

Bing Copilot

Graded against 804 verified platforms, from its own policy text. Automated assessment against a published rubric — not legal advice.

Overall riskHIGHReviewed 2026-08-10
Creator: medium · GRC: low · Counsel: low
creator band
Severe
enterprise · Severe
Dealbreaker · Output license-grab
Exhibit A · Privacy Policy · verbatim

Microsoft will only use your Microsoft Copilot conversations to monitor performance, troubleshoot problems, diagnose bugs, prevent abuse, and to provide and improve Microsoft Copilot. In certain markets, we use conversation data to train the generative AI models in Copilot, unless you choose to opt-out of such training. More information about how your data

highest-risk verified finding on training use — tap for the citation
503 verified findings5 policy surfaces2/2 core docs verified
Risk triage

Watch: Commercial use

Start here. These are the highest-risk verified clauses AIRIN found in the platform's own policy text.

0
high
202
medium
259
low
2/2
docs
Trains on your data?
Training possible — conditions or opt-outs apply
from 10 cited findings
Who owns outputs?
You own outputs — with license carve-outs
from 7 cited findings
Commercial use?
Commercial use allowed — with conditions
from 27 cited findings
Every rating:verbatim-citedsnapshot-datedchange-loggedHow we keep ratings honest →

How to read this page: Overall risk rates what Bing Copilot's own policy terms mean for your prompts, outputs, and data. The benchmark bands below grade those same verified terms relative to peers — a platform in a risky-by-default category can rate HIGH risk and still grade STRONG against its peer set. Both trace to the cited findings.

Creator lens
Your prompts, your outputs, your IP
SEVERE
Dealbreaker — Output license-grab. The platform claims a broad license over (or ownership of) what you create with it. see the clause
Dealbreaker — Third-party sublicensing. Rights in your content can be passed on to third parties beyond service operation. see the clause

Based on 860 verified, verbatim-cited findings below — read the citations.

Enterprise lens
Data use, retention, subprocessors, audit
SEVERE
Dealbreaker — Third-party sublicensing. Rights in your content can be passed on to third parties beyond service operation. see the clause

Based on 941 verified, verbatim-cited findings below — read the citations.

Automated assessment against a published rubric — not legal advice.

Fully verifiedEnterprise Search / Productivity

Fully verified — complete core corpus captured and read in full.

Document status
  • Privacy Policy
    Verified - read in full - 451 citationsstaticLast captured 2026-08-10
  • Terms of Service
    Verified - read in full - 52 citationsstaticLast captured 2026-08-10
Tier conditions

Only citation-backed plan differences are shown here; absent cells mean AIRIN has not verified a tier-specific claim.

plan language
Prompt / input ownership

Grants Microsoft a worldwide, royalty-free intellectual property license to use, copy, retain, transmit, reformat, display, and distribute user content to the extent necessary to provide and improve Microsoft products and services, including use in promotional materials, which may encompass training AI and other services.

" b. To the extent necessary to provide the Services to you and others, to protect you and the Services, and to improve Microsoft products and services, you grant to Microsoft a worldwide and royalty-free intellectual property license to use..."
📍 Terms of Service › “Your Content”Jump to exact text →
plan language
Output ownership

Grants Microsoft, its affiliates, and sublicensees a free, worldwide right to use, modify, reproduce, distribute, broadcast, share, and display user-submitted content and personal identifiers (name, gamertag, motto, avatar) posted to Xbox Services.

" iii. Your Content. As part of building the Xbox Services community, you grant to Microsoft, its affiliates and sublicensees a free and worldwide right to use, modify, reproduce, distribute, broadcast, share and display Your Content or your..."
📍 Terms of Service › “Xbox”Jump to exact text →
plan language
Commercial use

Restricts use of Skype to personal and noncommercial purposes, while granting a limited exception permitting use at work for the user's own business communications.

" v. Personal/Noncommercial Use. The use of Skype is for your personal and noncommercial use. You are permitted to use Skype at work for your own business communications."
📍 Terms of Service › “Skype, Microsoft Teams, and GroupMe”Jump to exact text →
plan language
Commercial use

Clarifies that the MPEG LA codec notice does not restrict normal internal business uses of the software under the Terms, provided such use does not involve redistribution to third parties or creation of VIDEO STANDARDS-compliant material for third-party distribution.

" For clarification purposes only, this notice does not limit or inhibit the use of the software provided under these Terms for normal business uses that are personal to that business which do not include (i) redistribution of the software t..."
📍 Terms of Service › “NOTICES”Jump to exact text →
plan language
Commercial use

Grants limited permission to copy and use any provided documentation for personal reference purposes, and imposes an obligation to comply with applicable technology control and export laws and regulations governing the application.

" 4. DOCUMENTATION. If documentation is provided with the application, you may copy and use the documentation for personal reference purposes. 5. TECHNOLOGY AND EXPORT RESTRICTIONS. The application may be subject to United States or i..."
📍 Terms of Service › “FOR APPLICATIONS OFFERED IN THE UNITED STATES”Jump to exact text →
plan language
Commercial use

Requires users who wish to broadcast using Skype or use Skype APIs to comply with separately referenced licensing terms, imposing compliance obligations as a condition of those use cases.

" iii. APIs or Broadcasting. If you want to use Skype in connection with any broadcast, you must comply with the "Broadcast TOS" at https://www.skype.com/go/legal.broadcast . If you want to use any application program interface ( "API" ) exp..."
📍 Terms of Service › “Skype, Microsoft Teams, and GroupMe”Jump to exact text →
plan language
Privacy & data use

This clause enumerates the specific circumstances—legal compliance, safety protection, security maintenance, and rights protection—under which Microsoft is obligated or permitted to retain and disclose personal data, including to law enforcement and government agencies.

" Comply with applicable law or respond to valid legal process, including from law enforcement or other government agencies. Protect the safety of our customers, organizations, and the public — for example, to prevent spam or attempts to de..."
📍 Privacy Policy › “Reasons we share personal data”Jump to exact text →
plan language
Privacy & data use

This segment describes how Copilot in Microsoft 365 uses LLM processing on user-provided content within Microsoft 365 apps, establishing the scope of data processing obligations for the Copilot AI feature under specific subscription tiers, and notes inapplicability to Office desktop licenses.

" Copilot in Microsoft 365 . The Copilot features that appear in Microsoft 365 apps as part of a Microsoft 365 Personal, Microsoft 365 Family, or Microsoft 365 Premium subscription provide AI-powered productivity capabilities through real-ti..."
📍 Privacy Policy › “Microsoft 365, Office, and other productivity apps”Jump to exact text →
Conflicting provisions (2)
  • Clause A describes 'Tailored experiences' (which include personalized suggestions and ads) as a general offering, while Clause B states that 'Personalized offers' (which are described identically) are only provided if the user explicitly chooses to turn them on.

    " Tailored experiences include suggestions on how to customize and optimize Windows, as well as ads and recommendations for Microsoft and third-party products and services, features, apps, and hardware for your Windows experiences. For example, to help you get the most out of your device, we may tell you about features you may not know about or that are new. If you are having a problem with your Windows device, you may be offered a solution. You may be offered a chance to customize your lock screen with pictures, or to be shown more pictures of the kind you like, or fewer of the ones you do not. If you stream movies in your browser, you may be recommended an app from the Microsoft Store that streams more efficiently. Or, if you are running out of space on your hard drive, Windows may recommend you try OneDrive or purchase hardware to gain more space. Learn more about tailored experiences in Windows ."
    " If you choose to turn on  Personalized offers , we will use information about your device and how you use it, including Windows diagnostic data, in combination with your account info and data collected by other Microsoft products and services to offer you personalized tips, ads, and recommendations to enhance your Windows experiences. Personalized offers include suggestions on how to customize and optimize Windows, as well as ads and recommendations for Microsoft and third-party products and services, features, apps, and hardware to enhance your Windows experiences. For example, Windows might tell you about new features to help you get the most out of your device. If you stream movies in your browser, Windows might recommend an app from the Microsoft Store that streams more efficiently. Or, if you are running out of space on your hard drive, Windows might recommend you try OneDrive or purchase hardware to add more storage."
    Within one document
  • Clause A states that if a device qualifies, Smart App Control is automatically enabled, whereas Clause B states 'Smart App Control is not enabled and', which directly opposes the automatic enablement for qualifying devices.

    " Where supported, Smart App Control helps check software that is installed and runs on your device to determine if it is malicious, potentially unwanted, or poses other threats to you and your device. On a supported device, Smart App Control starts in evaluation mode and the data we collect for Microsoft Defender SmartScreen such as file name, a hash of the file’s contents, the download location, and the file’s digital certificates, is used to help determine whether your device is a good candidate to use Smart App Control for additional security protection. Smart App Control is not enabled and will not block during evaluation mode. Some devices may not be good candidates if Smart App Control would otherwise get in the way and interfere with a user’s otherwise intended and legitimate tasks – for instance, developers who use a lot of unsigned files. If you are a good candidate for Smart App Control, then it will automatically be turned on, and will provide additional protection to your device beyond Microsoft Defender SmartScreen. Otherwise, Smart App Control will be unavailable and permanently turned off. If your device is unsupported or not a good candidate for Smart App Control, Microsoft Defender SmartScreen will continue to help protect your device. When Smart App Control is enabled and identifies an app as malicious, potentially unwanted, or unknown and unsigned, it will block and notify you prior to opening, running, or installing the app.  Learn more about Smart App Control ."
    Within one document

Evidence appendix

Showing priority citations first. The full appendix is available for audit trails; not every citation is a severe risk.

High - 0
Medium - 202
Tier-specific - 0
Total citations - 503
Severity
Surface
Document
Tier
Commercial use
High
" v. Personal/Noncommercial Use. The use of Skype is for your personal and noncommercial use. You are permitted to use Skype at work for your own business communications."
Terms of Service › “Skype, Microsoft Teams, and GroupMe”Jump to exact text →
Source: Terms of Service- Snapshot 2026-06-10- View source
Permalink to this finding →
Automated analysis

Restricts use of Skype to personal and noncommercial purposes, while granting a limited exception permitting use at work for the user's own business communications.

AI-generated interpretation, not legal advice.

Commercial use
High
" ii. Bing Maps. You may not use Bird’s eye imagery of the United States, Canada, Mexico, New Zealand, Australia or Japan for governmental use without our separate written approval."
Terms of Service › “Bing and MSN”Jump to exact text →
Source: Terms of Service- Snapshot 2026-06-10- View source
Permalink to this finding →
Automated analysis

Restricts use of Bing Maps Bird's eye imagery of specified countries for governmental purposes without separate written approval from Microsoft, imposing a specific geographic and use-based limitation.

AI-generated interpretation, not legal advice.

Privacy & data use
High
" If permitted by system settings, the system microphone may be used to capture the support question instead of your needing to type. You can control this in the “Microphone Privacy Settings” in the Windows Settings application. Get Help will also access your Application List to aid in opening the Feedback Hub to the correct app if you choose to start the feedback process within Get Help. All feedback will be entered and controlled by the Feedback Hub, as described in the Feedback Hub section of this Privacy Statement. Get Help does not use your location data as part of its services."
Privacy Policy › “Get Help”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-10- View source
Permalink to this finding →
Automated analysis

This segment restricts the use of microphone data to capturing support questions and clarifies that Get Help does not use location data, while also incorporating the Feedback Hub section's rules for feedback data handling, limiting the scope of data collection.

AI-generated interpretation, not legal advice.

Privacy & data use
High
" Advertising allows us to provide, support, and improve some of our products. Microsoft does not use what you say in email, human-to-human chat, video calls or voice mail, or your documents, photos, or other personal files to target ads to you. We use other data, detailed below, for advertising on our Microsoft properties and on third-party properties. For example:"
Privacy Policy › “Advertising”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-10- View source
Permalink to this finding →
Automated analysis

This segment restricts Microsoft from using email content, chat, video calls, voicemail, documents, photos, or personal files for ad targeting, while permitting use of other collected data for advertising on Microsoft and third-party properties.

AI-generated interpretation, not legal advice.

Privacy & data use
High
" For example, your gamertag and scores that show on game leaderboards are considered public and cannot be hidden. For other data, you can adjust your privacy settings on consoles and at  Xbox.com  to limit or block what is shared with the public or with friends."
Privacy Policy › “Customers of third-party services you’ve linked your profile to, or”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-10- View source
Permalink to this finding →
Automated analysis

Restricts certain data (leaderboard scores and gamertags) from being hidden while granting users the right to adjust privacy settings to limit other data sharing, balancing mandatory public disclosure with user control rights.

AI-generated interpretation, not legal advice.

Privacy & data use
High
" Finally, Microsoft products often contain web beacons or similar technologies from third-party analytics providers, which help us compile aggregated statistics about the effectiveness of our promotional campaigns or other operations. These technologies enable the analytics providers to set or read their own cookies or other identifiers on your device, through which they can collect information about your online activities across applications, websites, or other products. However, we prohibit these analytics providers from using web beacons on our sites to collect or access information that directly identifies you (such as your name or email address). You can opt out of data collection or use by some of these analytics providers by visiting any of the following sites:  Adjust ,  AppsFlyer ,  Clicktale ,  Flurry Analytics ,  Google Analytics  (requires you to install a browser add-on),  Kissmetrics ,  Mixpanel ,  Nielsen ,  Acuity Ads ,  WebTrends , or  Optimizely ."
Privacy Policy › “Our use of web beacons and analytics services”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-10- View source
Permalink to this finding →
Automated analysis

This clause restricts third-party analytics providers from using web beacons on Microsoft sites to collect or access information that directly identifies users, while permitting aggregated statistics collection for promotional campaign effectiveness.

AI-generated interpretation, not legal advice.

Privacy & data use
High
"For example, we may predict your interest in gaming and communicate with you about new games you may like. Advertising . Microsoft does not use what you say in email, human-to-human chat, video calls, or voice mail, or your documents, photos, or other personal files to target ads to you. We use data we collect through our interactions with you, through some of our first-party products, services, apps, and web properties (Microsoft properties), and on third-party web properties, for advertising on our Microsoft properties and on third-party properties. We may use automated processes to help make advertising more relevant to you. For more information about how your data is used for advertising, see the  Advertising  section of this privacy statement. Prize promotions and events . We use your data to administer prize promotions and events available in our physical Microsoft Stores. For example, if you enter into a prize promotion, we may use your data to select a winner and provide the prize to you if you win. Or, if you register for a coding workshop or gaming event, we will add your name to the list of expected attendees. Transacting commerce . We use data to carry out your transactions with us. For example, we process payment information to provide customers with product subscriptions and use contact information to deliver goods purchased from the Microsoft Store. Reporting and business operations . We use data to analyze our operations and perform business intelligence. "
Privacy Policy › “Purposes and legal bases for processing”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-10- View source
Permalink to this finding →
Automated analysis

This clause restricts Microsoft from using email, chat, video call, voice mail, documents, photos, or personal files to target advertisements, while permitting use of interaction data from Microsoft properties and third-party properties for advertising purposes.

AI-generated interpretation, not legal advice.

Privacy & data use
High
" For these purposes, we combine data we collect from different contexts (for example, from your use of two Microsoft products). For example, Microsoft Store uses information about the apps and services you use to make personalized app recommendations. However, we have built in technological and procedural safeguards designed to prevent certain data combinations where required by law. For example, where required by law, we store data we collect from you when you are unauthenticated (not signed in) separately from any account information that directly identifies you, such as your name, email address, or phone number."
Privacy Policy › “How we use personal data”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-10- View source
Permalink to this finding →
Automated analysis

Permits combining data across contexts for personalization while imposing a restriction requiring separation of unauthenticated user data from identified account data where required by law, establishing a procedural safeguard against unlawful data combination.

AI-generated interpretation, not legal advice.

Privacy & data use
High
" In some cases, your ability to access or control your personal data will be limited, as required or permitted by applicable law."
Privacy Policy › “How to access and control your personal data”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-10- View source
Permalink to this finding →
Automated analysis

This clause limits the scope of users' data access and control rights, stating they may be restricted as required or permitted by applicable law, qualifying the rights enumerated in surrounding segments.

AI-generated interpretation, not legal advice.

Privacy & data use
High
" Contextual data from your device and some basic account data are used to show you appropriate messaging in Windows regardless of whether the Personalized offers setting or the use of data from other Microsoft products to personalize offers are turned off. For example, this data is used to make sure content is in the correct language and appropriate for your age group."
Privacy Policy › “Personalized offers”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-10- View source
Permalink to this finding →
Automated analysis

This clause establishes an exception whereby contextual device data and basic account data are used for appropriate messaging (language, age-appropriateness) regardless of whether Personalized Offers or cross-product data use settings are turned off.

AI-generated interpretation, not legal advice.

Privacy & data use
High
" Desktop apps are a specific type of app whose location permissions are controlled through your Windows location settings and won’t appear in the list that allows you to choose those apps that can use your location. They can be downloaded from the Microsoft Store, downloaded from the internet, or installed with some type of media (such as a CD, DVD, or USB storage device).  Learn more about third-party desktop apps and how they may still be able to determine your device’s location when the device’s location setting is off ."
Privacy Policy › “Location services and recording”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-10- View source
Permalink to this finding →
Automated analysis

This segment identifies desktop apps as an exception to the standard location permission controls, explaining they are not listed in the location permissions interface and may still determine device location even when the setting is off.

AI-generated interpretation, not legal advice.

Privacy & data use
High
" If you add an account provided by an organization (such as your employer or school), the owner of the organizational domain can implement policies and controls (for example, requiring multi-factor authentication or the ability to remotely wipe data from your device) that can affect your use of Outlook."
Privacy Policy › “Outlook”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-10- View source
Permalink to this finding →
Automated analysis

This segment restricts user control over Outlook by noting that organizational account owners can implement policies affecting data handling and device access, which limits individual user rights in enterprise contexts.

AI-generated interpretation, not legal advice.

Prompt / input ownership
High
" b. To the extent necessary to provide the Services to you and others, to protect you and the Services, and to improve Microsoft products and services, you grant to Microsoft a worldwide and royalty-free intellectual property license to use Your Content, for example, to make copies of, retain, transmit, reformat, display, and distribute via communication tools Your Content on the Services. If you publish Your Content in areas of the Service where it is available broadly online without restrictions, Your Content may appear in demonstrations or materials that promote the Service. Some of the Services are supported by advertising. Controls for how Microsoft personalizes advertising are available at https://choice.live.com (https://go.microsoft.com/fwlink/?LinkId=286759). We do not use what you say in email, chat, video calls or voice mail, or your documents, photos or other personal files, to target advertising to you. Our advertising policies are covered in detail in the Privacy Statement."
Terms of Service › “Your Content”Jump to exact text →
Source: Terms of Service- Snapshot 2026-06-10- View source
Permalink to this finding →
Automated analysis

Grants Microsoft a worldwide, royalty-free intellectual property license to use, copy, retain, transmit, reformat, display, and distribute user content to the extent necessary to provide and improve Microsoft products and services, including use in promotional materials, which may encompass training AI and other services.

AI-generated interpretation, not legal advice.

Prompt / input ownership
High
" a. When you share Your Content with other people, you understand that they may be able to, on a worldwide basis, use, save, record, reproduce, broadcast, transmit, share and display Your Content for the purpose that you made Your Content available on the Services without compensating you. If you do not want others to have that ability, do not use the Services to share Your Content. You represent and warrant that for the duration of these Terms, you have (and will have) all the rights necessary for Your Content that is uploaded, stored, or shared on or through the Services and that the collection, use, and retention of Your Content will not violate any law or rights of others. Microsoft cannot be held responsible for Your Content or the material others upload, store or share using the Services."
Terms of Service › “Your Content”Jump to exact text →
Source: Terms of Service- Snapshot 2026-06-10- View source
Permalink to this finding →
Automated analysis

Imposes a representation and warranty obligation on users that they hold all necessary rights to content uploaded or shared, and informs users that sharing content grants other users broad worldwide rights to use, reproduce, and display that content without compensation, establishing the scope of user consent to third-party use.

AI-generated interpretation, not legal advice.

Output ownership
High
" vi. Skype Number/Skype To Go. If Skype provides you with a Skype Number or Skype To Go number, you agree that you do not own the number or have a right to retain that number forever. For more details on Skype Number see https://secure.skype.com/en/skype-number/ ."
Terms of Service › “Skype, Microsoft Teams, and GroupMe”Jump to exact text →
Source: Terms of Service- Snapshot 2026-06-10- View source
Permalink to this finding →
Automated analysis

Clarifies that users do not own or have a perpetual right to retain a Skype Number or Skype To Go number, disclaiming any ownership or retention rights in assigned telephone numbers.

AI-generated interpretation, not legal advice.

Training on your content
High
" Microsoft will only use your Microsoft Copilot conversations to monitor performance, troubleshoot problems, diagnose bugs, prevent abuse, and to provide and improve Microsoft Copilot. In certain markets, we use conversation data to train the generative AI models in Copilot, unless you choose to opt-out of such training. More information about how your data is protected and the controls we offer in Microsoft Copilot is available  here ."
Privacy Policy › “Artificial Intelligence and Copilot capabilities”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-10- View source
Permalink to this finding →
Automated analysis

Restricts use of Copilot conversation data to specified purposes (performance monitoring, troubleshooting, abuse prevention, service improvement) and conditions model training on conversation data on a market-specific basis with opt-out rights, creating both a use restriction and a training-use permission with procedural opt-out.

AI-generated interpretation, not legal advice.

Training on your content
High
" We will also use your conversation data to monitor performance, troubleshoot and fix bugs and issues, prevent abuse, and to provide and improve Microsoft Copilot. In some markets, this data can help train our AI models in Microsoft Copilot unless you opt out. Learn more about your choices and data protection here . Please also review the Transparency Note for Microsoft Copilot for information on our safety practices and our efforts to ensure that Copilot is consistent with our Responsible AI principles."
Privacy Policy › “Artificial Intelligence and Copilot capabilities”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-07-19- View source
Permalink to this finding →
Automated analysis

Permits Microsoft to use conversation data to monitor performance, fix bugs, prevent abuse, improve Copilot, and in some markets to train AI models, subject to an opt-out right; the opt-out mechanism is user-favorable but the default is a permission grant for training use.

AI-generated interpretation, not legal advice.

Training on your content
High
" When you opt in to share with us, SwiftKey collects device and usage data and uses de-identified device data, usage data, and model data to analyze service performance and improve products. You can also choose to share your SwiftKey language and typing data to help improve Microsoft products and services. If you opt in, SwiftKey may send short, de-identified snippets of what and how you type, along with related correction data to our servers for processing. These text snippets are used in automated processes to validate prediction services and enhance product features. To protect your privacy, these snippets are never linked to your SwiftKey account.  You can manage your choices at any time in SwiftKey Settings."
Privacy Policy › “SwiftKey”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-07-19- View source
Permalink to this finding →
Automated analysis

States that upon opt-in, SwiftKey collects device and usage data and may send de-identified snippets of typing and correction data to Microsoft servers; these snippets are used in automated processes to validate prediction services and enhance product features, conditioning data use for product improvement on user opt-in consent.

AI-generated interpretation, not legal advice.

Common questions about Bing Copilot's policies

Does Bing Copilot train its AI models on your data?
Training possible — conditions or opt-outs apply — based on 10 verified findings from Bing Copilot's published policy. Informational only, not legal advice.
Who owns the content you create with Bing Copilot?
You own outputs — with license carve-outs — based on 7 verified findings from Bing Copilot's published policy. Informational only, not legal advice.
Can you use Bing Copilot's output commercially?
Commercial use allowed — with conditions — based on 27 verified findings from Bing Copilot's published policy. Informational only, not legal advice.

Clause detail — protections, your obligations, and coverage

Every clause below is a verbatim quote from Bing Copilot's own published policy, read in full and linked to its exact location. Protections and user obligations are reported separately from risk because they are different kinds of clause — an obligation on you is not a risk to your data. Informational only, not legal advice.

✅ Protections found

98 verified clauses

Clauses in Bing Copilot's policies that work in your favour — commitments the platform made to you.

  • Privacy & data use
    Bing.  If you are signed into Bing, you can view and clear your stored search and chat history on your  privacy dashboard . If you are not signed into Bing, you can view and clear stored search history associated to your device in your  Bing settings . Micros…

    This clause describes specific procedures for accessing, viewing, clearing, and controlling personal data across Bing, Microsoft account, and MSDN products, detailing how users can exercise their data rights for each ser…

    📍 Privacy Policy › “How to access and control your personal data”Jump to exact text →
  • Privacy & data usesensitive data (biometric/location/health)
    Recall is a Windows feature only available in CoPilot+ PCs that allows users to find things they've seen on their device using the text and visual clues they remember. To use Recall, a user must opt-in to save snapshots on their Copilot+ PC, which are images o…

    This segment defines the Windows Recall feature, describing what data it collects (snapshots, metadata), how it is stored (locally, protected by Windows Hello ESS), and the opt-in requirement, establishing the foundation…

    📍 Privacy Policy › “Windows Recall”Jump to exact text →
  • Privacy & data usebreach notification promises
    Microsoft collects data necessary to provide features you request in Microsoft Edge. When signed into Microsoft Edge using your Microsoft personal account or work or school account, Microsoft Edge will sync your browser data saved on your device across other s…

    This segment establishes that when signed into Microsoft Edge, browsing data (favorites, history, extensions, passwords, payment info, etc.) will be synced across devices, and gives users the right to choose which data t…

    📍 Privacy Policy › “Microsoft Edge”Jump to exact text →
  • Privacy & data useads & tracking use
    You can choose whether you wish to receive promotional communications from Microsoft by email, SMS, physical mail, and telephone. If you receive promotional email or SMS messages from us and would like to opt out, you can do so by following the directions in t…

    This clause establishes users' right to opt out of promotional communications from Microsoft via email, SMS, physical mail, and telephone, and describes the procedures for managing those preferences through account setti…

    📍 Privacy Policy › “Your communications preferences”Jump to exact text →
  • Privacy & data useproduct telemetry/usage tracking
    Office Enterprise – Android Devices.  Link to Windows allows you to insert photos into web and desktop versions of select Microsoft 365 apps, such as PowerPoint, Excel, and Word directly from your mobile phone. This requires your IT Administrator to have enabl…

    Describes the procedure for using the Office Enterprise photo-insert feature, including IT administrator prerequisites, account association, and the 15-minute session limit for photo transfer, defining conditions and dat…

    📍 Privacy Policy › “Phone Link - Link to Windows”Jump to exact text →
  • Privacy & data useproduct telemetry/usage tracking
    Inking and typing Recognition . You also can choose to help Microsoft improve inking and typing recognition by sending inking and typing diagnostic data. If you choose to do so, Microsoft will collect samples of the content you type or write to improve feature…

    This clause permits Microsoft to collect inking and typing diagnostic data samples—when the user opts in—to improve handwriting recognition, autocompletion, and spelling features, while describing the processing procedur…

    📍 Privacy Policy › “Diagnostics”Jump to exact text →

+ 92 more verified clauses of this kind on this platform, cited in full in the report.

📋 Rules you must follow

8 verified clauses

What Bing Copilot requires of YOU. These are your obligations, not risks to your data or IP, so they are cited here and excluded from this platform's risk rating.

  • Commercial useconduct restrictions
    For clarification purposes only, this notice does not limit or inhibit the use of the software provided under these Terms for normal business uses that are personal to that business which do not include (i) redistribution of the software to third parties, or (…

    Clarifies that the MPEG LA codec notice does not restrict normal internal business uses of the software under the Terms, provided such use does not involve redistribution to third parties or creation of VIDEO STANDARDS-c…

    📍 Terms of Service › “NOTICES”Jump to exact text →
  • Commercial useconduct restrictions
    ii. Reverse Engineering. You may not use the AI services to discover any underlying components of the models, algorithms, and systems. For example, you may not try to determine and remove the weights of models or extract any parts of the AI services from your…

    Restricts users from using AI services to reverse-engineer underlying model components, algorithms, weights, or system architecture, prohibiting extraction of any AI service elements from the user's device or otherwise.

    📍 Terms of Service › “AI Services”Jump to exact text →
  • Model trainingdoes-not-train
    iv. Limits on use of data from the AI Services. You may not use the AI services, or data from the AI services, to create, train, or improve (directly or indirectly) any AI technology.

    Prohibits users from using the AI services or data derived from them to create, train, or improve any AI technology, directly or indirectly, restricting competitive or derivative AI development using Microsoft's AI servi…

    📍 Terms of Service › “AI Services”Jump to exact text →
  • Commercial useconduct restrictions
    ii. Bing Maps. You may not use Bird’s eye imagery of the United States, Canada, Mexico, New Zealand, Australia or Japan for governmental use without our separate written approval.

    Restricts use of Bing Maps Bird's eye imagery of specified countries for governmental purposes without separate written approval from Microsoft, imposing a specific geographic and use-based limitation.

    📍 Terms of Service › “Bing and MSN”Jump to exact text →
  • Commercial useconduct restrictions
    iii. Extracting Data. Unless explicitly permitted, you may not use web scraping, web harvesting, or web data extraction methods to extract data from the AI services.

    Restricts users from employing web scraping, web harvesting, or data extraction methods to extract data from AI services unless explicitly permitted, limiting unauthorized data collection from the AI platform.

    📍 Terms of Service › “AI Services”Jump to exact text →

+ 3 more verified clauses of this kind on this platform, cited in full in the report.

What the policies actually cover

11 topics
  • Product telemetry & usage tracking29 protective207 clauses
  • Advertising & tracking10 protective62 clauses
  • Sale or sharing of personal data3 protective3 clauses
  • Sensitive data (biometric, location, health)10 protective28 clauses
  • Children's data6 protective20 clauses
  • Government & law-enforcement disclosure1 clause
  • Data shared with other AI providers2 clauses
  • Does not train on your content3 protective1 obligation4 clauses
  • Trains by default, opt-out available1 clause
  • Breach-notification promises4 protective5 clauses
  • Conduct restrictions7 obligations7 clauses

163 further verified clauses are cited on this page but not yet assigned a topic.

Cross-clause notes

Ambiguity — Caution

Verified training clauses point in different directions: the Privacy Policy, Privacy Policy › “Artificial Intelligence and Copilot capabilities” describes use of content for training or improvement, while the Privacy Policy, Privacy Policy › “Collection of data from children” states content is not used for training. The clauses may govern different products, tiers, or data categories — the documents' text alone does not resolve it. Surfaced as an ambiguity, treated as Caution.

Automated cross-reference against the published rubric — not legal advice.

Clause intelligence

Canonical clauses and stance patterns extracted from the same gate-verified citations shown on this page.

2,547
clauses
348
patterns
348
stances
privacy sharing · 119dispute resolution · 40data retention · 23commercial use · 20ip ownership · 19ip license · 15
commercial useMEDIUMTerms of Service › “Bing and MSN”

The clause restricts commercial use.

f. Bing and MSN. i. Bing and MSN Materials. The articles, text, photos, maps, videos, video players, and third-party material available on Bing and MSN, including through Microsoft bots, applications and programs, are for your noncommercial, personal use only. Other uses, including downloading, copying, or redistributing these materials, or using these materials or products to build your own products, are permitte...
Open source citation
commercial useMEDIUMTerms of Service › “Software License”

The clause restricts commercial use.

a. If you comply with these Terms, we grant you the right to install and use one copy of the software per device on a worldwide basis for use by only one person at a time as part of your use of the Services. For certain devices, such software may be pre-installed for your personal, non-commercial use of the Services. The software or website that is part of the Services may include third-party code. Any third-party...
Open source citation
commercial useMEDIUMTerms of Service › “Microsoft 365 Apps and Services”

The clause restricts commercial use.

h. Microsoft 365 Apps and Services. i. Use Terms. Microsoft 365 Family, Microsoft 365 Personal, Microsoft 365 Basic, Sway, OneNote.com and any other Microsoft 365 app or Service or Office-branded Service is for your personal, noncommercial use, unless you have commercial use rights under a separate agreement with Microsoft. Use of apps such as Word, Excel, PowerPoint, Outlook, OneDrive, Access, and Publisher in Mi...
Open source citation
commercial useMEDIUMTerms of Service › “NOTICES”

The clause restricts commercial use.

THIS PRODUCT IS LICENSED UNDER THE H.264/AVC, AND THE VC-1 PATENT PORTFOLIO LICENSES FOR THE PERSONAL AND NONCOMMERCIAL USE OF A CONSUMER TO (A) ENCODE VIDEO IN COMPLIANCE WITH THE STANDARDS ("VIDEO STANDARDS") AND/OR (B) DECODE H.264/AVC, AND VC-1 VIDEO THAT WAS ENCODED BY A CONSUMER ENGAGED IN A PERSONAL AND NONCOMMERCIAL ACTIVITY AND/OR WAS OBTAINED FROM A VIDEO PROVIDER LICENSED TO PROVIDE SUCH VIDEO. ...
Open source citation
commercial useMEDIUMTerms of Service › “NOTICES”

The clause restricts commercial use.

Stock quotes and index data (including index values). Financial information provided through the Services is for your personal, noncommercial use only. You may not use any of the finance data or marks of any third-party licensor in connection with the issuance, creation, sponsorship, trading, marketing, or promotion of any financial instruments or investment products (for example, indices, derivatives, structured ...
Open source citation

Tier matrix

Plan-level conditions detected from citation-backed clauses. Empty tiers mean AIRIN has not captured decisive tier language yet.

TierSurfaceVerdictRiskCitations
All applicable tierscommercial useconditionalMEDIUM15
All applicable tiersdata retentionconditionalMEDIUM16
All applicable tiersgoverning law disputesconditionalMEDIUM6
Basiccommercial useconditionalMEDIUM3
Team / Businesscommercial useconditionalMEDIUM2
Team / Businessdata retentionconditionalMEDIUM7
Team / Businessgoverning law disputesconditionalMEDIUM1

Policy evolution

Open full timeline

Before/after stance changes across captured policy versions. When no material delta exists yet, AIRIN shows the latest citation-backed stance events instead.

worsenedhigh materialityAug 3Aug 3, 2026

model training worsened from low/no training claim to high/training permitted.

Before · low
iv. Limits on use of data from the AI Services. You may not use the AI services, or data from the AI services, to create, train, or improve (directly or indirectly) any AI technology.
Before citation
After · high
Our processing of personal data involves both automated and manual (human) methods, which often work together. For example, to build, train, and improve the accuracy of our automated systems – such as AI - we manually review some of the results against the underlying data.
After citation
improvedhigh materialityJul 20Aug 3, 2026

model training improved from high/training permitted to low/no training claim.

Before · high
Our processing of personal data involves both automated and manual (human) methods, which often work together. For example, to build, train, and improve the accuracy of our automated systems – such as AI - we manually review some of the results against the underlying data.
Before citation
After · low
iv. Limits on use of data from the AI Services. You may not use the AI services, or data from the AI services, to create, train, or improve (directly or indirectly) any AI technology.
After citation
improvedhigh materialityJul 19Jul 20, 2026

data sharing improved from high/sale or sell to medium/third party or vendor sharing.

Before · high
not collect or use student personal data beyond that needed for authorized educational or school purposes; not sell or rent student personal data; not use or share student personal data for advertising or similar commercial purposes, such as providing personalized advertising to students; not build a personal profile of a student, other than for supporting authorized educational or school purposes or as authorized by the parent, guardian, or student of appropriate age; and require that our vendors who receive student personal data in order to provide our educational services to implement these same commitments for student personal data.
Before citation
After · medium
When you submit feedback about a problem to Microsoft, diagnostic data is sent to help improve Microsoft products and services. The Feedback Hub will either send this data automatically or give you the option to send it, depending on your diagnostic data settings in the Diagnostics & feedback section of Windows settings. Additional personal data may be collected based on the type of feedback you provide to better troubleshoot specific issues – for example, location data when providing feedback about location services. Microsoft may also share your feedback and related data with partners, like device manufacturers or firmware developers to assist in resolving issues with products and services that work with Windows. Learn more about diagnostic data in Windows .
After citation
worsenedhigh materialityJul 19Jul 20, 2026

model training worsened from low/no training claim to high/training permitted.

Before · low
iv. Limits on use of data from the AI Services. You may not use the AI services, or data from the AI services, to create, train, or improve (directly or indirectly) any AI technology.
Before citation
After · high
Our processing of personal data involves both automated and manual (human) methods, which often work together. For example, to build, train, and improve the accuracy of our automated systems – such as AI - we manually review some of the results against the underlying data.
After citation
worsenedhigh materialityJul 19Jul 20, 2026

data sharing worsened from medium/third party or vendor sharing to high/sale or sell.

Before · medium
f. Transfer the application or this agreement to any third party.
Before citation
After · high
not collect or use student personal data beyond that needed for authorized educational or school purposes; not sell or rent student personal data; not use or share student personal data for advertising or similar commercial purposes, such as providing personalized advertising to students; not build a personal profile of a student, other than for supporting authorized educational or school purposes or as authorized by the parent, guardian, or student of appropriate age; and require that our vendors who receive student personal data in order to provide our educational services to implement these same commitments for student personal data.
After citation
improvedhigh materialityJul 19Jul 19, 2026

model training improved from high/training permitted to low/no training claim.

Before · high
Provide our products, which includes updating, securing, and troubleshooting, as well as providing support and making recommendations. Improve and develop our products. As part of our efforts to improve and develop our products, we may use your data to develop and train our AI models. Learn more here . Advertise and market to you, which includes sending promotional communications, personalized advertising, and presenting relevant offers.
Before citation
After · low
iv. Limits on use of data from the AI Services. You may not use the AI services, or data from the AI services, to create, train, or improve (directly or indirectly) any AI technology.
After citation
Aug 10, 2026data sharingMEDIUM

Latest stance: third party or vendor sharing on data retention

A third-party account is a Microsoft account that you or your service provider (such as a cable or internet service provider) create that is tied to your email address with your service provider’s domain. Your service provider has control over your account, including the ability to access or delete your account. You should carefully review the terms the third party provided to you to help you understand what the service provider can do with your account and data.
Open timeline citation
Aug 10, 2026data sharingMEDIUM

Latest stance: third party or vendor sharing on subprocessors data sharing

Emergency calling from the Skype Dial Pad in the United States. If you enable location sharing for emergency calling, your location will be periodically collected to enable Microsoft to share your location with emergency calling service providers if you dial 911. Your location information is only shared if you enable location sharing for emergency calling and you initiate a 911 call.
Open timeline citation
Aug 10, 2026data sharingMEDIUM

Latest stance: third party or vendor sharing on privacy data use

We process your personal data with your consent and/or when it’s necessary to provide the products you use, operate our business, meet our contractual and legal obligations, protect the security and safety of our systems and our customers, or pursue our legitimate interests or those of third parties. Our reasons for using your data are described here and in the Reasons we disclose personal data section. Our legal basis for processing may vary depending on how and across what products or services we process your data. When we rely on legitimate interests, we consider and balance those interests against your rights and freedoms and will only process your data if these interests are not outweighed by your own.
Open timeline citation
Aug 10, 2026data sharingMEDIUM

Latest stance: third party or vendor sharing on subprocessors data sharing

If you sign into a service offered by a third party with your Microsoft account, Microsoft shares account data with that third party according to the third party’s privacy policy.
Open timeline citation

Capture recency

  • Privacy Policy:Last captured 2026-08-10· verified 2026-08-10
  • Terms of Service:Last captured 2026-08-10· verified 2026-08-03

Dates state when our pipeline captured and verified each document — not when the vendor last changed it. Documents are re-scanned on a recurring cadence; a document verified once says so until a re-scan confirms it again.

↓ 28 fewer findings this quarter vs last (486 vs 514). First scan: June 2026.

Claim this profile

Compare and stack are saved in your browser. Open compare · View your stack. A correction triggers an automated re-read of Bing Copilot's policies — no human edits the data.

Need this for procurement or legal diligence?

Free shows today's risk. A Stack Audit gives you a citable, verbatim-sourced PDF across your whole AI stack — and flags the moment a vendor's terms change.

Every finding above is a verbatim quote from Bing Copilot's own published policy, captured to an immutable snapshot and read in full through a two-gate verification pipeline. Confidence labels and any analysis are AI-generated and informational only — not legal advice.

📢 POLICY UPDATES ALERT

AIRIN Brief

Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.