AI Privacy Audit March 2026: Who Gets Your Data and How to Opt Out

Every major AI chatbot now trains on your conversations by default. Here's what each platform collects and step-by-step instructions to protect yourself.

Digital padlock icon glowing on a circuit board representing data security

Every major AI assistant trains on your conversations by default. The companies behind ChatGPT, Gemini, Copilot, and others have built their default settings to harvest your prompts, questions, and uploads—unless you explicitly tell them not to.

I reviewed the current privacy policies and data practices of eight major AI platforms to find out exactly what they collect, how long they keep it, and whether you can stop them.

The Quick Summary

PlatformTrains by DefaultCan Opt OutData RetentionHuman Review
ChatGPTYesYes30 days (minimum)Yes
ClaudeHybridYes30 days or 5 yearsYes
GeminiYesYes3-36 monthsYes
CopilotNo (M365)N/APer complianceLimited
PerplexityYesYesVariesYes
DeepSeekYesNoIndefiniteYes
Grok (X)YesYesUnknownUnknown
Meta AIYesLimitedIndefiniteYes

ChatGPT (OpenAI)

What they collect: All conversations, uploaded files, images you generate, and custom GPT configurations.

Training default: Your data trains their models unless you opt out. Even if you opt out, conversations are retained for at least 30 days for “safety and abuse monitoring.”

Human access: OpenAI staff can review conversations for safety purposes.

How to Opt Out of ChatGPT Training

On desktop:

  1. Click your profile icon
  2. Select “Settings”
  3. Go to “Data Controls”
  4. Toggle off “Improve the Model for Everyone”

On mobile:

  1. Tap the two horizontal lines (top-left)
  2. Scroll down and tap your account name
  3. Select “Data Controls”
  4. Turn off the training toggle

Alternative: Use “Temporary Chat” mode (toggle at the top of new chats). These conversations aren’t used for training but are still kept for 30 days.

Claude (Anthropic)

What they collect: Conversations, uploaded documents, and any files you share.

Training default: Anthropic shifted to an opt-in/opt-out hybrid in September 2025. If you don’t respond to policy update prompts, the default becomes consent. Opting in extends retention from 30 days to 5 years—a 60x increase.

Human access: Anthropic staff can access conversations for safety and quality purposes.

How to Opt Out of Claude Training

  1. Open Claude (web or mobile)
  2. Go to Settings
  3. Find “Privacy” or “Model improvement” section
  4. Set the training toggle to Off

Note: Claude’s paid tiers (Pro, Team) don’t use conversations for training by default.

Gemini (Google)

What they collect: Conversations, uploaded images, voice queries, and—critically—integrates this with your broader Google data including search history, Gmail, and YouTube activity.

Training default: Conversations are saved for 18 months by default (adjustable to 3 or 36 months) and are used to improve models. Human reviewers may examine your conversations.

How to Opt Out of Gemini Training

  1. Go to Gemini
  2. Click “Activity” (now called “Keep Activity” as of August 2025)
  3. Choose “Turn Off”
  4. Select “Turn Off and Delete Activity”
  5. Click Next, then Delete

Alternative: Gemini now has “Temporary Chat” mode similar to ChatGPT—these sessions aren’t saved or used for training.

Microsoft Copilot

What they collect: Prompts and responses within M365 Copilot.

Training default: Microsoft 365 Copilot works within your existing Microsoft compliance framework. Prompts and responses are not used to train public AI models.

Copilot Training Settings

For consumer Copilot (free):

  1. Click your profile icon
  2. Select your account name
  3. Go to “Privacy”
  4. Turn off “Model Training on Text” and “Model Training on Voice”

Enterprise M365 Copilot doesn’t require opt-out—it’s excluded from training by design.

Perplexity

What they collect: Search queries, conversation history, and any follow-up questions.

Training default: Free and Pro users have AI Data Retention enabled by default. Your data can be used for model training unless you opt out.

How to Opt Out of Perplexity Training

  1. Log into your account
  2. Go to Settings
  3. Find the AI training opt-out toggle
  4. Disable it

Important: Previous data may still be retained even after opting out. Enterprise and API users have stronger protections—Perplexity maintains a “Zero Data Retention Policy” for the Sonar API.

DeepSeek

What they collect: Everything. Account details, all inputs (text, audio, prompts, files), device data, IP addresses, and—uniquely concerning—keystroke patterns and typing rhythms.

Training default: Yes, and there’s no way to opt out.

Storage location: All user data is stored on servers in the People’s Republic of China.

Human access: Conversations can be reviewed by staff.

DeepSeek Privacy Status

You cannot opt out of DeepSeek using your data for training. Any prompt you submit may be used to refine future models. The collection of behavioral biometrics (keystroke patterns) is particularly invasive—typing rhythm is unique to each person, like a fingerprint.

If privacy matters to you, don’t use DeepSeek’s cloud service. If you need their models, run them locally through Ollama or another local inference setup.

Grok (X/Twitter)

What they collect: Your X posts, direct messages to Grok, and interaction patterns.

Training default: Yes. X’s terms allow Grok to train on your posts unless you opt out. The January 2026 terms update treats all prompts and outputs as “Content” under the platform’s licensing framework.

How to Opt Out of Grok Training

  1. Go to X Settings
  2. Select “Privacy and Safety”
  3. Click “Grok & Third-party Collaborators”
  4. Uncheck the training box

Note: Opting out only affects future data. Past posts may have already been ingested.

Meta AI (Facebook/Instagram/WhatsApp)

What they collect: Public posts, comments, likes, AI chat interactions, and profile information across Facebook, Instagram, Messenger, and WhatsApp.

Training default: Yes. As of December 2025, Meta’s privacy policy explicitly allows using AI chat interactions to personalize recommendations and deliver targeted ads, plus train their Llama models.

How to Object to Meta AI Training

Meta doesn’t offer a simple toggle. You must submit an “objection request”:

On Facebook:

  1. Go to your profile
  2. Click Settings and Privacy
  3. Scroll to “More info and support”
  4. Click “About,” then “Privacy policy”
  5. Find “Learn more about your right to object”
  6. Fill out the form explaining how the processing impacts you

On Instagram:

  1. Tap your profile icon
  2. Open the menu (top right)
  3. Go to “More info and support” → Privacy Center
  4. Select “AI at Meta”
  5. Tap “Submit an objection request”
  6. Complete the form

Critical limitations:

  • Meta must accept your objection before it’s honored
  • Your objection doesn’t cover photos others post of you
  • US users have no real opt-out option
  • European users had a deadline that passed in May 2025

What This Means

The trend is clear: default settings favor data collection. Every platform has made it harder, not easier, to protect your privacy over the past year. Claude’s shift to an opt-in hybrid model, Meta’s expanding scope, and DeepSeek’s complete lack of controls show where things are heading.

Even when you opt out, minimum retention periods mean your data sits on company servers for weeks to months. Human reviewers at every major company can read your conversations. And opting out today doesn’t erase yesterday’s data.

What You Can Do

Immediate actions:

  1. Go through each platform you use and check/change settings now
  2. Use “Temporary Chat” modes when available for sensitive queries
  3. Review your settings quarterly—companies rename and reset these controls without notice

Never paste into any cloud AI:

  • Passwords, API keys, or 2FA codes
  • Credit card or bank account numbers
  • Unpublished legal, medical, or financial records
  • Trade secrets or unreleased product information

For maximum privacy:

  • Run models locally using Ollama, LM Studio, or similar tools
  • Use Claude Pro or Team tiers (training opt-out by default)
  • Consider Microsoft 365 Copilot for work (enterprise compliance)
  • Avoid DeepSeek’s cloud service entirely

The most private choice among cloud services remains Claude with training disabled, followed by ChatGPT with training disabled and Temporary Chat enabled. But “most private” is relative—if your data truly can’t be shared, don’t type it into any cloud AI service.