Guides

I Read the Privacy Policy of 19 AI Tools. Only 8 Will Tell You If They Train on Your Work.

I read the privacy policy, terms and help pages of 21 AI tools and asked one question of each: can you find out whether your own work is training the model? Eleven of the nineteen readable ones will not say.

Mahitosh DeyMahitosh Dey📅🔄Updated Nov 2, 2026⏱7 min read
I Read the Privacy Policy of 19 AI Tools. Only 8 Will Tell You If They Train on Your Work.
Guides

I Read the Privacy Policy of 19 AI Tools. Only 8 Will Tell You If They Train on Your Work.

Mahitosh Dey

By Mahitosh Dey · Independent opinion · No sponsored content · Affiliate disclosure

Gamma's help page says two things on the same screen.

For individuals on Free, Plus, Pro and Ultra: "Data is allowed to be used to train AI models." For Business and Enterprise accounts, the same data is "automatically excluded" and the setting is locked so nobody can switch it back on.

Same product. Same models. Opposite default. The only variable is what you pay.

I spent today reading the privacy policies, terms and help pages of 21 AI tools to find out how common that is. It is very common.

The one question I asked

For each tool: can a reader find out whether their own work is being used to train the model, without logging in and without emailing support?

Not "is it possible in theory." Not "what does the company say about security." Just: does the page tell you what is happening to your work right now.

Of the 21, I could read 19. OpenAI and Midjourney returned 403 from every page I tried, which is a bot wall rather than a dead site, so ChatGPT, the most used tool on the list, is missing from every count below. I am not filling that gap from memory.

Eight of the nineteen answer the question. Eleven do not.

The eight that answer

ToolWhat the page actually says
Grammarly"Product Improvement and Training is on for individual users by default"
Gamma"Default setting: Individuals (Free, Plus, Pro, and Ultra): Data is allowed to be used to train AI models"
Microsoft Copilottrains "except for certain categories of users or users who have opted out"
DeepLfree version is used "to train and improve our neural networks and algorithms"; Pro texts "will not be used"
Notion"By default, your customer data is not used to train models"
Cursor"We do not use Inputs or Suggestions to train our models"
Zoom"Zoom does not use any of your audio, video, chat, screen sharing, attachments" to train its or third-party models
Adobe"Adobe does not analyze your content to train generative AI models, unless you choose to submit content to the Adobe Stock marketplace"

Note what the clear answers have in common. Four of them are a no. The companies that do not train on you tend to say so in plain words, early, and without conditions. That turns out to be a useful signal on its own.

The eleven that do not

Gemini, Claude, Perplexity, Canva, Jasper, ElevenLabs, GitHub Copilot, Otter.ai, Descript, Runway and Suno.

Most of them are not hiding anything. They simply stop one sentence short. Runway's terms say "Inputs and Outputs may be used by the Company to train and improve its AI models." May. Suno says its data is used "to train and enhance the models that power our Services." Otter.ai describes "training our proprietary AI technology on de-identified audio recordings and on transcriptions." All true, none of it tells you whether it is happening to your account.

Gemini is the sharpest example. Google states clearly that with the Keep Activity setting on, "Google uses your activity to provide, develop, and improve its services (including training generative AI models)," and that with it off, future chats "won't be used to train our AI models." Both halves are documented. What Google never says, anywhere on that page, is whether Keep Activity is on or off when you start.

The part nobody has written down

Seven companies publish a different default for consumers than for business customers, on their own pages, in writing.

CompanyIf you are a freelancerIf you are an enterprise
Gammaon by default"automatically excluded", setting locked
Grammarly"on for individual users by default"off, "with no toggle visible"
ElevenLabsnot stated"By default, we don't train on any data from our Enterprise customers"
Anthropicused "unless you opt out""By default, we will not use your inputs or outputs from our commercial products"
Descriptused "unless you have opted out"Enterprise drives "disabled by default"
DeepLfree text trains the networksPro text "will not be used"
OpenAIcould not readAPI data "is not used to train or improve OpenAI models"

Seven out of seven run the same way round.

This is not a scandal and it is not illegal. Enterprise contracts are negotiated, and the people negotiating them ask this question. The point is narrower and worse: the protection exists, it works, it is already built, and whether you get it depends on which invoice you are on. A freelancer pasting a client's confidential brief into the Free tier and a company pasting the same brief into Enterprise are covered by opposite rules.

If you have ever signed an NDA and then used a free AI tool to do that work, this is the table to read twice.

Two companies contradict themselves

Anthropic. The privacy policy says: "We may use your Inputs and Outputs to train and improve Anthropic AI models, unless you opt out through your account settings." The consumer terms repeat it. Both read as on unless you act.

Anthropic's own consumer help article says the opposite. Training happens if "You choose to allow us to use your chats and coding sessions to improve Claude."

Opt out and choose to allow are opposite defaults. Both pages were live on 2 November 2026.

Descript. Its terms say content is used to train "unless you have opted out of such use." Its help article says internal research models use "only data from users who have opted into data sharing." Same contradiction, same day.

In both cases the answer probably exists inside the product, in a settings screen I would have to log in to see. That is the problem. You should not have to create an account to find out what the company will do with your work.

Six tools use your content and give you no switch

Perplexity, Otter.ai, Runway and Suno describe no training opt-out of any kind on the pages I read. Perplexity's privacy notice does carve out one thing: "We do not use the content of emails to create, train, improve, or fine-tune AI models." Your emails are protected. Your searches and uploads are not mentioned.

Jasper has an opt-out, but only if you live in the EU or UK, and it is not a setting. Its terms say you "submit a request by contacting [email protected]," after which Jasper "will cease using your Customer Property for model training and improvement."

For DeepL, the opt-out is to buy Pro.

Read Jasper's trust page slowly

It says: "Your company data and outputs are never used to train third-party LLMs."

Its terms say Jasper uses your input and output "for the purpose of developing and enhancing Jasper's artificial intelligence models."

Both sentences are true at once. The trust page is about other people's models. Jasper's own are a different sentence, in a different document, that the trust page does not link to. Nothing here is false. The word doing the work is "third-party," and it is doing a great deal of work.

Opting out is not an off switch

Two companies say so themselves.

Anthropic: even after you opt out, material is still used when a conversation is flagged for safety review or when you submit feedback, and feedback conversations are stored "for up to 5 years."

Google: "Your Gemini settings don't control processing of your chats to create anonymized data." And chats already seen by a human reviewer "are retained for up to three years" even after you delete your activity. Turning the setting off stops future chats. It does not reach back.

An opt-out narrows what happens to your work. On the evidence of these pages, it does not stop it.

Sometimes you cannot read the policy at all

Notion gave the clearest no-training statement in the whole audit. It is on a help-center page with no date on it. Notion's actual privacy policy, at notion.com/privacy, redirects to app.notion.com/privacy and returns 401 Unauthorized. You need an account to read the terms you are agreeing to.

Nine of the 21 companies blocked at least one page from automated reading. Gamma's privacy policy and terms both returned 403, so everything I know about Gamma comes from a help article. And then there is the staleness. Google's Generative AI Additional Terms page is still served, still says "Last Modified: August 9, 2023," and says on its own face that it stopped applying on 22 May 2024. GitHub's Copilot privacy documentation returns 404, and its Copilot product terms are marked "deprecated effective 5 March 2026" and are still the page you land on.

The two minute check, for any tool

Search the privacy policy for "train". Then search the terms for "train" separately. The answer often lives in only one of them. Jasper's privacy policy is silent on model training while its terms are explicit. Runway is the same. Reading one and not the other gets you the wrong answer.

Then search both for "default". This is the word that separates the eight from the eleven, and almost nobody uses it.

Check whether the sentence says "third-party". If a company promises not to train third-party models, it has told you nothing about its own.

If you cannot find a default stated anywhere, assume you are being trained on. The four companies that do not train on customer content all say so plainly and early. Silence is not neutral here.

Sourcing

Twenty-one AI tools, read on 2 November 2026. For each I read the privacy policy, the terms of service and the relevant help-center articles on the company's own domain, and asked the same question of every one, so the counts are comparable. Every quotation above came off a company page, not from reporting about it.

Read and counted (19): Claude, Gemini, Microsoft Copilot, Grammarly, Perplexity, Canva, Notion, Jasper, ElevenLabs, Cursor, GitHub Copilot, Otter.ai, Descript, Runway, Suno, Adobe, Zoom, Gamma, DeepL.

Could not be read (2): OpenAI and Midjourney returned 403 from every page tried, across help.openai.com, openai.com, docs.midjourney.com and midjourney.com. These are live pages behind bot walls, not dead ones. They are excluded from every count rather than guessed at. If you want ChatGPT's answer, the help article is titled "How your data is used to improve model performance" and opens fine in a normal browser.

Partial reads. Gamma's privacy policy and terms both returned 403, so its entry rests on a help article dated 24 September 2026. Notion's privacy policy returned 401, so its entry rests on an undated help page. GitHub's Copilot-specific privacy page returned 404, which is why GitHub Copilot sits in the eleven: the document that would answer the question is gone.

Policy dates, as published. Gemini 26 October 2026. Perplexity and Runway 23 October 2026. Cursor 11 October 2026. ElevenLabs 9 October 2026. Anthropic 10 September 2026. Zoom 17 September 2026. Microsoft September 2026. Canva 25 August 2026. Grammarly, now published under Superhuman Platform Inc., 6 July 2026. Suno 23 June 2026. Otter.ai 16 June 2026. Adobe 24 October 2025. Jasper 30 May 2025. Descript 14 April 2025.

Policies change, and the ones above were read on a single day. The method in the two minute check will outlast the table.

One last thing. The clearest, most complete, most plainly worded answer in this entire audit came from Notion, and you cannot read Notion's privacy policy without an account.

Tags:#ai-tools#freelancing#privacy

Frequently Asked Questions

Which AI tools train on your data?

Of 19 tools whose policies I could read on 2 November 2026, fourteen state that content you submit may be used to train or improve their models. Four say plainly that they do not: Notion, Cursor, Zoom and Adobe, with Adobe carving out content you submit to Adobe Stock. DeepL splits by plan, using free-version texts for training and stating that Pro texts are not. The harder problem is not finding out whether a tool can train on your work, it is finding out whether it currently is.

Does ChatGPT train on your conversations?

I could not verify this, and I am not going to assert it from memory. Every OpenAI page I tried returned 403 to automated reading, including the help article on how your data is used, the privacy policy and the row privacy policy. A 403 is a bot wall rather than a dead page, so the documents exist and I simply could not read them. The one OpenAI page I could read was the API guide, which states that data sent to the OpenAI API is not used to train or improve OpenAI models unless you opt in. That covers developers, not ChatGPT Free or Plus.

Do AI companies train on free users but not paying business customers?

Seven of them do, and they say so on their own pages. Gamma allows training for individuals on Free, Plus, Pro and Ultra while Business and Enterprise are automatically excluded with the setting locked. Grammarly is on by default for individuals and off with no toggle shown for Sales-purchased accounts. ElevenLabs states it does not train on Enterprise data by default. Anthropic says the same of its commercial products. Descript disables it by default on Enterprise drives. DeepL trains on free-version text and states Pro text is not used. The pattern is consistent enough that the cheapest tier is the one being trained on.

Can I stop an AI tool from training on my work?

Sometimes, and it depends more on which tool than on what you pay. Grammarly, Microsoft Copilot, Claude, Gemini, ElevenLabs, Descript, Gamma and Canva all have a control a normal user can click. Perplexity, Otter.ai, Runway and Suno describe no training opt-out at all on the pages I read. Jasper has one only for EU and UK users, exercised by emailing [email protected] rather than through a setting. For DeepL the practical opt-out is to buy Pro.

Is it safe to put client work into AI tools?

It depends on the tool and on what you signed. If you are under an NDA, the question is not whether the tool is reputable but whether its policy lets it keep and learn from what you paste. Four of the nineteen state outright that they do not train on customer content, which is the clearest position to work from. For the eleven that will not tell you the default, you cannot answer your client honestly, because the company has not answered you. Check the tool before the contract, not after.

What is the Product Improvement and Training setting in Grammarly?

It is the toggle that controls whether your text is used to train Grammarly's models, and Grammarly's own support article states it is on for individual users by default. Free and Premium users change it at account.grammarly.com/security/privacy. Single-user Pro users change it at account.grammarly.com/admin/data_settings. Accounts bought through the Sales team sit off by default with no toggle visible at all. Worth knowing: grammarly.com/privacy-policy now redirects to superhuman.com, because the company is Superhuman Platform Inc.

Does turning off AI training actually stop everything?

No, and two companies say so in writing. Anthropic states that even if you opt out it will still use material when a conversation is flagged for safety review or when you submit feedback, and that feedback conversations are stored for up to five years. Google states that your Gemini settings do not control processing of chats to create anonymized data, and that chats already seen by human reviewers are retained for up to three years even after you delete your activity. An opt-out narrows what happens to your work. It does not switch it off.

Which AI tools say they never train on your content?

Four, in their own words, read on 2 November 2026. Notion: by default neither Notion nor its AI providers use customer data to train any models. Cursor: it does not use inputs or suggestions to train its models, with exceptions for security review and explicit reports. Zoom: it does not use audio, video, chat, screen sharing or attachments to train its own or third-party models. Adobe: it does not analyse your content to train generative AI models unless you submit content to the Adobe Stock marketplace. Cursor's Privacy Mode is available on free as well as paid accounts.

How can I check an AI tool's training policy myself?

Search the privacy policy and the terms separately for the word train, because the answer often sits in only one of them. Jasper's privacy policy is silent on model training while its terms are not. Runway is the same. Then look for the word default, which is the one most policies avoid. If you cannot find a default stated anywhere, treat the tool as training on you until it says otherwise, because the companies that do not train on you tend to say so loudly.

Mahitosh Dey
Mahitosh DeyFounder, AI Vault

Mahitosh Dey is a developer, working since 2019, and the founder of AI Vault. He started using AI tools in his own projects in 2022 and has published 24+ hands-on reviews and tutorials here since. He writes mainly for content creators, freelancers, students, and IT beginners. He pays for Claude Code himself and uses free trials for the rest.

Keep Reading

Guides

I Compared 12 AI Pricing Pages to Their August Versions. Eight Had Not Moved a Cent.

Nov 3, 2026 · 7 min read

→
Guides

I Checked 250 Income Claims in 15 'Make Money With AI' Articles. 27 Had a Source.

Oct 29, 2026 · 7 min read

→
Guides

Grammarly Costs 2.5x More If You Pay Monthly. Ten Other Tools, Checked

Oct 27, 2026 · 11 min read

→
📬

Stay Ahead of AI

Get weekly reviews of the hottest AI tools, exclusive tutorials, and affiliate deals, straight to your inbox. No spam, unsubscribe anytime.

Free forever. Unsubscribe any time.

← Back to all posts