Microsoft Copilot · Covers Bing, Microsoft 365 Personal / Family, Microsoft Copilot, Microsoft Edge, Microsoft Teams, Minecraft, OneDrive, Outlook.com, Xbox Network
This is Bing's policy, which also covers Microsoft 365 Personal / Family, Microsoft Copilot, Microsoft Edge, Microsoft Teams, Minecraft, OneDrive, Outlook.com, and Xbox Network.
Snapshot of the source text at fetch time, not a live mirror of the policy page.
Plain-English summary
The Microsoft Privacy Statement indicates that users risk losing access to products and content purchased with work or school accounts if they leave their organization (risk_flags-1). Organizations control work or school accounts, accessing and processing associated data, and Microsoft is not responsible for these organizational privacy practices (risk_flags-3). Furthermore, using a work or school email for a personal Microsoft account may grant the organization access to that data. Third-party account providers can also control, access, or delete user accounts (risk_flags-5). Purchase receipts may be shared with others if a saved payment method is used by multiple account holders (risk_flags-6).
92% confidence
Ask Verbaterm
Follow up on findings with grounded answers from this review. Not legal advice.
Risk Flags
4 findings
Potential risks that could lead to significant user harm or unexpected outcomes.
high95% confidence
Loss of access to products and content purchased with a work or school account upon leaving the organization.
If a user loses access to their work or school account, for example by changing employers, they may also lose access to products or content purchased or accessed with that account.
Why it matters: Users might lose access to digital products, content, and data that they acquired or used through their work or school account if their affiliation with the organization ends.
If you lose access to your work or school account (for example, if you change employers), you may also lose access to products or content purchased or accessed with that account.
Microsoft account, paragraph 5 · Citation strength: strong
high90% confidence
Microsoft is not responsible for organizational privacy or security practices.
Microsoft states that it is not responsible for the privacy or security practices of organizations that provide work or school accounts, as these practices may differ from Microsoft's own standards.
Why it matters: Users bear the risk of their organization's privacy and security practices, which might not align with their expectations or Microsoft's standards.
Microsoft is not responsible for your organization’s privacy or security practices, which may differ from our own standards.
Microsoft account, paragraph 5 · Citation strength: strong
medium95% confidence
Third-party account providers can control and access or delete accounts.
A third-party account is a Microsoft account created by the user or their service provider, tied to their email address with the service provider's domain. The service provider has control over the account, including the ability to access or delete it.
Why it matters: Users of third-party Microsoft accounts have their account controlled by a service provider, who can access or delete the account, potentially leading to loss of access or privacy concerns.
A third-party account is a Microsoft account that you or your service provider (such as a cable or internet service provider) create that is tied to your email address with your service provider’s domain. Your service provider has control over your account, including the ability to access or delete your account.
Microsoft account, paragraph 7 · Citation strength: strong
medium90% confidence
Purchase receipts may be available to others sharing a saved payment method.
If a user saves a payment method (like a card) to an account used by them and other Microsoft account holders, their purchase receipts may be available to anyone else who uses and has access to the same payment method to make a purchase from Microsoft.
Why it matters: Users sharing a payment method with others on a Microsoft account may expose their purchase history to those other users, potentially revealing private spending habits.
If you save a payment method (such as a card) to an account used by you and other Microsoft account holders, your purchase receipts may be available to anyone else who uses and has access to the same payment method to make a purchase from Microsoft.
Reasons we disclose personal data, paragraph 4 · Citation strength: strong
Data Use
2 findings
Practices related to the collection, processing, and sharing of user data.
medium95% confidence
Data collection from affiliates, subsidiaries, and third parties.
Microsoft obtains data about users from Microsoft affiliates, subsidiaries, and third parties.
Why it matters: Microsoft collects data about users from various third-party sources, potentially expanding the scope of personal data collected beyond direct interactions.
We also obtain data about users from Microsoft affiliates, subsidiaries, and third parties.
Personal data we collect, paragraph 1 · Citation strength: strong
medium95% confidence
Combination of data from different contexts and third parties for various purposes.
Microsoft combines data collected from different contexts or obtained from third parties to provide a more seamless, consistent, and personalized experience, make informed business decisions, and for other legitimate purposes.
Why it matters: Microsoft consolidates data from various sources and third parties, potentially creating a comprehensive profile of user activities and preferences, which could be used for personalized experiences and business decisions.
We combine data collected from different contexts or obtained from third parties to give you a more seamless, consistent, and personalized experience, to make informed business decisions, and for other legitimate purposes.
Specifically, we use data to:, paragraph 6 · Citation strength: strong
Cancellation and Renewal
Not clearly stated
Terms related to subscription cancellation, auto-renewal, and associated refund policies.
?
Not clearly stated
No cited billing terms — wording is unclear
The document does not contain information about subscription cancellation, auto-renewal, or associated refund policies.
Gotchas
All clear
Potentially overlooked clauses that could disadvantage users.
✓
Looking good
No hidden gotchas
Verbaterm only flags concerns it can cite. Nothing easy-to-miss stood out in this section.
Protections
4 findings
Commitments and features that benefit user rights and privacy.
Protection95% confidence
Controls to limit or prevent certain types of data collection.
Users can use in-product controls, including those in their web browser or operating system, to limit or prevent certain types of data collection.
Why it helps: Users are empowered to manage their privacy by using built-in controls to restrict data collection, thereby enhancing their control over personal information.
You can also use in-product controls, including those in your web browser or operating system to limit or prevent certain types of data collection.
Personal data we collect, paragraph 2 · Citation strength: strong
Microsoft receives and responds to the Global Privacy Control (GPC) browser opt-out signal in certain jurisdictions, which will turn off sharing user data with third parties for personalized ads and disable the "Share my data with third parties for personalized ads" toggle.
Why it helps: Users can automatically signal their preference not to have their data shared for personalized ads using browser settings, simplifying the opt-out process and enhancing their privacy control.
Microsoft receives and responds to the Global Privacy Control (GPC) browser opt-out signal in certain jurisdictions. Microsoft will turn off sharing your data with third parties for personalized ads and turn off the “Share my data with third parties for personalized ads” toggle if we receive a GPC signal from you when you visit our sites.
How to access and control your personal data, paragraph 20 · Citation strength: strong
Protection90% confidence
Opt-out for personalized advertising.
Users can opt out of receiving personalized advertising from Microsoft, including Xandr, by visiting a dedicated page. When logged into a Microsoft account, this choice applies across devices. If not logged in, the preference is stored in a browser-specific cookie.
Why it helps: Users can control whether they receive personalized advertisements, reducing unwanted targeted ads and enhancing their privacy preferences for advertising.
To opt out of receiving personalized advertising from Microsoft (including Xandr) visit our Personalized ads and offers page . You can also see our third party ad partners and opt out of data sharing for personalized ads at our Third-party ad settings page . When you’re logged into your Microsoft account, your opt out choice will be associated with your account and applied across devices whenever you are signed in. If you are not signed in and choose to opt out, your preference is stored in a browser-specific cookie on your device, valid for five years; if you delete cookies, you must opt out again.
How to access and control your personal data, paragraph 14 · Citation strength: strong
Protection95% confidence
Ability to withdraw consent for personal data use.
If Microsoft obtained consent to use personal data, users can withdraw that consent at any time.
Why it helps: Users retain the right to revoke their consent for personal data usage, providing them with ongoing control and the ability to change their mind about data sharing.
If Microsoft obtained your consent to use your personal data, you can withdraw that consent at any time.
How to access and control your personal data, paragraph 6 · Citation strength: strong
Report an issue
Flag a citation problem, stale policy text, or incorrect company match.
Verbaterm boundaries
This public review is informational only and is not legal advice. Verbaterm shows only findings tied to the cited source snapshot above.