Chatbots compared on privacy

Using AI assistants safely

ChatGPT, Gemini, Perplexity and Mistral Vibe train on your chats by default. Claude, Duck.ai, Brave Leo and Proton Lumo do not. Copilot in the Microsoft 365 apps does not either. ChatGPT, Gemini and Mistral Vibe let you switch it off.

Which AI trains on your chats?

Trains by default.
Whether the provider uses your chats to improve its models while you do nothing.
Where to switch it off.
The page or the menu that holds the setting.
Temporary chat.
A chat that stays out of your history and out of training.
How long it is kept.
The term the provider names for keeping what you type.
Where it runs.
The country or region the provider names for its servers.
Free version.
Whether you can use the assistant without paying.
AssistantTrains by defaultWhere to switch it offTemporary chatHow long it is keptWhere it runsFree version
ChatGPTYes, until you switch it offprivacy.openai.com under "do not train on my content"Yes. A Temporary Chat is left out of trainingnot statednot statedYes, there is a Free plan
ClaudeNo, only when you allow itNothing to switch off. Check Settings > Privacy > "Help Improve our AI models"not statedDeleted chats leave back-end storage within 30 days. With training allowed they are kept de-identified for up to 5 yearsnot statedYes, there is a Free plan
GeminiYes, as long as Keep Activity is onTurn off Keep Activity at myactivity.google.com/product/geminiYes. With Keep Activity off or in a temporary chat it is kept 72 hours18 months by default. 72 hours with Keep Activity off. Chats a reviewer has read are kept up to 3 yearsnot statedYes, there is a free plan
Microsoft Copilot (in the Microsoft 365 apps)NoNothing to switch offnot statednot statednot statedThe separate Copilot app is free with ads. Copilot in the Office apps needs a paid Microsoft 365 plan
PerplexityYes, according to its privacy policyNo switch is described in the privacy policynot statedAs long as needed. The policy names no fixed termnot statedYes, there is a free tier
Duck.ai (DuckDuckGo)NoNothing to switch offnot statedChats sit on your own device. Model providers delete what they receive within 30 days. Shared chat links go after 30 daysCloud providers of DuckDuckGo. The country is not namedYes, free and without an account
Brave LeoNoNothing to switch off. Clear the local history at brave://settings/leo-ainot statedNot stored on Brave servers. Large prompts sit in cache for minutes. The local history stays encrypted on your devicenot statedYes, with a daily prompt limit and no account
Mistral Vibe (formerly Le Chat)Yes, until you switch it offIn the app under Settings > Data & Account Controls, turn off "Enable data sharing"not statedNo term for chats is namedThe European Union by default. A US endpoint is optionalYes, a Free plan with a message limit
Lumo (Proton)NoNothing to switch offnot statedNot stated. Saved chats are zero-access encrypted so Proton cannot read themEurope, on servers Proton runs itselfYes, a Free plan without a card

For your business

What each provider says about staff input on a business plan. Whether it trains on it, what an administrator can set and where the data sits.

  • ChatGPT Business does not train on your business data by default. OpenAI supports a data processing addendum.
  • Claude Team does not train on your content by default, but the data is stored in the United States.
  • Microsoft 365 Copilot Business keeps EU traffic inside the EU Data Boundary. Models from Anthropic are currently outside it.
  • Gemini in Google Workspace does not train on your content without permission. You can pick the EU for storage.
  • Mistral Vibe Team trains on your input by default, so an administrator has to switch that off.
  • Lumo Professional keeps your conversations confidential, and Proton runs it from Europe rather than the United States.
AssistantPlanTrains on your business dataWhat an admin can setWhere the data sits
ChatGPT BusinessBusiness (Standard seat), from 2 usersNo, not by defaultA data processing addendum is available for enterprise data handlingStorage in Europe is named for Enterprise, Edu, Healthcare and the API. Business is not on that list
Claude TeamTeam (Standard seat), from 2 usersNo, not by defaultThe data processing addendum sits in the commercial terms of serviceData is stored in the US. A choice of location is named for the API and Enterprise only
Microsoft 365 Copilot BusinessCopilot Business add-on to an eligible Microsoft 365 planNoMicrosoft points to its Data Protection Addendum and the product termsEU traffic stays inside the EU Data Boundary. Models from Anthropic are currently outside it
Gemini in Google WorkspaceBusiness Starter, Standard or PlusNo, not without permissionThe privacy hub points to the Cloud Data Processing AddendumYou can pick the EU or the US. Google does not say which plans carry that choice
Mistral Vibe TeamTeam (formerly Le Chat Team)Yes by default. An administrator can switch it off for the whole organisationTurn off "Allow your interactions to be used to train our models" in admin.mistral.aiThe European Union by default
Lumo Professional (Proton)Lumo ProfessionalNoProton has one data processing agreement for its servicesEurope and Switzerland. Proton AG sits in Switzerland and that is outside the EU

Two assistants, side by side

Frequently asked questions

Does ChatGPT train on my chats?

Yes, until you switch it off. OpenAI writes that ChatGPT improves by training on the conversations people have with it. That happens unless you opt out. The switch sits at privacy.openai.com.

Which AI assistants do not train on your chats?

Claude, Duck.ai, Brave Leo and Proton Lumo leave your chats out of training by default. Copilot in the Microsoft 365 apps does the same. Brave writes that it does not use your conversations for model training. Claude trains only when you allow it.

How long does Gemini keep my chats?

Gemini keeps your activity for 18 months by default. With Keep Activity off it is 72 hours. Chats that a human reviewer has read are kept for up to three years.

Is Proton Lumo free?

Yes, Lumo has a Free plan and it needs no card. Proton runs the models on servers it controls in Europe. Saved chats are zero-access encrypted and Proton cannot read them.

Looking for protection instead of a chatbot? Every service we look at, by what it protects.All providers

Where we earn from a click, it says so under the button.