How to Keep Your Data Private in Microsoft Copilot

The short version

Turn off training, decide about memory, delete what you don’t need, and never paste what you wouldn’t email to a stranger. The rules differ by where you use Copilot: the Copilot app, Copilot inside Word and Excel, or Copilot at work.

Step by step

1. Turn off model training (Copilot app)

Microsoft’s help page lists the switches as Training on conversation activity and Training on voice conversations:

• Web: profile icon > your name > Privacy
• Windows or Mac app: profile icon > Settings > Privacy
• Phone app: menu > profile icon > Account > Privacy

Opting out covers future conversations. Microsoft notes these steps were written for the older version of the app (the updated app arrived on August 18, 2026), so if the menu has moved, look for Privacy in the app’s settings.

2. Decide about memory

Copilot can remember facts about you to personalize answers. To turn it off, open profile icon > your name > Memory and switch off Personalization and memory. To clear what it knows, choose Delete all Memory. Ask “What do you know about me?” to review it. Microsoft says you can opt out of training and keep personalization on; they’re separate switches.

3. Delete conversations

Microsoft keeps conversation activity for 18 months by default. Delete individual chats or your whole history when you no longer need them. Turning off personalization doesn’t delete history.

4. Know the differences

• Copilot in Word, Excel, PowerPoint, Outlook and OneNote at home: Microsoft says prompts, responses and file contents “aren’t used to train foundation models.”
• Work or school accounts: covered by Microsoft’s enterprise data protection, with your organization’s own retention and policies.
• Copilot Vision: Microsoft says screenshots and camera images aren’t stored after the session ends, though text transcripts may be.

Never paste

• Passwords, recovery codes or API keys
• Full card or bank numbers, Social Security or ID numbers
• Other people’s medical, legal or financial details
• Company documents you’re not allowed to share

Prompts to copy

Work with placeholders:

I've replaced names and amounts with [CLIENT], [AMOUNT] and [DATE]. Keep the placeholders in your answer.
[paste text]

Check memory:

What do you know about me? List everything you've remembered.

Mistakes to avoid

• Thinking opt-out covers the past. Microsoft’s FAQ says it applies to future conversations.
• Using a personal account for work files. Use your work account so company protections apply.
• Assuming deleted memory deletes chats. They’re separate.

Good to know

Personalized ads are a separate setting in your Microsoft account privacy dashboard, not in Copilot. Microsoft changes privacy menus often; if a path above doesn’t match, search Microsoft Support for “Copilot privacy controls.”

Related: use Copilot Chat at work and turn off Copilot.