Cohere
Good disclosure · high confidence
Dealbreaker flag
- Trial-user and researcher inputs are used for research and model improvement with no opt-out; only enterprise customers can control training.
A full GDPR rights set with named transfer safeguards and a 30-day input retention figure, but the tier this policy governs (trial users and researchers) has its inputs and outputs used for research with no opt-out.
What the policy says
Trains on trial and research inputs with no opt-out for that tier
Section 2.3 says that for trial users and researchers Cohere collects the content you submit and the outputs generated and may use this input and output data to conduct research and development. Only enterprise users can control how Cohere trains on their data, so the tier this policy governs has no training opt-out. Cohere does say it takes steps to de-identify inputs and outputs before any research use.
30-day input retention named for the Platform
Section 4 states that retention of inputs and outputs on the Platform is generally 30 days for enterprise users, a concrete day-count figure, while general personal information is kept only as long as necessary for the purposes it was collected.
Full rights set with self-serve account deletion
Users get access, correction, deletion, portability in a structured and commonly-used format, objection, and restriction. Account deletion is self-serve through the Danger Zone tab in Your Profile, and the policy honors Global Privacy Control signals for sale and share opt-out.
Silent on breach notification
Section 4 on safeguards describes administrative, technical, and physical measures plus need-to-know access, but the policy states no breach notification commitment and no timeframe anywhere in the text.
Score by area
Details
- Category
- Model provider
- Modalities
- text
- Processes biometrics
- No
- Policy last updated
- 2026-05-01
- Region scored
- Global / US-default
- Assessed
- 2026-06-20
Each grade reflects our analysis of what an app states in its public privacy policy and terms as of the assessment date. It measures the transparency of those documents, not the company's actual data practices, security, or compliance. Grades are our opinion, offered for general information. Full disclaimer.