{"author":{"@type":"Person","name":"Alexander Bock","url":"https://abxk.ai/en/autor/alexander-bock/"},"categories":["AI Security"],"content":{"markdown":"You type a question, press Enter and get an answer a few seconds later. It feels like a private conversation, almost like a note to yourself. In reality, your text has traveled to a data center. What happens to it there depends on the provider, your account and a few settings that many people never open.\n\nThis guide is part 3 of Level 0 in our AI Security learning path. It covers the second side of AI security from [part 1](/en/ai-security/learn/what-ai-security-means/): your data in AI tools. You will learn where your prompts go, how long chats are kept, when people or models see them, how business accounts differ from personal ones and what you should not share at all.\n\n## The journey of a prompt\n\nA **prompt** is everything you send to an AI tool: your question, your instructions and any file you upload. Its journey has four stops:\n\n1. **You type.** The prompt starts on your device, together with the earlier messages of the chat.\n2. **It travels encrypted.** The connection to the provider is encrypted, so nobody can read along on the way. On the provider's servers, however, the text is readable again; it has to be, or the model could not answer.\n3. **The model answers.** The model runs on the provider's computers, not on your phone or laptop. Automated systems also check many requests for abuse.\n4. **The chat is saved.** Most assistants keep the chat in your history so you can return to it. From there, copies can take other paths, depending on the provider and your settings.\n\n![The journey of a prompt: you type, it travels encrypted, the model answers and the chat is saved; from storage it can be kept for safety checks, read by reviewers or used for training, while deleting chats and turning off training are settings you control](/images/learn/en/what-happens-to-your-data-in-ai-chats-journey.webp \"The journey of a prompt. What happens after storage depends on the provider, your account and your settings.\")\n\n## How long your chats are kept\n\nYour chat history usually stays until you delete it, or until an automatic deletion period runs out, which some assistants let you set. Deleting removes the chat from your view at once; the provider removes it from its systems after a certain period. Two points surprise many people:\n\n- **\"Off the record\" is not zero.** Many assistants offer a temporary or incognito chat. OpenAI says temporary chats in ChatGPT do not appear in your history and are not used to train its models. But a copy may be kept for up to 30 days for safety reasons (Source: OpenAI Help Center, Temporary Chat, help.openai.com). Google keeps Gemini chats for 72 hours even when you have switched off the activity setting (Source: Gemini Apps Privacy Hub, support.google.com).\n- **Some copies stay longer.** Google states that Gemini chats that human reviewers have looked at are kept for up to three years, and that deleting your activity does not delete them (same source).\n\n## Human review and training\n\nTwo more things can happen to a saved chat. Both are normal practice, and both are worth knowing about.\n\n**Human review** means that trained people at the provider read a sample of conversations, for example to rate the quality of answers. Google states that a subset of Gemini chats is reviewed by humans, and it asks users not to enter confidential information that they would not want a reviewer to see.\n\n**Training** means that the provider uses conversations to improve future models. On personal accounts, this is often allowed by default or asked as a choice, and you can usually switch it off:\n\n- OpenAI may use content from ChatGPT on personal plans to train its models unless you opt out. If you rate an answer with thumbs up or down, the whole conversation may still be used, even after you opted out (Source: OpenAI, \"How your data is used to improve model performance\", openai.com).\n- Anthropic changed its consumer terms in 2025: users of Claude's personal plans choose whether their chats may be used for training. If they allow it, data is kept for up to five years; if not, for 30 days (Source: Anthropic, \"Updates to our consumer terms\", August 2025, anthropic.com).\n\nWhy does training matter for privacy? Research has shown that language models can memorize parts of their training data and repeat them word for word (Source: Carlini et al., \"Extracting Training Data from Large Language Models\", USENIX Security 2021). Providers filter their training data, but the safest text is the text you never pasted.\n\n{{\u003c callout type=\"warning\" \u003e}}\nTerms and settings change often, and every provider names them differently. The examples above describe what the providers state in their own help pages. Before you trust a tool with anything sensitive, open its privacy settings and read the current version yourself.\n{{\u003c /callout \u003e}}\n\n## Personal account, business account or your own computer\n\nThe same assistant can follow different rules depending on the account you use. OpenAI, for example, states that by default it does not train on data from ChatGPT Business, ChatGPT Enterprise or its API (Source: OpenAI, Business data privacy, openai.com). Anthropic's 2025 change does not apply to business plans or the API either.\n\n| Account type | Used for training? | Who controls the settings | Good for |\n|---|---|---|---|\n| Free or paid personal account | Often yes, unless you switch it off | You | Private use, no confidential work data |\n| Business or enterprise plan | Usually not by default; check the contract | Your company's admins | Work data that your company has approved |\n| API for developers | Usually not by default; short storage for abuse checks is common | The company that builds the app | Apps and automations built on a model |\n| Model on your own computer | No; nothing leaves your device unless the app sends it | You | Very sensitive text, offline work |\n\nTwo details matter at work. First, a business plan comes with a contract that says how the provider may process your company's data. In the EU, this is a **data processing agreement**, a contract required by the GDPR when a service provider handles personal data for you. Second, on a business account, your company's admins set the rules, and depending on the plan they can also access chat records, for example for compliance checks.\n\nThe last row of the table is an option, not a must. **Open-weight models** can be downloaded and run on your own hardware. Our [LLM database](/en/llm/) currently lists {{\u003c stat \"models-open\" \u003e}} models with open weights. Small ones run on a good laptop; large ones need strong graphics hardware.\n\nThe figure shows who can see a chat. The last layer depends most on you: a stolen login shows a stranger your entire chat history.\n\n![Seven layers of people and systems that can see a chat: you, the provider's automated systems, human reviewers, your company's admins, anyone with a shared link, connected apps and anyone with your login](/images/learn/en/what-happens-to-your-data-in-ai-chats-who-can-see.webp \"Who can see a chat. The lower layers apply only in some cases, but they are the ones people forget.\")\n\n## Settings worth checking\n\nEvery major assistant has a privacy or data section in its settings. The names differ, but the same six switches show up again and again. Part 4 of this level adds them to a complete [safety checklist for everyday AI users](/en/ai-security/learn/ai-safety-checklist-for-users/).\n\n![Six settings to check: chat history, model training, temporary chats, memory, connected apps and shared links, each with a sensible choice](/images/learn/en/what-happens-to-your-data-in-ai-chats-settings.webp \"Six settings worth checking in any AI assistant. The exact names differ from provider to provider.\")\n\nSome tools avoid the question entirely because they never upload your text. Our own [AI text detector](/en/ai-security/ai-text-detector/) analyzes text right in your browser. At the other end, companies that want to manage their AI tools centrally and securely use platforms such as Airia, according to the vendor. We have not tested the vendor tools.\n\n{{\u003c tools \"abxk-ai-text-detector airia\" \u003e}}\n\n## What to keep out of any AI chat\n\nSettings reduce the risk; they do not remove it. Some data does not belong in a chat with a public AI tool at all, no matter what the settings say:\n\n- **Passwords, access codes and keys.** No AI task needs them.\n- **Personal data of other people.** Customer lists, employee records, a friend's health story.\n- **Your own sensitive numbers.** Bank details, ID numbers, health data.\n- **Company secrets.** Unpublished figures, contracts, source code, strategy papers, unless your company has approved the tool for exactly this.\n\nOften you can get the same help without the real data: replace names with placeholders like \"Customer A\", round the numbers, or describe the problem instead of pasting the document. Level 1 goes into detail on [what not to paste into an AI tool](/en/ai-security/learn/what-not-to-paste-into-ai/), and our guide on [protecting personal data with AI tools](/en/ai-security/how-to-protect-personal-data-using-ai-tools/) shows techniques such as masking.\n\n## Practice: a five-minute privacy check\n\nPick the AI assistant you use most and work through these steps:\n\n1. **Open the settings** and look for a section called privacy, data controls or activity.\n2. **Decide on training.** If you do not want your chats to improve future models, switch it off. Note that this usually applies only to new chats.\n3. **Check the history and memory.** Delete old chats that contain personal details, and look at what the assistant has stored about you in its memory.\n4. **Review shared links.** Many assistants list the chat links you have shared. Delete the ones you no longer need.\n5. **Check connected apps.** Remove access to email, calendar or cloud storage that you do not actively use.\n6. **Write down one rule for yourself**, for example: \"Customer names never go into a personal AI account.\"","text":"You type a question, press Enter and get an answer a few seconds later. It feels like a private conversation, almost like a note to yourself. In reality, your text has traveled to a data center. What happens to it there depends on the provider, your account and a few settings that many people never open.\nThis guide is part 3 of Level 0 in our AI Security learning path. It covers the second side of AI security from part 1: your data in AI tools. You will learn where your prompts go, how long chats are kept, when people or models see them, how business accounts differ from personal ones and what you should not share at all.\nThe journey of a prompt A prompt is everything you send to an AI tool: your question, your instructions and any file you upload. Its journey has four stops:\nYou type. The prompt starts on your device, together with the earlier messages of the chat. It travels encrypted. The connection to the provider is encrypted, so nobody can read along on the way. On the provider\u0026rsquo;s servers, however, the text is readable again; it has to be, or the model could not answer. The model answers. The model runs on the provider\u0026rsquo;s computers, not on your phone or laptop. Automated systems also check many requests for abuse. The chat is saved. Most assistants keep the chat in your history so you can return to it. From there, copies can take other paths, depending on the provider and your settings. The journey of a prompt. What happens after storage depends on the provider, your account and your settings. How long your chats are kept Your chat history usually stays until you delete it, or until an automatic deletion period runs out, which some assistants let you set. Deleting removes the chat from your view at once; the provider removes it from its systems after a certain period. Two points surprise many people:\n\u0026ldquo;Off the record\u0026rdquo; is not zero. Many assistants offer a temporary or incognito chat. OpenAI says temporary chats in ChatGPT do not appear in your history and are not used to train its models. But a copy may be kept for up to 30 days for safety reasons (Source: OpenAI Help Center, Temporary Chat, help.openai.com). Google keeps Gemini chats for 72 hours even when you have switched off the activity setting (Source: Gemini Apps Privacy Hub, support.google.com). Some copies stay longer. Google states that Gemini chats that human reviewers have looked at are kept for up to three years, and that deleting your activity does not delete them (same source). Human review and training Two more things can happen to a saved chat. Both are normal practice, and both are worth knowing about.\nHuman review means that trained people at the provider read a sample of conversations, for example to rate the quality of answers. Google states that a subset of Gemini chats is reviewed by humans, and it asks users not to enter confidential information that they would not want a reviewer to see.\nTraining means that the provider uses conversations to improve future models. On personal accounts, this is often allowed by default or asked as a choice, and you can usually switch it off:\nOpenAI may use content from ChatGPT on personal plans to train its models unless you opt out. If you rate an answer with thumbs up or down, the whole conversation may still be used, even after you opted out (Source: OpenAI, \u0026ldquo;How your data is used to improve model performance\u0026rdquo;, openai.com). Anthropic changed its consumer terms in 2025: users of Claude\u0026rsquo;s personal plans choose whether their chats may be used for training. If they allow it, data is kept for up to five years; if not, for 30 days (Source: Anthropic, \u0026ldquo;Updates to our consumer terms\u0026rdquo;, August 2025, anthropic.com). Why does training matter for privacy? Research has shown that language models can memorize parts of their training data and repeat them word for word (Source: Carlini et al., \u0026ldquo;Extracting Training Data from Large Language Models\u0026rdquo;, USENIX Security 2021). Providers filter their training data, but the safest text is the text you never pasted.\n!Watch out\nTerms and settings change often, and every provider names them differently. The examples above describe what the providers state in their own help pages. Before you trust a tool with anything sensitive, open its privacy settings and read the current version yourself.\nPersonal account, business account or your own computer The same assistant can follow different rules depending on the account you use. OpenAI, for example, states that by default it does not train on data from ChatGPT Business, ChatGPT Enterprise or its API (Source: OpenAI, Business data privacy, openai.com). Anthropic\u0026rsquo;s 2025 change does not apply to business plans or the API either.\nWhat Happens to Your Data in an AI Chat Account type Used for training? Who controls the settings Good for Free or paid personal account Often yes, unless you switch it off You Private use, no confidential work data Business or enterprise plan Usually not by default; check the contract Your company\u0026rsquo;s admins Work data that your company has approved API for developers Usually not by default; short storage for abuse checks is common The company that builds the app Apps and automations built on a model Model on your own computer No; nothing leaves your device unless the app sends it You Very sensitive text, offline work Two details matter at work. First, a business plan comes with a contract that says how the provider may process your company\u0026rsquo;s data. In the EU, this is a data processing agreement, a contract required by the GDPR when a service provider handles personal data for you. Second, on a business account, your company\u0026rsquo;s admins set the rules, and depending on the plan they can also access chat records, for example for compliance checks.\nThe last row of the table is an option, not a must. Open-weight models can be downloaded and run on your own hardware. Our LLM database currently lists 172 models with open weights. Small ones run on a good laptop; large ones need strong graphics hardware.\nThe figure shows who can see a chat. The last layer depends most on you: a stolen login shows a stranger your entire chat history.\nWho can see a chat. The lower layers apply only in some cases, but they are the ones people forget. Settings worth checking Every major assistant has a privacy or data section in its settings. The names differ, but the same six switches show up again and again. Part 4 of this level adds them to a complete safety checklist for everyday AI users.\nSix settings worth checking in any AI assistant. The exact names differ from provider to provider. Some tools avoid the question entirely because they never upload your text. Our own AI text detector analyzes text right in your browser. At the other end, companies that want to manage their AI tools centrally and securely use platforms such as Airia, according to the vendor. We have not tested the vendor tools.\nABXK AI Text DetectorAI Detection · Statistics, no AI modelOur own free tool: estimates in the browser whether a text was written by AI. AiriaSecurity \u0026amp; Governance · AI at the coreOrchestration platform for enterprises to build and manage AI solutions securely. Short descriptions from our tool comparison, based on the vendors' information — not tested by ABXK.\nWhat to keep out of any AI chat Settings reduce the risk; they do not remove it. Some data does not belong in a chat with a public AI tool at all, no matter what the settings say:\nPasswords, access codes and keys. No AI task needs them. Personal data of other people. Customer lists, employee records, a friend\u0026rsquo;s health story. Your own sensitive numbers. Bank details, ID numbers, health data. Company secrets. Unpublished figures, contracts, source code, strategy papers, unless your company has approved the tool for exactly this. Often you can get the same help without the real data: replace names with placeholders like \u0026ldquo;Customer A\u0026rdquo;, round the numbers, or describe the problem instead of pasting the document. Level 1 goes into detail on what not to paste into an AI tool, and our guide on protecting personal data with AI tools shows techniques such as masking.\nPractice: a five-minute privacy check Pick the AI assistant you use most and work through these steps:\nOpen the settings and look for a section called privacy, data controls or activity. Decide on training. If you do not want your chats to improve future models, switch it off. Note that this usually applies only to new chats. Check the history and memory. Delete old chats that contain personal details, and look at what the assistant has stored about you in its memory. Review shared links. Many assistants list the chat links you have shared. Delete the ones you no longer need. Check connected apps. Remove access to email, calendar or cloud storage that you do not actively use. Write down one rule for yourself, for example: \u0026ldquo;Customer names never go into a personal AI account.\u0026rdquo; ","words":1534},"date":"2026-10-14","description":"Where your prompts go, how long chats are stored, when people read them or models learn from them, and how business accounts differ from personal ones.","image":"https://abxk.ai/images/cover/what-happens-to-your-data-in-ai-chats.webp","json":"https://abxk.ai/en/ai-security/learn/what-happens-to-your-data-in-ai-chats/index.json","kind":"page","language":"en","learning_path":{"category":"ai-security","level":0,"level_name":"Start here"},"modified":"2026-10-14","related_tools":["Airia","ABXK AI Text Detector","ChatGPT (GPT Image)","Google Gemini (Nano Banana)"],"section":"ai-security","tags":["data-privacy","ai-chatbots","data-retention","privacy-settings","beginner"],"title":"What Happens to Your Data in an AI Chat","translations":[{"json":"https://abxk.ai/de/ai-security/learn/what-happens-to-your-data-in-ai-chats/index.json","language":"de","url":"https://abxk.ai/de/ai-security/learn/what-happens-to-your-data-in-ai-chats/"}],"url":"https://abxk.ai/en/ai-security/learn/what-happens-to-your-data-in-ai-chats/"}