This article is about our consumer products such as Claude Free, Pro, Max and when accounts from those plans use Claude Code. For our commercial products such as Claude for Work and the Anthropic API, see here.
This article explains how to make a privacy rights request about personal data that may be contained in the material we use to develop and train our AI models - for example, data we obtain from public websites. If you are a Claude user and want information on how to change your model improvement privacy settings, see here.
Large language models such as Claude are ‘trained’ on a variety of content such as text, images, and multimedia so that they can learn the patterns and connections between words and content. When we gather this material we are not looking for information about particular individuals, but some of it will incidentally contain personal data; for example, names, contact information, and work or biographical details.
Under laws like the GDPR and UK GDPR, individuals have certain rights related to their personal data, such as the right to object to the processing of their personal data, or to request erasure or correction of their personal data. For more details, see our Non-User Privacy Policy.
If we incidentally collect personal data in our training data, we do not link it to a specific individual. Models do not store text like a database, and they do not have access to or pull from the original training data once the models have been trained. As a result, there are limitations on our ability to identify information from our training data that relates to a specific individual in response to a rights request.
We use techniques that can reduce the likelihood of data from our training data being reproduced by Claude. However, if you have a concern about your personal data being included in a response provided by Claude, you can contact us. To help us assess your request, please give us as much relevant detail as you can. This should include information such as your name, email address, screenshots or details of the response that shows your personal data, the prompt used, or the URLs referenced. We’ll consider the specific circumstances of your request in accordance with local legal requirements.
Privacy rights are not absolute and we may decline a request if we have a lawful reason for doing so, for example if there is a public interest in the information staying available. If you feel we have not adequately addressed your request, you have the right to lodge a complaint with your local supervisory authority.