Your privacy is important to us. This privacy statement explains what personal data Microsoft collects from you, through our interactions with you and through our products, and how we use that data.
Microsoft offers a wide range of products, from server products used to help operate enterprises worldwide, devices you use in your home, software students use at school, and services developers use to create and host whats next. References to Microsoft products in this statement include Microsoft services, websites, apps, software, servers and devices.
Please read the product-specific details in this privacy statement, which provide additional information about some of Microsoft products. This statement applies to Microsofts interactions with you and the Microsoft products listed below, as well as other Microsoft products that display this statement.
The most recent version of this privacy statement can be found at aka.ms/privacy.
Microsoft adheres to the principles of the EU-U.S. and Swiss-U.S. Privacy Shield frameworks. To learn more,Click here.
Personal Data We CollectPersonal Data We CollectmainpersonaldatawecollectSummary
Microsoft collects data to operate effectively and provide you the best experiences with our products. You provide some of this data directly, such as when you create a Microsoft account, administer your organizations licensing account, submit a search query to Bing, register for a Microsoft event, speak a voice command to Cortana, upload a document to OneDrive, purchase an MSDN subscription, sign up for Office 365, or contact us for support. We get some of it by recording how you interact with our products by, for example, using technologies likecookies, and receiving error reports or usage data from software running on your device. We also obtain data from third parties.
Microsoft collects data to operate effectively and provide you the best experiences with our products. You provide some of this data directly, such as when you create a Microsoft account, administer your organizations licensing account, submit a search query to Bing, register for a Microsoft event, speak a voice command to Cortana, upload a document to OneDrive, purchase an MSDN subscription, sign up for Office 365, or contact us for support. We get some of it by recording how you interact with our products by, for example, using technologies likecookies, and receiving error reports or usage data from software running on your device.
We also obtain data from third parties. We protect data obtained from third parties according to the practices described in this statement, plus any additional restrictions imposed by the source of the data. These third-party sources vary over time, but have included:
Data brokers from which we purchase demographic data to supplement the data we collect.
Social networks when you grant permission to a Microsoft product to access your data on one or more networks.
Service providers that help us determine a location based on your IP address in order to customize certain products to your location.
Partners with which we offer co-branded services or engage in joint marketing activities, and
Publicly-available sources such as open government databases or other data in the public domain.
You have choices about the data we collect. When you are asked to provide personal data, you may decline. But if you choose not to provide data that is necessary to provide a product or feature, you may not be able to use that product or feature.
The data we collect depends on the context of your interactions with Microsoft, the choices you make, including your privacy settings, and the products and features you use. The data we collect can include the following:
Name and contact data. We collect your first and last name, email address, postal address, phone number, and other similar contact data.
Credentials. We collect passwords, password hints, and similar security information used for authentication and account access.
Demographic data. We collect data about you such as your age, gender, country, and preferred language.
Payment data. We collect data necessary to process your payment if you make purchases, such as your payment instrument number (such as a credit card number), and the security code associated with your payment instrument.
Device and Usage data. We collect data about your device and how you and your device interact with Microsoft and our products. For example, we collect:
. We collect data about the features you use, the items you purchase, and the web pages you visit. This data includes your voice and text search queries or commands to Bing, Cortana, and our chat bots. This also includes the settings you select and the software configurations your use most.
. We collect data about your device and the network you use to connect to our products. It includes data about the operating systems and other software installed on your device, including product keys. It also includes IP address, device identifiers (such as the IMEI number for phones), regional and language settings.
. We collect data about the performance of the products and any problems you experience with them. This data helps us to diagnose problems in the products you use, and to improve our products and provide solutions. Depending on your product and settings, error reports (sometimes called crash dumps) can include data such as the type or severity of the problem, details of the software or hardware related to an error, contents of files you were using when an error occurred, and data about other software on your device.
. When you engage Microsoft for troubleshooting and help, we collect data about you and your hardware, software, and other details related to the incident. Such data includes contact or authentication data, the content of your chats and other communications with Microsoft, data about the condition of the machine and the application when the fault occurred and during diagnostics, and system and registry data about software installations and hardware configurations.
Interests and favorites. We collect data about your interests and favorites, such as the teams you follow in a sports app, the programming languages you prefer, the stocks you track in a finance app, or the favorite cities you add to a weather app. In addition to those you explicitly provide, your interests and favorites may also be inferred or derived from other data we collect.
Contacts and relationships. We collect data about your contacts and relationships if you use a Microsoft product to manage contacts, for example , or to communicate or interact with other people or organizations, for example Visual Studio Team Services.
Location data. For products with location-enhanced features, we collect data about your location, which can be either precise or imprecise. Precise location data can be Global Navigation Satellite System (GNSS) data (e.g., GPS), as well as data identifying nearby cell towers and Wi-Fi hotspots, we collect when you enable location-based products or features. Imprecise location data includes, for example, a location derived from your IP address or data that indicates where you are located with less precision, such as at a city or postal code level.
Content. We collect content of your files and communications when necessary to provide you with the products you use. For example, if you transmit a file using Skype to another Skype user, we need to collect the content of that file to display it to you and the other user as you direct. If you receive an email using m, we need to collect the content of that email to deliver it to your inbox, display it to you, enable you to reply to it, and store it for you until you choose to delete it. Other data we collect to provide communication services to you include the:
audio and video recording of a video message, and
audio recording and transcript of a voice message you receive or a text message you dictate.
Video. If you enter Microsoft Store locations or other facilities, or attend a Microsoft event, your image may be captured by our security cameras.
If you use Spend, at your direction, we may also collect payment card information, receipt data, or financial transaction data, to provide the service.
If you useEnterprise Online Services, Microsoft collectsCustomer Data(including content),Support Data, andAdministrator Data, defined below in theEnterprise and Developer Productssection.
We also collect information you provide to us and the content of messages you send to us, such as feedback and product reviews you write, or questions and information you provide for customer support. When you contact us, such as for customer support, phone conversations or chat sessions with our representatives may be monitored and recorded.
Product-specific sections below describe data collection practices applicable to use of those products.
Microsoft uses the data we collect to operate our business and provide you the products we offer, which includes using data to improve our products and personalize your experiences. We also may use the data to communicate with you, for example, informing you about your account, security updates and product information. And we use data to help show more relevant ads, whether in our own products supported by advertising like MSN and Bing, or in products offered by third parties. However, we do not use what you say in email, chat, video calls or voice mail, or your documents, photos or other personal files to target ads to you.
Microsoft uses the data we collect for three basic purposes, described in more detail below: (1) to operate our business and provide (including improving and personalizing) the products we offer, (2) to send communications, including promotional communications, and (3) to show advertising, whether in our own products supported by advertising like MSN and Bing, or in products offered by third parties.
In carrying out these purposes, we combine data we collect to give you a more seamless, consistent and personalized experience. For example,Cortanacan use the favorite sports teams you add to the Microsoft Sports app to provide information relevant to your interests,Microsoft Storecan use information about the apps and services you use to make personalized app recommendations. However, to enhance privacy, we have built in technological and procedural safeguards designed to prevent certain data combinations. For example, we store data we collect from you when you are unauthenticated (not signed in) separately from any account information that directly identifies you, such as your name, email address or phone number.
Providing and improving our products. We use data to provide and improve the products we offer and perform essential business operations. This includes operating the products, maintaining and improving the performance of the products, developing new features, conducting research, and providing customer support. Examples of such uses include the following:
. We use data to carry out your transactions with us and to provide our products to you. Often, those products include personalized features and recommendations that enhance your productivity and enjoyment, and automatically tailor your product experiences based on the data we have about your activities, interests and location.
. We use data to diagnose product problems, repair customers devices, and provide other customer care and support services.
. We use datasuch as device and application type, location, and unique device, application, network and subscription identifiersto activate software and devices that require activation.
. We use data to continually improve our products, including adding new features or capabilities. For example, we use error reports to improve security features, search queries and clicks in Bing to improve the relevancy of the search results, usage data to determine what new features to prioritize, and audio recordings from voice input features to improve speech recognition accuracy.
. We use data to protect the security and safety of our products and our customers, to detect and prevent fraud, to confirm the validity of software licenses, to resolve disputes and enforce our agreements. Our security features and products can disrupt the operation of malicious software and notify users if malicious software is found on their devices. For example, some of our communications and file syncing products, such as Outlook or OneDrive, systematically scan content in an automated manner to identify suspected spam, viruses, abusive actions, or URLs that have been flagged as fraud, phishing or malware links; and we may block delivery of a communication or remove content if it violates our terms.
. We use data to develop aggregate analysis and business intelligence that enable us to operate, protect, make informed decisions, and report on the performance of our business.
Communications. We use data we collect to communicate with you and personalize our communications with you. For example, we may contact you by phone or email or other means to inform you when a subscription is ending, discuss your licensing account, let you know when security updates are available, remind you about items left in your online shopping cart, update you or inquire about a service or repair request, invite you to participate in a survey, or tell you that you need to take action to keep your account active. Additionally, you can sign up for email subscriptions and choose whether you wish to receive promotional communications from Microsoft by email, SMS, physical mail, and telephone. For information about managing your contact data, email subscriptions and promotional communications, please visit theAccess and Controlssection of this privacy statement.
Advertising. Microsoft does not use what you say in email, chat, video calls or voice mail, or your documents, photos or other personal files to target ads to you.
We use data we collect through our interactions with you, through some of our products and on third-party web properties, to show advertising. For example:
Microsoft may use your data to select and deliver some of the ads you see on Microsoft web properties, such as Microsoft.com, MSN and Bing.
When the advertising ID is enabled in Windows 10 as part of your privacy settings, Microsoft apps can access and use the advertising ID (much the same way that websites can access and use a unique identifier stored in a cookie) to select and deliver ads in such apps.
We may share data we collect with third parties, such as Oath, AppNexus, or Facebook (see below), so that they can select and deliver some of the ads you see in our products, their products, or other sites and apps serviced by these partners.
Advertisers may choose to place ourweb beaconson their sites in order to allow Microsoft to collect information on their sites such as activities, purchases and visits; we use this data on behalf of our advertising customers to help target their ads. We also share data directly with service providers, such as Oath, AppNexus, or Facebook, to permit them to provide services on our behalf or to partner with us in selecting and serving ads for our advertising partners.
The ads that you see may be selected based on data we process about you, such as your interests and favorites, your location, your transactions, how you use our products, your search queries, or the content you view. For example, if you view content on MSN about automobiles, we may show advertisements about cars; if you search pizza places in Seattle on Bing, you may see advertisements in your search results for restaurants in Seattle.
The ads that you see may also be selected based on other information learned about you over time using demographic data, location data, search queries, interests and favorites, usage data from our products and sites, as well as the sites and apps of our advertisers and partners. We refer to these ads as interest-based advertising in this statement. For example, if you view gaming content on xbox.com, you may see offers for games on MSN. To provide interest-based advertising, we combine cookies placed on your device using information that we collect (such as IP address) when your browser interacts with our websites. If you opt out of receiving interest-based advertising, data associated with these cookies will not be used.
Further details regarding our advertising-related uses of data include:
Advertising Industry Best Practices and Commitments
. Microsoft is a member of theNetwork Advertising Initiative(NAI) and adheres to the NAI Code of Conduct. We also adhere to the following self-regulatory programs:
In Europe:European Interactive Digital Advertising Alliance (EDAA)
In Canada:Ad Choices: Digital Advertising Alliance of Canada (DAAC)Choix de Pub: lAlliance de la publicit numrique du Canada (DAAC)
. In the United States, we provide interest-based advertising based on a limited number of standard, non-sensitive health-related interest categories, including allergies, arthritis, cholesterol, cold and flu, diabetes, gastrointestinal health, headache / migraine, healthy eating, healthy heart, mens health, oral health, osteoporosis, skin health, sleep, and vision / eye care. We will also target ads based on custom, non-sensitive health-related interest categories as requested by advertisers.
. We do not deliver interest-based advertising to children whose birthdate in their Microsoft account identifies them as under 13 years of age.
. For interest-based advertising, we retain data for no more than 13 months, unless we obtain your consent to retain the data longer.
. In some cases, we share with advertisers reports about the data we have collected on their sites or ads.
Data Collected by Other Advertising Companies
. Advertisers sometimes include their ownweb beacons(or those of their other advertising partners) within their advertisements that we display, enabling them to set and read their owncookie. Additionally, Microsoft partners with third-party ad companies to help provide some of our advertising services, and we also allow other third-party ad companies to display advertisements on our sites. These third parties may place cookies on your computer and collect data about your online activities across websites or online services. These companies currently include, but are not limited to:A9AppNexusCriteoFacebookMediaMathnugg.adAGOathRocket FuelYahoo!. You may find more information on each companys practices, including the choices it offers, by clicking on the company names above. Many of them are also members of theNAIorDAA, which each provide a simple way to opt out of ad targeting from participating companies.
We share your personal data with your consent or as necessary to complete any transaction or provide any product you have requested or authorized. We also share data with Microsoft-controlled affiliates and subsidiaries; with vendors working on our behalf; when required by law or to respond to legal process; to protect our customers; to protect lives; to maintain the security of our products; and to protect the rights or property of Microsoft.
We share your personal data with your consent or as necessary to complete any transaction or provide any product you have requested or authorized. For example, we share your content with third parties when you tell us to do so, such as when you send an email to a friend, share photos and documents on OneDrive, or link accounts with another service. When you provide payment data to make a purchase, we will share payment data with banks and other entities that process payment transactions or provide other financial services, and for fraud prevention and credit risk reduction.
In addition, we share personal data among Microsoft-controlled affiliates and subsidiaries. We also share personal data with vendors or agents working on our behalf for the purposes described in this statement. For example, companies weve hired to provide customer service support or assist in protecting and securing our systems and services may need access to personal data to provide those functions. In such cases, these companies must abide by our data privacy and security requirements and are not allowed to use personal data they receive from us for any other purpose. We may also disclose personal data as part of a corporate transaction such as a merger or sale of assets.
Finally, we will access, transfer, disclose, and preserve personal data, including your content (such as the content of your emails in Outlook.com, or files in private folders on OneDrive), when we have a good faith belief that doing so is necessary to:
comply with applicable law or respond to valid legal process, including from law enforcement or other government agencies;
protect our customers, for example to prevent spam or attempts to defraud users of our products, or to help prevent the loss of life or serious injury of anyone;
operate and maintain the security of our products, including to prevent or stop an attack on our computer systems or networks; or
protect the rights or property of Microsoft, including enforcing the terms governing the use of the services – however, if we receive information indicating that someone is using our services to traffic in stolen intellectual or physical property of Microsoft, we will not inspect a customers private content ourselves, but we may refer the matter to law enforcement.
For more information about data we disclose in response to requests from law enforcement and other government agencies, please see our Law Enforcement Transparency Report, available atmicrosoft.com/about/corporatecitizenship/en-us/reporting/transparency.
Please note that some of our products include links to products of third parties whose privacy practices differ from Microsofts. If you provide personal data to any of those products, your data is governed by their privacy statements.
You can view, edit, or delete your personal data online for many Microsoft products. You can also make choices about Microsofts collection and use of your data. How you can access or control your personal data will depend on which products you use.
You can always choose whether you wish to receive promotional email, SMS messages, telephone calls and postal mail from Microsoft. You can also opt out from receiving interest-based advertising from Microsoft by visiting ouropt-out page.
You can view, edit, or delete your personal data online for many Microsoft products. You can also make choices about Microsofts collection and use of your data. How you can access or control your personal data will depend on which products you use. For example:
You can see and control activity data across multiple Microsoft services on the Microsoft privacy dashboard at:account.microsoft.com/privacy. From here, you can view, and clear browsing, search, and location data associated with your Microsoft account. You can also manage data in your Cortana Notebook and Microsoft Health services.
. Fromhere, you can gain easy access to all your licensing information in one location.
. If you wish to access, edit, or remove the profile information and payment information in yourMicrosoft account, change your password, add security information or close your account, you can do so by visitingaccount.microsoft.com. From here, you can also access controls for other Microsoft products.
. If you wish to access edit or remove profile information and payment information in your Skype account or change your password, you can sign into your account atlogin.skype.com/login.
. If you use Xbox Live or Xbox.com, you can view or edit your personal data, including billing and account information, privacy settings, online safety and data sharing preferences by accessingMy Xboxon the Xbox console or on the Xbox.com website.
. You can access your Microsoft Store profile and account information by visiting clicking on View account or Order history.
. You can access and update your profile on microsoft.com by visiting theMicrosoft.com Profile Center.
If you have a Microsoft Developer Network public profile, you can access and edit it atconnect.microsoft.com/profile.aspx.
If you cannot access certain personal data collected by Microsoft via the links above or directly through the Microsoft products you use, you can always contact Microsoft by using ourweb form. We will respond to requests to access or delete your personal data within 30 days.
You can choose whether you wish to receive promotional communications from Microsoft by email, SMS, physical mail, and telephone. If you receive promotional email or SMS messages from us and would like to opt out, you can do so by following the directions in that message. You can also make choices about the receipt of promotional email, telephone calls, and postal mail by signing in with your personalMicrosoft account, and viewing yourcommunication permissionswhere you can update contact information, manage Microsoft-wide contact preferences, opt out of email subscriptions, and choose whether to share your contact information with Microsoft partners. If you do not have a personal Microsoft account, you can manage your Microsoft email contact preferences by using thisweb form. These choices do not apply to mandatory service communications that are part of certain Microsoft services, or to surveys or other informational communications that have their own unsubscribe method.
You may opt out of receiving interest-based advertising from Microsoft by visiting ouropt-out page. When you opt out, your selection will be stored in acookiethat is specific to the web browser you are using. The opt-out cookie has an expiration date of five years. If you delete the cookies on your device, you will need to opt out again.
You can also link your opt-out choice with your personal Microsoft account. It will then apply on any device where you use that account, and will continue to apply until someone signs in with a different personal Microsoft account on that device. If you delete the cookies on your device, you will need to sign in again for the settings to apply.
For advertising that appears in apps on Windows, you may use the opt-out linked to your personal Microsoft account, or opt out of interest-based advertising by turning off theadvertising IDin Windows Settings.
Because the data used for interest-based advertising is also used for other necessary purposes (including providing our products, analytics and fraud detection), opting out of interest-based advertising does not stop that data from being collected. Nor does it mean you will stop getting ads or see fewer ads. However, if you do opt out, the ads you receive will no longer be interest-based and may be less relevant to your interests.
You can opt out of receiving interest-based advertising from third parties we partner with by visiting their sites (see above).
. Relevant browser-based cookie controls are described in theCookiessection of this privacy statement.
. Internet Explorer (versions 9 and up) has a feature called Tracking Protection that will block third-party content, including cookies, from any site that is listed in a Tracking Protection List you add. By limiting calls to these sites, the browser will limit the information these third-party sites can collect about you.
Some browsers have incorporated Do Not Track (DNT) features that can send a signal to the websites you visit indicating you do not wish to be tracked. Because there is not yet a common understanding of how to interpret the DNT signal, Microsoft services do not currently respond to browser DNT signals. We continue to work with the online industry to define a common understanding of how to treat DNT signals. In the meantime, you can use the range of other tools we provide to control data collection and use, including the ability to opt out of receiving interest-based advertising from Microsoft as described above.
We also use web beacons to help deliver cookies and gather usage and performance data. Our websites may include web beacons and cookies from third-party service providers.
You have a variety of tools to control cookies, web beacons and similar technologies, including browser controls to block and delete cookies and controls from some third-party analytics service providers to opt out of data collection through web beacons and similar technologies. Your browser and other choices may impact your experiences with our products.