Microsoft Bing is an Artificial Intelligence (AI) search engine powered by ChatGPT & GPT-4 (short for Generative Pre-trained Transformer version 4) which interacts with users in a conversational way to answer questions. Microsoft's terms state that Bing can collect and process data in many forms, including text that has been inked or typed, voice data, and images. When users are signed in, some products may display a user's name or username and their profile photo as part of their use of Microsoft products, including in a user's communications, social interactions, and public posts. Microsoft's terms state they provide a privacy dashboard that allows users to control some of the data Microsoft processes through their use of a Microsoft account on the Microsoft privacy dashboard. From here, the terms state users can view and clear their browsing, search, and location data associated with their Microsoft account.

Microsoft's terms also state they are committed to protecting the security of its users' personal data. Microsoft uses a variety of security technologies and procedures to help protect users' personal data from unauthorized access, use, or disclosure. If a user uses a Microsoft product provided by a school or district they are affiliated with or use an email address provided by a school or district to access Microsoft products, Microsoft may share certain data, such as interaction data and diagnostic data, to enable a school or district to manage the products.

Microsoft Bing can be accessed through its website and is available to download on the iOS App Store, and the Google Play Store. The Privacy Policy and Terms of Use used for this evaluation can be found on Microsoft Bing’s website. Additionally, other policies used for this evaluation include: Privacy Trust Center, and Microsoft Services Agreement. This evaluation only considers policies that have been made publicly available prior to an individual using the application or service.

Safety

Microsoft's terms state that children can access communication services, like Bing, Outlook, and Skype, and can freely communicate and share data with other users of all ages. When users are signed in, some products may display a user's name or username and their profile photo as part of their use of Microsoft products, including in a user's communications, social interactions, and public posts. The terms state that when a user creates a personal Microsoft account, they will be asked to provide certain personal data and they will assign a unique ID number to identify a user's account and associated information. While some products, such as those involving payment, require a real name, the terms state users can sign in and use other Microsoft products without providing their real name. Some data a user provides, such as their display name, email address, and phone number, can be used to help others find and connect with that user within Microsoft products.

In addition, the terms state that users should be aware that when they share their content with other people, it may become publicly visible to others. Microsoft's terms state that they also provide parental tools called Family Features, which allow parents and kids to build trust based on a shared understanding of what behaviors, websites, apps, games, physical locations, and spending is right in their family. Parents can create a family account by going to https://account.microsoft.com/family and inviting their kids or other parents to join.

Privacy

Microsoft's terms state they provide a privacy dashboard that allows users to control some of the data Microsoft processes through their use of a Microsoft account on the Microsoft privacy dashboard. From here, the terms state users can view and clear their browsing, search, and location data associated with their Microsoft account. The terms state many of Microsoft’s products require some personal data to provide users with its services. The data Microsoft services can collect include: first and last name, email address, postal address, phone number, password credentials, and data about users such as their age, gender, country, and preferred language.

In addition, the terms state Microsoft also obtains data about users from third parties, such as data brokers from which Microsoft purchases demographic data to supplement the data they collect, and from services that make user-generated content from their service available to others, such as local business reviews or public social media posts. In carrying out these purposes, the terms state that Microsoft combines data they collect from different contexts (for example, from a user's use of two Microsoft products) or they obtain from third parties to give users a more seamless, consistent, and personalized experience, to make informed business decisions, and for other legitimate purposes.

The terms state Microsoft does not sell users' personal data and personal information will only be used or processed to provide users the services including purposes compatible with providing those services. However, Microsoft's privacy policy states they may use personal information for marketing and targeted advertising purposes, but Microsoft says they do not use what a user says in an email, chat, video calls, or voice mail, or their documents, photos, or other personal files to target ads. Lastly, Microsoft says they may track users with the data they collect through interactions on their products and on third-party websites for advertising in their products and across the Internet for commercial purposes.

Security

Microsoft's terms state they are committed to protecting the security of its users' personal data. Microsoft uses a variety of security technologies and procedures to help protect users' personal data from unauthorized access, use, or disclosure. For example, the terms state Microsoft stores the personal data users provide on computer systems that have limited access and are in controlled facilities and protect the data users entrust to Microsoft through strong security and encryption.

In addition, the terms state Microsoft uses data to protect the safety of their products and their customers. Microsoft's security features and products can disrupt the operation of malicious software and notify users if malicious software is found on their devices. The terms also state Microsoft uses data they collect to develop product updates and security patches. For example, the terms state Microsoft may use information about a user's device’s capabilities, such as available memory, to provide users with a software update or security patch. The terms also state updates and patches are intended to maximize users' experience with Microsoft's products, help users' protect the privacy and security of their data, provide new features, and ensure a user's device is ready to process updates. Lastly, the terms state Microsoft complies with data protection laws, including providing security breach notification to users.

Compliance

The terms state the data Microsoft collects depends on the context of the user's interactions with Microsoft and the choices they make, including their privacy settings and the products and features they use. The terms also say a user can request access to their data, update their data, erase their data, and port their personal data to another service. However, Microsoft's terms say that if a user's organization, such as their employer, school, or service provider, provides them with access to and is administering their use of Microsoft products, they should contact their organization to learn more about how to access and control a personal data. The data associated with a work or a K-12 school account, and how it will be used, is generally similar to the use and collection of data associated with a personal Microsoft account. However, work or school administrators managing accounts may access personal data including the contents of communications and files, including data stored in products provided to a user by their organization.

In addition, the terms state the services are only intended for adults and if children intend to use the services they must have valid parent or legal guardian consent. Parents and kids can use Microsoft family features to build trust based on a shared understanding of what behaviors, websites, apps, games, physical locations, and spending is right in their family. Parents can create a family account by going to https://account.microsoft.com/family.

• Personal information is not sold or rented to third parties.
• Personal information is shared for third-party marketing.
• Personalised advertising is displayed.
• Data are collected by third-parties for their own purposes.
• User's information is used to track and target advertisements on other third-party websites or services.
• Data profiles are created and used for personalised advertisements.