What should my privacy policy say about AI processing?
Quick Answer
Minimum disclosures: that you use AI/LLM services, which providers, what data is sent, whether data is used for training, how users can opt out, retention practices, DPAs in place, and international data transfers.
Detailed Answer
Minimum disclosures:
- That you use AI/LLM services to process user data
- Which providers you use (or categories of providers)
- What data is sent to AI services
- Whether data is used for model training
- How users can opt out
- Your data retention practices
- Any DPAs in place with providers
- International data transfers (if applicable)
Example clause:
We use AI language models provided by [Provider] to process certain user inputs for [purpose]. User data sent to these services is subject to our Data Processing Agreement with the provider, which prohibits use of your data for model training. You may opt out of AI-assisted features at any time in your account settings.


Comments
Loading comments...