{"slug": "character-ai-privacy-changed-review", "title": "Character.AI — privacy changed (review)", "summary": "Character.AI replaced its Regional Privacy Disclosures effective November 5, 2026, changing references to \"CTI's proprietary large language models\" to \"Character.AI's proprietary large language models\" in its description of how the models were trained. The updated notice states the models were trained primarily on publicly available data, including large-scale third-party datasets and open-source collections, and that users can opt out of having their data processed to train and improve the AI models. The prior version of the notice carried an effective date of July 1, 2026.", "body_md": "# Character.AI's privacy changed\n\n**Hedging language on file:** as described, as otherwise described, may include, such as. See [what these phrases permit](https://isittrainingonme.com/weasel-words/).\n\nRegional Privacy Disclosures\n\nREMOVEDEffective Date: July 1, 2026 While our Privacy Policy and the privacy representations made in that policy apply to all data subjects (unless otherwise specified), the Regional Privacy Disclosures made in this notice provide additional information for data subjects located in the jurisdictions specified below and are intended to supplement the Privacy Policy. For residents of the United States, please refer to the U.S. State Privacy Notice below . For data subjects located in the European Economic Area or the United Kingdom, please refer to the European Economic Area & United Kingdom Privacy Notice below . To develop the Services, CTI's proprietary large language models were trained primarily on publicly available data, including large-scale, third-party datasets and open-source collections, in line with common industry practices. We did not intentionally process or collect personal data for these initial model development and training purposes; any incidental inclusion of personal data in such datasets would have been unintended, and we did not process such data to identify individuals, build user profiles, or contact individuals. For further information on this initial training, see the information available in this Support Center article . To make our Services more helpful for you and other users, we train the AI systems and improve AI models that support our Services. Before processing the content you submit for such purposes we take steps to help safeguard your information, including disassociating information from the user's account information and removing directly identifiable information. You have control over your personal data and can decide whether such data can be processed for these purposes. With specific regard to the processing of your personal data for the purpose of training and improving our AI models, you have the right to opt out at any time. You may exercise this right by following the instructions provided in this FAQ article .\n\nADDEDEffective Date: November 5, 2026 While our Privacy Policy and the privacy representations made in that policy apply to all data subjects (unless otherwise specified), the Regional Privacy Disclosures made in this notice provide additional information for data subjects located in the jurisdictions specified below and are intended to supplement the Privacy Policy. For residents of the United States, please refer to the U.S. State Privacy Notice below . For data subjects located in the European Economic Area or the United Kingdom, please refer to the European Economic Area & United Kingdom Privacy Notice below . To develop the Services, Character.AI's proprietary large language models were trained primarily on publicly available data, including large-scale, third-party datasets and open-source collections, in line with common industry practices. We did not intentionally process or collect personal data for these initial model development and training purposes; any incidental inclusion of personal data in such datasets would have been unintended, and we did not process such data to identify individuals, build user profiles, or contact individuals. For further information on this initial training, see the information available in this Support Center article . To make our Services more helpful for you and other users, we train the AI systems and improve AI models that support our Services. Before processing the content you submit for such purposes we take steps to help safeguard your information, including disassociating information from the user's account information and removing directly identifiable information. You have control over your personal data and can decide whether such data can be processed for these purposes. With specific regard to the processing of your personal data for the purpose of training and improving our AI models, you have the right to opt out at any time. You may exercise this right by following the instructions provided in this FAQ article . For users located in the European Economic Area and the United Kingdom, additional information on whether and what personal data is processed for what purpose, as well as how you can exercise your right to object, are set out in the European Economic Area and United Kingdom Privacy Notice below. If a type of processing activity is not mentioned in the relevant regional section below, then such processing is not taking place for that specific region. In case of conflict, the applicable section of the Regional Privacy Disclosures shall prevail over Character.AI's Privacy Policy and this introductory section of the Regional Privacy Disclosures.\n\nU.S. State Privacy Notice Effective: July 1, 2026\n\nREMOVEDThis U.S. State Privacy Notice (\"Notice\") provides additional information for residents of the United States. This Notice is intended to supplement our Privacy Policy to address state-specific transparency requirements and rights you may have under applicable state laws, depending on where you live.\n\nADDEDThis U.S. State Privacy Notice (\"Notice\") provides additional information for residents of the United States. This Notice is intended to supplement our Privacy Policy to address state-specific transparency requirements and rights you may have under applicable state laws, depending on where you live.\n\nInformation We Collect & How We Use and Disclose It\n\nREMOVEDThroughout our Privacy Policy , we discuss in detail the specific pieces of personal information and sensitive personal information we collect, the sources of that information, and how we disclose it. In the preceding 12 months, we disclosed or shared the categories of personal information described in more detail in Section 1 of the Privacy Policy for the business purposes described in Section 2 of the Privacy Policy . Please note that laws in California and other states treat certain common disclosures of personal information to third parties as \"sales\" of information, even when no money changes hands. This may include personal information shared with third parties for purposes of targeted advertising. While these disclosures may be considered sales under certain state laws, we do not sell personal information for monetary consideration, and Character.AI is not a data broker. If you would like to opt out of \"sales\" or targeted advertising, please refer to the Rights You May Have section below. In the preceding 12 months, we disclosed personal information for business purposes and \"sold\" personal information to the following categories of recipients:\n\nADDEDThroughout our Privacy Policy , we discuss in detail the specific pieces of personal information and sensitive personal information we collect, the sources of that information, and how we disclose it. In the preceding 12 months, we disclosed or shared the categories of personal information described in more detail in Section 1 of the Privacy Policy for the business purposes described in Section 2 of the Privacy Policy . Please note that laws in California and other states treat certain common disclosures of personal information to third parties as \"sales\" of information, even when no money changes hands. This may include personal information shared with third parties for purposes of targeted advertising. While these disclosures may be considered sales under certain state laws, we do not sell personal information for monetary consideration, and Character.AI is not a data broker. If you would like to opt out of \"sales\" or targeted advertising, please refer to the Rights You May Have section below. In the preceding 12 months, we disclosed personal information for business purposes and \"sold\" personal information to the following categories of recipients:\n\nCategory of Personal Information Recipients of Disclosures for a Business Purpose Recipients of \"Sales\" Identifiers (such as name, email address, phone number, username, IP address, device identifiers, Service-related identifiers) Vendors and service providers (e.g., data storage providers, content moderation providers, customer support providers, analytics, data management providers, payment providers, fraud prevention and security providers, experimentation providers, mobile measurement providers, push notification providers, email marketing providers), advertising providers, affiliates, other users (if you choose to make this information publicly available) Advertising providers Demographic information (such as date of birth, age) Vendors and service providers (e.g., data storage providers, analytics providers, data management providers), advertising providers, affiliates Financial information (such as payment information and related details) Vendors and service providers (e.g., payment providers, data management providers), affiliates n/a Commercial information (such as purchases, transaction history) Geolocation data (i.e., approximate location based on IP address) Audio or video information (such as voice recordings or pictures and videos you submit) Vendors and service providers (e.g., data storage providers, content providers, content moderation providers, data analytics providers), affiliates, other users (if you choose to make this information publicly available) Device, Internet, or other electronic network activity information (such as information about your device or browser; information about how you use and interact with the Services, our ads, or third-party sites or platforms) Vendors and service providers (e.g., data storage providers, analytics providers, data management providers, fraud prevention and security providers, mobile measurement providers, push notification providers), advertising providers, affiliates Content and communications you submit (such as chat communications, posted images or videos, biography descriptions, shared Characters, customer support messages) Vendors and service providers (e.g., data storage providers, content providers, content moderation providers, customer support providers, analytics providers, data management providers, fraud prevention and security providers), affiliates, other users (if you choose to make this information publicly available) Inferences drawn from other personal information (such as preferences and interests) Sensitive personal information (such as log-in credentials or information you voluntarily share when using the Services such as content revealing your race, religion, or sexual orientation) Vendors and service providers (e.g., data storage providers, analytics providers, data management providers, content moderation providers), affiliates, other users (if you choose to make this information publicly available)\n\nREMOVEDWe may also disclose any or all of the categories of information listed above in the event of a sale or transfer of all or part of our business, in response to legal process, or in the interests of protecting rights or safety, as described in more detail in our Privacy Policy . Please note that our advertising practices may vary depending on where you are located and whether you access the Services via our websites or mobile applications. In some jurisdictions, we may provide targeted advertising to minors over the age of 13, which may include disclosures to third parties that are considered \"sales\" in some jurisdictions. Where applicable under local law, we obtain consent before providing targeted advertising or \"selling\" personal information of minors. We process the categories of personal information identified above for the purposes as described in more detail in Section 2 of our Privacy Policy . We do not use or disclose your sensitive personal information for purposes other than permitted under applicable law.\n\nADDEDWe may also disclose any or all of the categories of information listed above in the event of a sale or transfer of all or part of our business, in response to legal process, or in the interests of protecting rights or safety, as described in more detail in our Privacy Policy . Please note that our advertising practices may vary depending on where you are located and whether you access the Services via our websites or mobile applications. In some jurisdictions, we may provide targeted advertising to minors over the age of 13, which may include disclosures to third parties that are considered \"sales\" in some jurisdictions. Where applicable under local law, we obtain consent before providing targeted advertising or \"selling\" personal information of minors. We process the categories of personal information identified above for the purposes as described in more detail in Section 2 of our Privacy Policy . We do not use or disclose your sensitive personal information for purposes other than permitted under applicable law.\n\nRetention of Personal Information\n\nREMOVEDWe keep your information for the time necessary for the purposes for which it is processed or as otherwise described at the time the information is collected, unless a shorter retention period is required by law. The length of time for which we retain information depends on the purposes for which we collected and use it and your choices, after which time we may delete and/or aggregate it. We may also retain and use this information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. For more information about our data retention practices (including with respect to Characters you create and make public), please refer to Section 7 of our Privacy Policy .\n\nADDEDWe keep your information for the time necessary for the purposes for which it is processed or as otherwise described at the time the information is collected, unless a shorter retention period is required by law. The length of time for which we retain information depends on the purposes for which we collected and use it and your choices, after which time we may delete and/or aggregate it. We may also retain and use this information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. For more information about our data retention practices ( including with respect to Characters you create and make public), please refer to Section 7 of our Privacy Policy .\n\nRights You May Have Where applicable under state law and subject to applicable exceptions, you may have the following rights: To request information about our processing of your personal information;\n\nREMOVEDTo request access to and/or a copy of certain information we hold about you (including in a portable and/or machine-readable format);\n\nADDEDTo request access to and/or a copy of certain information we hold about you (including in a portable and/or machine-readable format);\n\nTo update or correct your personal information; To request that we delete certain personal information we hold about you, subject to certain exceptions; To opt out of targeted advertising or the sale of personal information to third parties; The right not to be discriminated against for exercising your rights; and The right to appeal our decision to deny your request, if applicable.\n\nREMOVEDTo exercise the rights you may have under applicable law (with the exception of the opt-out right; see below), contact us at https://support.character.ai/hc/en-us/requests/new , email us at privacy@character.ai , or visit our Help Center at support.character.ai. To protect your privacy and security, we take reasonable steps to verify your identity and requests. If we are unable to verify your identity, we may be unable to respond to your requests. You may also be able to designate an authorized agent to make requests on your behalf. Authorized agents may submit requests using the methods described above. In order for an authorized agent to be verified, you must provide the authorized agent with signed, written permission to make such requests or a legally valid power of attorney. We may also follow up with you directly to verify your identity before processing the authorized agent's request, consistent with applicable law. Where applicable under local law, if your request is denied, we will provide information about how to submit an appeal in our response denying the request. To opt out of targeted advertising or the sale of personal information to third parties, please navigate to the Your Privacy Choices page and follow the directions. Please refer to Section 4 of the Privacy Policy for more information about other choices or options you may have with respect to your information.\n\nADDEDTo exercise the rights you may have under applicable law (with the exception of the opt-out right; see below), contact us at https://support.character.ai/hc/en-us/requests/new , email us at privacy@character.ai , or visit our Help Center at support.character.ai. To protect your privacy and security, we take reasonable steps to verify your identity and requests. If we are unable to verify your identity, we may be unable to respond to your requests. You may also be able to designate an authorized agent to make requests on your behalf. Authorized agents may submit requests using the methods described above. In order for an authorized agent to be verified, you must provide the authorized agent with signed, written permission to make such requests or a legally valid power of attorney. We may also follow up with you directly to verify your identity before processing the authorized agent's request, consistent with applicable law. Where applicable under local law, if your request is denied, we will provide information about how to submit an appeal in our response denying the request. To opt out of targeted advertising or the sale of personal information to third parties, please navigate to the Your Privacy Choices page and follow the directions. Please refer to Section 4 of the Privacy Policy for more information about other choices or options you may have with respect to your information.\n\nEuropean Economic Area and United Kingdom Privacy Notice\n\nREMOVEDThis European Economic Area (\"EEA\") and United Kingdom (\"UK\") Privacy Notice provides additional information for data subjects in the EEA and UK that provide for certain privacy rights and requirements specified under laws applicable in the EEA and UK, including the EU and UK General Data Protection Regulation (\"GDPR\") and UK Data Protection Act as amended. Our Privacy Policy and the privacy controls we offer are in line with these laws, and this Notice is intended to supplement the Privacy Policy with additional EEA and UK-specific disclosures. For example, all users can access a copy of their data, request deletion, correct their personal data, and control what personal data they share in their account on our website or in the privacy settings in the mobile application. You have the right to object to our use of your personal data. With many types of data, we have provided you with the ability to delete it if you do not want us processing it anymore. For other types of data, you can stop the use of your data by disabling the feature altogether. You can do these things in your account settings on our website or directly in the mobile application. If there are other types of personal data you do not agree with us processing, you can contact us, using the contact information provided below. Please avoid providing any personal data related to third parties and only provide information about yourself, unless you have their express permission to do so. Character Technologies, Inc. is considered the \"data controller\" of the \"personal data\" (as defined under the GDPR) we handle under our Privacy Policy. In other words, Character.AI is responsible for deciding how to collect, use, and disclose personal data, subject to applicable law. The laws of the EEA and the UK require data controllers to tell you about the legal ground that they rely on for using, sharing, or disclosing your personal data. To the extent those laws apply, our legal grounds are as follows: Contractual Commitments: We may use, share, or disclose personal data to honor our contractual commitments to you. For example, we will process your personal data to provide the Services, and to honor our commitments in any agreements that we have with you. When we process your personal data under the contractual basis, providing such data is required. If you do not provide the required personal data, you will not be able to use the Services. With Your Consent: Where required by law, and in some other cases, we use, share, or disclose personal data on the basis of your consent. If we ask for your consent to process your personal data, you may withdraw your consent at any time by contacting us using the details at the end of our Privacy Policy. Depending on the processing activities for which you do not grant your consent, or for which you later withdraw it, we may not be able to process your personal data for certain purposes. However, this will not affect your ability to use the Services. (Please note that if you withdraw your consent, this will not affect the processing activities that took place prior to your withdrawal of consent.) Legitimate Interests: In many cases, we use, share, or disclose personal data on the ground that it furthers our legitimate business interests in ways that are not overridden by the interests or fundamental rights and freedoms of the affected individuals, such as customer service, certain promotional activities, analyzing and improving our business and Services, providing security for the Services, preventing fraud, and managing legal issues. You have the right to object at any time, on grounds relating to your particular situation as further provided below under the section \"Rights you might have\". Legal Compliance: We need to use and disclose personal data to comply with our legal obligations, for example to carry out fraud prevention checks or comply with other legal or regulatory requirements, where this is explicitly required by law. When we process your personal data to comply with a legal obligation, providing such data is required. If you do not provide such required data, you will not be able to use the Services, as a whole or in part. The processing of special categories of personal data - meaning data concerning health, racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data used for identification, and data concerning a person's sex life or sexual orientation - is neither required nor necessary for the use of the Services. Accordingly, please do not include or share such data in your interactions with us or through the Services. The following chart identifies for each processing purpose the applicable legal basis, as well as the relevant data processed:\n\nADDEDEffective: November 5, 2026 This European Economic Area (\"EEA\") and United Kingdom (\"UK\") Privacy Notice provides additional information for data subjects in the EEA and UK that provide for certain privacy rights and requirements specified under laws applicable in the EEA and UK, including the EU and UK General Data Protection Regulation (\"GDPR\") and UK Data Protection Act as amended. Our Privacy Policy and the privacy controls we offer are in line with these laws, and this Notice is intended to supplement the Privacy Policy with additional EEA and UK-specific disclosures. For example, all users can access a copy of their data, request deletion, correct their personal data, and control what personal data they share in their account on our website or in the privacy settings in the mobile application. You have the right to object to our use of your personal data. With many types of data, we have provided you with the ability to delete it if you do not want us processing it anymore. For other types of data, you can stop the use of your data by disabling the feature altogether. You can do these things in your account settings on our website or directly in the mobile application. If there are other types of personal data you do not agree with us processing, you can contact us, using the contact information provided below. Please avoid providing any personal data related to third parties and only provide information about yourself, unless you have their express permission to do so. Character Technologies, Inc. is considered the \"data controller\" of the \"personal data\" (as defined under the GDPR) we handle under our Privacy Policy. In other words, Character.AI is responsible for deciding how to collect, use, and disclose personal data, subject to applicable law. The laws of the EEA and the UK require data controllers to tell you about the legal ground that they rely on for using, sharing, or disclosing your personal data. To the extent those laws apply, our legal grounds are as follows: Contractual Commitments: We use, share, or disclose personal data to honor our contractual commitments to you. For example, we will process your personal data to provide the Services, and to honor our commitments in any agreements that we have with you. When we process your personal data under the contractual basis, providing such data is required. If you do not provide the required personal data, you will not be able to use the Services. With Your Consent: In some cases, we use, share, or disclose personal data on the basis of your consent. If we ask for your consent to process your personal data, you can withdraw your consent at any time by contacting us using the details at the end of our Privacy Policy. Depending on the processing activities for which you do not grant your consent, or for which you later withdraw it, we will not process your personal data for certain purposes. However, this will not affect your ability to use the Services. Please note that if you withdraw your consent, this will not affect the processing activities that took place prior to your withdrawal of consent. Legitimate Interests: In many cases, we use, share, or disclose personal data on the ground that it furthers our legitimate business interests in ways that are not overridden by the interests or fundamental rights and freedoms of the affected individuals, such as personalising your experience across our Services, analyzing and improving our business and Services, providing security for the Services, preventing fraud, and managing legal issues. You have the right to object at any time, on grounds relating to your particular situation as further provided below under the section \"Rights you might have\". Legal Compliance: We need to use and disclose personal data to comply with our legal obligations, for example to carry out fraud prevention checks or comply with other legal or regulatory requirements, where this is explicitly required by law. When we process your personal data to comply with a legal obligation, providing such data is required. If you do not provide such required data, you will not be able to use the Services, as a whole or in part. The processing of special categories of personal data - meaning data concerning health, racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data used for identification, and data concerning a person's sex life or sexual orientation - is neither required nor necessary for the use of the Services. Accordingly, please do not include or share such data in your interactions with us or through the Services. The following chart identifies for each processing purpose the applicable legal basis, as well as the relevant data processed:\n\nPersonal data processed Purpose Legal basis Identifiers Demographic information Interests Your Preferences Your content you submit Voice data, if you chose to use certain voice features Technical information Information we collect from other sources\n\nREMOVEDTo personalise your experience across our Services, including: generating and analysing inferences about use of the Services, such as your preferences and interests and trends about our Services (e.g., which portions of the Services are used most frequently, how users navigate the Services, and what our users like or do not like); tailoring the Services to your preferences and interests (and sending you tailored communications if you provide your consent); and evaluating the success of advertising campaigns. Legitimate interests (Article 6(1)(f) GDPR) in providing you with a better and customized user experience, by tailoring our Services\n\nADDEDTo personalise your experience across our Services, including: generating and analysing inferences about use of the Services, such as your preferences and interests and trends about our Services (e.g., to understand which portions of the Services are used most frequently, how users navigate the Services, and what our users like or do not like); tailoring the Services to your preferences and interests; and evaluating the success of advertising campaigns. Legitimate interests (Article 6(1)(f) GDPR) in providing you with a better and customized user experience, by tailoring our Services - this does not include sending tailored marketing communications, which in turn takes place if you have provided your consent as described in more detail below\n\nContents of communications with us Your content you submit Technical information To detect and prevent fraud, criminal activity, or misuses of our Services, and maintain the security of our IT systems, architecture, assets, customers, and networks. Legitimate interests (Article 6(1)(f) GDPR) in protecting our Services from fraud, criminal activities or misuse, as well as protecting your experience when using the Services, and avoiding any harm to both us and you\n\nREMOVEDAll the information we collect in connection with your use of the Services that may be necessary for this purpose, which may include the information you provide directly to us, that we collect about your use of the Services and/or that we collect from other sources.\n\nADDEDAll the information we collect in connection with your use of the Services necessary for this purpose, including the information you provide directly to us, that we collect about your use of the Services and/or that we collect from other sources.\n\nTo protect our rights, privacy, safety, or property, and/or that of our affiliates, you, or other parties, including to enforce our Terms of Service and any other agreements or policies, as well as establish, exercise, or defend legal claims including sharing data with competent public authorities / courts for this reason. Legitimate interests (Article 6(1)(f) GDPR) in protecting ourselves and our Services and avoiding any harm to both us and you being able to face / file legal actions Identifiers Demographic information Your Preferences Your content you submit Voice data, if you chose to use certain voice features Technical information Contents of communications with us If you purchase any Services: Financial information Commercial information Information we collect from other sources\n\nREMOVEDTo provide, administer, and operate the Services, including: where needed and appropriate, and unless a specific consent is required depending on the means of verification, verifying your age to confirm you are eligible to use the Services and to provide an age-appropriate experience - as clarified in our Terms of Service in Section 6 of our Privacy Policy ); allowing you to create your account and enabling authentication, as necessary to log you in to the Services; communicating with you about changes to our terms, conditions, or policies; responding to your inquiries, comments, feedback, or questions; and processing payments.\n\nADDEDTo provide, administer, and operate the Services, including: where needed and appropriate, and unless a specific consent is required depending on the means of verification, verifying your age to confirm you are eligible to use the Services and to provide an age-appropriate experience- as clarified in our Terms of Service in Section 6 of our Privacy Policy ); allowing you to create your account and enabling authentication, as necessary to log you in to the Services; communicating with you about changes to our terms, conditions, or policies; responding to your inquiries, comments, feedback, or questions; and processing payments.\n\nContractual necessity (Article 6(1)(b) GDPR)\n\nREMOVEDTo analyse, maintain, improve, modify, customize, and measure the Services, including: to train our artificial intelligence/machine learning models; develop new features, algorithms and machine learning models, programs, and services. Such activities may not be carried out on a continuous basis and may vary depending on the evolving needs of the service and amount and type of data required, in line with applicable data protection principles. For further information on our AI training and model improvement activities see the introduction of the Regional Privacy Disclosures.\n\nADDEDTo analyse, maintain, improve, modify, customize, and measure the Services, including developing new features, algorithms and machine learning tools, programs, and services. Such activities may not be carried out on a continuous basis and may vary depending on the evolving needs of the Services and amount and type of data required, in line with applicable data protection principles. We will update this section if we start training or post-training activities using personal data from users in the European Economic Area and United Kingdom..\n\nLegitimate interests (Article 6(1)(f) GDPR) in developing and improving our Services Identifiers Demographic information Your Preferences Interests Your content you submit Voice data, if you chose to use certain voice features Technical information Information we collect from other sources To carry out advertising activities, including: recruiting new users; sending you advertising communications, including to inform you about features or aspects of the Services we believe might be of interest to you (sending tailored advertising); and communicating with you about your responses to user feedback and survey questionnaires.\n\nREMOVEDConsent (where legally required) (Article 6(1)(a) GDPR)\n\nADDEDConsent (Article 6(1)(a) GDPR)\n\nAll the information collected while you use the Services, required to comply with legal obligations (such as, if you purchase any Services, Financial information and Commercial information to comply with tax obligations)\n\nREMOVEDTo comply with legal obligations and legal process (including verifying your age to confirm you are eligible to use the Services and to provide an age-appropriate experience), as well as to share data with competent authority, where mandatory.\n\nADDEDTo comply with legal obligations and legal process, as well as to share data with competent authority, where mandatory.\n\nCompliance with a legal obligation (Article 6(1)(c) GDPR)\n\nREMOVEDRights you might have . Where applicable under local law and subject to applicable exceptions, you have the following rights regarding your personal data: To obtain confirmation as to whether or not we process personal data concerning you, and, where that is the case, to request access to such data and other information provided by the GDPR and a copy of the information we hold about you (including in a portable and/or machine-readable format) - right of access; To object at any time to how we process your personal information on grounds relating to your particular situation, where the processing is based on our legitimate interest. In this event, we will no longer process the personal data unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims - right to object; To update or correct your personal information, including having your incomplete personal data completed - right to rectification; To request that we delete certain personal information we hold about you, unless we can demonstrate that the relevant processing is necessary for - among others - compliance with a legal obligation, as well as for the establishment, exercise or defence of legal claims - right to erasure; To restrict how we process certain personal information about you, where the conditions provided under the GDPR are met - right to restriction of processing; To receive your personal data in a structured, commonly used and machine-readable format, to transmit those data to another controller and to request that we transfer your information to a third-party provider of services, where technically feasible - right to data portability; To withdraw your consent at any time (where you have provided consent for the processing of your personal data) - right to withdraw consent; and To lodge a complaint with the competent supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement - right to lodge a complaint. If you have a complaint or concern about your personal data (including how we carry out age verification activities), or to exercise your rights, we encourage you to contact us first, and we will do our very best to resolve your concern or fulfill your request. You can submit inquiries to https://support.character.ai/hc/en-us/requests/new , via email at privacy@character.ai , or via mail at: Character.AI #1152 700 El Camino Real Suite 120 Menlo Park CA 94025 To withdraw consent to certain tailored advertising or the placement of cookies and similar tracking technologies, please refer to our Cookie Policy and follow the instructions. European Union Representative. VeraSafe Ireland Ltd. has been appointed as our representative in the European Union for data protection matters. In addition to contacting us, if you are located in the European Union, you may also contact VeraSafe Ireland about matters relating to our processing of personal data. You can contact VeraSafe Ireland as follows:\n\nADDEDRights you might have . Where applicable under local law and subject to applicable exceptions, you have the following rights regarding your personal data: To obtain confirmation as to whether or not we process personal data concerning you, and, where that is the case, to request access to such data and other information provided by the GDPR and a copy of the information we hold about you (including in a portable and/or machine-readable format) - right of access; To object at any time to how we process your personal information on grounds relating to your particular situation, where the processing is based on our legitimate interest (such as for tailoring our Services). In this event, we will no longer process the personal data unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims - right to object; To update or correct your personal information, including having your incomplete personal data completed - right to rectification; To request that we delete certain personal information we hold about you, unless we can demonstrate that the relevant processing is necessary for - among others - compliance with a legal obligation, as well as for the establishment, exercise or defence of legal claims - right to erasure; To restrict how we process certain personal information about you, where the conditions provided under the GDPR are met - right to restriction of processing; To receive your personal data in a structured, commonly used and machine-readable format, to transmit those data to another controller and to request that we transfer your information to a third-party provider of services, where technically feasible - right to data portability; To withdraw your consent at any time (where you have provided consent for the processing of your personal data) - right to withdraw consent; and To lodge a complaint with the competent supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement - right to lodge a complaint. If you have a complaint or concern about your personal data (including how we carry out age verification activities), or to exercise your rights, we encourage you to contact us first, and we will do our very best to resolve your concern or fulfill your request. You can submit inquiries to https://support.character.ai/hc/en-us/requests/new , via email at privacy@character.ai , or via mail at: Character.AI #1152 700 El Camino Real Suite 120 Menlo Park CA 94025 To withdraw consent to certain tailored advertising or the placement of cookies and similar tracking technologies, please refer to our Cookie Policy and follow the instructions. European Union Representative. VeraSafe Ireland Ltd. has been appointed as our representative in the European Union for data protection matters. In addition to contacting us, if you are located in the European Union, you can also contact VeraSafe Ireland about matters relating to our processing of personal data. You can contact VeraSafe Ireland as follows:\n\nOnline: https://verasafe.com/public-resources/contact-data-protection-representative Telephone: +420 228 881 031 Post: VeraSafe Ireland Ltd. Unit 3D North Point House North Point Business Park New Mallow Road Cork 123AT2P Ireland\n\nREMOVEDUnited Kingdom Representative. VeraSafe United Kingdom Ltd. has been appointed as our representative in the United Kingdom for data protection matters. In addition to contacting us, if you are located in the United Kingdom, you may also contact VeraSafe United Kingdom about matters relating to our processing of personal data. You can contact VeraSafe United Kingdom as follows:\n\nADDED**United Kingdom Representative.** VeraSafe United Kingdom Ltd. has been appointed as our representative in the United Kingdom for data protection matters. In addition to contacting us, if you are located in the United Kingdom, you can also contact VeraSafe United Kingdom about matters relating to our processing of personal data. You can contact VeraSafe United Kingdom as follows:\n\nTelephone: +44 (20) 4532 2003\n\nREMOVEDRetention of Personal Information. We keep your information for the time necessary for the purposes for which it is processed or as otherwise described at the time the information is collected, unless a different retention period is required by law. The length of time for which we retain information depends on: the purposes for which we collected and used it (e.g., we will process and store your identifiers for as long as your account is active, and you use the Services); your choices, as we will process certain personal data for shorter periods if you withdraw your consent (when requested) or object to the processing as explained above; compliance with a legal obligation (as some laws require us to store data for certain periods of time such as for tax purposes); and whether and what information is needed to resolve disputes, and enforce our agreements. International transfers. Our services are global, and your information may be stored and processed in the U.S. and other countries outside the U.S. that may have data protection laws that differ from the laws in your country, and data may be accessible to law enforcement and national security authorities under certain circumstances. For data subjects in the EEA and the UK, where your information is stored and processed in a country outside the EEA and the UK, we rely on valid transfer mechanisms to comply with the GDPR and applicable data protection law (adopting required technical and organisational measures), such as the European Commission's adequacy decisions , when transferring your Personal Data to any country that has been considered to provide an adequate level of protection. You can contact us at any time to have more information on the safeguards adopted, including how to obtain a copy of them or where they have been made available.\n\nADDED**Retention of Personal Information.** We keep your information for the time necessary for the purposes for which it is processed or as otherwise described at the time the information is collected, unless a different retention period is required by law. The length of time for which we retain information depends on: Identifiers and Your content you submit for as long as your account remains active. Following deletion of your account, all chats and activity associated with your account will be deleted, unless continued retention is required for legal, security or dispute-resolution purposes; Age-related information for the time strictly necessary to perform the age assurance process, more information about our age assurance process is described in our FAQ, available at https://support.character.ai/hc/en-us/articles/52136298705819-Age-Assurance-FAQ The contents of communications with us for as long as necessary to address and resolve your query or support request, and thereafter only to the extent necessary to maintain reasonable records of those communications; the purposes for which we collected and used it (e.g., we will process and store your identifiers for as long as your account is active, and you use the Services). More specifically, we store: Identifiers and Your content you submit for as long as your account remains active. Following deletion of your account, all chats and activity associated with your account will be deleted, unless continued retention is required for legal, security or dispute-resolution purposes; Age-related information for the time strictly necessary to perform the age assurance process, more information about our age assurance process is described in our FAQ, available at https://support.character.ai/hc/en-us/articles/52136298705819-Age-Assurance-FAQ The contents of communications with us for as long as necessary to address and resolve your query or support request, and thereafter only to the extent necessary to maintain reasonable records of those communications; your choices, as we will process certain personal data for shorter periods if you withdraw your consent (when requested, such as for sending marketing communications) or object to the processing where we rely on our legitimate interests (for example, to personalise your experience across our Services), as explained above; compliance with a legal obligation (as some laws require us to store data for certain periods of time such as for tax purposes); for example, although we use third-party large language models and do not use our original training datasets nor users' personal data to train our legacy proprietary models, we are required to retain certain of those datasets in order to comply with applicable legal obligations; such datasets, which may incidentally include personal data relating to data subjects in the European Economic Area and the United Kingdom, are retained only for as long as necessary to comply with those obligations and are not currently used for model training purposes; whether and what information is needed to resolve disputes, and enforce our agreements; and at the end of the applicable retention periods, personal data is deleted or irreversibly anonymised. International transfers. As our Services are global, your information is stored and processed in the U.S. and other countries outside your country of residence, where data protection laws differ from those applicable in your country. Under certain very limited circumstances, your data is accessible to law enforcement and national security authorities in accordance with applicable law. For data subjects in the EEA and the UK, where your information is stored and processed in a country outside the EEA and the UK, we rely on valid transfer mechanisms to comply with the GDPR and applicable data protection law (adopting required technical and organisational measures). In particular, we rely on the European Commission's adequacy decisions , when transferring your Personal Data to any country that has been considered to provide an adequate level of protection. For transfers to other countries that are not covered by an adequacy decision, we rely on appropriate safeguards, including the European Commission's Standard Contractual Clauses ( as amended from time to time), and by imposing specific technical and organizational measures ensuring an adequate level of protection essentially equivalent to that ensured within the EEA and UK. You can contact us at any time, submitting inquiries to https://support.character.ai/hc/en-us/requests/new , or write us via email at privacy@character.ai to have more information on the safeguards adopted, including how to obtain a copy of them or where they have been made available.", "url": "https://wpnews.pro/news/character-ai-privacy-changed-review", "canonical_source": "https://isittrainingonme.com/changes/2026-11-08T07-58-54-characterai-privacy/", "published_at": "2026-11-08 07:58:54+00:00", "updated_at": "2026-11-09 08:49:25.080227+00:00", "lang": "en", "topics": ["ai-policy", "large-language-models", "generative-ai"], "entities": ["Character.AI", "CTI"], "also_reported_by": [], "alternates": {"html": "https://wpnews.pro/news/character-ai-privacy-changed-review", "markdown": "https://wpnews.pro/news/character-ai-privacy-changed-review.md", "text": "https://wpnews.pro/news/character-ai-privacy-changed-review.txt", "jsonld": "https://wpnews.pro/news/character-ai-privacy-changed-review.jsonld"}}