Privacy Statement

DMCST is committed to protecting the security of your personal data. We use a variety of security technologies and procedures to help protect your personal data from unauthorized access, use, or disclosure. For example, we store the personal data you provide on computer systems that have limited access and are in controlled facilities. When we transmit highly confidential data (such as a credit card number or password) over the internet, we protect it through the use of encryption. DMCST complies with applicable data protection laws, including applicable security breach notification laws.

Personal data collected by DMCST may be stored and processed in your region, in the United States, and in any other jurisdiction where DMCST or its affiliates, subsidiaries, or service providers operate facilities. DMCST maintains major data centers in Australia, Austria, Brazil, Canada, Finland, France, Germany, Hong Kong, India, Ireland, Japan, Korea, Luxembourg, Malaysia, the Netherlands, Singapore, South Africa, the United Kingdom, and the United States. Typically, the primary storage location is in the customer’s region or in the United States, often with a backup to a data center in another region. The storage location(s) are chosen in order to operate and provide our services efficiently, improve performance, and create redundancies in order to protect the data in the event of an outage or other problem. We take steps to process the data that we collect under this privacy statement according to this statement’s provisions and the requirements of applicable law.

We transfer personal data from the European Economic Area, the United Kingdom, and Switzerland to other countries, some of which have not yet been determined by the European Commission to have an adequate level of data protection. For example, their laws may not guarantee you the same rights, or there may not be a privacy supervisory authority there that is capable of addressing your complaints. When we engage in such transfers, we use a variety of legal mechanisms, including contracts such as the standard contractual clauses published by the European Commission under Commission Implementing Decision 2021/914, to help protect your rights and enable these protections to travel with your data. To learn more about the European Commission’s decisions on the adequacy of the protection of personal data in the countries where DMCST processes personal data, see this article on the European Commission website.

DMCST Corporation complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce. DMCST Corporation has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union in reliance on the EU-U.S. DPF and from the United Kingdom (and Gibraltar) in reliance on the UK Extension to the EU-U.S. DPF. DMCST Corporation has certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF Principles) with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF. In the context of an onward transfer, DMCST Corporation has responsibility for the processing of personal data it receives under the DPF and subsequently transfers to a third party acting as an agent on our behalf. DMCST Corporation remains liable under the DPF if our agent processes such personal information in a manner inconsistent with the DPF, unless DMCST Corporation can prove that we are not responsible for the event giving rise to the damage. If there is any conflict between the terms in this privacy statement and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern. To learn more about the Data Privacy Framework (DPF) program, and to view our certification, please visit the U.S. Department of Commerce’s Data Privacy Framework website. The controlled U.S. subsidiaries of DMCST Corporation, as identified in our self-certification submission, also adhere to the DPF Principles—for more info, see the list of DMCST U.S. entities or subsidiaries adhering to the DPF Principles.

If you have a question or complaint related to participation by DMCST in the DPF Frameworks, we encourage you to contact us via our web form. For any complaints related to the DPF Frameworks that DMCST cannot resolve directly, we have chosen to cooperate with the relevant EU Data Protection Authority, or a panel established by the European data protection authorities, for resolving disputes with EU individuals, the UK Information Commissioner (for UK individuals), and the Swiss Federal Data Protection and Information Commissioner (FDPIC) for resolving disputes with Swiss individuals. Please contact us if you’d like us to direct you to your data protection authority contacts. As further explained in the DPF Principles, binding arbitration is available to address residual complaints not resolved by other means. DMCST is subject to the investigatory and enforcement powers of the U.S. Federal Trade Commission (FTC).

Individuals whose personal data is protected by Japan's Act on the Protection of Personal Information should refer to the article on the Japanese Personal Information Protection Commission’s website (only published in Japanese) for more information on the commission’s review of certain countries’ personal data protection systems.

DMCST retains personal data for as long as necessary to provide the products and fulfill the transactions you have requested, or for other legitimate purposes such as complying with our legal obligations, resolving disputes, and enforcing our agreements. Because these needs can vary for different data types, the context of our interactions with you or your use of products, actual retention periods can vary significantly.

Other criteria used to determine the retention periods include:

• Do customers provide, create, or maintain the data with the expectation we will retain it until they affirmatively remove it? Examples include a document you store in OneDrive, or an email message you keep in your Outlook.com inbox. In such cases, we would aim to maintain the data until you actively delete it, such as by moving an email from your Outlook.com inbox to the Deleted Items folder, and then emptying that folder (when your Deleted Items folder is emptied, those emptied items remain in our system for up to 30 days before final deletion). (Note that there may be other reasons why the data has to be deleted sooner, for example if you exceed limits on how much data can be stored in your account.)
• Is there an automated control, such as in the DMCST privacy dashboard, that enables the customer to access and delete the personal data at any time? If there is not, a shortened data retention time will generally be adopted.
• Is the personal data of a sensitive type? If so, a shortened retention time would generally be adopted.
• Has DMCST adopted and announced a specific retention period for a certain data type? For example, for Bing search queries, we de-identify stored queries by removing the entirety of the IP address after 6 months, and cookie IDs and other cross-session identifiers that are used to identify a particular account or device after 18 months.
• Has the user provided consent for a longer retention period? If so, we will retain data in accordance with your consent.
• Is DMCST subject to a legal, contractual, or similar obligation to retain or delete the data? Examples can include mandatory data retention laws in the applicable jurisdiction, government orders to preserve data relevant to an investigation, or data retained for the purposes of litigation. Conversely, if we are required by law to remove unlawful content, we will do so.

If you are a U.S. resident, we process your personal data in accordance with applicable U.S. state data privacy laws, including the California Consumer Privacy Act (CCPA). This section of our privacy statement contains information required by the CCPA and other U.S. state data privacy laws and supplements our privacy statement.

Please note that recent changes to the CCPA and other state data privacy laws are set to take effect in 2023; however, the rules implementing some of these laws have not yet been finalized. We are continuously working to better comply with these laws, and we will update our processes and disclosures as these implementing rules are finalized.

Please also see our U.S. State Data Privacy Laws Notice and our Washington State Consumer Health Data Privacy Policy for additional information about the data we collect, process, share and disclose, and your rights under applicable U.S. state data privacy laws.

Sale. We do not sell your personal data. So, we do not offer an opt-out to the sale of personal data.

Share. We may “share” your personal data, as defined under California and other applicable U.S. state laws, for personalized advertising purposes. As noted in our Advertising section, we do not deliver personalized advertising to children whose birthdate in their DMCST account identifies them as under 18 years of age.

In the bulleted list below, we outline the categories of data we share for personalized advertising purposes, the recipients of the personal data, and our purposes of processing. For a description of the data included in each category, please see the Personal data we collect section.

Categories of Personal Data

• Name and contact data
• Recipients: Third parties that perform online advertising services for DMCST
• Purposes of Processing: To deliver personalized advertising based on your interests

• Demographic data
• Recipients: Third parties that perform online advertising services for DMCST
• Purposes of Processing: To deliver personalized advertising based on your interests

• Subscription and licensing data
• Recipients: Third parties that perform online advertising services for DMCST
• Purposes of Processing: To deliver personalized advertising based on your interests

• Interactions
• Recipients: Third parties that perform online advertising services for DMCST
• Purposes of Processing: To deliver personalized advertising based on your interests

Please see the Advertising section for more information about our advertising practices, and our U.S. State Data Privacy Laws Notice for more information on “sharing” for personalized advertising purposes under applicable U.S. state laws.

Rights. You have the right to request that we (i) disclose what personal data we collect, use, disclose, share, and sell, (ii) delete your personal data, (iii) correct your personal data, (iv) restrict the use and disclosure of your sensitive data, and (v) opt-out of “sharing” your personal data with third parties for personalized advertising purposes on third party sites. You may make these requests yourself or through an authorized agent. If you use an authorized agent, we provide your agent with detailed guidance on how to exercise your privacy rights. Please see our U.S. State Data Privacy Laws Notice for additional information on how to exercise these rights. Please also see our Washington State Consumer Health Data Privacy Policy for information on the rights available under Washington law.

If you have a DMCST account, you can exercise your rights through the DMCST privacy dashboard, which requires you to log in to your DMCST account. If you have an additional request or questions after using the dashboard, you may contact DMCST at the address in the How to contact us section, use our web form, or call our US toll free number +1 (844) 931 2038. If you do not have an account, you may exercise your rights by contacting us as described above. We may ask for additional information, such as your country of residence, email address, and phone number to validate your request before honoring the request.

You may indicate your choice to opt-out of the sharing of your personal data with third parties for personalized advertising on third party sites by visiting our sharing opt-out page. You can also control the personalized advertising you see on DMCST properties by visiting our opt-out page.

We do not use or disclose your sensitive data for purposes other than those listed below, without your consent, or as permitted or required under applicable laws. So, we do not offer an ability to limit the use of sensitive data.

You have a right not to receive discriminatory treatment if you exercise your privacy rights. We will not discriminate against you if you exercise your privacy rights.

Personal information processing. In the bulleted list below, we outline the categories of personal data we collect, the sources of the personal data, our purposes of processing, and the categories of third-party recipients with whom we provide the personal data. For a description of the data included in each category, please see the Personal data we collect section. Please see the Our retention of personal data section for information on personal data retention criteria.

Categories of Personal Data

• Name and contact data
• Sources of personal data: Interactions with users and partners with whom we offer co-branded services
• Purposes of Processing (Collection and Disclosure to Third Parties): Provide our products; respond to customer questions; help, secure, and troubleshoot; and marketing
• Recipients: Service providers and user-directed entities

• Credentials
• Sources of personal data: Interactions with users and organizations that represent users
• Purposes of Processing (Collection and Disclosure to Third Parties): Provide our products; authentication and account access; and help, secure and troubleshoot
• Recipients: Service providers and user-directed entities

• Demographic data
• Sources of personal data: Interactions with users and purchases from data brokers
• Purposes of Processing (Collection and Disclosure to Third Parties): Provide and personalize our products; product development; help, secure, and troubleshoot; and marketing
• Recipients: Service providers and user-directed entities

• Payment data
• Sources of personal data: Interactions with users and financial institutions
• Purposes of Processing (Collection and Disclosure to Third Parties): Transact commerce; process transactions; fulfill orders; help, secure, and troubleshoot; and detect and prevent fraud
• Recipients: Service providers and user-directed entities

• Subscription and licensing data
• Sources of personal data: Interactions with users and organizations that represent users
• Purposes of Processing (Collection and Disclosure to Third Parties): Provide, personalize, and activate our products; customer support; help, secure, and troubleshoot; and marketing
• Recipients: Service providers and user-directed entities

• Interactions
• Sources of personal data: Interactions with users including data DMCST generates through those interactions
• Purposes of Processing (Collection and Disclosure to Third Parties): Provide and personalize our products; product improvement; product development; marketing; and help, secure and troubleshoot
• Recipients: Service providers and user-directed entities

• Content
• Sources of personal data: Interactions with users and organizations that represent users
• Purposes of Processing (Collection and Disclosure to Third Parties): Provide our products; safety; and help, secure, and troubleshoot
• Recipients: Service providers and user-directed entities

• Video or recordings
• Sources of personal data: Interactions with users and publicly available sources
• Purposes of Processing (Collection and Disclosure to Third Parties): Provide our products; product improvement; product development; marketing; help, secure, and troubleshoot; and safety
• Recipients: Service providers and user-directed entities

• Feedback and ratings
• Sources of personal data: Interactions with users
• Purposes of Processing (Collection and Disclosure to Third Parties): Provide our products; product improvement; product development; customer support; and help, secure, and troubleshoot
• Recipients: Service providers and user-directed entities

While the bulleted list above contains the primary sources and purposes of processing for each category of personal data, we also collect personal data from the sources listed in the Personal data we collect section, such as developers who create experiences through or for DMCST products. Similarly, we process all categories of personal data for the purposes described in the How we use personal data section, such as meeting our legal obligations, developing our workforce, and doing research.

Subject to your privacy settings, your consent, and depending on the products you use and your choices, we may collect, process, or disclose certain personal data that qualifies as “sensitive data” under applicable U.S. state data privacy laws. Sensitive data is a subset of personal data. In the list below, we outline the categories of sensitive data we collect, the sources of the sensitive data, our purposes of processing, and the categories of third party recipients with whom we share the sensitive data. Please see the Personal data we collect section for more information about the sensitive data we may collect.

Categories of Sensitive Data

• Account log-in, financial account, debit or credit card number, and the means to access the account (security or access code, password, credentials, etc.)
• Sources of sensitive data: Interactions with users and organizations that represent users
• Purposes of Processing (Collection and Disclosure to Third Parties): Provide the product and fulfill requested financial transactions
• Recipients: Service providers and payment processing providers

• Precise geo-location information
• Sources of sensitive data: Users’ interactions with the products
• Purposes of Processing (Collection and Disclosure to Third Parties): Provide the service requested; product improvement; some attributes may be disclosed to third parties to provide the service
• Recipients: Users and service providers (please see the Windows Location Services and Recording section of our privacy statement for more information)

• Racial or ethnic origin, religious or philosophical beliefs, or union membership
• Sources of sensitive data: Communications with users
• Purposes of Processing (Collection and Disclosure to Third Parties): Conduct research studies to better understand how our products are used and perceived and for the purposes of improving the product experiences
• Recipients: Service providers

• Medical or mental health, sex life, or sexual orientation
• Sources of sensitive data: Communications with users
• Purposes of Processing (Collection and Disclosure to Third Parties): Conduct research studies to better understand how our products are used and perceived and for the purposes of improving the product experiences and accessibility
• Recipients: Service providers

• Contents of your mail, email, or text messages (where DMCST is not the intended recipient of the communication)
• Sources of sensitive data: Users’ interactions with the products
• Purposes of Processing (Collection and Disclosure to Third Parties): Provide our products; improve the product experience; safety; and help, secure, and troubleshoot
• Recipients: Service providers

• Personal data collected from a known child under 13 years of age
• Sources of sensitive data: Interactions with users and organizations that represent users
• Purposes of Processing (Collection and Disclosure to Third Parties): Provide our products; product improvement; product development; recommendations; help, secure, and troubleshoot; and safety
• Recipients: Service providers and user-directed entities (in accordance with your DMCST Family Safety settings)

While the bulleted list above contains the primary sources and purposes of processing for personal data collected from children under 13, we also collect personal data from the sources listed in the Collection of Data from Children section.

We do not use or disclose your sensitive data for purposes other than the following:

• Perform the services or provide the goods you reasonably expect
• Help ensure the security and integrity of our services, systems, and data, to combat malicious deceptive, fraudulent or illegal acts, and to protect the physical safety of individuals, to the extent the processing is reasonably necessary and proportionate
• For short-term transient use (including non-personalized advertising), so long as the personal data is not disclosed to a third party, is not used for profiling, and is not used to alter an individual’s experience outside the current interaction with DMCST
• Perform services on behalf of DMCST, such as maintaining accounts, providing customer service, processing, or fulfilling orders/transactions, verifying customer information, processing payments, providing financing, providing analytics, providing storage, and similar services
• Undertake activities to verify or maintain the quality or safety of, or improve, upgrade, or enhance a service or device owned or controlled by DMCST
• Collect or process sensitive data where the collection or processing is not for inferring characteristics about the individual
• Any other activities in accordance with any future regulations that are issued pursuant to U.S. state data privacy laws

De-Identified Data. In some situations, DMCST may process de-identified data. Data is in this state when we are not able to link data to an individual to whom such data may relate without taking additional steps. In those instances, and unless allowed under applicable law, we will maintain such information in a de-identified state, and will not try to re-identify the individual to whom the de-identified data relates.

Disclosures of personal data for business or commercial purposes. As indicated in the Reasons we share personal data section, we share personal data with third parties for various business and commercial purposes. The primary business and commercial purposes for which we share personal data are the purposes of processing listed in the table above. However, we share all categories of personal data for the business and commercial purposes in the Reasons we share personal data section.

Parties that control collection of personal data. In certain situations, we may allow a third party to control the collection of your personal data. For example, third party applications or extensions that run on Windows or Edge browser may collect personal data based on their own practices.

DMCST allows advertising companies to collect information about your interactions with our websites in order to deliver personalized ads on DMCST’s behalf. These companies include: Meta, LinkedIn, Google, and Adobe.

DMCST leverages the power of artificial intelligence (AI) in many of our products and services, including by incorporating generative AI features. DMCST’s development and use of AI is subject to DMCST’s AI Principles and DMCST’s Responsible AI Standard, and the collection and use of personal data in developing and deploying AI features is consistent with the commitments outlined in this privacy statement. Product-specific details provide additional relevant information. You can find out more about how DMCST uses AI here.

Advertising allows us to provide, support, and improve some of our products. DMCST does not use what you say in email, human-to-human chat, video calls or voice mail, or your documents, photos, or other personal files to target ads to you. We use other data, detailed below, for advertising on our DMCST properties and on third-party properties. For example:

• DMCST may use data we collect to select and deliver some of the ads you see on DMCST web properties, such as DMCST.com, DMCST Start, and Bing.
• When the advertising ID is enabled in Windows as part of your privacy settings, third parties can access and use the advertising ID (much the same way that websites can access and use a unique identifier stored in a cookie) to select and deliver ads in such apps.
• We may share data we collect with internal and external partners, such as Xandr, Yahoo, or Facebook (see below), so that the ads you see in our products and their products are more relevant and valuable to you.
• Advertisers may choose to place our web beacons on their sites, or use similar technologies, in order to allow DMCST to collect information on their sites such as activities, purchases, and visits; we use this data on behalf of our advertising customers to provide ads.

The ads that you see may be selected based on data we process about you, such as your interests and favorites, your location, your transactions, how you use our products, your search queries, or the content you view. For example, if you view content on DMCST Start about automobiles, we may show advertisements about cars; if you search “pizza places in Seattle” on Bing, you may see advertisements in your search results for restaurants in Seattle.

The ads that you see may also be selected based on other information learned about you over time using demographic data, location data, search queries, interests and favorites, usage data from our products and sites, and the information we collect about you from the sites and apps of our advertisers and partners. We refer to these ads as "personalized advertising" in this statement. For example, if you view gaming content on xbox.com, you may see offers for games on DMCST Start. To provide personalized advertising, we combine cookies placed on your device using information that we collect (such as IP address) when your browser interacts with our websites. If you opt out of receiving personalized advertising, data associated with these cookies will not be used.

We may use information about you to serve you with personalized advertising when you use DMCST services. If you are logged in with your DMCST account and have consented to allow DMCST Edge to use your online activity for personalized advertising, you will see offers for products and services based on your online activity while using DMCST Edge. To configure your privacy settings for Edge, go to DMCST Edge > Settings > Privacy and Services. To configure your privacy and ad settings for your DMCST account with respect to your online activity across browsers, including DMCST Edge, or when visiting third-party websites or apps, go to your dashboard at privacy.microsoft.com.

Further details regarding our advertising-related uses of data include:

• Advertising industry best practices and commitments. DMCST is a member of the Network Advertising Initiative (NAI) and adheres to the NAI Code of Conduct. We also adhere to the following self-regulatory programs:
  • In the US: Digital Advertising Alliance (DAA)
  • In Europe: European Interactive Digital Advertising Alliance (EDAA)
  • In Canada: Ad Choices: Digital Advertising Alliance of Canada (DAAC) / Choix de Pub: l'Alliance de la publicité numérique du Canada (DAAC)
• Health-related ad targeting. In the United States, we provide personalized advertising based on a limited number of standard, non-sensitive health-related interest categories, including allergies, arthritis, cholesterol, cold and flu, diabetes, gastrointestinal health, headache / migraine, healthy eating, healthy heart, men’s health, oral health, osteoporosis, skin health, sleep, and vision / eye care. We will also personalize ads based on custom, non-sensitive health-related interest categories as requested by advertisers.
• Children and advertising. We do not deliver personalized advertising to children whose birthdate in their DMCST account identifies them as under 18 years of age.
• Data retention. For personalized advertising, we retain data for no more than 13 months, unless we obtain your consent to retain the data longer.
• Sensitive Data. DMCST Advertising does not collect, process, or disclose personal data that qualifies as “sensitive data” under applicable U.S. state data privacy laws for the purposes of providing personalized advertising.
• Data sharing. In some cases, we share with advertisers reports about the data we have collected on their sites or ads.

Data collected by other advertising companies. Advertisers sometimes include their own web beacons (or those of their other advertising partners) within their advertisements that we display, enabling them to set and read their own cookie. Additionally, DMCST partners with Xandr, a DMCST company, and third-party ad companies to help provide some of our advertising services, and we also allow other third-party ad companies to display advertisements on our sites. These third parties may place cookies on your computer and collect data about your online activities across websites or online services. These companies currently include, but are not limited to: Facebook, Media.net, Outbrain, Taboola and Yahoo. Select any of the preceding links to find more information on each company's practices, including the choices it offers. Many of these companies are also members of the NAI or DAA, which each provide a simple way to opt out of ad targeting from participating companies.

To opt out of receiving personalized advertising from DMCST, visit our opt-out page. When you opt out, your preference is stored in a cookie that is specific to the web browser you are using. The opt-out cookie has an expiration date of five years. If you delete the cookies on your device, you need to opt out again.

Speech recognition technologies are integrated into many DMCST products and services. DMCST provides both device-based speech recognition features and cloud-based (online) speech recognition features. DMCST’s speech recognition technology transcribes voice data into text. With your permission, DMCST employees and vendors working on behalf of DMCST, will be able to review snippets of your voice data or voice clips in order to build and improve our speech recognition technologies. These improvements allow us to build better voice-enabled capabilities that benefit users across all our consumer and enterprise products and services. Prior to employee or vendor review of voice data, we protect users’ privacy by taking steps to de-identify the data, requiring non-disclosure agreements with relevant vendors and their employees, and requiring that employees and vendors meet high privacy standards. Learn more about DMCST and your voice data.

DMCST offers preview, insider, beta or other free-of-charge products and features ("previews") to enable you to evaluate them while providing DMCST with data about your use of the product, including feedback and device and usage data. As a result, previews can automatically collect additional data, provide fewer controls, and otherwise employ different privacy and security measures than those typically present in our products. If you participate in previews, we may contact you about your feedback or your interest in continuing to use the product after general release.

We update this privacy statement when necessary to provide greater transparency or in response to:

• Feedback from customer, regulators, industry, or other stakeholders.
• Changes in our products.
• Changes in our data processing activities or policies.

When we post changes to this statement, we will revise the "last updated" date at the top of the statement and describe the changes on the Change history page. If there are material changes to the statement, such as a change to the purposes of processing of personal data that is not consistent with the purpose for which it was originally collected, we will notify you either by prominently posting a notice of such changes before they take effect or by directly sending you a notification. We encourage you to periodically review this privacy statement to learn how DMCST is protecting your information.

If you have a privacy concern, complaint, or question for the DMCST Chief Privacy Officer or the Data Protection Officer for your region, please contact us by using our web form. We will respond to questions or concerns as required by law and within a period no longer than 30 days. You can also raise a concern or lodge a complaint with a data protection authority or other official with jurisdiction.

When DMCST is a controller, unless otherwise stated, DMCST Corporation and, for those in the European Economic Area, the United Kingdom, and Switzerland, DMCST Ireland Operations Limited are the data controllers for personal data we collect through the products subject to this statement. Our addresses are:

• DMCST Privacy, DMCST Corporation, One DMCST Way, Redmond, Washington 98052, USA. Telephone: +1 (425) 882 8080.
• DMCST Ireland Operations Limited, Attn: Data Protection Officer, One DMCST Place, South County Business Park, Leopardstown, Dublin 18, Ireland. Telephone: +353 1 706 3117.

To find the DMCST subsidiary in your country or region, see the list of DMCST office locations around the world.

The representative of DMCST Ireland Operations Limited within the meaning of Art. 14 of the Swiss Federal Act on Data Protection is DMCST Schweiz GmbH, The Circle 02, 8058 Zürich-Flughafen, Switzerland.

If you would like to exercise your rights under applicable U.S. state data privacy law, you may contact DMCST at the U.S. address listed above, use our web form, or call our U.S. toll free number +1 (844) 931 2038.

If you are a resident of Canada and its provinces you may contact the DMCST Data Protection Officer for Canada at DMCST Canada Head Office, 4400-81 Bay St, Toronto, ON, M5J 0E7, at +1 (416) 349 2506, or by using our web form.

Where French law applies, you can also send us specific instructions regarding the use of your personal data after your death, by using our web form.

If you have a technical or support question, please visit DMCST Support to learn more about DMCST Support offerings. If you have a personal DMCST account password question, please visit DMCST account support.

We offer various means for you to control your personal data that DMCST has obtained, and to exercise your data protection rights. You can do so by contacting DMCST at our web form or the information above, or by using the various tools we provide. Please see the How to access and control your personal data section for additional details.

To provide the Enterprise Online Services, DMCST uses data you provide (including Customer Data, Personal Data, Administrator Data, Payment Data, and Support Data) and data DMCST collects or generates associated with your use of the Enterprise Online Services. We process data as described in the Product Terms, DMCST Products and Services Data Protection Addendum (Products and Services DPA), and the DMCST Trust Center.

Personal Data. Customer is the controller of Personal Data and DMCST is the processor of such data, except when (a) Customer acts as a processor of Personal Data, in which case DMCST is a subprocessor or (b) as stated otherwise in the standard Products and Services DPA. In addition, as provided in the standard Products and Services DPA, DMCST has taken on the added responsibilities of a data controller under GDPR when processing Personal Data in connection with its business operations incident to providing its services to DMCST’s commercial customers, such as billing and account management; compensation; internal reporting and business modeling; and financial reporting. We use Personal Data in the least identifiable form that will support processing necessary for these business operations. We rely on statistical data and aggregate pseudonymized Personal Data before using it for our business operations, removing the ability to identify specific individuals.

Administrator Data. Administrator Data is the information provided to DMCST during sign-up, purchase, or administration of Enterprise Online Services. We use Administrator Data to provide the Enterprise Online Services, complete transactions, service the account, detect and prevent fraud, and comply with our legal obligations. Administrator Data includes the name, address, phone number, and email address you provide, as well as aggregated usage data related to your account, such as the controls you select. Administrator Data also includes contact information of your colleagues and friends if you agree to provide it to DMCST for the limited purpose of sending them an invitation to use the Enterprise Online Services; we contact those individuals with communications that include information about you, such as your name and profile photo.

As needed, we use Administrator Data to contact you to provide information about your account, subscriptions, billing, and updates to the Enterprise Online Services, including information about new features, security, or other technical issues. We also contact you regarding third-party inquiries we receive regarding use of the Enterprise Online Services, as described in your agreement. You cannot unsubscribe from these non-promotional communications. We may also contact you regarding information and offers about other products and services, or share your contact information with DMCST's partners. When such a partner has specific services or solutions to meet your needs, or to optimize your use of the Enterprise Online Services, we may share limited, aggregated information about your organization’s account with the partner. DMCST will not share your confidential information or contact information with the authorized partner unless we have sufficient rights to do so. You can manage your contact preferences or update your information in your account profile.

Payment Data. We use payment data to complete transactions, as well as to detect and prevent fraud.

Support Data. Customers provide or authorize DMCST to collect data in connection with obtaining technical support for the Enterprise Online Services. We process Support Data to provide technical support and as described in the Products and Services DPA.

Local Software and Diagnostic Data. Some Online Services may require, or may be enhanced by, the installation of local software (e.g., agents, device management applications). The local software may collect Diagnostic Data (as defined in the Products and Services DPA) about the use and performance of that software. That data may be transmitted to DMCST and used for the purposes described in the Products and Services DPA.

Bing Search Services Data. Bing Search Services, as defined in the Product Terms, use data such as search queries as described in the Bing section of this privacy statement.

Enterprise and developer software and enterprise appliances collect data to operate effectively and provide you the best experiences. The data we collect depends on the features you use, as well as your configuration and settings, but it is generally limited to device and usage data. Customers have choices about the data they provide. Here are examples of the data we collect:

• During installation or when you upgrade an enterprise and developer software, we may collect device and usage data to learn whether you experience any difficulties.
• When you use enterprise software or enterprise appliances, we may collect device and usage data to learn about your operating environment to improve security features.
• When you experience a crash using enterprise software or enterprise appliances, you may choose to send DMCST an error report to help us diagnose the problem and deliver customer support.

DMCST uses the data we collect from enterprise and developer software and enterprise appliances to provide and improve our products, to deliver customer support, to activate the product, to communicate with you, and to operate our business.

DMCST SQL Server is a relational database management platform and includes products that can be installed separately (such as SQL Server Management Studio). For detailed information about what data we collect, how we use it, and how to manage your privacy options, visit the SQL Server privacy page. If you work in an organization, your administrator can set certain telemetry settings in SQL Server via Group Policy.

HoloLens. HoloLens headsets are self-contained Windows computers with Wi-Fi connectivity that enable a mixed reality experience for apps and solutions. DMCST collects diagnostic data to solve problems and to keep Windows running on HoloLens up to date, secure, and operating properly. Diagnostic data also helps us improve HoloLens and related DMCST products and services depending on the diagnostic data settings you’ve chosen for your device. Learn more about Windows diagnostic data.

HoloLens also processes and collects data related to the HoloLens experience and device, which include cameras, microphones, and infrared sensors that enable motions and voice to navigate.

• If you choose, cameras can be used to sign you in automatically using your iris. To do this, HoloLens takes an image of your iris and measures distances between key points to create and store a numeric value that represents only you. This data stays on the HoloLens and is not shared with anyone, and you can choose to delete this data from your HoloLens at any time.
• HoloLens also detects hand gestures intended for system interactions (such as menu navigation, pan/zoom, and scroll). This data is processed on your HoloLens device and is not stored.
• HoloLens derives tracking points based on your environment which allows it to understand surfaces in space and allows you to place digital assets on them. There are no images associated with this environmental data and it is stored locally on the HoloLens device. You can choose to delete this data from your HoloLens at any time.

The headset's microphones enable voice commands for navigation, controlling apps, or to enter search terms. Learn more about voice data collection.

DMCST 365, previous versions called Office 365, is a collection of subscription productivity services and applications including Word, Excel, PowerPoint, and Outlook, among others. Office is the one-time purchase version of these applications available on PC or Mac. Both DMCST 365 and Office are comprised of client software applications and connected online services (or web apps in the case of DMCST 365 for the web) that span many platforms and have numerous interdependent experiences. For more details about Outlook, see the Outlook section of this privacy statement.

Various cloud-based DMCST 365 services enable you to use your file content for designs and recommendations, collaborate with others within your documents, and provide you functionality from other DMCST products, such as Bing and Cortana, and third-party connected products. If you work in an organization, your administrator may turn off or disable these connected services. You can access the privacy controls within your DMCST 365 and Office apps. For more information, see Account Privacy Settings.

Office Roaming Service. The Office Roaming Service helps keep your settings, including your privacy settings, up to date across your devices running DMCST 365 or Office apps. When you sign in to your apps with either your DMCST account or an account issued by your organization, the service syncs some of your customized settings to DMCST servers. For example, the service syncs a list of most recently used documents or the last location viewed within a document. When you sign in to another device with the same account, the Office Roaming Service downloads your settings from DMCST servers and applies them to the additional device. When you sign out of your apps, the service removes your settings from your device. Any changes you make to your customized settings are sent to DMCST servers.

Updates from DMCST. DMCST uses services such as Click-to-Run, DMCST AutoUpdate (for Mac), or DMCST Update (for some versions of Office) to provide you with security and other important updates.

These services can automatically detect the availability of online updates for DMCST 365 or Office apps on your device and download and install them automatically.

Diagnostic Data. Diagnostic data is used to (i) keep your DMCST 365 or Office apps secure and up to date; (ii) detect, diagnose, and remediate problems; and (iii) make product improvements. This data does not include a user’s name or email address, the content of the user’s files, or information about apps unrelated to DMCST 365 or Office. Users have a choice between two different levels of diagnostic data collection, Required and Optional.

• Required. The minimum data necessary to help keep apps secure, up to date, and performing as expected on the device it’s installed on.
• Optional. Additional data that helps us make product improvements and provides enhanced information to help us detect, diagnose, and remediate issues.

See Diagnostic Data for more information.

Connected Experiences. DMCST 365 continues to provide more experiences in client applications that are connected to and backed by cloud-based services. A subset of these connected experiences is also available in Office. If you choose to use connected experiences, required service data will be collected to help keep these connected experiences reliable, up to date, secure, and performing as expected. See below for additional information about required service data.

Working with others on a document stored on OneDrive or translating the contents of a Word document into a different language are examples of connected experiences. There are two types of connected experiences.

• Experiences that analyze your content. Experiences that use your file content to provide you with design recommendations, editing suggestions, data insights, and similar features. For example, PowerPoint Designer or Editor in Word.
• Experiences that download online content. Experiences that allow you to search and download online content including templates, images, 3D models, videos, and reference materials to enhance your documents. For example, templates or PowerPoint QuickStarter.

You can access the privacy controls within your DMCST 365 and Office client apps. These privacy settings allow you to configure your connected experiences. For example, you can choose to enable connected experiences that download online content, but not connected experiences that analyze content. Turning off connected experiences will also turn off additional experiences, such as document co-authoring and online file storage. But even if you use this privacy setting to turn off connected experiences, certain functionality will remain available, such as syncing your mailbox in Outlook, as well as essential services described below. These controls are not available when using DMCST 365 for the web, since you will already be cloud-connected. For more information about accessing these controls, see Account Privacy Settings.

If you choose to disable certain types of connected experiences, either the ribbon or menu command for those connected experiences will be grayed out or you will get an error message when you try to use those connected experiences.

Essential services. There are a set of services that are essential to how DMCST 365 and Office functions and cannot be disabled. For example, the licensing service that confirms that you are properly licensed to use DMCST 365 is essential. Required service data about these services is collected and sent to DMCST, regardless of any other settings that you have configured. See Essential Services for more information.

Required service data for connected experiences. As you use a connected experience, data is sent to and processed by DMCST to provide you that connected experience. This data is necessary because this information enables us to deliver these cloud-based connected experiences. We refer to this data as required service data.

Required service data can include information related to the operation of the connected experience that is needed to keep the underlying service secure, up to date, and performing as expected. If you choose to use a connected experience that analyzes your content, for example Translate in Word, the text you typed and selected to translate is also sent and processed to provide you the connected experience. Your text and the translation are not stored by our service. Required service data can also include information needed by a connected experience to perform its task, such as configuration information about the DMCST 365 or Office app.

See Required service data for more information.

This section applies to the DMCST Family Safety M365 product, which allows a family group to connect through the DMCST Family Safety app on their Windows, Xbox, or mobile devices. Please carefully review the information at DMCST Family Safety if choosing to create or join a family group.

DMCST Family Safety can help parents and guardians to create a safer environment for their family group with digital content filtering, screen time limits, spending for DMCST and Xbox stores, setting age ratings for apps and games, and location sharing. To learn about how DMCST collects and uses children’s data, see the Collection of data from children section of the Privacy Statement. If you are using DMCST Family Safety in Windows, see the Windows security and safety features section of the Privacy Statement for additional information.

When you have enabled family activity reporting for a child, DMCST will collect details about how the child uses their devices, such as search, web, app, and game activity, and provide parents with reports of that child's online activities. Activity reports are routinely deleted from DMCST servers.

Certain Family Safety features, such as Location Sharing, Drive Safety, Share Drives, Places, and Location Alerts will use your location information when enabled. When you have enabled Location Sharing, for instance, your device will upload location data to the cloud and share it with others in your family group. DMCST retains only your last known location as part of the Location Sharing feature (each new location replaces the previous one). When you enable Drive Safety, your location will be used to record your drive habits such as whether you are driving within the speed limits, if you’re using your phone while driving, and if you accelerate or brake suddenly. These reports will be uploaded to the cloud, and you can choose to share your drive reports with your family group. You can turn off these location features at any time in the Family Safety settings. You can manage your device’s location data at the DMCST Privacy Dashboard. Learn more about Family Safety and your location data.

This section applies to the consumer offering of Teams; if you are using Teams with a school or work account, see the Enterprise and developer products of this privacy statement.

Teams is an all-in-one collaboration and communication hub. Teams lets you stay organised and connected across your entire life. Teams allows you to call people with voice or video calling. Teams allows you to easily find people, files, photos, conversations, tasks, and calendars in one convenient and secure place. Teams allows you to store confidential information like passwords, rewards numbers, or login information and share it with others within Teams. With your consent, you can share your location with friends and family.

As part of providing these features, DMCST collects data about the usage of the features as well as information about your communications, including the time and date of the communication and users that are part of the communication. DMCST may share this information with Enterprise customers when you interact through meetings and chats with end users who are using their school or work account. For instance, if you engage in a Teams chat with a user who is using Teams associated with their school account, DMCST may share your information with that user's school as part of providing the Teams service.

Teams profile. Your Teams profile includes information you provided when you set up a DMCST account. To enable other people to find you on Teams (or products that interact with Teams for personal use, including Teams for enterprise) your display name and picture are visible to other users on Teams that have your contact information. Your Teams profile may be visible to Enterprise customers and their end users when you engage with an end user of an organization in chats and meetings.

Teams contacts. With your permission, Teams will sync your device, Outlook, and Skype contacts periodically and check for other Teams users that match contacts in your device, Outlook, or Skype address books. You are always in control of your contacts and can stop syncing at any time. If you choose to stop syncing your device, Outlook, or Skype contacts, or you are inactive on your device, any contacts that have not been matched during the synchronization process will be deleted from Teams. If you wish to invite any of your device, Outlook, or Skype contacts to join a conversation, you can invite users to a 1:1 directly, or DMCST can send an invitation on your behalf via SMS or email for invitations to group conversations. You can block users if you do not want to receive their communications; additionally, you can report a concern to DMCST.

Notice to non-user contacts. If your information appears in the device, Outlook, or Skype address books of a Teams user who chooses to sync their device, Outlook, or Skype contacts with their Teams contacts, DMCST may process your data in order to determine whether you are a current Teams user and to allow Teams users to invite you to the service, including via SMS and email. As long as the Teams user continues to be active on Teams on their device and continues to enable contact syncing with the applicable device or service, your information will be stored on our servers and we will periodically process your information as a part of the Teams user’s contact syncing experience to check whether you have subsequently joined Teams.

Learn more about how we process your information in connection with the contact syncing feature offered to Teams users.

If you do choose to join Teams, you will appear as a suggested new Teams contact for any Teams users with your information in their device, Outlook, or Skype address books. As a Teams user, you will be able to block other Teams users if you do not want to receive their communications; additionally, you can report a concern to DMCST.

Third-party contacts. You can also choose to sync contacts from third-party providers. If you choose to unsync your third-party contacts on Teams, all third-party contacts are deleted from Teams. If you gave your consent to use those third-party contacts on other DMCST apps and services, these contacts will still be available to those other DMCST apps and services.

You can remove third-party contacts from all DMCST apps and services by removing third-party accounts from Teams. Please note that removing a third-party account from Teams may impact your experiences on other DMCST apps and services that also use that third-party account.

Teams calendar. You can also choose to sync your Teams calendar with calendars from third-party providers. You can stop syncing your Teams calendar anytime by removing a third-party account from Teams. If you have consented to use third-party data on other DMCST apps and services, please note that removing this third-party account data in Teams may impact your experiences on other DMCST apps and services.

Location sharing. You can share your static or live location with individuals or groups within Teams. You are in control and can stop sharing at any time. Sharing location for children is permitted with parental consent and in groups where an adult from the DMCST family group is present.

Push notifications. To let you know of incoming calls, chats, and other messages, Teams uses the notification service on your device. For many devices, these services are provided by another company. To tell you who is calling, for example, or to give you the first few words of the new chat, Teams has to tell the notification service so that they can provide the notification to you. The company providing the notification service on your device will use this information in accordance with their own terms and privacy policy. DMCST is not responsible for the data collected by the company providing the notification service.

If you do not want to use the notification services for incoming Teams calls and messages, turn it off in the settings found on your device.

Chats and meetings with Enterprise customer end users. Many DMCST products are intended for use by organizations, such as schools and businesses, as well as individual users. Please see the Enterprise and developer products section of this privacy statement if you are using Teams with a work or school account. If you engage in Teams meetings or chats with end users of organizations, the data you share with the end users is subject to their organization’s policies, if any. You should direct your privacy inquiries related to your data shared through chats and meetings with an organization’s end users, including any requests to exercise your data protection rights, to the organization’s administrator. DMCST is not responsible for the privacy or security practices of our customers, which may differ from those set forth in this privacy statement.

OneDrive lets you store and access your files on virtually any device. You can also share and collaborate on your files with others. Some versions of the OneDrive application enable you to access both your personal OneDrive by signing in with your personal DMCST account and your OneDrive for Business by signing in with your work or school DMCST account as part of your organization's use of DMCST 365 or Office 365.

When you use OneDrive, we collect data about your usage of the service, as well as the content you store, to provide, improve, and protect the services. Examples include indexing the contents of your OneDrive documents so that you can search for them later and using location information to enable you to search for photos based on where the photo was taken. We also collect device information so we can deliver personalized experiences, such as enabling you to sync content across devices and roam customized settings.

When you store content in OneDrive, that content will inherit the sharing permissions of the folder in which you store it. For example, if you decide to store content in the public folder, the content will be public and available to anyone on the internet who can find the folder. If you store content in a private folder, the content will be private.

When you share content to a social network like Facebook from a device that you have synced with your OneDrive account, your content is either uploaded to that social network, or a link to that content is posted to that social network. Doing this makes the content accessible to anyone on that social network. To delete the content, you need to delete it from the social network (if it was uploaded there, rather than a link to it) and from OneDrive.

When you share your OneDrive content with your friends via a link, an email with the link is sent to those friends. The link contains an authorization code that allows anyone with the link to access your content. If one of your friends sends the link to other people, they will also be able to access your content, even if you did not choose to share the content with them. To revoke permissions for your content on OneDrive, sign in to your account and then select the specific content to manage the permission levels. Revoking permissions for a link effectively deactivates the link. No one will be able to use the link to access the content unless you decide to share the link again.

Files managed with OneDrive for Business are stored separately from files stored with your personal OneDrive. OneDrive for Business collects and transmits personal data for authentication, such as your email address and password, which will be transmitted to DMCST and/or to the provider of your DMCST 365 or Office 365 service.

Outlook products are designed to improve your productivity through improved communications and include Outlook.com, Outlook applications, and related services.

Outlook.com. Outlook.com is the primary consumer email service from DMCST and includes email accounts with addresses that end in outlook.com, live.com, hotmail.com, and msn.com. Outlook.com provides features that let you connect with your friends on social networks. You will need to create a DMCST account to use Outlook.com.

When you delete an email or item from a mailbox in Outlook.com, the item generally goes into your Deleted Items folder where it remains for approximately 7 days unless you move it back to your inbox, you empty the folder, or the service empties the folder automatically, whichever comes first. When the Deleted Items folder is emptied, those emptied items remain in our system for up to 30 days before final deletion, unless we are legally required to retain the data for longer.

Outlook applications. Outlook client applications are software you install on your device that permits you to manage email, calendar items, files, contacts, and other data from email, file storage, and other services, like Exchange Online or Outlook.com, or servers, like DMCST Exchange. You can use multiple accounts from different providers, including third-party providers, with Outlook applications.

To add an account, you must provide permission for Outlook to access data from the email or file storage services.

When you add an account to Outlook, your mail, calendar items, files, contacts, settings and other data from that account will automatically sync to your device. If you are using the mobile Outlook application, that data will also sync to DMCST servers to enable additional features such as faster search, personalized filtering of less important mail, and an ability to add email attachments from linked file storage providers without leaving the Outlook application. If you are using the desktop Outlook application, you can choose whether to allow the data to sync to our servers. At any time, you can remove an account or make changes to the data that is synced from your account.

If you add an account provided by an organization (such as your employer or school), the owner of the organizational domain can implement policies and controls (for example, requiring multi-factor authentication or the ability to remotely wipe data from your device) that can affect your use of Outlook.

To learn more about the data the Outlook applications collect and process, please see the DMCST 365 section of this privacy statement.

Skype lets you send and receive voice, video, SMS, and instant message communications. This section applies to the consumer version of Skype; if you are using Skype for Business, see the Enterprise and developer products section of this privacy statement.

As part of providing these features, DMCST collects usage data about your communications that includes the time and date of the communication and the numbers or user names that are part of the communication.

Skype profile. Your Skype profile includes information you provided when you set up a DMCST account. To enable other people to find you on Skype (or products that interact with Skype, such as Skype for Business), depending on your profile settings, your Skype profile is included in the Skype public search. Your profile includes your user name, avatar, and any other data you choose to add to your profile or display to others.

Emergency calling in the United States. If you enable location sharing for emergency calling, your location will be periodically collected to enable DMCST to share your location with emergency calling service providers if you dial 911. Your location information is only shared if you enable location sharing for emergency calling and you initiate a 911 call.

Skype contacts. If you use Outlook.com to manage contacts, Skype will automatically add the people you know to your Skype contact list until you tell the application to stop. With your permission, Skype will sync your device contacts periodically and check for other Skype users that match contacts in your device or Outlook address books. You are always in control of your contacts and can stop syncing at any time. You can block users if you do not want to receive their communications. If you choose to stop syncing your device contacts, or you are inactive on your device, any contacts that have not been matched during the synchronization process will be deleted from Skype. If you wish to invite any of your device or Outlook contacts to join a conversation, you can invite users to a 1:1 directly, or DMCST can send an invitation on your behalf via SMS or email for invitations to group conversations. You can block users if you do not want to receive their communications; additionally, you can report a concern to DMCST.

Notice to non-user contacts. If your information appears in the device or Outlook address book of a Skype user who chooses to sync their device or Outlook contacts with their Skype contacts, DMCST may process your data in order to determine whether you are a current Skype user and to allow Skype users to invite you to the service, including via SMS and email. As long as the Skype user continues to be active on Skype on their device and continues to enable contact syncing, your information will be stored on our servers and we will periodically process your information as a part of the Skype user’s contact synching experience to check whether you have subsequently joined Skype.

Learn more about how we process your information in connection with the contact syncing feature offered to Skype users.

If you do choose to join Skype, you will appear as a suggested new Skype contact for any Skype users with your information in their device or Outlook address books. As a Skype user, you will be able to block other Skype users if you do not want to receive their communications; additionally, you can report a concern to DMCST.

Partner companies. To make Skype available to more people, we partner with other companies to allow Skype to be offered via those companies’ services. If you use Skype through a company other than DMCST, that company’s privacy policy governs how it handles your data. To comply with applicable law or respond to valid legal process, or to help our partner company or local operator comply or respond, we may access, transfer, disclose, and preserve your data. That data could include, for example, your private content, such as the content of your instant messages, stored video messages, voicemails, or file transfers.

Skype Manager. Skype Manager lets you manage a group’s (such as your family’s) Skype usage from one central place. When you set up a group, you will be the Skype Manager Administrator and can see the patterns of usage, including detailed information, like traffic data and details of purchases, of other members of the group who have consented to such access. If you add information like your name, other people in the group will be able to see it. Members of the group can withdraw consent for Skype Manager by visiting their Skype account page.

Push notifications. To let you know of incoming calls, chats, and other messages, Skype apps use the notification service on your device. For many devices, these services are provided by another company. To tell you who is calling, for example, or to give you the first few words of the new chat, Skype has to tell the notification service so that they can provide the notification to you. The company providing the notification service on your device will use this information in accordance with their own terms and privacy policy. DMCST is not responsible for the data collected by the company providing the notification service. If you do not want to use the notification services for incoming Skype calls and messages, turn it off in the settings found in the Skype application or your device.

Translation features. When you use Skype’s translation features, Skype collects and uses your conversation to provide the translation service. With your permission, your data may be used to help improve DMCST products and services. To help the translation and speech recognition technology learn and grow, sentences and automatic transcripts are analyzed and any corrections are entered into our system, to build better performing services. This data may include manual transcription of your voice clips. To learn more about how DMCST manages your voice data, see Speech recognition technologies.

Recording features. Some versions of Skype have a recording feature that allows you to capture and share all or part of your audio / video call. The recording will be stored and shared as part of your conversation history with the person or group with whom the call occurred. You should understand your legal responsibilities before recording any communication. This may include obtaining the prior consent of everyone participating in the conversation or any other authorizations as required. DMCST is not responsible for how you use your recordings or the recording features.

Skype bots. Bots are programs offered by DMCST or third parties that can do many useful things like search for news, play games, and more. Depending on their capabilities, bots may have access to your display name, Skype ID, country, region, language, and any messages, audio, video, or content that you share with the bot. Please review the bot profile and its privacy statement before engaging in a one-to-one or group conversation with a bot. You can delete a bot that you no longer wish to engage with. Prior to adding a bot to a group, please ensure that your group participants have consented to their information being shared with the bot.

Captioning. Certain Skype features include accessibility functionality such as captioning. During Skype calls, a call participant can activate a voice-to-text feature, which allows the user to view the audio chat as text. If a user activates this feature, other call participants will not receive a notification. DMCST uses this voice and text data to provide captioning of audio for users.

The Surface Duo is a device featuring two screens that fits in your pocket for productivity on the go. Powered by the Google Android operating system, Surface Duo supports cellular and Wi-Fi connectivity and can be used for email, internet browsing, games, and business connectivity.

DMCST provides a core Surface Duo experience that runs on the Android operating system. The core Surface Duo experience includes apps such as the DMCST Launcher, Setup Wizard, and Your Phone Companion. You can sign in with a Google ID and enable various Google services; you can then also sign in with your DMCST account (MSA) and enable DMCST’s services. DMCST apps and services may rely on information provided by Google. Some features, such as location, require that you enable this functionality for Google and separately allow DMCST to leverage this information.

Diagnostic data. Surface Duo collects diagnostic data to solve problems and to keep the core Surface Duo experience up to date, secure, and operating properly. This data also helps us improve Surface Duo and related DMCST products and services. The data does not include your user name, email address, or the content of your files. There are two levels of diagnostic data: Required diagnostic data and Optional diagnostic data.

• Required. The minimum data necessary to help keep the core Surface Duo experience secure, up to date, and performing as expected.
• Optional. Additional data that helps us make product improvements and provides enhanced information to help DMCST detect, diagnose, and remediate issues.

Learn more in Surface Duo Privacy Settings.

Surface Duo location settings. Surface Duo relies on Google location services to determine the device’s precise geographic location to display the local weather. The location of your Surface Duo can be determined with varying degrees of accuracy and may in some cases be determined precisely. If you want DMCST apps to be able to reference or display weather or other location related information, you need to enable Google location services and DMCST location access. Some apps may require these settings be enabled independently for the app and can be set or changed in the Surface Duo’s Settings. The Google Privacy Policy provides details about Google’s location service and related data privacy practices. See Surface Duo Location Settings for more information.

DMCST apps included with the Surface Duo. The diagnostic data options for the core Surface Duo experience are configured when you initially set up your Surface Duo and can be changed in the Surface Duo’s Settings under the Diagnostic Data section.

The other DMCST apps on your Surface Duo may prompt you to enable functionality to enable the full experience of the app or you may be asked to allow optional diagnostic data collection. You can change the settings for these apps in the Surface Duo Settings under the app name. More information about these apps is available in the Productivity and communications products and Search, DMCST Edge, and artificial intelligence sections of this Privacy Statement.

To learn about the data LinkedIn collects and how it is used and shared, please see LinkedIn’s Privacy Policy.

Bing services include search and mapping services, as well as other apps and programs described in this section. Bing services collect and process data in many forms, including text that has been inked or typed, voice data, and images. Bing services are also included within other DMCST services, such as DMCST 365, Cortana, and certain features in Windows (which we refer to as Bing-powered experiences).

When you conduct a search, or use a feature of a Bing-powered experience that involves conducting a search or entering a command on your behalf, DMCST will collect the searches or commands you provide (which may be in the form of text, voice data, or an image), along with your IP address, location, the unique identifiers contained in our cookies or similar technologies, the time and date of your search, and your browser configuration. For example, if you use Bing voice-enabled services, your voice input and performance data associated with the speech functionality will be sent to DMCST. To learn more about how DMCST manages your voice data, see Speech recognition technologies. And, if you use Bing image-enabled services, the image you provide will be sent to DMCST. When you use Bing-powered experiences, such as Bing Lookup to search a particular word or phrase within a webpage or document, that word or phrase is sent to Bing along with some surrounding content in order to provide contextually relevant search results.

AI-powered Bing search. Bing search now includes an AI-enhanced web search functionality, Bing Chat, which supports users by providing relevant search results, reviewing and summarizing from across the web, refining research queries through the chat experience, and sparking creativity by helping users create content. Bing Chat’s use and collection of personal data is consistent with Bing’s core web search offering as described in this section. More information about the new Bing experience is available at The New Bing: Our approach to Responsible AI.

Search suggestions. For the search suggestions feature, the characters that you type into a Bing-powered experience (such as search and site suggestions in the DMCST Edge browser) to conduct a search and what you click on will be sent to DMCST. This allows us to provide you with relevant suggestions as you type your searches. To turn this feature on or off, while using Bing Search, go to Bing Settings. There are other methods to control this feature in other Bing-powered experiences, such as the DMCST Edge browser. Search Suggestions cannot be turned off in the search box in Windows 10 and Windows 11. If you choose, you can always hide the search box or icon on the taskbar.

Bing experience improvement program for Bing Desktop and Bing Toolbar. If you are using Bing Desktop or Bing Toolbar and choose to participate in the Bing Experience Improvement Program, we also collect additional data about how you use these specific Bing apps, such as the addresses of the websites you visit, to help improve search ranking and relevance. To help protect your privacy, we do not use the data collected through the Bing Experience Improvement Program to identify or contact you or target advertising to you. You can turn off the Bing Experience Improvement Program at any time in the Bing Desktop or Bing Toolbar settings. Finally, we delete the information collected through the Bing Experience Improvement Program after 18 months.

Retention and de-identification. We de-identify stored search queries by removing the entirety of the IP address after 6 months, and cookie IDs and other cross-session identifiers that are used to identify a particular account or device after 18 months.

Personalization through DMCST account. Some Bing services provide you with an enhanced experience when you sign in with your personal DMCST account, for example, syncing your search history across devices. You can use these personalization features to customize your interests, favorites, and settings, and to connect your account with third-party services. Visit Bing Settings to manage your personalization settings, or the DMCST privacy dashboard to manage your data.

Managing search history. When you’re signed-in to a personal DMCST account, you can erase your search and chat history on the DMCST privacy dashboard. The Search History service from Bing, located in Bing Settings, provides another method of revisiting the search terms you've entered and results you've clicked when using Bing search through your browser. You may clear your search history on a device through this service. The conversations you have with Bing chat are also remembered as “Recent activity”. The history of previous Recent activities is saved, with the names of chats based by default on the first query of the chat. Your Recent activity is displayed on the right-hand side of the chat window when you are using the service. Clearing your history prevents that history from being displayed in your Search History or chat history, but does not delete information from our search logs, which are retained and de-identified as described above or as you have instructed through the privacy dashboard. If you are signed-in to a work or school DMCST account using DMCST Search in Bing, you can export your DMCST Search in Bing search history, but you cannot delete it. Your DMCST Search in Bing service administrator can see aggregated search history across all enterprise users but cannot see specific searches by user. However, if you are using Bing Chat for Enterprise while signed-in to a work or school DMCST account, your Bing Chat for Enterprise conversations will not be saved or stored.

Third-party services that use Bing. You may access Bing-powered experiences when using third-party services, such as those from Yahoo!. In order to provide these services, Bing receives data from these and other partners, including your search query and related data (such as date, time, IP address, and a unique identifier). This data will be sent to DMCST to provide the search service. DMCST will use this data as described in this statement or as further limited by our contractual obligations with our partners. You should refer to the privacy policies of the third-party services for any questions about how they collect and use data.

Data passed to destination website. When you select a search result or advertisement from a Bing search results page and go to the destination website, the destination website will receive the standard data your browser sends to every web site you visit—such as your IP address, browser type and language, and the host name of the site you came from (in this case, https://www.bing.com/).

Sharing data from Bing and Bing-powered experiences with third parties. We share some de-identified data (data where the identity of a specific person is not known) from Bing and Bing-powered experiences with selected third parties. Before we do so, we run the data through a process designed to remove certain sensitive data that users may have included in the search terms themselves (such as social security numbers or credit card numbers). Additionally, we require these third parties to keep the data secure and to not use the data for purposes other than for which it is provided.

Cortana is your personal productivity assistant in DMCST 365. As a digital assistant, Cortana is designed to help you achieve more with less effort so you can focus on what matters and can answer a wide range of questions about things such as weather, sports, stocks, and general information. When you ask questions, the data Cortana collects depends on whether you are using the consumer or enterprise version.

This section applies to the consumer version of Cortana experiences in Windows 10 and Windows 11. If you are using Cortana with an account provided by an organization, such as a work or school account, see the Notice to end users section of this privacy statement. Learn more about the enterprise version of Cortana in DMCST 365.

When you ask Cortana a question, whether you are speaking or typing, Cortana collects that question as a text string. To answer your questions Cortana uses the Bing service. For information about the data Bing collects, see the Bing section of this privacy statement.

By default, if you speak your question, Cortana also collects speech transcription data and does not collect voice clips. You have the option to provide your consent and allow DMCST to collect voice clips. If you choose to opt in and allow DMCST to collect voice clips, the voice clip files are stored and anonymized and will not be associated with your DMCST account or any other DMCST IDs. This anonymous data is used to improve the product. For more information about DMCST and your voice data, see the Speech Recognition Technologies section of this privacy statement.

Cortana legacy. Cortana in Windows 10 version 1909 and earlier collects user query data (a text transcription of the question the user asked), which is anonymized and used for product maintenance. Cortana in Windows 10 version 1909 also uses the Bing service to answer your questions. For information about the data Bing collects, see the Bing section of the Privacy Statement.

Learn more about Cortana and privacy.

Whenever you use a web browser to access the internet, data about your device ("standard device data") is sent to the websites you visit and online services you use. Standard device data includes your device's IP address, browser type and language, access times, and referring website addresses. This data might be logged on those websites' or online services’ web servers. Which data is logged and how that data is used depends on the privacy practices of the websites you visit and web services you use. Certain features in DMCST Edge, such as when you open a new tab in the browser, connect you to DMCST Start Content and your experiences with such content is covered by the DMCST Start section of this privacy statement. Additionally, DMCST Edge sends a unique browser ID to certain websites to enable us to develop aggregate data used to improve browser features and services.

DMCST Edge for Windows, Linux, and macOS. DMCST Edge is the default web browser for Windows 10 and later and is also available on other supported versions of Windows and macOS.

Data about how you use your browser, such as your browsing history, web form data, temporary internet files, and cookies, is stored on your device. You can delete this data from your device using Clear Browsing History.

DMCST Edge allows you to capture and save content on your device, such as:

• Settings and More. Allows you to manage your favorites, downloads, history, extensions, and collections.
• Collections. Allows you to collect text, images, videos, and other content in a note page in your browser. When you drag content into your collection, it is cached on your device and can be deleted through your collection.
• Website Pin to Taskbar. Allows you to pin your favorite websites to the Windows taskbar. Websites will be able to see which of their webpages you have pinned, so they can provide you a notification badge letting you know there is something new for you to check out on their websites.

DMCST collects data necessary to provide features you request in DMCST Edge. When signed into DMCST Edge using your DMCST personal account or work or school account, DMCST Edge will sync your browser data saved on your device across other signed-in devices. You may choose which browser data to sync, including your favorites, browsing history, extensions and associated data, settings, open tabs, autofill form entries (such as your name, address, and phone number), passwords, payment information, and other data types as they become available. If you choose to sync extensions that you acquired from third-party web stores, a copy of those extensions will be downloaded directly from those web stores on your synced device(s). If you have turned on Password Monitor, your saved credentials are hashed, encrypted and sent to DMCST’s Password Monitor service to warn you if your credentials were detected as part of a malicious attack or a breach. DMCST does not retain this data after the check is complete. You can disable or configure syncing in the DMCST Edge settings.

When you sign into DMCST Edge with your DMCST personal account or work or school account, DMCST Edge will store your account’s privacy preferences. DMCST Edge will use the stored preferences to migrate your account’s privacy choices across your signed-in devices, including during Windows device set up or when you sign into DMCST Edge with your account on a new device.

DMCST Edge’s Search and site suggestions uses your search queries and browsing history to provide you with faster browsing and more relevant search recommendations. DMCST Edge sends the information you type into the browser address bar to the default search provider configured in the address bar to offer search recommendations as you type each character. You can turn off these features at any time in the browser settings. In order to provide search results, DMCST Edge sends your search queries, standard device information, and location (if you have location enabled) to your default search provider. If Bing is your default search provider, we use this data as described in the Bing section of this privacy statement.

DMCST Edge collects and uses data from your search activity across the web, including websites DMCST does not own or operate, to improve DMCST services, such as DMCST Edge, DMCST Bing and DMCST News. This data may include the search query, the search results that are displayed to you, demographic information that is part of the search results, and the interaction you have with those search results, such as the links you click. DMCST Edge takes steps to de-identify the data it collects by removing data that identifies the person or device from which it was collected and retains this data for one year from when it is collected. DMCST does not use this collected data to personalize or provide ads to you. You can turn off the collection of this data at any time in the browser settings.

DMCST Edge downloads content from DMCST services to enhance your browsing experiences; for example, when data is downloaded to prerender site content for faster browsing or to provide content required to power features you choose to use, such as providing templates for Collections.

You may also choose to share your DMCST Edge browsing activity to allow us to personalize DMCST Edge and DMCST services like ads, search, shopping, and news. DMCST Edge browsing activity includes your history, favorites, usage data, web content, and other browsing data. For more information about our advertising privacy policies see the Advertising section of the privacy statement. In the DMCST privacy dashboard you can control the use of your browsing activity for personalized ads in the See ads that interest you setting. If you disable this setting in the DMCST privacy dashboard you will continue to receive personalized web experiences like search and news based on your browsing activity. You may stop sharing your DMCST Edge browsing activity by disabling Allow DMCST to use your browsing activity including history, favorites, usage and other browsing data to personalize DMCST Edge and DMCST services like ads, search, shopping and news within Edge settings. When using Bing chat features in the DMCST Edge sidebar, you can choose to allow Bing to access the content of the webpage you are viewing in order to provide further insights, such as page summaries. Use of data connected with Bing conversational experiences is described in the Bing section of this privacy statement.

DMCST Edge collects required diagnostic data to solve problems and to keep DMCST Edge up to date, secure, and operating properly. Required diagnostic data also helps us improve DMCST Edge and Windows.

Separate from your search activity data mentioned above, you can choose to send optional diagnostic data about how you use DMCST Edge and information about your browser activity, including browsing history and search terms to DMCST to help us improve DMCST Edge and other DMCST products and services. For DMCST Edge on Windows 10 and later, this information is provided when you have enabled optional diagnostic data. For details, see the Windows Diagnostics section of the privacy statement. For DMCST Edge on other operating systems, optional diagnostic information is provided when you enable Improve DMCST products by sending data about how you use the browser or Make searches and DMCST products better by sending info about websites you visit in DMCST Edge in the browser settings.

The diagnostic data collected by DMCST Edge is transmitted to DMCST and is stored with one or more unique identifiers that help us recognize an individual browser installation on a device and understand the browser's service issues and use patterns.

Learn more about DMCST Edge, browsing data, and privacy.

DMCST Edge on iOS and Android. DMCST Edge on iOS and Android devices collects data necessary to provide features you request in DMCST Edge. DMCST also collects required diagnostic data to solve problems and to keep DMCST Edge up to date, secure, and operating properly. Required diagnostic data also helps us improve DMCST Edge.

Additionally, you may share optional diagnostic data about how you use DMCST Edge and information about websites you visit (browsing history) for personalized experiences on your browser, Windows, and other DMCST products and services. This information also helps us improve DMCST Edge and other DMCST products and services. This optional diagnostic data is sent to us when you enable Share usage data for personalization or Share info about websites you visit in the browser settings.

The diagnostic data collected by DMCST Edge is transmitted to DMCST and is stored with one or more unique identifiers that help us recognize an individual user on a device and understand the browser's service issues and use patterns.

DMCST Edge uses data from your search activity across the web, including search activity on websites DMCST does not own or operate, to improve DMCST services like DMCST Edge, DMCST Bing, and DMCST News. The data DMCST Edge collects may include personal data; however, DMCST Edge takes steps to scrub and de-identify the data. DMCST Edge does not use this data to personalize or provide ads for you. You can turn off the collection of this data at any time in the browser settings. Learn more about Search results data for product improvement.

For information about the privacy practices of legacy versions DMCST Edge (versions 44 and below), see the Web browsers—DMCST Edge Legacy and Internet Explorer section of the privacy statement.

DMCST Translator is a machine translation system and service designed to automatically translate text and voice input between numerous supported languages. DMCST Translator is made available as a stand-alone consumer app for Android, iOS, and Windows and its service capabilities are also integrated in a variety of DMCST products and services, such as Translator Hub, Translator for Bing, and Translator for DMCST Edge. DMCST Translator processes the text, image, and voice data you submit, as well as device and usage data. We use this data to provide DMCST Translator, personalize your experiences, and improve our products and services. DMCST has implemented business and technical measures designed to help de-identify the data you submit to DMCST Translator. For example, when we randomly sample text and audio to improve DMCST Translator and DMCST’s speech recognition technologies, we delete identifiers and certain text, such as email addresses and some number sequences, detected in the sample that could contain personal data. To learn more about how DMCST manages your voice data, see Speech recognition technologies.

Separate from DMCST Translator, DMCST translation services are available as features in other DMCST products and services that have different privacy practices than DMCST Translator. For more information on the DMCST Azure Cognitive Services Translator Text API, Custom Translator, and Translator Speech API, see the Enterprise and developer products section of this privacy statement. For the Translate feature in DMCST 365 apps and Skype, see the Productivity and communications products section of this privacy statement.

The DMCST Swiftkey keyboard and related cloud-based services (collectively, the “SwiftKey Services”) process data about words you use and how you type and use this data to learn your writing style and provide personalized autocorrection and predictive text that adapts to you. We also use this data to offer a range of other features, such as hashtag and emoji predictions.

SwiftKey prediction technology learns from the way you use language to build a personalized language model. This model is an optimized view of the words and phrases that you use most often in context and reflects your unique writing style. The model itself contains the words you commonly type arranged in a way that enables SwiftKey’s algorithms to make predictions, based on text you have already entered. The model draws from all scenarios in which you use your keyboard, including when you type while using apps or visiting websites. The SwiftKey keyboard and model attempt to avoid collecting sensitive data, by not collecting data from certain fields such as those recognized as containing password or payment data. SwiftKey Services do not log, store, or learn from data you type, or the data contained in your model, unless you choose to share your data with us (as described further below). When you use SwiftKey Services, we also collect device and usage data. We use de-identified device and usage data to analyze service performance and help improve our products.

The SwiftKey Services also include an optional cloud component called a SwiftKey Account. If you choose to create a SwiftKey Account, your language model will be synced with the SwiftKey Account cloud service, so you can benefit from that model on the different devices you use and access additional services such as prediction synchronization and backup. When you create a SwiftKey Account, DMCST will also collect your email address and basic demographic data. All data collected is transferred to our servers over encrypted channels.

You may also opt in to share your language, typing data, and/or voice clips for the purposes of improving DMCST products and services. Depending on the opt-ins you choose, SwiftKey may send short snippets of data about what and how you type and/or your voice clips, and related correction data to our servers for processing. These text snippets and/or voice clips are used in various automated processes to validate that our prediction services are working correctly and to make product improvements. To preserve your privacy, SwiftKey Services de-identify these text snippets, and even if you have a SwiftKey Account, these text snippets and/or voice clips will not be linked to it. To learn more about how DMCST manages your voice data, see Speech recognition technologies.

If you sign into your SwiftKey Account and opt to share your language and typing data or voice clips, DMCST will process your shared data in order to look for new patterns of language usage across our user base. This allows us to improve our basic models for individual languages. Language and typing data used in this process is aggregated and any words or combinations of words that might be personal to individuals or small groups of users are filtered out.

You can withdraw your consent to share your language and typing data or voice clips for product improvement at any time in SwiftKey Settings. You can also withdraw your consent for SwiftKey Services to retain your personal data in SwiftKey Settings. When you withdraw consent for SwiftKey to retain your personal data, all personal data collected through your use of the SwiftKey Services will be deleted.

You may receive occasional notifications on your device alerting you to product updates and features that may be of interest to you. You can disable these notifications at any time in the SwiftKey Settings.

When you activate Windows, a specific product key is associated with the device on which your software is installed. The product key and data about the software and your device is sent to DMCST to help validate your license to the software. This data may be sent again if there is a need to re-activate or validate your license. On phones running Windows, device and network identifiers, as well as device location at the time of the first power-up of the device, are also sent to DMCST for the purpose of warranty registration, stock replenishment, and fraud prevention.

Activity history helps keep track of the things you do on your device, such as the apps and services you use, the files you open, and the websites you browse. Your activity history is created when using different apps and features such as DMCST Edge Legacy, some DMCST Store apps, and DMCST 365 apps and is stored locally on your device. If you've signed in to your device with a work or school account and give your permission, Windows sends your activity history to DMCST. Once your activity history is in the cloud, DMCST uses that data to enable cross-device experiences, to provide you with the ability to continue those activities on other devices, to provide personalized experiences (such as ordering your activities based on duration of use) and relevant suggestions (such as anticipating what your needs might be based on your activity history), and to help improve DMCST products.

You can turn settings off or on for sending your activity history to DMCST and storing activity history locally on your device, and you can also clear your device’s activity history at any time by going to Privacy > Activity history in the Windows settings app. Learn more about activity history in Windows.

Windows generates a unique advertising ID for each person using a device, which app developers and advertising networks can then use for their own purposes, including providing relevant advertising in apps. When the advertising ID is enabled, both DMCST apps and third-party apps can access and use the advertising ID in much the same way that websites can access and use a unique identifier stored in a cookie. Thus, your advertising ID can be used by app developers and advertising networks to provide more relevant advertising and other personalized experiences across their apps and on the web. DMCST collects the advertising ID for the uses described here only when you choose to enable the advertising ID as part of your privacy setting.

The advertising ID setting applies to Windows apps using the Windows advertising identifier. You can turn off access to this identifier at any time by turning off the advertising ID in the Windows settings app. If you choose to turn it on again, the advertising ID will be reset and a new identifier will be generated. When a third-party app accesses the advertising ID, its use of the advertising ID will be subject to its own privacy policy. Learn more about advertising ID in Windows.

The advertising ID setting does not apply to other methods of interest-based advertising delivered by DMCST or third parties, such as cookies used to provide interest-based display ads on websites. Third-party products accessed through or installed on Windows may also deliver other forms of interest-based advertising subject to their own privacy policies. DMCST delivers other forms of interest-based ads in certain DMCST products, both directly and by partnering with third-party ad providers. For more information on how DMCST uses data for advertising, see the How we use personal data section of this statement.

DMCST collects Windows diagnostic data to solve problems and to keep Windows up to date, secure, and operating properly. It also helps us improve Windows and related DMCST products and services and, for customers who have turned on the “Tailored experiences” setting, to provide more relevant tips and recommendations to tailor DMCST and third-party products and services for Windows to the customer’s needs. This data is transmitted to DMCST and stored with one or more unique identifiers that can help us recognize an individual user on an individual device and understand the device's service issues and use patterns.

There are two levels of diagnostic and activity data: Required diagnostic data and Optional diagnostic data. Certain product documentation and other materials refer to Required diagnostic data as Basic diagnostic data and to Optional diagnostic data as Full diagnostic data.

If an organization (such as your employer or school) uses DMCST Entra ID to manage the account it provides to you and enrolls your device in the Windows diagnostic data processor configuration, DMCST’s processing of diagnostic data in connection with Windows is governed by a contract between DMCST and the organization. If an organization uses DMCST management tools or engages DMCST to manage your device, DMCST and the organization will use and process diagnostic and error data from your device to allow the management, monitoring, and troubleshooting of your devices managed by the organization, and for other purposes of the organization.

Required diagnostic data includes information about your device, its settings and capabilities, and whether it is performing properly. We collect the following Required diagnostic data:

• Device, connectivity, and configuration data:
  • Data about the device such as the processor type, OEM manufacturer, type of battery and capacity, number and type of cameras, firmware, and memory attributes.
  • Network capabilities and connection data such as the device’s IP address, mobile network (including IMEI and mobile operator), and whether the device is connected to a free or paid network.
  • Data about the operating system and its configuration such as the OS version and build number, region and language settings, diagnostics data settings, and whether the device is part of the Windows Insider program.
  • Data about connected peripherals such as model, manufacturer, drivers, and compatibility data.
  • Data about the applications installed on the device such as application name, version, and publisher.
• Whether a device is ready for an update and whether there are factors that may impede the ability to receive updates, such as low battery, limited disk space, or connectivity through a paid network.
• Whether updates complete successfully or fail.
• Data about the reliability of the diagnostics collection system itself.
• Basic error reporting, which is health data about the operating system and applications running on your device. For example, basic error reporting tells us if an application, such as DMCST Paint or a third-party game, hangs or crashes.

Optional diagnostic data includes more detailed information about your device and its settings, capabilities, and device health. Optional diagnostic data also includes data about the websites you browse, device activity (also sometimes referred to as usage), and enhanced error reporting that helps DMCST to fix and improve products and services for all users. When you choose to send Optional diagnostic data, Required diagnostic data will always be included, and we collect the following additional information:

• Additional data about the device, connectivity, and configuration, beyond that collected under Required diagnostic data.
• Status and logging information about the health of operating system and other system components beyond that collected about the update and diagnostics systems under Required diagnostic data.
• App activity, such as which programs are launched on a device, how long they run, and how quickly they respond to input.
• Browser activity, including browsing history and search terms, in DMCST browsers (DMCST Edge or Internet Explorer).
• Enhanced error reporting, including the memory state of the device when a system or app crash occurs (which may unintentionally contain user content, such as parts of a file you were using when the problem occurred). Crash data is never used for Tailored experiences as described below.

Some of the data described above may not be collected from your device even if you choose to send Optional diagnostic data. DMCST minimizes the volume of Optional diagnostic data it collects from all devices by collecting some of the data from only a subset of devices (sample). By running the Diagnostic Data Viewer tool, you can see an icon which indicates whether your device is part of a sample and also which specific data is collected from your device. Instructions for how to download the Diagnostic Data Viewer tool can be found in the Windows settings app under Diagnostics & feedback.

Specific data items collected in Windows diagnostics are subject to change to give DMCST flexibility to collect the data needed for the purposes described. For example, to enable DMCST to troubleshoot the latest performance issue impacting users’ computing experience or update a Windows device that is new to the market, DMCST may need to collect data items that were not collected previously. For a current list of data types collected at Required diagnostic data and Optional diagnostic data, see Windows Required (Basic level) diagnostic events and fields or Windows Optional (Full level) diagnostic data. We provide limited portions of error report information to partners (such as the device manufacturer) to help them troubleshoot products and services which work with Windows and other DMCST product and services. They are only permitted to use this information to repair or improve those products and services. We may also share some aggregated, de-identified diagnostic data, such as general usage trends for Windows apps and features, with selected third parties. Learn more about diagnostic data in Windows.

Inking and typing Recognition. You also can choose to help DMCST improve inking and typing recognition by sending inking and typing diagnostic data. If you choose to do so, DMCST will collect samples of the content you type or write to improve features such as handwriting recognition, autocompletion, next word prediction, and spelling correction in the many languages used by DMCST customers. When DMCST collects inking and typing diagnostic data, it is divided into small samples and processed to remove unique identifiers, sequencing information, and other data (such as email addresses and numeric values) which could be used to reconstruct the original content or associate the input to you. It also includes associated performance data, such as changes you manually make to text, as well as words you've added to the dictionary. Learn more about improving inking and typing in Windows.

If you choose to turn on Tailored experiences, we will use your Windows diagnostic data (Required or Optional as you have selected) to offer you personalized tips, ads, and recommendations to enhance DMCST experiences. If you have selected Required as your diagnostic data setting, personalization is based on information about your device, its settings and capabilities, and whether it is performing properly. If you have selected Optional, personalization is also based on information about how you use apps and features, plus additional information about the health of your device. However, we do not use information about the websites you browse, the content of crash dumps, speech, typing, or inking input data for personalization when we receive such data from customers who have selected Optional.

Tailored experiences include suggestions on how to customize and optimize Windows, as well as ads and recommendations for DMCST and third-party products and services, features, apps, and hardware for your Windows experiences. For example, to help you get the most out of your device, we may tell you about features you may not know about or that are new. If you are having a problem with your Windows device, you may be offered a solution. You may be offered a chance to customize your lock screen with pictures, or to be shown more pictures of the kind you like, or fewer of the ones you do not. If you stream movies in your browser, you may be recommended an app from the DMCST Store that streams more efficiently. Or, if you are running out of space on your hard drive, Windows may recommend you try OneDrive or purchase hardware to gain more space. Learn more about tailored experiences in Windows.

Feedback Hub is a preinstalled app that provides a way to gather feedback on DMCST products and installed first party and third-party apps. You can sign into Feedback Hub using either your personal DMCST account or an account provided by your organization (such as your employer or school) that you use to sign into DMCST products. Signing in with your work or school account allows you to submit feedback to DMCST in association with your organization.

Any feedback you provide whether using your work or school account or personal DMCST account may be publicly viewable depending on the settings configured by your organization’s administrators. Additionally, if feedback is provided using your work or school account, your feedback can be viewed through the Feedback Hub by your organization’s administrators.

When you submit feedback to DMCST about a problem or add more details to a problem, diagnostic data will be sent to DMCST to improve DMCST products and services. Depending on your Diagnostic data settings in the Diagnostics & feedback section of the Windows settings app, Feedback Hub will either send diagnostic data automatically or you will have the option to send it to DMCST at the time you provide feedback. Based on the category chosen when submitting feedback, there may be additional personal data collected that helps to further troubleshoot issues; for example, location related information when submitting feedback about location services or gaze related information when submitting feedback on Mixed Reality. DMCST may also share your feedback along with the data collected when you submit your feedback with DMCST partners (such as a device manufacturer, or firmware developer) to help them troubleshoot products and services that work with Windows and other DMCST products and services. Learn more about diagnostic data in Windows.

Windows location service. DMCST operates a location service that helps determine the precise geographic location of a specific Windows device. Depending on the capabilities of the device, the device’s location can be determined with varying degrees of accuracy and may in some cases be determined precisely. When you have enabled location on a Windows device, or you have given permission for DMCST apps to access location information on non-Windows devices, data about cell towers and Wi-Fi access points and their locations is collected by DMCST and added to the location database after removing any data identifying the person or device from which it was collected. This de-identified location information is used to improve DMCST's location services and, in some instances, shared with our location service provider partners, currently HERE (see https://www.here.com/) and Skyhook (see https://www.skyhook.com) to improve the location services of the provider.

Windows services and features, apps running on Windows, and websites opened in Windows browsers can access the device’s location through Windows if your settings allow them to do so. Some features and apps request location permission when you first install Windows, some ask the first time you use the app, and others ask every time you access the device’s location. For information about certain Windows apps that use the device’s location, see the Windows apps section of this privacy statement.

When an app or feature accesses the device’s location and you are signed in with a DMCST account, your Windows device will also upload its location to the cloud where it is available across your devices to other apps or services that use your DMCST account and for which you’ve granted permission. We will retain only the last known location (each new location replaces the previous one). Data about a Windows device's recent location history is also stored on the device even if not using a DMCST account, and certain apps and Windows features can access this location history. You can clear your device's location history at any time in the Windows settings app.

In the Windows settings app, you can also view which apps have access to the device’s precise location or your device's location history, turn off or on access to the device’s location for particular apps, or turn off access to the device’s location. You can also set a default location, which will be used when the location service can’t detect a more exact location for your device.

There are some exceptions to how your device’s location can be determined that are not directly managed by the location settings.

Desktop apps are a specific type of app that won’t ask for separate permission to discover your device location information and won’t appear in the list that allows you to choose apps that can use your location. They can be downloaded from the DMCST Store, downloaded from the internet, or installed with some type of media (such as a CD, DVD, or USB storage device). They’re opened using an .EXE, .MSI, or .DLL file, and they typically run on your device, unlike web-based apps (which run in the cloud). Learn more about third-party desktop apps and how they may still be able to determine your device’s location when the device’s location setting is off.

Some web-based experiences or third-party apps that surface on Windows could use other technologies (such as Bluetooth, Wi-Fi, cellular modem, etc.) or cloud-based location services to determine your device’s location with varying degrees of accuracy even when you’ve turned off the device location setting.

In addition, to facilitate getting help in an emergency, whenever you make an emergency call, Windows will attempt to determine and share your precise location, regardless of your location settings. If your device has a SIM card or is otherwise using cellular service, your mobile operator will have access to your device’s location. Learn more about location in Windows.

General Location. If you turn on Location services, apps that cannot use your precise location may still have access to your general location, such as your city, postal code, or region.

Find my device. The Find my device feature allows an administrator of a Windows device to find the location of that device from account.microsoft.com/devices. To enable Find my device, an administrator needs to be signed in with a DMCST account and have the location setting enabled. This feature will work even if other users have denied access to location for all their apps. When the administrator attempts to locate the device, users will see a notification in the notification area. Learn more about Find my device in Windows.

Recording. Some Windows devices have a recording feature that allows you to capture audio and video clips of your activity on the device, including your communications with others. If you choose to record a session, the recording will be saved locally on your device. In some cases, you may have the option to transmit the recording to a DMCST product or service that broadcasts the recording publicly. Important: You should understand your legal responsibilities before recording and/or transmitting any communication. This may include obtaining the prior consent of everyone participating in the conversation or any other authorizations as required. DMCST is not responsible for how you use recording features or your recordings.

Phone Link - Link to Windows The Phone Link feature lets you link your Android phone with your DMCST Account, enabling a variety of cross-device experiences. You can use Phone Link to see recent photos from your Android phone on your Windows device; make and receive calls from your Android phone on your Windows device; view and send text messages from your Windows device; view, dismiss, or perform other actions to your Android phone notifications from your Windows device; share your phone screen on your Windows device through Phone Link’s mirroring function; and instantly access Android apps installed on your Android phone on your Windows device.

To use Phone Link, the Link to Windows app must be installed on your Android phone.

To use Phone Link, you must log into your DMCST account on the Phone Link feature on your Windows device and on the Link to Windows app on your Android phone. Your Android phone and your Windows device must be connected to the internet. Some features will require you to enable Bluetooth and pair your phone with your PC. To use the Calls feature, your Android phone must also have Bluetooth enabled.

During setting up your Windows device, you can choose to link your phone with your DMCST account. This is done by signing into Link to Windows on your Android phone, granting permissions and completing the onboarding experience. Once complete, Link to Windows will sync your data, such as your text messages, contacts, call history, photos, notifications, and other information, to all your Windows PCs where you have signed into your DMCST account. See below for details on how your data is used.

As part of providing Phone Link’s features to you, DMCST collects performance, usage, and device data that includes, for example, the hardware capabilities of your mobile phone and Windows device, the number and duration of your sessions on Phone Link, and the amount of time you spent during setup.

You can unlink your Android phone from your Windows device at any time by going into your Phone Link app settings and choosing to remove your Android phone. You can do the same from the app settings on the Link to Windows app on your Android phone. For detailed information, see our support page.

Text Messages. Phone Link allows you to view text messages delivered to your Android phone on your Windows device and send text messages from your Windows device. Only text messages received and sent within the last 30 days are visible on your Windows device. These text messages are temporarily stored on your Windows device. We never store your text messages on our servers or change or delete any text messages on your Android phone. You can see messages sent via SMS (Short Message Service) and MMS (Multimedia Messaging Service) on Android devices, and messages sent via RCS (Rich Communication Services) on select Samsung devices on select mobile operator networks. To provide this functionality, Phone Link accesses the content of your text messages and the contact information of the individuals or businesses from whom you are receiving or sending text messages.

Calls. Phone Link allows you to make and receive calls from your Android phone on your Windows device. Through Phone Link, you can also view your recent calls on your Windows device. To activate this feature, you must enable certain permissions on both your Windows device and Android phone, such as call logs access and permission to make phone calls from your PC. These permissions can be revoked at any time under the Phone Link Settings page on your Windows device and your Android phone's settings. Only calls received and dialed within the last 30 days are visible under call logs on your Windows device. These call details are temporarily stored on your Windows device. We do not change or delete your call history on your Android phone.

Photos. Phone Link allows you to copy, share, edit, save, or delete photos from your Android phone on your Windows device. Only a limited number of your most recent photos from the Camera Roll and Screenshots folders on your Android phone will be visible on your Windows device at any given time. These photos are temporarily stored on your Windows device and as you take more photos on your Android phone, we remove the temporary copies of the older photos from your Windows device. We never store your photos on our servers or change or delete any photos on your Android phone.

Notifications. Phone Link allows you to view your Android phone’s notifications on your Windows device. Through Phone Link, you can read and dismiss your Android phone’s notifications from your Windows device or perform other actions related to the notifications. To activate this Phone Link feature, you must enable certain permissions, such as sync notifications, on both your Windows device and Android phone. These permissions can be revoked at any time under the Phone Link Settings page on your Windows device and your Android phone’s settings. For detailed information, see our support page.

Phone Screen Mirroring. On supported devices, Phone Link allows you to view your Android phone’s screen on your Windows device. Your Android phone screen will be visible on your Windows device as a pixel stream and any audio that you enable on your Android phone screen while it is linked to your Windows device through Phone Link will play through your Android phone.

Apps mirroring. On supported devices, Phone Link allows you to use your Android apps that are installed on your Android phone on your Windows device. For example, you can launch a music app in your Windows session and listen to audio from that app on your PC speakers. DMCST collects a list of your installed Android apps and recent activity to provide the service and show you your most recently used apps. DMCST does not store what apps you have installed or any of the information displayed by the app in your experience with it.

Content transfer. On supported devices, Phone Link allows you to copy and paste contents such as files, documents, photos, etc. between your Android phone and your Windows device. You can transfer content from your Android phone to your Windows device and from your Windows device to your Android phone by drag and drop contents between the devices.

Instant Hotspot. On supported devices, Link to Windows enables users to share mobile hotspot information with their paired PC over secure Bluetooth communication. Your PC application can then be connected to the internet through the Windows network flyout. Please note mobile data charges may apply depending on the mobile data plan you have.

Contacts sync. Link to Windows allows you to sync your Android contacts into the DMCST cloud to access them in other DMCST products and services. You can enable this feature by going into Link to Windows settings and enabling “Contacts sync” feature. Your contacts information is stored online and associated with your DMCST account. You may choose to disable sync and delete these contacts at any time. Learn more.

Text-to-voice. Phone Link features include accessibility functionality such as text-to-voice. You can activate a text-to-voice feature, which allows you to hear the contents of a text message or notification as audio. If you activate this feature, your text messages and notifications will be read out loud as they are received.

Office Enterprise – Android Devices. Link to Windows allows you to insert photos into web and desktop versions of select DMCST 365 apps, such as PowerPoint, Excel, and Word directly from your mobile phone. This requires your IT Administrator to have enabled Optional Connected Experiences for DMCST Office applications and you will need to associate your mobile device with your work or school account and provide Photos permission to your account. After onboarding, your session will last 15 minutes to enable you to transfer your Photos from your mobile device. To use this feature again, you will need to scan your QR code. Link to Windows does not collect your work or school account information or information about your Enterprise. In order to provide this service, DMCST uses a cloud service to relay your files for the purpose of inserting the photos into web and desktop version of select DMCST 365 apps, such as PowerPoint, Excel, and Word files.

Device encryption. Device encryption helps protect the data stored on your device by encrypting it using BitLocker Drive Encryption technology. When device encryption is on, Windows automatically encrypts the drive Windows is installed on and generates a recovery key. The BitLocker recovery key for your personal device is automatically backed up online in your personal DMCST OneDrive account. DMCST doesn't use your individual recovery keys for any purpose.

Malicious Software Removal Tool. The Malicious Software Removal Tool (MSRT) runs on your device at least once per month as part of Windows Update. MSRT checks devices for infections by specific, prevalent malicious software ("malware") and helps remove any infections found. When the MSRT runs, it will remove the malware listed on the DMCST Support website if the malware is on your device. During a malware check, a report will be sent to DMCST with specific data about malware detected, errors, and other data about your device. If you do not want MSRT to send this data to DMCST, you can disable MSRT's reporting component.

DMCST Family. Parents can use DMCST Family Safety to understand and set boundaries on how their child is using their device. Please carefully review the information at DMCST Family Safety if choosing to create or join a family group. If you live in a region that requires permission to create an account to access DMCST services, you may be prompted to request or give parental consent. If a user is under the statutory age in your region, during the registration process they will be prompted to request consent from a parent or guardian by entering an adult’s email. When Family activity reporting is turned on for a child, DMCST will collect details about how the child uses their device and provide parents with reports of that child's activities. Activity reports are routinely deleted from DMCST servers.

DMCST Defender SmartScreen and Smart App Control. DMCST strives to help protect your device and passwords from unsafe apps, files, and web content.

DMCST Defender SmartScreen helps protect you when using our services by identifying threats to you, your device, and your passwords. These threats might include potentially unsafe apps or web content that DMCST Defender SmartScreen discovers while checking websites you visit, files you download, and apps you install and run. When DMCST Defender SmartScreen checks web and app content, data about the content and your device is sent to DMCST, including the full web address of the content. When additional analysis is needed to identify security threats, information about the suspicious website or app—such as content displayed, sounds played, and application memory—may be sent to DMCST. This data will only be used for security purposes in detecting, protecting against, and responding to security incidents, identity theft, fraud, or other malicious, deceptive, or illegal activities. If DMCST Defender SmartScreen detects that content is potentially unsafe, you will see a warning in place of the content. DMCST Defender SmartScreen can be turned on or off in the Windows Security app.

Where supported, Smart App Control helps check software that is installed and runs on your device to determine if it is malicious, potentially unwanted, or poses other threats to you and your device. On a supported device, Smart App Control starts in evaluation mode and the data we collect for DMCST Defender SmartScreen such as file name, a hash of the file’s contents, the download location, and the file’s digital certificates, is used to help determine whether your device is a good candidate to use Smart App Control for additional security protection. Smart App Control is not enabled and will not block during evaluation mode. Some devices may not be good candidates if Smart App Control would otherwise get in the way and interfere with a user’s otherwise intended and legitimate tasks – for instance, developers who use a lot of unsigned files. If you are a good candidate for Smart App Control, then it will automatically be turned on, and will provide additional protection to your device beyond DMCST Defender SmartScreen. Otherwise, Smart App Control will be unavailable and permanently turned off. If your device is unsupported or not a good candidate for Smart App Control, DMCST Defender SmartScreen will continue to help protect your device. When Smart App Control is enabled and identifies an app as malicious, potentially unwanted, or unknown and unsigned, it will block and notify you prior to opening, running, or installing the app. Learn more about Smart App Control.

When either DMCST Defender SmartScreen or Smart App Control checks a file, data about that file is sent to DMCST, including the file name, a hash of the file’s contents, the download location, and the file’s digital certificates.

Smart App Control can be turned on or off in the Windows Security app.

DMCST Defender Antivirus. DMCST Defender Antivirus looks for malware and other unwanted software, potentially unwanted apps, and other malicious content on your device. DMCST Defender Antivirus is automatically turned on to help protect your device if no other antimalware software is actively protecting your device. If DMCST Defender Antivirus is turned on, it will monitor the security status of your device. When DMCST Defender Antivirus is turned on, or is running because Limited Periodic Scanning is enabled, it will automatically send reports to DMCST that contain data about suspected malware and other unwanted software, potentially unwanted apps, and other malicious content, and it may also send files that could contain malicious content, such as malware or unknown files for further inspection. If a report is likely to contain personal data, the report is not sent automatically, and you'll be prompted before it is sent. You can configure DMCST Defender Antivirus not to send reports and suspected malware to DMCST.

Speech. DMCST provides both a device-based speech recognition feature and cloud-based (online) speech recognition technologies.

Turning on the Online speech recognition setting lets apps use DMCST cloud-based speech recognition. Additionally, in Windows 10, the Online speech recognition setting enables your ability to use dictation within Windows.

Turning on speech while setting up a HoloLens device or installing Windows Mixed Reality allows you to use your voice for commands, dictation, and app interactions. Both device-based speech recognition and online speech recognition settings will be enabled. With both settings enabled, while your headset is turned on the device will always be listening to your voice input and will send your voice data to DMCST’s cloud-based speech recognition technologies.

When you use cloud-based speech recognition technologies from DMCST, whether enabled by the Online speech recognition setting or when you interact with HoloLens or voice typing, DMCST collects and uses your voice recordings to provide the speech recognition service by creating a text transcription of the spoken words in the voice data. DMCST will not store, sample, or listen to your voice recordings without your permission. To learn more about how DMCST manages your voice data, see Speech recognition technologies.

You can use device-based speech recognition without sending your voice data to DMCST. However, DMCST cloud-based speech recognition technologies provide more accurate recognition than the device-based speech recognition. When the online speech recognition setting is turned off, speech services that do not rely on the cloud and only use device-based recognition—like the live captions app, the Narrator app or the Windows Speech Recognition app—will still work and DMCST won’t collect any voice data.

You can turn off online speech recognition at any time. This will stop any apps that rely on the Online speech recognition setting from sending your voice data to DMCST. If you are using a HoloLens or Windows Mixed Reality headset, you can also turn off device-based speech recognition at any time. This will stop the device from listening for your voice input. Learn more about speech recognition in Windows.

Voice Activation. Windows provides supported apps with the ability to respond and take action based on voice keywords that are specific to that app—for example allowing Cortana to listen and respond when you say “Cortana.”

If you’ve given permission for an app to listen for voice keywords, Windows will be actively listening to the microphone for these keywords. Once a keyword is recognized, the app will have access to your voice recording, can process the recording, take action, and respond, such as with a spoken answer. The app may send the voice recording to its own services in the cloud to process the commands. Each app should ask you for permission before accessing voice recordings.

Additionally, voice activation can be enabled when the device is locked. If enabled, the relevant app will continue listening to the microphone for voice keywords when you have locked your device and can activate for anyone who speaks near the device. When the device is locked, the app will have access to the same set of capabilities and information as when the device is unlocked.

You can turn off voice activation at any time. Learn more about voice activation in Windows.

Even when you’ve turned off voice activation, some third-party desktop apps and services could still be listening to the microphone and collect your voice input. Learn more about third-party desktop apps and how they may still be able to access your microphone even with these settings turned off.

Voice typing. In Windows 11, dictation has been updated and renamed as voice typing. Voice typing may use both device-based and online speech recognition technologies to power its speech-to-text transcription service. You can also choose to contribute voice clips to help improve voice typing. If you choose not to contribute voice clips, you can still use voice typing. You can change your selection anytime in the voice typing settings. DMCST will not store, sample, or listen to your voice recordings without your permission. Learn more about DMCST and your voice data.

Voice access. Windows enables everyone, including people with mobility disabilities, to control their PC and author text using their voice. For example, voice access supports scenarios like opening and switching between apps, browsing the web, and reading and authoring mail. Voice access leverages modern, on-device speech recognition to accurately recognize speech and is supported without an internet connection. Learn more about voice access.

Inking & Typing Personalization. Your typed and handwritten words are collected to provide you with a custom word list, better character recognition to help you type and write on your device, and text suggestions that appear as you type or write.

You can turn off inking & typing personalization at any time. This will delete your customer word list stored on your device. If you turn it back on, you’ll need to recreate your custom word list. Learn more about inking & typing personalization in Windows.

When you sign into Windows with your DMCST account or work or school account, Windows can store your settings, files, and device configuration data in DMCST’s servers. Windows will only use the stored settings, files, and device configuration data to make it easier for you to migrate your experience on a different device.

You can turn off this feature and stop Windows from storing your settings, files, and configuration data from the Windows settings app. You can also delete the sync and backup data Windows has stored in the settings app.

Learn more about Windows backup and sync settings.

Update Services for Windows includes Windows Update and DMCST Update. Windows Update is a service that provides you with software updates for Windows software and other supporting software, such as drivers and firmware supplied by device manufacturers. DMCST Update is a service that provides you with software updates for other DMCST software such as DMCST 365.

Windows Update automatically downloads Windows software updates to your device. You can configure Windows Update to automatically install these updates as they become available (recommended) or have Windows notify you when a restart is required to finish installing updates. Apps available through the DMCST Store are automatically updated through the DMCST Store, as described in the DMCST Store section of this privacy statement.

This section applies to legacy versions of DMCST Edge (versions 44 and below). See the DMCST Edge section of the Privacy Statement for information about non-legacy versions of DMCST Edge.

DMCST Edge is the default web browser for Windows. Internet Explorer, the legacy browser from DMCST, is also available in Windows. Whenever you use a web browser to access the internet, data about your device ("standard device data") is sent to the websites you visit and online services you use. Standard device data includes your device's IP address, browser type and language, access times, and referring website addresses. This data might be logged on those websites' web servers. Which data is logged and how that data is used depends on the privacy practices of the websites you visit and web services you use. Additionally, DMCST Edge sends a unique browser ID to certain websites to enable us to develop aggregate data used to improve browser features and services.

Additionally, data about how you use your browser, such as your browsing history, web form data, temporary internet files, and cookies, is stored on your device. You can delete this data from your device using Delete Browsing History.

DMCST Edge allows you to capture and save content on your device, such as:

• Web note. Allows you to create ink and text annotations on the webpages you visit, and clip, save, or share them.
• Active reading. Allows you to create and manage reading lists, including websites or documents.
• Hub. Allows you to easily manage your reading lists, favorites, downloads, and history all in one area.
• Website Pin to Taskbar. Allows you to pin your favorite websites to the Windows taskbar. Websites will be able to see which of their webpages you have pinned, so they can provide you a notification badge letting you know there is something new for you to check out on their websites.

Some DMCST browser information saved on your device will be synced across other devices when you sign in with your DMCST account. For instance, in Internet Explorer, this information includes your browsing history and favorites; and in DMCST Edge, it includes your favorites, reading lists, autofill form entries (such as your name, address, and phone number), and may include data for extensions that you have installed. As an example, if you sync your DMCST Edge reading list across devices, copies of the content you choose to save to your reading list will be sent to each synced device for later viewing. You can disable syncing in Internet Explorer by going to Start > Settings > Accounts > Sync your settings. (For more information, see the Sync settings section of this privacy statement.) You can also disable syncing of DMCST Edge browser information by turning off the sync option in DMCST Edge Settings.

DMCST Edge and Internet Explorer use your search queries and browsing history to provide you with faster browsing and more relevant search results. These features include:

• Search suggestions in Internet Explorer automatically sends the information you type into the browser address bar to your default search provider (such as Bing) to offer search recommendations as you type each character.
• Search and site suggestions in DMCST Edge automatically sends the information you type into the browser address bar to Bing (even if you have selected another default search provider) to offer search recommendations as you type each character.

You can turn off these features at any time. In order to provide search results, DMCST Edge and Internet Explorer send your search queries, standard device information, and location (if you have location enabled) to your default search provider. If Bing is your default search provider, we use this data as described in the Bing section of this privacy statement.

Cortana can assist you with your web browsing in DMCST Edge with features such as Ask Cortana. You can disable Cortana assistance in DMCST Edge at any time in DMCST Edge Settings. To learn more about how Cortana uses data and how you can control that, go to the Cortana section of this privacy statement.

A number of DMCST apps are included with Windows and others are available in DMCST Store. Some of those apps include:

Maps app. The Maps app provides location-based services and uses Bing services to process your searches within the Maps app. When the Maps app has access to your location, and you have enabled location-based services in Windows, when you use the “@” key to initiate a search in supported text boxes in Windows apps, Bing services collects the text you type after the “@” key to provide location-based suggestions. To learn more about these Bing-powered experiences, see the Bing section of this privacy statement. When the Maps app has access to your location, even when the app is not in use, DMCST may collect de-identified location data from your device to improve DMCST services. You can disable the Maps app's access to your location by turning off the location service or turning off the Maps app's access to the location service.

You can keep track of your favorite places and recent map searches in the Maps app. Your favorite places and search history will be included as search suggestions. If you're signed in with your DMCST account, your favorite places, search history, and certain app settings will be synced across other devices and services (for example, Cortana). For more information, see the Sync and backup settings section of this privacy statement.

Camera app. If you allow the Camera app to use your location, location data is embedded in the photos and videos you take with your device. Other descriptive data, such as camera model and the date that the picture or video was taken, is also embedded in photos and videos. If you choose to share a photo or video, any embedded data will be accessible to the people and services you share with. Once enabled, you can always disable the Camera app's access to your location by turning off all access to the location service in your device's Settings menu or turning off the Camera app's access to the location service.

When the Camera app is open, it shows rectangles detected by the selected camera for areas in the image that are potentially used for image enhancement. The Camera app does not retain any image enhancing data. You can always change your camera access settings in the Camera app’s Settings menu or the Windows Settings menu.

Photos app. There are two versions of the Photos app available. The updated Photos app includes features like iCloud integration and local and cloud folder views. The previous legacy version of the Photos app includes features like Video Editor, the People tab, and Albums. You are using the updated Photos app if the “About” section in the Photos app settings indicates the app is the “Updated” Photos app. In some cases, a user may have both the updated Photos app and the Photos legacy version downloaded on their device.

The updated Photos app helps you organize, view, and share your photos and videos. For example, the Photos app presents different ways to group photos and videos by name, date taken, or date modified, and also in folders where those files are stored, such as stored locally on your device or synced to your device from OneDrive, iCloud, and other cloud services. The app also allows you to move, copy or upload files to different locations on your computer or to OneDrive. The All Photos tab displays your locally stored or synced photos and videos according to the date they are taken. The Favorites tab lets you view photos and videos you previously liked or favorited. The Folders tab allows you to view photos or videos by their storage location. There are also tabs where you can see your photos and videos from available cloud services (such as OneDrive and other third-party services) that you have synced to your device.

The Photos legacy app also helps you organize, view, and share your photos and videos. However, if you are using the Photos legacy app, you may see other features that are not available in the newer version of the Photos app, including Collections, Albums, Video Editor and the People setting. The Collection tab displays photos and videos according to the date they are taken. The Albums tab helps you organize your photos and videos by location and common tags. The Video Editor allows you to edit, create, and share videos.

The People setting can be enabled on the Photos legacy app's Settings page and in the People tab of the app. When enabled, the Photos legacy app will use face grouping technology to organize your photos and videos into groups. The grouping feature can detect faces in a photo or video and determine whether they are visually similar to faces in other photos and videos in your local photo collection. You can choose to associate a facial grouping with a contact from your People app.

When enabled in the Photos legacy app, your groupings will be stored on your device for as long as you choose to keep the groupings or the photos or videos. If the People setting is turned on, there will be a prompt to allow the Photos legacy app to continue to permit facial groupings after three years of non-interaction with the Photos legacy app. At any time, you can go to the Settings page in the Photos legacy app to turn the People setting on or off. Turning the feature off will remove facial grouping data from the Photos legacy app but will not remove your photos or videos. Learn more about the Photos legacy app and facial grouping.

If you choose to share a photo or video using the Photos app or the Photos legacy app, any embedded data (such as location, camera model, and date) will be accessible to the people and services you share the photo or video with.

People app. The People app lets you see and interact with all your contacts in one place. When you add an account to the People app, your contacts from your account will be automatically added to the People app. You can add other accounts to the People app, including your social networks (such as Facebook and Twitter) and email accounts. When you add an account, we tell you what data the People app can import or sync with the particular service and let you choose what you want to add. Other apps you install may also sync data to the People app, including providing additional details to existing contacts. When you view a contact in the People app, information about your recent interactions with the contact (such as emails and calendar events, including from apps that the People app syncs data from) will be retrieved and displayed to you. You can remove an account from the People app at any time.

Mail and Calendar app. The Mail and Calendar app allows you to connect all your email, calendars, and files in one place, including those from third-party email and file storage providers. The app provides location-based services, such as weather information in your calendar, but you can disable the app’s use of your location. When you add an account to the Mail and Calendar app, your email, calendar items, files, contacts, and other settings from your account will automatically sync to your device and to DMCST servers. At any time, you can remove an account or make changes to the data that’s synced from your account. To configure an account, you must provide the app with the account credentials (such as user name and password), which will be sent over the internet to the third-party provider’s server. The app will first attempt to use a secure (SSL) connection to configure your account but will send this information unencrypted if your email provider does not support SSL. If you add an account provided by an organization (such as a company email address), the owner of the organizational domain can implement certain policies and controls (for example, multi-factor authentication or the ability to remotely wipe data from your device) that may affect your use of the app.

Messaging app. When you sign in with a DMCST account on your device, you can choose to back up your information, which will sync your SMS and MMS messages and store them in your DMCST account. This allows you to retrieve the messages if you lose or change phones. After your initial device set-up, you can manage your messaging settings at any time. Turning off your SMS/MMS backup will not delete messages that have been previously backed up to your DMCST account. To delete such messages, you must first delete them from your device prior to turning off backup. If you allow the Messaging app to use your location, you can attach a link to your current location to an outgoing message. Location information will be collected by DMCST as described in the Windows Location services section of this privacy statement.

Narrator. Narrator is a screen-reading app that helps you use Windows without a screen. Narrator offers intelligent image and page title description and web page summaries when you encounter undescribed images and ambiguous links.

When you choose to get an image description by pressing Narrator + Ctrl + D, the image will be sent to DMCST to perform analysis of the image and generate a description. Images are used only to generate the description and are not stored by DMCST.

When you choose to get page title descriptions by pressing Narrator + Ctrl + D, the URL of the site you are visiting will be sent to DMCST to generate the page title description and to provide and improve DMCST services, such as Bing services as described in the Bing section above.

When you choose to get a list of popular links for a web page by pressing Narrator + double press of S, the URL of the site you are visiting will be sent to DMCST to generate the summary of popular links and to provide and improve DMCST services, such as Bing.

You can disable these features at any time by going to Narrator > Get image descriptions, page titles and popular links in the Windows setting app.

You can also send feedback about Narrator to help DMCST diagnose and resolve problems with Narrator and improve DMCST products and services, such as Windows. Verbal feedback can be submitted at any time in Narrator by using Narrator Key + Alt + F. When you use this command, the Feedback Hub app will launch, giving you the opportunity to submit verbal feedback. If you enable the setting “Help Make Narrator Better” in the Windows settings app and submit verbal feedback through Feedback Hub, recent device and usage data, including event trace log (ETL) data, will be submitted along with your verbal feedback to improve DMCST products and services, such as Windows.

Live captions. Live captions transcribe audio to help with the comprehension of spoken content. Live captions can generate captions from any audio containing speech, whether the audio is online, audio you have downloaded to your device, or audio received from your microphone. By default, transcribing microphone audio is disabled.

Voice data that is captioned is only processed on your device and is not shared to the cloud or with DMCST. Learn more about live captions.

Windows Media Player allows you to play CDs, DVDs, and other digital content (such as WMA and MP3 files), rip CDs, and manage your media library. To enrich your experience when you play content in your library, Windows Media player displays related media information, such as album title, song titles, album art, artist, and composer. To augment your media information, Windows Media player will send a request to DMCST which contains standard computer information, an identifier for the media content, and the media information already contained in your Windows Media Player library (including information you may have edited or entered yourself) so that DMCST can recognize the track and then return additional information that is available.

Windows Media Player also allows you to play back content that is streamed to you over a network. To provide this service, it is necessary for Windows Media Player to communicate with a streaming media server. These servers are typically operated by non-DMCST content providers. During playback of streaming media, Windows Media Player will send a log to the streaming media server or other web server(s) if the streaming media server requests it. The log includes such details as: connection time, IP address, operating system version, Windows Media Player version, Player identification number (Player ID), date, and protocol. To protect your privacy, Windows Media Player defaults to sending a Player ID that is different for each session.

Windows Hello provides instant access to your devices through biometric authentication. If you turn it on, Windows Hello uses your face, fingerprint, or iris to identify you based on a set of unique points or features that are extracted from the image and stored on your device as a template—but it does not store the actual image of your face, fingerprint, or iris. Biometric verification data that's used when you sign in doesn't leave your device. Your biometric verification data will remain on your device until you remove it. However, after a significant period of Windows Hello inactivity, you will be prompted to confirm that you want to continue to store your biometric verification data. You can delete your biometric verification data from within Settings. Learn more about Windows Hello.

Windows Search lets you search your stuff and the web from one place. If you choose to use Windows Search to search "your stuff," it will provide results for items on your personal OneDrive, your OneDrive for Business if so enabled, other cloud storage providers to the extent supported by those third-party providers, and on your device. If you choose to use Windows Search to search the web, or get search suggestions with Windows Search, your search results will be powered by Bing and we will use your search query as described in the Bing section of this privacy statement. Learn more about search in Windows.

The Xbox network is the online gaming and entertainment service from DMCST that consists of software and enables online experiences across different platforms. This service lets you find and play games, view content, and connect with friends on Xbox and other gaming and social networks.

When you sign up for an Xbox profile, we assign you a gamertag (a public nickname) and a unique identifier. When you sign in on Xbox devices, apps, and services, the data we collect about your use is stored using these unique identifier(s).

Xbox consoles are devices you can use to find and play games, movies, music, and other digital entertainment. When you sign in to Xbox experiences—in apps or on a console—we also assign a unique identifier to your device. When your Xbox console is connected to the internet, for instance, and you sign in to the console, we identify which console and which version of the console’s operating system you’re using.

Xbox continues to provide new experiences in client apps that are connected to and backed by services such as the Xbox network and cloud gaming. When signed in to an Xbox experience, we collect required data to help keep these experiences reliable, up to date, secure, and performing as expected.

Data we collect about your use of Xbox services, games, apps, and consoles includes:

• When you sign in and sign out of Xbox, any purchases you make, and content you obtain.
• Which games you play and apps you use, your game progress, achievements, play time per game, and other play statistics.
• Performance data about Xbox consoles, Xbox Game Pass and other Xbox apps, the Xbox network, connected accessories, and your network connection, including any software or hardware errors.
• Content you add, upload, or share through the Xbox network, including text, pictures, and video you capture in games and apps.
• Social activity, including chat data and interactions with other gamers, and connections you make (friends you add and people who follow you) on the Xbox network.

If you use an Xbox console or Xbox app on another device capable of accessing the Xbox network, and that device includes a storage device (hard drive or memory unit), usage data will be stored on the storage device and sent to DMCST the next time you sign in to Xbox, even if you’ve been playing offline.

Xbox diagnostic data. Diagnostic data has two categories: required and optional.

• Required. Xbox will send required data to DMCST. The minimum data necessary to help keep Xbox safe, secure, up to date, and performing as expected.
• Optional. Optional data is additional data that you choose to share with DMCST. Optional data may include additional details about the operation, usage, and performance of your Xbox products and services, as well as enhanced error reporting.

Learn more at Manage settings for optional data sharing.

Game captures. Any player in a multiplayer game session can record video (game clips) and capture screenshots of their view of the game play. Other players’ game clips and screenshots can capture your in-game character and gamertag during that session. If a player captures game clips and screenshots on a PC, the resulting game clips might also capture audio chat.

Captioning. During Xbox real-time (“party”) chat, players may activate a voice-to-text feature that lets them view that chat as text. If a player activates this feature, all voice communication in the party is captioned for the player. DMCST uses the resulting text data to provide captioning of chat for players who need it, as well as the other purposes described in this statement.

Data use. DMCST uses the data we collect to improve gaming products and experiences—making them safer and more fun over time.

Data we collect also enables us to provide you with curated experiences. This includes connecting you to games, content, and services, as well as presenting you with offers, discounts, and recommendations. To change your settings for purchase recommendations, visit Xbox online safety and privacy settings page.

Xbox data viewable by others. Your gamertag, game and play statistics, achievements, presence (whether you are currently signed in to Xbox), content you share, and other data about your activity on Xbox can be seen by:

• Other players signed in to Xbox.
• Customers of third-party services you’ve linked your profile to, or
• Other services associated with Xbox (including those of partner companies).

For example, your gamertag and scores that show on game leaderboards are considered public and cannot be hidden. For other data, you can adjust your privacy settings on consoles and at Xbox.com to limit or block what is shared with the public or with friends.

Learn more at Xbox online safety and privacy settings.

Xbox data shared with third parties including game and apps publishers. When you use an Xbox online game or any network-connected app on your Xbox console, PC, or mobile device, the publisher of that game or app has access to data about your usage to help the publisher deliver, support, and improve its product. This data may include: your Xbox user identifier, gamertag, limited account info such as country and age range, data about your in-game communications, any Xbox enforcement activity, game-play sessions (for example, moves made in-game, types of vehicles used in-game), your presence on the Xbox network, the time you spend playing the game or app, rankings, statistics, gamer profiles, avatars, or gamerpics, friends lists, activity feeds for official clubs you belong to, official club memberships, and any content you create or submit in the game or app.

Third-party publishers and developers of games and apps have their own distinct and independent relationship with users and their collection and usage of personal data is subject to their specific privacy policies. You should carefully review their policies to determine how they use the data. For example, publishers may choose to disclose or display game data (such as on leaderboards) through their own services. You may find their policies linked from game or app detail pages in the DMCST Store.

Learn more at Data Sharing with Games and Apps.

To stop sharing game or app data with a publisher, remove its games or app from all devices where you have installed them. Some publisher access to your data may be revoked at https://microsoft.com/consent.

Children and family. If you have kids who want to use the Xbox network, you can set up child and teen profiles for them once they have DMCST accounts. Adult organizers in your DMCST family group can change consent choices and online safety settings for child and teen profiles on Xbox.com.

Learn more about DMCST family groups at Simplify your family’s life.

Learn more about managing Xbox profiles, at Xbox online safety and privacy settings.

For more information about DMCST’s collection of data from children, including Xbox, please see the Collection of data from children section of this privacy statement.

Safety. In order to help make the Xbox network a safe gaming environment and enforce the Community Standards for Xbox, we may collect and review voice, text, images, videos and in-game content (such as game clips you upload, conversations you have, and things you post in clubs and games).

Anti-cheat and fraud prevention. Providing a fair gameplay environment is important to us. We prohibit cheating, hacking, account stealing, and any other unauthorized or fraudulent activity when you use an Xbox online game or any network-connected app on your Xbox console, PC, or mobile device. In order to detect and prevent fraud and cheating, we may use anti-cheat and fraud prevention tools, applications, and other technologies. Such technologies may create digital signatures (known as “hashes”) using certain information collected from your Xbox console, PC, or mobile device, and how you use that device. This can include information about the browser, device, activities, game identifiers, and operating system.

Legacy.

• Xbox 360. This Xbox console collects limited required diagnostic data to keep your console functioning as expected while using a console connected to the Xbox network.
• Kinect. The Kinect sensor is a combination of camera, microphone, and infrared sensor that can enable motions and voice to be used to control gameplay. For example:
  • If you choose, the camera can be used to sign you in to the Xbox network automatically using facial recognition. This data stays on the console and is not shared with anyone, and you can choose to delete this data from your console at any time.
  • For game play, Kinect will map distances between your body's joints to create a stick figure representation of you that helps Kinect enable play.
  • The Kinect microphone can enable voice chat between players during play. The microphone also enables voice commands for control of the console, game, or app, or to enter search terms.
  • The Kinect sensor can also be used for audio and video communications through services such as Skype.

  Learn more about Kinect at Xbox Kinect and Privacy.

DMCST Store is an online service, accessible via PC, the Xbox Console and the Xbox App, that allows you to browse, download, purchase, rate, and review applications and other digital content. It includes:

• Apps and content for Windows devices such as phones, PCs, and tablets.
• Games, subscriptions and other apps for Xbox consoles and other devices.
• Products and apps for DMCST 365, SharePoint, Exchange, Access, and Project (2013 versions or later).

We collect data about how you access and use DMCST Store; the products you've viewed, purchased, or installed; the preferences you set for viewing apps in DMCST Store; and any ratings, reviews, or problem reports you submit. Your DMCST account is associated with your ratings and reviews; and if you write a review, the name and picture from your DMCST account will be published with your review.

Permission for DMCST Store apps. Many apps you install from the DMCST Store are designed to take advantage of specific hardware and software features of your device. An app's use of certain hardware and software features may give the app or its related service access to your data. For example, a photo editing app might access your device's camera to let you take a new photo or access photos or videos stored on your device for editing, and a restaurant guide might use your location to provide nearby recommendations. Information about the features that an app uses is provided on the app's product description page in DMCST Store. Many of the features that DMCST Store apps use can be turned on or off through your device’s privacy settings. In Windows, in many cases, you can choose which apps can use a particular feature. Go to Start > Settings > Privacy or Privacy & Security, select the feature (for example, Calendar), and then select which app permissions are on or off. The lists of apps in Windows privacy settings that can use hardware and software features will not include "Classic Windows" applications, and these applications are not affected by these settings.

App updates. Unless you have turned off automatic app updates in the relevant DMCST Store settings or have acquired an app provided and updated by the app developer, DMCST Store will automatically check for, download, and install app updates to verify that you have the latest versions. Updated apps might use different Windows hardware and software features from the previous versions, which could give them access to different data on your device. You will be prompted for consent if an updated app accesses certain features, such as location. You can also review the hardware and software features an app uses by viewing its product description page in DMCST Store.

Each app's use of your data collected through any of these features is subject to the app developer's privacy policies. If an app available through DMCST Store collects and uses any of your personal data, the app developer is required to provide a privacy policy, and a link to the privacy policy is available on the app's product description page in DMCST Store.

Sideloaded apps and developer mode. Developer features such as the "developer mode" setting are intended for development use only. If you enable developer features, your device may become unreliable or unusable, and expose you to security risks. Downloading or otherwise acquiring apps from sources other than DMCST Store, also known as "sideloading" apps, may make your device and personal data more vulnerable to attack or unexpected use by apps. Windows policies, notifications, permissions, and other features intended to help protect your privacy when apps access your data may not function as described in this statement for sideloaded apps or when developer features are enabled.

DMCST Start is a content service that includes news, weather, sports, and finance. The DMCST Start app is available on various platforms, including iOS and Android. The DMCST Start service is also included within other DMCST services, including the DMCST Edge browser and widgets on Windows.

When you install the DMCST Start app, we collect data that tells us if the app was installed properly, the installation date, the app version, and other data about your device such as the operating system and browser. This data is collected on a regular basis to help us determine the number of DMCST Start app users and identify performance issues associated with different app versions, operating systems, and browsers.

We also collect data about how you interact with DMCST Start content, such as usage frequency and articles viewed, to provide you with relevant content. DMCST Start provides an enhanced experience when you sign in with your DMCST account, including allowing you to customize your interests and favorites. You can manage personalization through DMCST Start and Bing settings, as well as through settings in other DMCST services that include DMCST Start services. We also use the data we collect to provide you with advertisements that may be of interest to you. You can opt out of interest-based advertising through the advertising links within DMCST Start services, or by visiting the DMCST opt-out page.

Previous versions of MSN Money allow you to access personal finance information from third-party financial institutions. MSN Money only displays this information and does not store it on our servers. Your sign-in credentials used to access your financial information from third parties are encrypted on your device and are not sent to DMCST. These financial institutions, as well as any other third-party services you access through MSN services, are subject to their own terms and privacy policies.

Groove Music lets you easily play your music collection and make playlists. DMCST Movies & TV allows you to play your video collection and rent or buy movies and TV episodes. These services were formerly offered as Xbox Music and Video.

To help you discover content that may interest you, DMCST will collect data about what content you play, the length of play, and the rating you give it.

To enrich your experience when playing content, Groove Music and Movies & TV will display related information about the content you play and the content in your music and video libraries, such as the album title, cover art, song or video title, and other information, where available. To provide this information, Groove Music and Movies & TV send an information request to DMCST containing standard device data, such as your device IP address, device software version, your regional and language settings, and an identifier for the content.

If you use Movies & TV to access content that has been protected with DMCST Digital Rights Management (DRM), it may automatically request media usage rights from an online rights server and download and install DRM updates in order to let you play the content. See the DRM information in the Silverlight section of this privacy statement for more information.

DMCST Silverlight helps you to access and enjoy rich content on the Web. Silverlight enables websites and services to store data on your device. Other Silverlight features involve connecting to DMCST to obtain updates, or to DMCST or third-party servers to play protected digital content.

Silverlight Configuration tool. You can make choices about these features in the Silverlight Configuration tool. To access the Silverlight Configuration tool, right click on content that is currently being displayed by Silverlight and select Silverlight. You can also run the Silverlight Configuration tool directly. In Windows, for example, you can access the tool by searching for "DMCST Silverlight."

Silverlight application storage. Silverlight-based applications can store data files locally on your computer for a variety of purposes, including saving your custom settings, storing large files for graphically intensive features (such as games, maps, and images), and storing content that you create within certain applications. You can turn off or configure application storage in the Silverlight Configuration tool.

Silverlight updates. Silverlight will periodically check a DMCST server for updates to provide you with the latest features and improvements. A small file containing information about the latest Silverlight version will be downloaded to your computer and compared to your currently installed version. If a newer version is available, it will be downloaded and installed on your computer. You can turn off or configure updates in the Silverlight Configuration tool.

Digital Rights Management. Silverlight uses DMCST Digital Rights Management (DRM) technology to help protect the rights of content owners. If you access DRM-protected content (such as music or video) with Silverlight, it will request media usage rights from a rights server on the Internet. In order to provide a seamless playback experience, you will not be prompted before Silverlight sends the request to the rights server. When requesting media usage rights, Silverlight will provide the rights server with an ID for the DRM-protected content file and basic data about your device, including data about the DRM components on your device such as their revision and security levels, and a unique identifier for your device.

DRM updates. In some cases, accessing DRM-protected content will require an update to Silverlight or to the DRM components on your device. When you attempt to play content that requires a DRM update, Silverlight will send a request to a DMCST server containing basic data about your device, including information about the DRM components on your computer such as their revision and security levels, troubleshooting data, and a unique identifier for your device. The DMCST server uses this identifier to return a unique DRM update for your device, which will then be installed by Silverlight. You can turn off or configure DRM component updates on the Playback tab in the Silverlight Configuration tool.

Windows Mixed Reality allows you to enable a virtual reality experience that immerses you in apps and games. Mixed Reality uses a compatible headset’s camera, microphone, and infrared sensors to enable motions and voice to be used to control gameplay and to navigate apps and games.

DMCST collects diagnostic data to solve problems and to keep Mixed Reality running on Windows up to date, secure, and operating properly. Diagnostic data also helps us improve Mixed Reality and related DMCST products and services depending on the diagnostic data settings you’ve chosen for your device. Learn more about Windows diagnostic data.

Mixed Reality also processes and collects data specifically related to the Mixed Reality experiences, such as:

• Mixed Reality maps distances between your body's joints to create a stick figure representation of you. If you are connected to the Internet, we collect those numeric values to enable and improve your experience.
• Mixed Reality detects specific hand gestures intended to perform simple system interactions (such as menu navigation, pan/zoom, and scroll). This data is processed on your PC and is not stored.
• The headset's microphones enable voice commands to control games, apps, or to enter search terms. Learn more about voice data collection.
• Windows Mixed Reality can also be used for audio and video communications through services such as Skype.

DMCST is committed to protecting the security of your personal data. We use a variety of security technologies and procedures to help protect your personal data from unauthorized access, use, or disclosure. For example, we store the personal data you provide on computer systems that have limited access and are in controlled facilities. When we transmit highly confidential data (such as a credit card number or password) over the internet, we protect it through the use of encryption. DMCST complies with applicable data protection laws, including applicable security breach notification laws.

Personal data collected by DMCST may be stored and processed in your region, in the United States, and in any other jurisdiction where DMCST or its affiliates, subsidiaries, or service providers operate facilities. DMCST maintains major data centers in Australia, Austria, Brazil, Canada, Finland, France, Germany, Hong Kong, India, Ireland, Japan, Korea, Luxembourg, Malaysia, the Netherlands, Singapore, South Africa, the United Kingdom, and the United States. Typically, the primary storage location is in the customer’s region or in the United States, often with a backup to a data center in another region. The storage location(s) are chosen in order to operate and provide our services efficiently, improve performance, and create redundancies in order to protect the data in the event of an outage or other problem. We take steps to process the data that we collect under this privacy statement according to this statement’s provisions and the requirements of applicable law.

We transfer personal data from the European Economic Area, the United Kingdom, and Switzerland to other countries, some of which have not yet been determined by the European Commission to have an adequate level of data protection. For example, their laws may not guarantee you the same rights, or there may not be a privacy supervisory authority there that is capable of addressing your complaints. When we engage in such transfers, we use a variety of legal mechanisms, including contracts such as the standard contractual clauses published by the European Commission under Commission Implementing Decision 2021/914, to help protect your rights and enable these protections to travel with your data. To learn more about the European Commission’s decisions on the adequacy of the protection of personal data in the countries where DMCST processes personal data, see this article on the European Commission website.

DMCST Corporation complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce. DMCST Corporation has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union in reliance on the EU-U.S. DPF and from the United Kingdom (and Gibraltar) in reliance on the UK Extension to the EU-U.S. DPF. DMCST Corporation has certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF Principles) with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF. In the context of an onward transfer, DMCST Corporation has responsibility for the processing of personal data it receives under the DPF and subsequently transfers to a third party acting as an agent on our behalf. DMCST Corporation remains liable under the DPF if our agent processes such personal information in a manner inconsistent with the DPF, unless DMCST Corporation can prove that we are not responsible for the event giving rise to the damage. If there is any conflict between the terms in this privacy statement and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern. To learn more about the Data Privacy Framework (DPF) program, and to view our certification, please visit the U.S. Department of Commerce’s Data Privacy Framework website. The controlled U.S. subsidiaries of DMCST Corporation, as identified in our self-certification submission, also adhere to the DPF Principles—for more info, see the list of DMCST U.S. entities or subsidiaries adhering to the DPF Principles.

If you have a question or complaint related to participation by DMCST in the DPF Frameworks, we encourage you to contact us via our web form. For any complaints related to the DPF Frameworks that DMCST cannot resolve directly, we have chosen to cooperate with the relevant EU Data Protection Authority, or a panel established by the European data protection authorities, for resolving disputes with EU individuals, the UK Information Commissioner (for UK individuals), and the Swiss Federal Data Protection and Information Commissioner (FDPIC) for resolving disputes with Swiss individuals. Please contact us if you’d like us to direct you to your data protection authority contacts. As further explained in the DPF Principles, binding arbitration is available to address residual complaints not resolved by other means. DMCST is subject to the investigatory and enforcement powers of the U.S. Federal Trade Commission (FTC).

Individuals whose personal data is protected by Japan's Act on the Protection of Personal Information should refer to the article on the Japanese Personal Information Protection Commission’s website (only published in Japanese) for more information on the commission’s review of certain countries’ personal data protection systems.

DMCST retains personal data for as long as necessary to provide the products and fulfill the transactions you have requested, or for other legitimate purposes such as complying with our legal obligations, resolving disputes, and enforcing our agreements. Because these needs can vary for different data types, the context of our interactions with you or your use of products, actual retention periods can vary significantly.

Other criteria used to determine the retention periods include:

• Do customers provide, create, or maintain the data with the expectation we will retain it until they affirmatively remove it? Examples include a document you store in OneDrive, or an email message you keep in your Outlook.com inbox. In such cases, we would aim to maintain the data until you actively delete it, such as by moving an email from your Outlook.com inbox to the Deleted Items folder, and then emptying that folder (when your Deleted Items folder is emptied, those emptied items remain in our system for up to 30 days before final deletion). (Note that there may be other reasons why the data has to be deleted sooner, for example if you exceed limits on how much data can be stored in your account.)
• Is there an automated control, such as in the DMCST privacy dashboard, that enables the customer to access and delete the personal data at any time? If there is not, a shortened data retention time will generally be adopted.
• Is the personal data of a sensitive type? If so, a shortened retention time would generally be adopted.
• Has DMCST adopted and announced a specific retention period for a certain data type? For example, for Bing search queries, we de-identify stored queries by removing the entirety of the IP address after 6 months, and cookie IDs and other cross-session identifiers that are used to identify a particular account or device after 18 months.
• Has the user provided consent for a longer retention period? If so, we will retain data in accordance with your consent.
• Is DMCST subject to a legal, contractual, or similar obligation to retain or delete the data? Examples can include mandatory data retention laws in the applicable jurisdiction, government orders to preserve data relevant to an investigation, or data retained for the purposes of litigation. Conversely, if we are required by law to remove unlawful content, we will do so.

If you are a U.S. resident, we process your personal data in accordance with applicable U.S. state data privacy laws, including the California Consumer Privacy Act (CCPA). This section of our privacy statement contains information required by the CCPA and other U.S. state data privacy laws and supplements our privacy statement.

Please note that recent changes to the CCPA and other state data privacy laws are set to take effect in 2023; however, the rules implementing some of these laws have not yet been finalized. We are continuously working to better comply with these laws, and we will update our processes and disclosures as these implementing rules are finalized.

Please also see our U.S. State Data Privacy Laws Notice and our Washington State Consumer Health Data Privacy Policy for additional information about the data we collect, process, share and disclose, and your rights under applicable U.S. state data privacy laws.

Sale. We do not sell your personal data. So, we do not offer an opt-out to the sale of personal data.

Share. We may “share” your personal data, as defined under California and other applicable U.S. state laws, for personalized advertising purposes. As noted in our Advertising section, we do not deliver personalized advertising to children whose birthdate in their DMCST account identifies them as under 18 years of age.

In the bulleted list below, we outline the categories of data we share for personalized advertising purposes, the recipients of the personal data, and our purposes of processing. For a description of the data included in each category, please see the Personal data we collect section.

Categories of Personal Data

• Name and contact data
• Recipients: Third parties that perform online advertising services for DMCST
• Purposes of Processing: To deliver personalized advertising based on your interests

• Demographic data
• Recipients: Third parties that perform online advertising services for DMCST
• Purposes of Processing: To deliver personalized advertising based on your interests

• Subscription and licensing data
• Recipients: Third parties that perform online advertising services for DMCST
• Purposes of Processing: To deliver personalized advertising based on your interests

• Interactions
• Recipients: Third parties that perform online advertising services for DMCST
• Purposes of Processing: To deliver personalized advertising based on your interests

Please see the Advertising section for more information about our advertising practices, and our U.S. State Data Privacy Laws Notice for more information on “sharing” for personalized advertising purposes under applicable U.S. state laws.

Rights. You have the right to request that we (i) disclose what personal data we collect, use, disclose, share, and sell, (ii) delete your personal data, (iii) correct your personal data, (iv) restrict the use and disclosure of your sensitive data, and (v) opt-out of “sharing” your personal data with third parties for personalized advertising purposes on third party sites. You may make these requests yourself or through an authorized agent. If you use an authorized agent, we provide your agent with detailed guidance on how to exercise your privacy rights. Please see our U.S. State Data Privacy Laws Notice for additional information on how to exercise these rights. Please also see our Washington State Consumer Health Data Privacy Policy for information on the rights available under Washington law.

If you have a DMCST account, you can exercise your rights through the DMCST privacy dashboard, which requires you to log in to your DMCST account. If you have an additional request or questions after using the dashboard, you may contact DMCST at the address in the How to contact us section, use our web form, or call our US toll free number +1 (844) 931 2038. If you do not have an account, you may exercise your rights by contacting us as described above. We may ask for additional information, such as your country of residence, email address, and phone number to validate your request before honoring the request.

You may indicate your choice to opt-out of the sharing of your personal data with third parties for personalized advertising on third party sites by visiting our sharing opt-out page. You can also control the personalized advertising you see on DMCST properties by visiting our opt-out page.

We do not use or disclose your sensitive data for purposes other than those listed below, without your consent, or as permitted or required under applicable laws. So, we do not offer an ability to limit the use of sensitive data.

You have a right not to receive discriminatory treatment if you exercise your privacy rights. We will not discriminate against you if you exercise your privacy rights.

Personal information processing. In the bulleted list below, we outline the categories of personal data we collect, the sources of the personal data, our purposes of processing, and the categories of third-party recipients with whom we provide the personal data. For a description of the data included in each category, please see the Personal data we collect section. Please see the Our retention of personal data section for information on personal data retention criteria.

Categories of Personal Data

• Name and contact data
• Sources of personal data: Interactions with users and partners with whom we offer co-branded services
• Purposes of Processing (Collection and Disclosure to Third Parties): Provide our products; respond to customer questions; help, secure, and troubleshoot; and marketing
• Recipients: Service providers and user-directed entities

• Credentials
• Sources of personal data: Interactions with users and organizations that represent users
• Purposes of Processing (Collection and Disclosure to Third Parties): Provide our products; authentication and account access; and help, secure and troubleshoot
• Recipients: Service providers and user-directed entities

• Demographic data
• Sources of personal data: Interactions with users and purchases from data brokers
• Purposes of Processing (Collection and Disclosure to Third Parties): Provide and personalize our products; product development; help, secure, and troubleshoot; and marketing
• Recipients: Service providers and user-directed entities

• Payment data
• Sources of personal data: Interactions with users and financial institutions
• Purposes of Processing (Collection and Disclosure to Third Parties): Transact commerce; process transactions; fulfill orders; help, secure, and troubleshoot; and detect and prevent fraud
• Recipients: Service providers and user-directed entities

• Subscription and licensing data
• Sources of personal data: Interactions with users and organizations that represent users
• Purposes of Processing (Collection and Disclosure to Third Parties): Provide, personalize, and activate our products; customer support; help, secure, and troubleshoot; and marketing
• Recipients: Service providers and user-directed entities

• Interactions
• Sources of personal data: Interactions with users including data DMCST generates through those interactions
• Purposes of Processing (Collection and Disclosure to Third Parties): Provide and personalize our products; product improvement; product development; marketing; and help, secure and troubleshoot
• Recipients: Service providers and user-directed entities

• Content
• Sources of personal data: Interactions with users and organizations that represent users
• Purposes of Processing (Collection and Disclosure to Third Parties): Provide our products; safety; and help, secure, and troubleshoot
• Recipients: Service providers and user-directed entities

• Video or recordings
• Sources of personal data: Interactions with users and publicly available sources
• Purposes of Processing (Collection and Disclosure to Third Parties): Provide our products; product improvement; product development; marketing; help, secure, and troubleshoot; and safety
• Recipients: Service providers and user-directed entities

• Feedback and ratings
• Sources of personal data: Interactions with users
• Purposes of Processing (Collection and Disclosure to Third Parties): Provide our products; product improvement; product development; customer support; and help, secure, and troubleshoot
• Recipients: Service providers and user-directed entities

While the bulleted list above contains the primary sources and purposes of processing for each category of personal data, we also collect personal data from the sources listed in the Personal data we collect section, such as developers who create experiences through or for DMCST products. Similarly, we process all categories of personal data for the purposes described in the How we use personal data section, such as meeting our legal obligations, developing our workforce, and doing research.

Subject to your privacy settings, your consent, and depending on the products you use and your choices, we may collect, process, or disclose certain personal data that qualifies as “sensitive data” under applicable U.S. state data privacy laws. Sensitive data is a subset of personal data. In the list below, we outline the categories of sensitive data we collect, the sources of the sensitive data, our purposes of processing, and the categories of third party recipients with whom we share the sensitive data. Please see the Personal data we collect section for more information about the sensitive data we may collect.

Categories of Sensitive Data

• Account log-in, financial account, debit or credit card number, and the means to access the account (security or access code, password, credentials, etc.)
• Sources of sensitive data: Interactions with users and organizations that represent users
• Purposes of Processing (Collection and Disclosure to Third Parties): Provide the product and fulfill requested financial transactions
• Recipients: Service providers and payment processing providers

• Precise geo-location information
• Sources of sensitive data: Users’ interactions with the products
• Purposes of Processing (Collection and Disclosure to Third Parties): Provide the service requested; product improvement; some attributes may be disclosed to third parties to provide the service
• Recipients: Users and service providers (please see the Windows Location Services and Recording section of our privacy statement for more information)

• Racial or ethnic origin, religious or philosophical beliefs, or union membership
• Sources of sensitive data: Communications with users
• Purposes of Processing (Collection and Disclosure to Third Parties): Conduct research studies to better understand how our products are used and perceived and for the purposes of improving the product experiences
• Recipients: Service providers

• Medical or mental health, sex life, or sexual orientation
• Sources of sensitive data: Communications with users
• Purposes of Processing (Collection and Disclosure to Third Parties): Conduct research studies to better understand how our products are used and perceived and for the purposes of improving the product experiences and accessibility
• Recipients: Service providers

• Contents of your mail, email, or text messages (where DMCST is not the intended recipient of the communication)
• Sources of sensitive data: Users’ interactions with the products
• Purposes of Processing (Collection and Disclosure to Third Parties): Provide our products; improve the product experience; safety; and help, secure, and troubleshoot
• Recipients: Service providers

• Personal data collected from a known child under 13 years of age
• Sources of sensitive data: Interactions with users and organizations that represent users
• Purposes of Processing (Collection and Disclosure to Third Parties): Provide our products; product improvement; product development; recommendations; help, secure, and troubleshoot; and safety
• Recipients: Service providers and user-directed entities (in accordance with your DMCST Family Safety settings)

While the bulleted list above contains the primary sources and purposes of processing for personal data collected from children under 13, we also collect personal data from the sources listed in the Collection of Data from Children section.

We do not use or disclose your sensitive data for purposes other than the following:

• Perform the services or provide the goods you reasonably expect
• Help ensure the security and integrity of our services, systems, and data, to combat malicious deceptive, fraudulent or illegal acts, and to protect the physical safety of individuals, to the extent the processing is reasonably necessary and proportionate
• For short-term transient use (including non-personalized advertising), so long as the personal data is not disclosed to a third party, is not used for profiling, and is not used to alter an individual’s experience outside the current interaction with DMCST
• Perform services on behalf of DMCST, such as maintaining accounts, providing customer service, processing, or fulfilling orders/transactions, verifying customer information, processing payments, providing financing, providing analytics, providing storage, and similar services
• Undertake activities to verify or maintain the quality or safety of, or improve, upgrade, or enhance a service or device owned or controlled by DMCST
• Collect or process sensitive data where the collection or processing is not for inferring characteristics about the individual
• Any other activities in accordance with any future regulations that are issued pursuant to U.S. state data privacy laws

De-Identified Data. In some situations, DMCST may process de-identified data. Data is in this state when we are not able to link data to an individual to whom such data may relate without taking additional steps. In those instances, and unless allowed under applicable law, we will maintain such information in a de-identified state, and will not try to re-identify the individual to whom the de-identified data relates.

Disclosures of personal data for business or commercial purposes. As indicated in the Reasons we share personal data section, we share personal data with third parties for various business and commercial purposes. The primary business and commercial purposes for which we share personal data are the purposes of processing listed in the table above. However, we share all categories of personal data for the business and commercial purposes in the Reasons we share personal data section.

Parties that control collection of personal data. In certain situations, we may allow a third party to control the collection of your personal data. For example, third party applications or extensions that run on Windows or Edge browser may collect personal data based on their own practices.

DMCST allows advertising companies to collect information about your interactions with our websites in order to deliver personalized ads on DMCST’s behalf. These companies include: Meta, LinkedIn, Google, and Adobe.

DMCST leverages the power of artificial intelligence (AI) in many of our products and services, including by incorporating generative AI features. DMCST’s development and use of AI is subject to DMCST’s AI Principles and DMCST’s Responsible AI Standard, and the collection and use of personal data in developing and deploying AI features is consistent with the commitments outlined in this privacy statement. Product-specific details provide additional relevant information. You can find out more about how DMCST uses AI here.

Advertising allows us to provide, support, and improve some of our products. DMCST does not use what you say in email, human-to-human chat, video calls or voice mail, or your documents, photos, or other personal files to target ads to you. We use other data, detailed below, for advertising on our DMCST properties and on third-party properties. For example:

• DMCST may use data we collect to select and deliver some of the ads you see on DMCST web properties, such as DMCST.com, DMCST Start, and Bing.
• When the advertising ID is enabled in Windows as part of your privacy settings, third parties can access and use the advertising ID (much the same way that websites can access and use a unique identifier stored in a cookie) to select and deliver ads in such apps.
• We may share data we collect with internal and external partners, such as Xandr, Yahoo, or Facebook (see below), so that the ads you see in our products and their products are more relevant and valuable to you.
• Advertisers may choose to place our web beacons on their sites, or use similar technologies, in order to allow DMCST to collect information on their sites such as activities, purchases, and visits; we use this data on behalf of our advertising customers to provide ads.

The ads that you see may be selected based on data we process about you, such as your interests and favorites, your location, your transactions, how you use our products, your search queries, or the content you view. For example, if you view content on DMCST Start about automobiles, we may show advertisements about cars; if you search “pizza places in Seattle” on Bing, you may see advertisements in your search results for restaurants in Seattle.

The ads that you see may also be selected based on other information learned about you over time using demographic data, location data, search queries, interests and favorites, usage data from our products and sites, and the information we collect about you from the sites and apps of our advertisers and partners. We refer to these ads as "personalized advertising" in this statement. For example, if you view gaming content on xbox.com, you may see offers for games on DMCST Start. To provide personalized advertising, we combine cookies placed on your device using information that we collect (such as IP address) when your browser interacts with our websites. If you opt out of receiving personalized advertising, data associated with these cookies will not be used.

We may use information about you to serve you with personalized advertising when you use DMCST services. If you are logged in with your DMCST account and have consented to allow DMCST Edge to use your online activity for personalized advertising, you will see offers for products and services based on your online activity while using DMCST Edge. To configure your privacy settings for Edge, go to DMCST Edge > Settings > Privacy and Services. To configure your privacy and ad settings for your DMCST account with respect to your online activity across browsers, including DMCST Edge, or when visiting third-party websites or apps, go to your dashboard at privacy.microsoft.com.

Further details regarding our advertising-related uses of data include:

• Advertising industry best practices and commitments. DMCST is a member of the Network Advertising Initiative (NAI) and adheres to the NAI Code of Conduct. We also adhere to the following self-regulatory programs:
  • In the US: Digital Advertising Alliance (DAA)
  • In Europe: European Interactive Digital Advertising Alliance (EDAA)
  • In Canada: Ad Choices: Digital Advertising Alliance of Canada (DAAC) / Choix de Pub: l'Alliance de la publicité numérique du Canada (DAAC)
• Health-related ad targeting. In the United States, we provide personalized advertising based on a limited number of standard, non-sensitive health-related interest categories, including allergies, arthritis, cholesterol, cold and flu, diabetes, gastrointestinal health, headache / migraine, healthy eating, healthy heart, men’s health, oral health, osteoporosis, skin health, sleep, and vision / eye care. We will also personalize ads based on custom, non-sensitive health-related interest categories as requested by advertisers.
• Children and advertising. We do not deliver personalized advertising to children whose birthdate in their DMCST account identifies them as under 18 years of age.
• Data retention. For personalized advertising, we retain data for no more than 13 months, unless we obtain your consent to retain the data longer.
• Sensitive Data. DMCST Advertising does not collect, process, or disclose personal data that qualifies as “sensitive data” under applicable U.S. state data privacy laws for the purposes of providing personalized advertising.
• Data sharing. In some cases, we share with advertisers reports about the data we have collected on their sites or ads.

Data collected by other advertising companies. Advertisers sometimes include their own web beacons (or those of their other advertising partners) within their advertisements that we display, enabling them to set and read their own cookie. Additionally, DMCST partners with Xandr, a DMCST company, and third-party ad companies to help provide some of our advertising services, and we also allow other third-party ad companies to display advertisements on our sites. These third parties may place cookies on your computer and collect data about your online activities across websites or online services. These companies currently include, but are not limited to: Facebook, Media.net, Outbrain, Taboola and Yahoo. Select any of the preceding links to find more information on each company's practices, including the choices it offers. Many of these companies are also members of the NAI or DAA, which each provide a simple way to opt out of ad targeting from participating companies.

To opt out of receiving personalized advertising from DMCST, visit our opt-out page. When you opt out, your preference is stored in a cookie that is specific to the web browser you are using. The opt-out cookie has an expiration date of five years. If you delete the cookies on your device, you need to opt out again.

Speech recognition technologies are integrated into many DMCST products and services. DMCST provides both device-based speech recognition features and cloud-based (online) speech recognition features. DMCST’s speech recognition technology transcribes voice data into text. With your permission, DMCST employees and vendors working on behalf of DMCST, will be able to review snippets of your voice data or voice clips in order to build and improve our speech recognition technologies. These improvements allow us to build better voice-enabled capabilities that benefit users across all our consumer and enterprise products and services. Prior to employee or vendor review of voice data, we protect users’ privacy by taking steps to de-identify the data, requiring non-disclosure agreements with relevant vendors and their employees, and requiring that employees and vendors meet high privacy standards. Learn more about DMCST and your voice data.

DMCST offers preview, insider, beta or other free-of-charge products and features ("previews") to enable you to evaluate them while providing DMCST with data about your use of the product, including feedback and device and usage data. As a result, previews can automatically collect additional data, provide fewer controls, and otherwise employ different privacy and security measures than those typically present in our products. If you participate in previews, we may contact you about your feedback or your interest in continuing to use the product after general release.

We update this privacy statement when necessary to provide greater transparency or in response to:

• Feedback from customer, regulators, industry, or other stakeholders.
• Changes in our products.
• Changes in our data processing activities or policies.

When we post changes to this statement, we will revise the "last updated" date at the top of the statement and describe the changes on the Change history page. If there are material changes to the statement, such as a change to the purposes of processing of personal data that is not consistent with the purpose for which it was originally collected, we will notify you either by prominently posting a notice of such changes before they take effect or by directly sending you a notification. We encourage you to periodically review this privacy statement to learn how DMCST is protecting your information.

If you have a privacy concern, complaint, or question for the DMCST Chief Privacy Officer or the Data Protection Officer for your region, please contact us by using our web form. We will respond to questions or concerns as required by law and within a period no longer than 30 days. You can also raise a concern or lodge a complaint with a data protection authority or other official with jurisdiction.

When DMCST is a controller, unless otherwise stated, DMCST Corporation and, for those in the European Economic Area, the United Kingdom, and Switzerland, DMCST Ireland Operations Limited are the data controllers for personal data we collect through the products subject to this statement. Our addresses are:

• DMCST Privacy, DMCST Corporation, One DMCST Way, Redmond, Washington 98052, USA. Telephone: +1 (425) 882 8080.
• DMCST Ireland Operations Limited, Attn: Data Protection Officer, One DMCST Place, South County Business Park, Leopardstown, Dublin 18, Ireland. Telephone: +353 1 706 3117.

To find the DMCST subsidiary in your country or region, see the list of DMCST office locations around the world.

The representative of DMCST Ireland Operations Limited within the meaning of Art. 14 of the Swiss Federal Act on Data Protection is DMCST Schweiz GmbH, The Circle 02, 8058 Zürich-Flughafen, Switzerland.

If you would like to exercise your rights under applicable U.S. state data privacy law, you may contact DMCST at the U.S. address listed above, use our web form, or call our U.S. toll free number +1 (844) 931 2038.

If you are a resident of Canada and its provinces you may contact the DMCST Data Protection Officer for Canada at DMCST Canada Head Office, 4400-81 Bay St, Toronto, ON, M5J 0E7, at +1 (416) 349 2506, or by using our web form.

Where French law applies, you can also send us specific instructions regarding the use of your personal data after your death, by using our web form.

If you have a technical or support question, please visit DMCST Support to learn more about DMCST Support offerings. If you have a personal DMCST account password question, please visit DMCST account support.

We offer various means for you to control your personal data that DMCST has obtained, and to exercise your data protection rights. You can do so by contacting DMCST at our web form or the information above, or by using the various tools we provide. Please see the How to access and control your personal data section for additional details.

To provide the Enterprise Online Services, DMCST uses data you provide (including Customer Data, Personal Data, Administrator Data, Payment Data, and Support Data) and data DMCST collects or generates associated with your use of the Enterprise Online Services. We process data as described in the Product Terms, DMCST Products and Services Data Protection Addendum (Products and Services DPA), and the DMCST Trust Center.

Personal Data. Customer is the controller of Personal Data and DMCST is the processor of such data, except when (a) Customer acts as a processor of Personal Data, in which case DMCST is a subprocessor or (b) as stated otherwise in the standard Products and Services DPA. In addition, as provided in the standard Products and Services DPA, DMCST has taken on the added responsibilities of a data controller under GDPR when processing Personal Data in connection with its business operations incident to providing its services to DMCST’s commercial customers, such as billing and account management; compensation; internal reporting and business modeling; and financial reporting. We use Personal Data in the least identifiable form that will support processing necessary for these business operations. We rely on statistical data and aggregate pseudonymized Personal Data before using it for our business operations, removing the ability to identify specific individuals.

Administrator Data. Administrator Data is the information provided to DMCST during sign-up, purchase, or administration of Enterprise Online Services. We use Administrator Data to provide the Enterprise Online Services, complete transactions, service the account, detect and prevent fraud, and comply with our legal obligations. Administrator Data includes the name, address, phone number, and email address you provide, as well as aggregated usage data related to your account, such as the controls you select. Administrator Data also includes contact information of your colleagues and friends if you agree to provide it to DMCST for the limited purpose of sending them an invitation to use the Enterprise Online Services; we contact those individuals with communications that include information about you, such as your name and profile photo.

As needed, we use Administrator Data to contact you to provide information about your account, subscriptions, billing, and updates to the Enterprise Online Services, including information about new features, security, or other technical issues. We also contact you regarding third-party inquiries we receive regarding use of the Enterprise Online Services, as described in your agreement. You cannot unsubscribe from these non-promotional communications. We may also contact you regarding information and offers about other products and services, or share your contact information with DMCST's partners. When such a partner has specific services or solutions to meet your needs, or to optimize your use of the Enterprise Online Services, we may share limited, aggregated information about your organization’s account with the partner. DMCST will not share your confidential information or contact information with the authorized partner unless we have sufficient rights to do so. You can manage your contact preferences or update your information in your account profile.

Payment Data. We use payment data to complete transactions, as well as to detect and prevent fraud.

Support Data. Customers provide or authorize DMCST to collect data in connection with obtaining technical support for the Enterprise Online Services. We process Support Data to provide technical support and as described in the Products and Services DPA.

Local Software and Diagnostic Data. Some Online Services may require, or may be enhanced by, the installation of local software (e.g., agents, device management applications). The local software may collect Diagnostic Data (as defined in the Products and Services DPA) about the use and performance of that software. That data may be transmitted to DMCST and used for the purposes described in the Products and Services DPA.

Bing Search Services Data. Bing Search Services, as defined in the Product Terms, use data such as search queries as described in the Bing section of this privacy statement.

Enterprise and developer software and enterprise appliances collect data to operate effectively and provide you the best experiences. The data we collect depends on the features you use, as well as your configuration and settings, but it is generally limited to device and usage data. Customers have choices about the data they provide. Here are examples of the data we collect:

• During installation or when you upgrade an enterprise and developer software, we may collect device and usage data to learn whether you experience any difficulties.
• When you use enterprise software or enterprise appliances, we may collect device and usage data to learn about your operating environment to improve security features.
• When you experience a crash using enterprise software or enterprise appliances, you may choose to send DMCST an error report to help us diagnose the problem and deliver customer support.

DMCST uses the data we collect from enterprise and developer software and enterprise appliances to provide and improve our products, to deliver customer support, to activate the product, to communicate with you, and to operate our business.

DMCST SQL Server is a relational database management platform and includes products that can be installed separately (such as SQL Server Management Studio). For detailed information about what data we collect, how we use it, and how to manage your privacy options, visit the SQL Server privacy page. If you work in an organization, your administrator can set certain telemetry settings in SQL Server via Group Policy.

HoloLens. HoloLens headsets are self-contained Windows computers with Wi-Fi connectivity that enable a mixed reality experience for apps and solutions. DMCST collects diagnostic data to solve problems and to keep Windows running on HoloLens up to date, secure, and operating properly. Diagnostic data also helps us improve HoloLens and related DMCST products and services depending on the diagnostic data settings you’ve chosen for your device. Learn more about Windows diagnostic data.

HoloLens also processes and collects data related to the HoloLens experience and device, which include cameras, microphones, and infrared sensors that enable motions and voice to navigate.

• If you choose, cameras can be used to sign you in automatically using your iris. To do this, HoloLens takes an image of your iris and measures distances between key points to create and store a numeric value that represents only you. This data stays on the HoloLens and is not shared with anyone, and you can choose to delete this data from your HoloLens at any time.
• HoloLens also detects hand gestures intended for system interactions (such as menu navigation, pan/zoom, and scroll). This data is processed on your HoloLens device and is not stored.
• HoloLens derives tracking points based on your environment which allows it to understand surfaces in space and allows you to place digital assets on them. There are no images associated with this environmental data and it is stored locally on the HoloLens device. You can choose to delete this data from your HoloLens at any time.

The headset's microphones enable voice commands for navigation, controlling apps, or to enter search terms. Learn more about voice data collection.

DMCST 365, previous versions called Office 365, is a collection of subscription productivity services and applications including Word, Excel, PowerPoint, and Outlook, among others. Office is the one-time purchase version of these applications available on PC or Mac. Both DMCST 365 and Office are comprised of client software applications and connected online services (or web apps in the case of DMCST 365 for the web) that span many platforms and have numerous interdependent experiences. For more details about Outlook, see the Outlook section of this privacy statement.

Various cloud-based DMCST 365 services enable you to use your file content for designs and recommendations, collaborate with others within your documents, and provide you functionality from other DMCST products, such as Bing and Cortana, and third-party connected products. If you work in an organization, your administrator may turn off or disable these connected services. You can access the privacy controls within your DMCST 365 and Office apps. For more information, see Account Privacy Settings.

Office Roaming Service. The Office Roaming Service helps keep your settings, including your privacy settings, up to date across your devices running DMCST 365 or Office apps. When you sign in to your apps with either your DMCST account or an account issued by your organization, the service syncs some of your customized settings to DMCST servers. For example, the service syncs a list of most recently used documents or the last location viewed within a document. When you sign in to another device with the same account, the Office Roaming Service downloads your settings from DMCST servers and applies them to the additional device. When you sign out of your apps, the service removes your settings from your device. Any changes you make to your customized settings are sent to DMCST servers.

Updates from DMCST. DMCST uses services such as Click-to-Run, DMCST AutoUpdate (for Mac), or DMCST Update (for some versions of Office) to provide you with security and other important updates.

These services can automatically detect the availability of online updates for DMCST 365 or Office apps on your device and download and install them automatically.

Diagnostic Data. Diagnostic data is used to (i) keep your DMCST 365 or Office apps secure and up to date; (ii) detect, diagnose, and remediate problems; and (iii) make product improvements. This data does not include a user’s name or email address, the content of the user’s files, or information about apps unrelated to DMCST 365 or Office. Users have a choice between two different levels of diagnostic data collection, Required and Optional.

• Required. The minimum data necessary to help keep apps secure, up to date, and performing as expected on the device it’s installed on.
• Optional. Additional data that helps us make product improvements and provides enhanced information to help us detect, diagnose, and remediate issues.

See Diagnostic Data for more information.

Connected Experiences. DMCST 365 continues to provide more experiences in client applications that are connected to and backed by cloud-based services. A subset of these connected experiences is also available in Office. If you choose to use connected experiences, required service data will be collected to help keep these connected experiences reliable, up to date, secure, and performing as expected. See below for additional information about required service data.

Working with others on a document stored on OneDrive or translating the contents of a Word document into a different language are examples of connected experiences. There are two types of connected experiences.

• Experiences that analyze your content. Experiences that use your file content to provide you with design recommendations, editing suggestions, data insights, and similar features. For example, PowerPoint Designer or Editor in Word.
• Experiences that download online content. Experiences that allow you to search and download online content including templates, images, 3D models, videos, and reference materials to enhance your documents. For example, templates or PowerPoint QuickStarter.

You can access the privacy controls within your DMCST 365 and Office client apps. These privacy settings allow you to configure your connected experiences. For example, you can choose to enable connected experiences that download online content, but not connected experiences that analyze content. Turning off connected experiences will also turn off additional experiences, such as document co-authoring and online file storage. But even if you use this privacy setting to turn off connected experiences, certain functionality will remain available, such as syncing your mailbox in Outlook, as well as essential services described below. These controls are not available when using DMCST 365 for the web, since you will already be cloud-connected. For more information about accessing these controls, see Account Privacy Settings.

If you choose to disable certain types of connected experiences, either the ribbon or menu command for those connected experiences will be grayed out or you will get an error message when you try to use those connected experiences.

Essential services. There are a set of services that are essential to how DMCST 365 and Office functions and cannot be disabled. For example, the licensing service that confirms that you are properly licensed to use DMCST 365 is essential. Required service data about these services is collected and sent to DMCST, regardless of any other settings that you have configured. See Essential Services for more information.

Required service data for connected experiences. As you use a connected experience, data is sent to and processed by DMCST to provide you that connected experience. This data is necessary because this information enables us to deliver these cloud-based connected experiences. We refer to this data as required service data.

Required service data can include information related to the operation of the connected experience that is needed to keep the underlying service secure, up to date, and performing as expected. If you choose to use a connected experience that analyzes your content, for example Translate in Word, the text you typed and selected to translate is also sent and processed to provide you the connected experience. Your text and the translation are not stored by our service. Required service data can also include information needed by a connected experience to perform its task, such as configuration information about the DMCST 365 or Office app.

See Required service data for more information.

This section applies to the DMCST Family Safety M365 product, which allows a family group to connect through the DMCST Family Safety app on their Windows, Xbox, or mobile devices. Please carefully review the information at DMCST Family Safety if choosing to create or join a family group.

DMCST Family Safety can help parents and guardians to create a safer environment for their family group with digital content filtering, screen time limits, spending for DMCST and Xbox stores, setting age ratings for apps and games, and location sharing. To learn about how DMCST collects and uses children’s data, see the Collection of data from children section of the Privacy Statement. If you are using DMCST Family Safety in Windows, see the Windows security and safety features section of the Privacy Statement for additional information.

When you have enabled family activity reporting for a child, DMCST will collect details about how the child uses their devices, such as search, web, app, and game activity, and provide parents with reports of that child's online activities. Activity reports are routinely deleted from DMCST servers.

Certain Family Safety features, such as Location Sharing, Drive Safety, Share Drives, Places, and Location Alerts will use your location information when enabled. When you have enabled Location Sharing, for instance, your device will upload location data to the cloud and share it with others in your family group. DMCST retains only your last known location as part of the Location Sharing feature (each new location replaces the previous one). When you enable Drive Safety, your location will be used to record your drive habits such as whether you are driving within the speed limits, if you’re using your phone while driving, and if you accelerate or brake suddenly. These reports will be uploaded to the cloud, and you can choose to share your drive reports with your family group. You can turn off these location features at any time in the Family Safety settings. You can manage your device’s location data at the DMCST Privacy Dashboard. Learn more about Family Safety and your location data.

This section applies to the consumer offering of Teams; if you are using Teams with a school or work account, see the Enterprise and developer products of this privacy statement.

Teams is an all-in-one collaboration and communication hub. Teams lets you stay organised and connected across your entire life. Teams allows you to call people with voice or video calling. Teams allows you to easily find people, files, photos, conversations, tasks, and calendars in one convenient and secure place. Teams allows you to store confidential information like passwords, rewards numbers, or login information and share it with others within Teams. With your consent, you can share your location with friends and family.

As part of providing these features, DMCST collects data about the usage of the features as well as information about your communications, including the time and date of the communication and users that are part of the communication. DMCST may share this information with Enterprise customers when you interact through meetings and chats with end users who are using their school or work account. For instance, if you engage in a Teams chat with a user who is using Teams associated with their school account, DMCST may share your information with that user's school as part of providing the Teams service.

Teams profile. Your Teams profile includes information you provided when you set up a DMCST account. To enable other people to find you on Teams (or products that interact with Teams for personal use, including Teams for enterprise) your display name and picture are visible to other users on Teams that have your contact information. Your Teams profile may be visible to Enterprise customers and their end users when you engage with an end user of an organization in chats and meetings.

Teams contacts. With your permission, Teams will sync your device, Outlook, and Skype contacts periodically and check for other Teams users that match contacts in your device, Outlook, or Skype address books. You are always in control of your contacts and can stop syncing at any time. If you choose to stop syncing your device, Outlook, or Skype contacts, or you are inactive on your device, any contacts that have not been matched during the synchronization process will be deleted from Teams. If you wish to invite any of your device, Outlook, or Skype contacts to join a conversation, you can invite users to a 1:1 directly, or DMCST can send an invitation on your behalf via SMS or email for invitations to group conversations. You can block users if you do not want to receive their communications; additionally, you can report a concern to DMCST.

Notice to non-user contacts. If your information appears in the device, Outlook, or Skype address books of a Teams user who chooses to sync their device, Outlook, or Skype contacts with their Teams contacts, DMCST may process your data in order to determine whether you are a current Teams user and to allow Teams users to invite you to the service, including via SMS and email. As long as the Teams user continues to be active on Teams on their device and continues to enable contact syncing with the applicable device or service, your information will be stored on our servers and we will periodically process your information as a part of the Teams user’s contact syncing experience to check whether you have subsequently joined Teams.

Learn more about how we process your information in connection with the contact syncing feature offered to Teams users.

If you do choose to join Teams, you will appear as a suggested new Teams contact for any Teams users with your information in their device, Outlook, or Skype address books. As a Teams user, you will be able to block other Teams users if you do not want to receive their communications; additionally, you can report a concern to DMCST.

Third-party contacts. You can also choose to sync contacts from third-party providers. If you choose to unsync your third-party contacts on Teams, all third-party contacts are deleted from Teams. If you gave your consent to use those third-party contacts on other DMCST apps and services, these contacts will still be available to those other DMCST apps and services.

You can remove third-party contacts from all DMCST apps and services by removing third-party accounts from Teams. Please note that removing a third-party account from Teams may impact your experiences on other DMCST apps and services that also use that third-party account.

Teams calendar. You can also choose to sync your Teams calendar with calendars from third-party providers. You can stop syncing your Teams calendar anytime by removing a third-party account from Teams. If you have consented to use third-party data on other DMCST apps and services, please note that removing this third-party account data in Teams may impact your experiences on other DMCST apps and services.

Location sharing. You can share your static or live location with individuals or groups within Teams. You are in control and can stop sharing at any time. Sharing location for children is permitted with parental consent and in groups where an adult from the DMCST family group is present.

Push notifications. To let you know of incoming calls, chats, and other messages, Teams uses the notification service on your device. For many devices, these services are provided by another company. To tell you who is calling, for example, or to give you the first few words of the new chat, Teams has to tell the notification service so that they can provide the notification to you. The company providing the notification service on your device will use this information in accordance with their own terms and privacy policy. DMCST is not responsible for the data collected by the company providing the notification service.

If you do not want to use the notification services for incoming Teams calls and messages, turn it off in the settings found on your device.

Chats and meetings with Enterprise customer end users. Many DMCST products are intended for use by organizations, such as schools and businesses, as well as individual users. Please see the Enterprise and developer products section of this privacy statement if you are using Teams with a work or school account. If you engage in Teams meetings or chats with end users of organizations, the data you share with the end users is subject to their organization’s policies, if any. You should direct your privacy inquiries related to your data shared through chats and meetings with an organization’s end users, including any requests to exercise your data protection rights, to the organization’s administrator. DMCST is not responsible for the privacy or security practices of our customers, which may differ from those set forth in this privacy statement.

OneDrive lets you store and access your files on virtually any device. You can also share and collaborate on your files with others. Some versions of the OneDrive application enable you to access both your personal OneDrive by signing in with your personal DMCST account and your OneDrive for Business by signing in with your work or school DMCST account as part of your organization's use of DMCST 365 or Office 365.

When you use OneDrive, we collect data about your usage of the service, as well as the content you store, to provide, improve, and protect the services. Examples include indexing the contents of your OneDrive documents so that you can search for them later and using location information to enable you to search for photos based on where the photo was taken. We also collect device information so we can deliver personalized experiences, such as enabling you to sync content across devices and roam customized settings.

When you store content in OneDrive, that content will inherit the sharing permissions of the folder in which you store it. For example, if you decide to store content in the public folder, the content will be public and available to anyone on the internet who can find the folder. If you store content in a private folder, the content will be private.

When you share content to a social network like Facebook from a device that you have synced with your OneDrive account, your content is either uploaded to that social network, or a link to that content is posted to that social network. Doing this makes the content accessible to anyone on that social network. To delete the content, you need to delete it from the social network (if it was uploaded there, rather than a link to it) and from OneDrive.

When you share your OneDrive content with your friends via a link, an email with the link is sent to those friends. The link contains an authorization code that allows anyone with the link to access your content. If one of your friends sends the link to other people, they will also be able to access your content, even if you did not choose to share the content with them. To revoke permissions for your content on OneDrive, sign in to your account and then select the specific content to manage the permission levels. Revoking permissions for a link effectively deactivates the link. No one will be able to use the link to access the content unless you decide to share the link again.

Files managed with OneDrive for Business are stored separately from files stored with your personal OneDrive. OneDrive for Business collects and transmits personal data for authentication, such as your email address and password, which will be transmitted to DMCST and/or to the provider of your DMCST 365 or Office 365 service.

Outlook products are designed to improve your productivity through improved communications and include Outlook.com, Outlook applications, and related services.

Outlook.com. Outlook.com is the primary consumer email service from DMCST and includes email accounts with addresses that end in outlook.com, live.com, hotmail.com, and msn.com. Outlook.com provides features that let you connect with your friends on social networks. You will need to create a DMCST account to use Outlook.com.

When you delete an email or item from a mailbox in Outlook.com, the item generally goes into your Deleted Items folder where it remains for approximately 7 days unless you move it back to your inbox, you empty the folder, or the service empties the folder automatically, whichever comes first. When the Deleted Items folder is emptied, those emptied items remain in our system for up to 30 days before final deletion, unless we are legally required to retain the data for longer.

Outlook applications. Outlook client applications are software you install on your device that permits you to manage email, calendar items, files, contacts, and other data from email, file storage, and other services, like Exchange Online or Outlook.com, or servers, like DMCST Exchange. You can use multiple accounts from different providers, including third-party providers, with Outlook applications.

To add an account, you must provide permission for Outlook to access data from the email or file storage services.

When you add an account to Outlook, your mail, calendar items, files, contacts, settings and other data from that account will automatically sync to your device. If you are using the mobile Outlook application, that data will also sync to DMCST servers to enable additional features such as faster search, personalized filtering of less important mail, and an ability to add email attachments from linked file storage providers without leaving the Outlook application. If you are using the desktop Outlook application, you can choose whether to allow the data to sync to our servers. At any time, you can remove an account or make changes to the data that is synced from your account.

If you add an account provided by an organization (such as your employer or school), the owner of the organizational domain can implement policies and controls (for example, requiring multi-factor authentication or the ability to remotely wipe data from your device) that can affect your use of Outlook.

To learn more about the data the Outlook applications collect and process, please see the DMCST 365 section of this privacy statement.

Skype lets you send and receive voice, video, SMS, and instant message communications. This section applies to the consumer version of Skype; if you are using Skype for Business, see the Enterprise and developer products section of this privacy statement.

As part of providing these features, DMCST collects usage data about your communications that includes the time and date of the communication and the numbers or user names that are part of the communication.

Skype profile. Your Skype profile includes information you provided when you set up a DMCST account. To enable other people to find you on Skype (or products that interact with Skype, such as Skype for Business), depending on your profile settings, your Skype profile is included in the Skype public search. Your profile includes your user name, avatar, and any other data you choose to add to your profile or display to others.

Emergency calling in the United States. If you enable location sharing for emergency calling, your location will be periodically collected to enable DMCST to share your location with emergency calling service providers if you dial 911. Your location information is only shared if you enable location sharing for emergency calling and you initiate a 911 call.

Skype contacts. If you use Outlook.com to manage contacts, Skype will automatically add the people you know to your Skype contact list until you tell the application to stop. With your permission, Skype will sync your device contacts periodically and check for other Skype users that match contacts in your device or Outlook address books. You are always in control of your contacts and can stop syncing at any time. You can block users if you do not want to receive their communications. If you choose to stop syncing your device contacts, or you are inactive on your device, any contacts that have not been matched during the synchronization process will be deleted from Skype. If you wish to invite any of your device or Outlook contacts to join a conversation, you can invite users to a 1:1 directly, or DMCST can send an invitation on your behalf via SMS or email for invitations to group conversations. You can block users if you do not want to receive their communications; additionally, you can report a concern to DMCST.

Notice to non-user contacts. If your information appears in the device or Outlook address book of a Skype user who chooses to sync their device or Outlook contacts with their Skype contacts, DMCST may process your data in order to determine whether you are a current Skype user and to allow Skype users to invite you to the service, including via SMS and email. As long as the Skype user continues to be active on Skype on their device and continues to enable contact syncing, your information will be stored on our servers and we will periodically process your information as a part of the Skype user’s contact synching experience to check whether you have subsequently joined Skype.

Learn more about how we process your information in connection with the contact syncing feature offered to Skype users.

If you do choose to join Skype, you will appear as a suggested new Skype contact for any Skype users with your information in their device or Outlook address books. As a Skype user, you will be able to block other Skype users if you do not want to receive their communications; additionally, you can report a concern to DMCST.

Partner companies. To make Skype available to more people, we partner with other companies to allow Skype to be offered via those companies’ services. If you use Skype through a company other than DMCST, that company’s privacy policy governs how it handles your data. To comply with applicable law or respond to valid legal process, or to help our partner company or local operator comply or respond, we may access, transfer, disclose, and preserve your data. That data could include, for example, your private content, such as the content of your instant messages, stored video messages, voicemails, or file transfers.

Skype Manager. Skype Manager lets you manage a group’s (such as your family’s) Skype usage from one central place. When you set up a group, you will be the Skype Manager Administrator and can see the patterns of usage, including detailed information, like traffic data and details of purchases, of other members of the group who have consented to such access. If you add information like your name, other people in the group will be able to see it. Members of the group can withdraw consent for Skype Manager by visiting their Skype account page.

Push notifications. To let you know of incoming calls, chats, and other messages, Skype apps use the notification service on your device. For many devices, these services are provided by another company. To tell you who is calling, for example, or to give you the first few words of the new chat, Skype has to tell the notification service so that they can provide the notification to you. The company providing the notification service on your device will use this information in accordance with their own terms and privacy policy. DMCST is not responsible for the data collected by the company providing the notification service. If you do not want to use the notification services for incoming Skype calls and messages, turn it off in the settings found in the Skype application or your device.

Translation features. When you use Skype’s translation features, Skype collects and uses your conversation to provide the translation service. With your permission, your data may be used to help improve DMCST products and services. To help the translation and speech recognition technology learn and grow, sentences and automatic transcripts are analyzed and any corrections are entered into our system, to build better performing services. This data may include manual transcription of your voice clips. To learn more about how DMCST manages your voice data, see Speech recognition technologies.

Recording features. Some versions of Skype have a recording feature that allows you to capture and share all or part of your audio / video call. The recording will be stored and shared as part of your conversation history with the person or group with whom the call occurred. You should understand your legal responsibilities before recording any communication. This may include obtaining the prior consent of everyone participating in the conversation or any other authorizations as required. DMCST is not responsible for how you use your recordings or the recording features.

Skype bots. Bots are programs offered by DMCST or third parties that can do many useful things like search for news, play games, and more. Depending on their capabilities, bots may have access to your display name, Skype ID, country, region, language, and any messages, audio, video, or content that you share with the bot. Please review the bot profile and its privacy statement before engaging in a one-to-one or group conversation with a bot. You can delete a bot that you no longer wish to engage with. Prior to adding a bot to a group, please ensure that your group participants have consented to their information being shared with the bot.

Captioning. Certain Skype features include accessibility functionality such as captioning. During Skype calls, a call participant can activate a voice-to-text feature, which allows the user to view the audio chat as text. If a user activates this feature, other call participants will not receive a notification. DMCST uses this voice and text data to provide captioning of audio for users.

The Surface Duo is a device featuring two screens that fits in your pocket for productivity on the go. Powered by the Google Android operating system, Surface Duo supports cellular and Wi-Fi connectivity and can be used for email, internet browsing, games, and business connectivity.

DMCST provides a core Surface Duo experience that runs on the Android operating system. The core Surface Duo experience includes apps such as the DMCST Launcher, Setup Wizard, and Your Phone Companion. You can sign in with a Google ID and enable various Google services; you can then also sign in with your DMCST account (MSA) and enable DMCST’s services. DMCST apps and services may rely on information provided by Google. Some features, such as location, require that you enable this functionality for Google and separately allow DMCST to leverage this information.

Diagnostic data. Surface Duo collects diagnostic data to solve problems and to keep the core Surface Duo experience up to date, secure, and operating properly. This data also helps us improve Surface Duo and related DMCST products and services. The data does not include your user name, email address, or the content of your files. There are two levels of diagnostic data: Required diagnostic data and Optional diagnostic data.

• Required. The minimum data necessary to help keep the core Surface Duo experience secure, up to date, and performing as expected.
• Optional. Additional data that helps us make product improvements and provides enhanced information to help DMCST detect, diagnose, and remediate issues.

Learn more in Surface Duo Privacy Settings.

Surface Duo location settings. Surface Duo relies on Google location services to determine the device’s precise geographic location to display the local weather. The location of your Surface Duo can be determined with varying degrees of accuracy and may in some cases be determined precisely. If you want DMCST apps to be able to reference or display weather or other location related information, you need to enable Google location services and DMCST location access. Some apps may require these settings be enabled independently for the app and can be set or changed in the Surface Duo’s Settings. The Google Privacy Policy provides details about Google’s location service and related data privacy practices. See Surface Duo Location Settings for more information.

DMCST apps included with the Surface Duo. The diagnostic data options for the core Surface Duo experience are configured when you initially set up your Surface Duo and can be changed in the Surface Duo’s Settings under the Diagnostic Data section.

The other DMCST apps on your Surface Duo may prompt you to enable functionality to enable the full experience of the app or you may be asked to allow optional diagnostic data collection. You can change the settings for these apps in the Surface Duo Settings under the app name. More information about these apps is available in the Productivity and communications products and Search, DMCST Edge, and artificial intelligence sections of this Privacy Statement.

To learn about the data LinkedIn collects and how it is used and shared, please see LinkedIn’s Privacy Policy.

Bing services include search and mapping services, as well as other apps and programs described in this section. Bing services collect and process data in many forms, including text that has been inked or typed, voice data, and images. Bing services are also included within other DMCST services, such as DMCST 365, Cortana, and certain features in Windows (which we refer to as Bing-powered experiences).

When you conduct a search, or use a feature of a Bing-powered experience that involves conducting a search or entering a command on your behalf, DMCST will collect the searches or commands you provide (which may be in the form of text, voice data, or an image), along with your IP address, location, the unique identifiers contained in our cookies or similar technologies, the time and date of your search, and your browser configuration. For example, if you use Bing voice-enabled services, your voice input and performance data associated with the speech functionality will be sent to DMCST. To learn more about how DMCST manages your voice data, see Speech recognition technologies. And, if you use Bing image-enabled services, the image you provide will be sent to DMCST. When you use Bing-powered experiences, such as Bing Lookup to search a particular word or phrase within a webpage or document, that word or phrase is sent to Bing along with some surrounding content in order to provide contextually relevant search results.

AI-powered Bing search. Bing search now includes an AI-enhanced web search functionality, Bing Chat, which supports users by providing relevant search results, reviewing and summarizing from across the web, refining research queries through the chat experience, and sparking creativity by helping users create content. Bing Chat’s use and collection of personal data is consistent with Bing’s core web search offering as described in this section. More information about the new Bing experience is available at The New Bing: Our approach to Responsible AI.

Search suggestions. For the search suggestions feature, the characters that you type into a Bing-powered experience (such as search and site suggestions in the DMCST Edge browser) to conduct a search and what you click on will be sent to DMCST. This allows us to provide you with relevant suggestions as you type your searches. To turn this feature on or off, while using Bing Search, go to Bing Settings. There are other methods to control this feature in other Bing-powered experiences, such as the DMCST Edge browser. Search Suggestions cannot be turned off in the search box in Windows 10 and Windows 11. If you choose, you can always hide the search box or icon on the taskbar.

Bing experience improvement program for Bing Desktop and Bing Toolbar. If you are using Bing Desktop or Bing Toolbar and choose to participate in the Bing Experience Improvement Program, we also collect additional data about how you use these specific Bing apps, such as the addresses of the websites you visit, to help improve search ranking and relevance. To help protect your privacy, we do not use the data collected through the Bing Experience Improvement Program to identify or contact you or target advertising to you. You can turn off the Bing Experience Improvement Program at any time in the Bing Desktop or Bing Toolbar settings. Finally, we delete the information collected through the Bing Experience Improvement Program after 18 months.

Retention and de-identification. We de-identify stored search queries by removing the entirety of the IP address after 6 months, and cookie IDs and other cross-session identifiers that are used to identify a particular account or device after 18 months.

Personalization through DMCST account. Some Bing services provide you with an enhanced experience when you sign in with your personal DMCST account, for example, syncing your search history across devices. You can use these personalization features to customize your interests, favorites, and settings, and to connect your account with third-party services. Visit Bing Settings to manage your personalization settings, or the DMCST privacy dashboard to manage your data.

Managing search history. When you’re signed-in to a personal DMCST account, you can erase your search and chat history on the DMCST privacy dashboard. The Search History service from Bing, located in Bing Settings, provides another method of revisiting the search terms you've entered and results you've clicked when using Bing search through your browser. You may clear your search history on a device through this service. The conversations you have with Bing chat are also remembered as “Recent activity”. The history of previous Recent activities is saved, with the names of chats based by default on the first query of the chat. Your Recent activity is displayed on the right-hand side of the chat window when you are using the service. Clearing your history prevents that history from being displayed in your Search History or chat history, but does not delete information from our search logs, which are retained and de-identified as described above or as you have instructed through the privacy dashboard. If you are signed-in to a work or school DMCST account using DMCST Search in Bing, you can export your DMCST Search in Bing search history, but you cannot delete it. Your DMCST Search in Bing service administrator can see aggregated search history across all enterprise users but cannot see specific searches by user. However, if you are using Bing Chat for Enterprise while signed-in to a work or school DMCST account, your Bing Chat for Enterprise conversations will not be saved or stored.

Third-party services that use Bing. You may access Bing-powered experiences when using third-party services, such as those from Yahoo!. In order to provide these services, Bing receives data from these and other partners, including your search query and related data (such as date, time, IP address, and a unique identifier). This data will be sent to DMCST to provide the search service. DMCST will use this data as described in this statement or as further limited by our contractual obligations with our partners. You should refer to the privacy policies of the third-party services for any questions about how they collect and use data.

Data passed to destination website. When you select a search result or advertisement from a Bing search results page and go to the destination website, the destination website will receive the standard data your browser sends to every web site you visit—such as your IP address, browser type and language, and the host name of the site you came from (in this case, https://www.bing.com/).

Sharing data from Bing and Bing-powered experiences with third parties. We share some de-identified data (data where the identity of a specific person is not known) from Bing and Bing-powered experiences with selected third parties. Before we do so, we run the data through a process designed to remove certain sensitive data that users may have included in the search terms themselves (such as social security numbers or credit card numbers). Additionally, we require these third parties to keep the data secure and to not use the data for purposes other than for which it is provided.

Cortana is your personal productivity assistant in DMCST 365. As a digital assistant, Cortana is designed to help you achieve more with less effort so you can focus on what matters and can answer a wide range of questions about things such as weather, sports, stocks, and general information. When you ask questions, the data Cortana collects depends on whether you are using the consumer or enterprise version.

This section applies to the consumer version of Cortana experiences in Windows 10 and Windows 11. If you are using Cortana with an account provided by an organization, such as a work or school account, see the Notice to end users section of this privacy statement. Learn more about the enterprise version of Cortana in DMCST 365.

When you ask Cortana a question, whether you are speaking or typing, Cortana collects that question as a text string. To answer your questions Cortana uses the Bing service. For information about the data Bing collects, see the Bing section of this privacy statement.

By default, if you speak your question, Cortana also collects speech transcription data and does not collect voice clips. You have the option to provide your consent and allow DMCST to collect voice clips. If you choose to opt in and allow DMCST to collect voice clips, the voice clip files are stored and anonymized and will not be associated with your DMCST account or any other DMCST IDs. This anonymous data is used to improve the product. For more information about DMCST and your voice data, see the Speech Recognition Technologies section of this privacy statement.

Cortana legacy. Cortana in Windows 10 version 1909 and earlier collects user query data (a text transcription of the question the user asked), which is anonymized and used for product maintenance. Cortana in Windows 10 version 1909 also uses the Bing service to answer your questions. For information about the data Bing collects, see the Bing section of the Privacy Statement.

Learn more about Cortana and privacy.

Whenever you use a web browser to access the internet, data about your device ("standard device data") is sent to the websites you visit and online services you use. Standard device data includes your device's IP address, browser type and language, access times, and referring website addresses. This data might be logged on those websites' or online services’ web servers. Which data is logged and how that data is used depends on the privacy practices of the websites you visit and web services you use. Certain features in DMCST Edge, such as when you open a new tab in the browser, connect you to DMCST Start Content and your experiences with such content is covered by the DMCST Start section of this privacy statement. Additionally, DMCST Edge sends a unique browser ID to certain websites to enable us to develop aggregate data used to improve browser features and services.

DMCST Edge for Windows, Linux, and macOS. DMCST Edge is the default web browser for Windows 10 and later and is also available on other supported versions of Windows and macOS.

Data about how you use your browser, such as your browsing history, web form data, temporary internet files, and cookies, is stored on your device. You can delete this data from your device using Clear Browsing History.

DMCST Edge allows you to capture and save content on your device, such as:

• Settings and More. Allows you to manage your favorites, downloads, history, extensions, and collections.
• Collections. Allows you to collect text, images, videos, and other content in a note page in your browser. When you drag content into your collection, it is cached on your device and can be deleted through your collection.
• Website Pin to Taskbar. Allows you to pin your favorite websites to the Windows taskbar. Websites will be able to see which of their webpages you have pinned, so they can provide you a notification badge letting you know there is something new for you to check out on their websites.

DMCST collects data necessary to provide features you request in DMCST Edge. When signed into DMCST Edge using your DMCST personal account or work or school account, DMCST Edge will sync your browser data saved on your device across other signed-in devices. You may choose which browser data to sync, including your favorites, browsing history, extensions and associated data, settings, open tabs, autofill form entries (such as your name, address, and phone number), passwords, payment information, and other data types as they become available. If you choose to sync extensions that you acquired from third-party web stores, a copy of those extensions will be downloaded directly from those web stores on your synced device(s). If you have turned on Password Monitor, your saved credentials are hashed, encrypted and sent to DMCST’s Password Monitor service to warn you if your credentials were detected as part of a malicious attack or a breach. DMCST does not retain this data after the check is complete. You can disable or configure syncing in the DMCST Edge settings.

When you sign into DMCST Edge with your DMCST personal account or work or school account, DMCST Edge will store your account’s privacy preferences. DMCST Edge will use the stored preferences to migrate your account’s privacy choices across your signed-in devices, including during Windows device set up or when you sign into DMCST Edge with your account on a new device.

DMCST Edge’s Search and site suggestions uses your search queries and browsing history to provide you with faster browsing and more relevant search recommendations. DMCST Edge sends the information you type into the browser address bar to the default search provider configured in the address bar to offer search recommendations as you type each character. You can turn off these features at any time in the browser settings. In order to provide search results, DMCST Edge sends your search queries, standard device information, and location (if you have location enabled) to your default search provider. If Bing is your default search provider, we use this data as described in the Bing section of this privacy statement.

DMCST Edge collects and uses data from your search activity across the web, including websites DMCST does not own or operate, to improve DMCST services, such as DMCST Edge, DMCST Bing and DMCST News. This data may include the search query, the search results that are displayed to you, demographic information that is part of the search results, and the interaction you have with those search results, such as the links you click. DMCST Edge takes steps to de-identify the data it collects by removing data that identifies the person or device from which it was collected and retains this data for one year from when it is collected. DMCST does not use this collected data to personalize or provide ads to you. You can turn off the collection of this data at any time in the browser settings.

DMCST Edge downloads content from DMCST services to enhance your browsing experiences; for example, when data is downloaded to prerender site content for faster browsing or to provide content required to power features you choose to use, such as providing templates for Collections.

You may also choose to share your DMCST Edge browsing activity to allow us to personalize DMCST Edge and DMCST services like ads, search, shopping, and news. DMCST Edge browsing activity includes your history, favorites, usage data, web content, and other browsing data. For more information about our advertising privacy policies see the Advertising section of the privacy statement. In the DMCST privacy dashboard you can control the use of your browsing activity for personalized ads in the See ads that interest you setting. If you disable this setting in the DMCST privacy dashboard you will continue to receive personalized web experiences like search and news based on your browsing activity. You may stop sharing your DMCST Edge browsing activity by disabling Allow DMCST to use your browsing activity including history, favorites, usage and other browsing data to personalize DMCST Edge and DMCST services like ads, search, shopping and news within Edge settings. When using Bing chat features in the DMCST Edge sidebar, you can choose to allow Bing to access the content of the webpage you are viewing in order to provide further insights, such as page summaries. Use of data connected with Bing conversational experiences is described in the Bing section of this privacy statement.

DMCST Edge collects required diagnostic data to solve problems and to keep DMCST Edge up to date, secure, and operating properly. Required diagnostic data also helps us improve DMCST Edge and Windows.

Separate from your search activity data mentioned above, you can choose to send optional diagnostic data about how you use DMCST Edge and information about your browser activity, including browsing history and search terms to DMCST to help us improve DMCST Edge and other DMCST products and services. For DMCST Edge on Windows 10 and later, this information is provided when you have enabled optional diagnostic data. For details, see the Windows Diagnostics section of the privacy statement. For DMCST Edge on other operating systems, optional diagnostic information is provided when you enable Improve DMCST products by sending data about how you use the browser or Make searches and DMCST products better by sending info about websites you visit in DMCST Edge in the browser settings.

The diagnostic data collected by DMCST Edge is transmitted to DMCST and is stored with one or more unique identifiers that help us recognize an individual browser installation on a device and understand the browser's service issues and use patterns.

Learn more about DMCST Edge, browsing data, and privacy.

DMCST Edge on iOS and Android. DMCST Edge on iOS and Android devices collects data necessary to provide features you request in DMCST Edge. DMCST also collects required diagnostic data to solve problems and to keep DMCST Edge up to date, secure, and operating properly. Required diagnostic data also helps us improve DMCST Edge.

Additionally, you may share optional diagnostic data about how you use DMCST Edge and information about websites you visit (browsing history) for personalized experiences on your browser, Windows, and other DMCST products and services. This information also helps us improve DMCST Edge and other DMCST products and services. This optional diagnostic data is sent to us when you enable Share usage data for personalization or Share info about websites you visit in the browser settings.

The diagnostic data collected by DMCST Edge is transmitted to DMCST and is stored with one or more unique identifiers that help us recognize an individual user on a device and understand the browser's service issues and use patterns.

DMCST Edge uses data from your search activity across the web, including search activity on websites DMCST does not own or operate, to improve DMCST services like DMCST Edge, DMCST Bing, and DMCST News. The data DMCST Edge collects may include personal data; however, DMCST Edge takes steps to scrub and de-identify the data. DMCST Edge does not use this data to personalize or provide ads for you. You can turn off the collection of this data at any time in the browser settings. Learn more about Search results data for product improvement.

For information about the privacy practices of legacy versions DMCST Edge (versions 44 and below), see the Web browsers—DMCST Edge Legacy and Internet Explorer section of the privacy statement.

DMCST Translator is a machine translation system and service designed to automatically translate text and voice input between numerous supported languages. DMCST Translator is made available as a stand-alone consumer app for Android, iOS, and Windows and its service capabilities are also integrated in a variety of DMCST products and services, such as Translator Hub, Translator for Bing, and Translator for DMCST Edge. DMCST Translator processes the text, image, and voice data you submit, as well as device and usage data. We use this data to provide DMCST Translator, personalize your experiences, and improve our products and services. DMCST has implemented business and technical measures designed to help de-identify the data you submit to DMCST Translator. For example, when we randomly sample text and audio to improve DMCST Translator and DMCST’s speech recognition technologies, we delete identifiers and certain text, such as email addresses and some number sequences, detected in the sample that could contain personal data. To learn more about how DMCST manages your voice data, see Speech recognition technologies.

Separate from DMCST Translator, DMCST translation services are available as features in other DMCST products and services that have different privacy practices than DMCST Translator. For more information on the DMCST Azure Cognitive Services Translator Text API, Custom Translator, and Translator Speech API, see the Enterprise and developer products section of this privacy statement. For the Translate feature in DMCST 365 apps and Skype, see the Productivity and communications products section of this privacy statement.

The DMCST Swiftkey keyboard and related cloud-based services (collectively, the “SwiftKey Services”) process data about words you use and how you type and use this data to learn your writing style and provide personalized autocorrection and predictive text that adapts to you. We also use this data to offer a range of other features, such as hashtag and emoji predictions.

SwiftKey prediction technology learns from the way you use language to build a personalized language model. This model is an optimized view of the words and phrases that you use most often in context and reflects your unique writing style. The model itself contains the words you commonly type arranged in a way that enables SwiftKey’s algorithms to make predictions, based on text you have already entered. The model draws from all scenarios in which you use your keyboard, including when you type while using apps or visiting websites. The SwiftKey keyboard and model attempt to avoid collecting sensitive data, by not collecting data from certain fields such as those recognized as containing password or payment data. SwiftKey Services do not log, store, or learn from data you type, or the data contained in your model, unless you choose to share your data with us (as described further below). When you use SwiftKey Services, we also collect device and usage data. We use de-identified device and usage data to analyze service performance and help improve our products.

The SwiftKey Services also include an optional cloud component called a SwiftKey Account. If you choose to create a SwiftKey Account, your language model will be synced with the SwiftKey Account cloud service, so you can benefit from that model on the different devices you use and access additional services such as prediction synchronization and backup. When you create a SwiftKey Account, DMCST will also collect your email address and basic demographic data. All data collected is transferred to our servers over encrypted channels.

You may also opt in to share your language, typing data, and/or voice clips for the purposes of improving DMCST products and services. Depending on the opt-ins you choose, SwiftKey may send short snippets of data about what and how you type and/or your voice clips, and related correction data to our servers for processing. These text snippets and/or voice clips are used in various automated processes to validate that our prediction services are working correctly and to make product improvements. To preserve your privacy, SwiftKey Services de-identify these text snippets, and even if you have a SwiftKey Account, these text snippets and/or voice clips will not be linked to it. To learn more about how DMCST manages your voice data, see Speech recognition technologies.

If you sign into your SwiftKey Account and opt to share your language and typing data or voice clips, DMCST will process your shared data in order to look for new patterns of language usage across our user base. This allows us to improve our basic models for individual languages. Language and typing data used in this process is aggregated and any words or combinations of words that might be personal to individuals or small groups of users are filtered out.

You can withdraw your consent to share your language and typing data or voice clips for product improvement at any time in SwiftKey Settings. You can also withdraw your consent for SwiftKey Services to retain your personal data in SwiftKey Settings. When you withdraw consent for SwiftKey to retain your personal data, all personal data collected through your use of the SwiftKey Services will be deleted.

You may receive occasional notifications on your device alerting you to product updates and features that may be of interest to you. You can disable these notifications at any time in the SwiftKey Settings.

When you activate Windows, a specific product key is associated with the device on which your software is installed. The product key and data about the software and your device is sent to DMCST to help validate your license to the software. This data may be sent again if there is a need to re-activate or validate your license. On phones running Windows, device and network identifiers, as well as device location at the time of the first power-up of the device, are also sent to DMCST for the purpose of warranty registration, stock replenishment, and fraud prevention.

Activity history helps keep track of the things you do on your device, such as the apps and services you use, the files you open, and the websites you browse. Your activity history is created when using different apps and features such as DMCST Edge Legacy, some DMCST Store apps, and DMCST 365 apps and is stored locally on your device. If you've signed in to your device with a work or school account and give your permission, Windows sends your activity history to DMCST. Once your activity history is in the cloud, DMCST uses that data to enable cross-device experiences, to provide you with the ability to continue those activities on other devices, to provide personalized experiences (such as ordering your activities based on duration of use) and relevant suggestions (such as anticipating what your needs might be based on your activity history), and to help improve DMCST products.

You can turn settings off or on for sending your activity history to DMCST and storing activity history locally on your device, and you can also clear your device’s activity history at any time by going to Privacy > Activity history in the Windows settings app. Learn more about activity history in Windows.

Windows generates a unique advertising ID for each person using a device, which app developers and advertising networks can then use for their own purposes, including providing relevant advertising in apps. When the advertising ID is enabled, both DMCST apps and third-party apps can access and use the advertising ID in much the same way that websites can access and use a unique identifier stored in a cookie. Thus, your advertising ID can be used by app developers and advertising networks to provide more relevant advertising and other personalized experiences across their apps and on the web. DMCST collects the advertising ID for the uses described here only when you choose to enable the advertising ID as part of your privacy setting.

The advertising ID setting applies to Windows apps using the Windows advertising identifier. You can turn off access to this identifier at any time by turning off the advertising ID in the Windows settings app. If you choose to turn it on again, the advertising ID will be reset and a new identifier will be generated. When a third-party app accesses the advertising ID, its use of the advertising ID will be subject to its own privacy policy. Learn more about advertising ID in Windows.

The advertising ID setting does not apply to other methods of interest-based advertising delivered by DMCST or third parties, such as cookies used to provide interest-based display ads on websites. Third-party products accessed through or installed on Windows may also deliver other forms of interest-based advertising subject to their own privacy policies. DMCST delivers other forms of interest-based ads in certain DMCST products, both directly and by partnering with third-party ad providers. For more information on how DMCST uses data for advertising, see the How we use personal data section of this statement.

DMCST collects Windows diagnostic data to solve problems and to keep Windows up to date, secure, and operating properly. It also helps us improve Windows and related DMCST products and services and, for customers who have turned on the “Tailored experiences” setting, to provide more relevant tips and recommendations to tailor DMCST and third-party products and services for Windows to the customer’s needs. This data is transmitted to DMCST and stored with one or more unique identifiers that can help us recognize an individual user on an individual device and understand the device's service issues and use patterns.

There are two levels of diagnostic and activity data: Required diagnostic data and Optional diagnostic data. Certain product documentation and other materials refer to Required diagnostic data as Basic diagnostic data and to Optional diagnostic data as Full diagnostic data.

If an organization (such as your employer or school) uses DMCST Entra ID to manage the account it provides to you and enrolls your device in the Windows diagnostic data processor configuration, DMCST’s processing of diagnostic data in connection with Windows is governed by a contract between DMCST and the organization. If an organization uses DMCST management tools or engages DMCST to manage your device, DMCST and the organization will use and process diagnostic and error data from your device to allow the management, monitoring, and troubleshooting of your devices managed by the organization, and for other purposes of the organization.

Required diagnostic data includes information about your device, its settings and capabilities, and whether it is performing properly. We collect the following Required diagnostic data:

• Device, connectivity, and configuration data:
  • Data about the device such as the processor type, OEM manufacturer, type of battery and capacity, number and type of cameras, firmware, and memory attributes.
  • Network capabilities and connection data such as the device’s IP address, mobile network (including IMEI and mobile operator), and whether the device is connected to a free or paid network.
  • Data about the operating system and its configuration such as the OS version and build number, region and language settings, diagnostics data settings, and whether the device is part of the Windows Insider program.
  • Data about connected peripherals such as model, manufacturer, drivers, and compatibility data.
  • Data about the applications installed on the device such as application name, version, and publisher.
• Whether a device is ready for an update and whether there are factors that may impede the ability to receive updates, such as low battery, limited disk space, or connectivity through a paid network.
• Whether updates complete successfully or fail.
• Data about the reliability of the diagnostics collection system itself.
• Basic error reporting, which is health data about the operating system and applications running on your device. For example, basic error reporting tells us if an application, such as DMCST Paint or a third-party game, hangs or crashes.

Optional diagnostic data includes more detailed information about your device and its settings, capabilities, and device health. Optional diagnostic data also includes data about the websites you browse, device activity (also sometimes referred to as usage), and enhanced error reporting that helps DMCST to fix and improve products and services for all users. When you choose to send Optional diagnostic data, Required diagnostic data will always be included, and we collect the following additional information:

• Additional data about the device, connectivity, and configuration, beyond that collected under Required diagnostic data.
• Status and logging information about the health of operating system and other system components beyond that collected about the update and diagnostics systems under Required diagnostic data.
• App activity, such as which programs are launched on a device, how long they run, and how quickly they respond to input.
• Browser activity, including browsing history and search terms, in DMCST browsers (DMCST Edge or Internet Explorer).
• Enhanced error reporting, including the memory state of the device when a system or app crash occurs (which may unintentionally contain user content, such as parts of a file you were using when the problem occurred). Crash data is never used for Tailored experiences as described below.

Some of the data described above may not be collected from your device even if you choose to send Optional diagnostic data. DMCST minimizes the volume of Optional diagnostic data it collects from all devices by collecting some of the data from only a subset of devices (sample). By running the Diagnostic Data Viewer tool, you can see an icon which indicates whether your device is part of a sample and also which specific data is collected from your device. Instructions for how to download the Diagnostic Data Viewer tool can be found in the Windows settings app under Diagnostics & feedback.

Specific data items collected in Windows diagnostics are subject to change to give DMCST flexibility to collect the data needed for the purposes described. For example, to enable DMCST to troubleshoot the latest performance issue impacting users’ computing experience or update a Windows device that is new to the market, DMCST may need to collect data items that were not collected previously. For a current list of data types collected at Required diagnostic data and Optional diagnostic data, see Windows Required (Basic level) diagnostic events and fields or Windows Optional (Full level) diagnostic data. We provide limited portions of error report information to partners (such as the device manufacturer) to help them troubleshoot products and services which work with Windows and other DMCST product and services. They are only permitted to use this information to repair or improve those products and services. We may also share some aggregated, de-identified diagnostic data, such as general usage trends for Windows apps and features, with selected third parties. Learn more about diagnostic data in Windows.

Inking and typing Recognition. You also can choose to help DMCST improve inking and typing recognition by sending inking and typing diagnostic data. If you choose to do so, DMCST will collect samples of the content you type or write to improve features such as handwriting recognition, autocompletion, next word prediction, and spelling correction in the many languages used by DMCST customers. When DMCST collects inking and typing diagnostic data, it is divided into small samples and processed to remove unique identifiers, sequencing information, and other data (such as email addresses and numeric values) which could be used to reconstruct the original content or associate the input to you. It also includes associated performance data, such as changes you manually make to text, as well as words you've added to the dictionary. Learn more about improving inking and typing in Windows.

If you choose to turn on Tailored experiences, we will use your Windows diagnostic data (Required or Optional as you have selected) to offer you personalized tips, ads, and recommendations to enhance DMCST experiences. If you have selected Required as your diagnostic data setting, personalization is based on information about your device, its settings and capabilities, and whether it is performing properly. If you have selected Optional, personalization is also based on information about how you use apps and features, plus additional information about the health of your device. However, we do not use information about the websites you browse, the content of crash dumps, speech, typing, or inking input data for personalization when we receive such data from customers who have selected Optional.

Tailored experiences include suggestions on how to customize and optimize Windows, as well as ads and recommendations for DMCST and third-party products and services, features, apps, and hardware for your Windows experiences. For example, to help you get the most out of your device, we may tell you about features you may not know about or that are new. If you are having a problem with your Windows device, you may be offered a solution. You may be offered a chance to customize your lock screen with pictures, or to be shown more pictures of the kind you like, or fewer of the ones you do not. If you stream movies in your browser, you may be recommended an app from the DMCST Store that streams more efficiently. Or, if you are running out of space on your hard drive, Windows may recommend you try OneDrive or purchase hardware to gain more space. Learn more about tailored experiences in Windows.

Feedback Hub is a preinstalled app that provides a way to gather feedback on DMCST products and installed first party and third-party apps. You can sign into Feedback Hub using either your personal DMCST account or an account provided by your organization (such as your employer or school) that you use to sign into DMCST products. Signing in with your work or school account allows you to submit feedback to DMCST in association with your organization.

Any feedback you provide whether using your work or school account or personal DMCST account may be publicly viewable depending on the settings configured by your organization’s administrators. Additionally, if feedback is provided using your work or school account, your feedback can be viewed through the Feedback Hub by your organization’s administrators.

When you submit feedback to DMCST about a problem or add more details to a problem, diagnostic data will be sent to DMCST to improve DMCST products and services. Depending on your Diagnostic data settings in the Diagnostics & feedback section of the Windows settings app, Feedback Hub will either send diagnostic data automatically or you will have the option to send it to DMCST at the time you provide feedback. Based on the category chosen when submitting feedback, there may be additional personal data collected that helps to further troubleshoot issues; for example, location related information when submitting feedback about location services or gaze related information when submitting feedback on Mixed Reality. DMCST may also share your feedback along with the data collected when you submit your feedback with DMCST partners (such as a device manufacturer, or firmware developer) to help them troubleshoot products and services that work with Windows and other DMCST products and services. Learn more about diagnostic data in Windows.

Windows location service. DMCST operates a location service that helps determine the precise geographic location of a specific Windows device. Depending on the capabilities of the device, the device’s location can be determined with varying degrees of accuracy and may in some cases be determined precisely. When you have enabled location on a Windows device, or you have given permission for DMCST apps to access location information on non-Windows devices, data about cell towers and Wi-Fi access points and their locations is collected by DMCST and added to the location database after removing any data identifying the person or device from which it was collected. This de-identified location information is used to improve DMCST's location services and, in some instances, shared with our location service provider partners, currently HERE (see https://www.here.com/) and Skyhook (see https://www.skyhook.com) to improve the location services of the provider.

Windows services and features, apps running on Windows, and websites opened in Windows browsers can access the device’s location through Windows if your settings allow them to do so. Some features and apps request location permission when you first install Windows, some ask the first time you use the app, and others ask every time you access the device’s location. For information about certain Windows apps that use the device’s location, see the Windows apps section of this privacy statement.

When an app or feature accesses the device’s location and you are signed in with a DMCST account, your Windows device will also upload its location to the cloud where it is available across your devices to other apps or services that use your DMCST account and for which you’ve granted permission. We will retain only the last known location (each new location replaces the previous one). Data about a Windows device's recent location history is also stored on the device even if not using a DMCST account, and certain apps and Windows features can access this location history. You can clear your device's location history at any time in the Windows settings app.

In the Windows settings app, you can also view which apps have access to the device’s precise location or your device's location history, turn off or on access to the device’s location for particular apps, or turn off access to the device’s location. You can also set a default location, which will be used when the location service can’t detect a more exact location for your device.

There are some exceptions to how your device’s location can be determined that are not directly managed by the location settings.

Desktop apps are a specific type of app that won’t ask for separate permission to discover your device location information and won’t appear in the list that allows you to choose apps that can use your location. They can be downloaded from the DMCST Store, downloaded from the internet, or installed with some type of media (such as a CD, DVD, or USB storage device). They’re opened using an .EXE, .MSI, or .DLL file, and they typically run on your device, unlike web-based apps (which run in the cloud). Learn more about third-party desktop apps and how they may still be able to determine your device’s location when the device’s location setting is off.

Some web-based experiences or third-party apps that surface on Windows could use other technologies (such as Bluetooth, Wi-Fi, cellular modem, etc.) or cloud-based location services to determine your device’s location with varying degrees of accuracy even when you’ve turned off the device location setting.

In addition, to facilitate getting help in an emergency, whenever you make an emergency call, Windows will attempt to determine and share your precise location, regardless of your location settings. If your device has a SIM card or is otherwise using cellular service, your mobile operator will have access to your device’s location. Learn more about location in Windows.

General Location. If you turn on Location services, apps that cannot use your precise location may still have access to your general location, such as your city, postal code, or region.

Find my device. The Find my device feature allows an administrator of a Windows device to find the location of that device from account.microsoft.com/devices. To enable Find my device, an administrator needs to be signed in with a DMCST account and have the location setting enabled. This feature will work even if other users have denied access to location for all their apps. When the administrator attempts to locate the device, users will see a notification in the notification area. Learn more about Find my device in Windows.

Recording. Some Windows devices have a recording feature that allows you to capture audio and video clips of your activity on the device, including your communications with others. If you choose to record a session, the recording will be saved locally on your device. In some cases, you may have the option to transmit the recording to a DMCST product or service that broadcasts the recording publicly. Important: You should understand your legal responsibilities before recording and/or transmitting any communication. This may include obtaining the prior consent of everyone participating in the conversation or any other authorizations as required. DMCST is not responsible for how you use recording features or your recordings.

Phone Link - Link to Windows The Phone Link feature lets you link your Android phone with your DMCST Account, enabling a variety of cross-device experiences. You can use Phone Link to see recent photos from your Android phone on your Windows device; make and receive calls from your Android phone on your Windows device; view and send text messages from your Windows device; view, dismiss, or perform other actions to your Android phone notifications from your Windows device; share your phone screen on your Windows device through Phone Link’s mirroring function; and instantly access Android apps installed on your Android phone on your Windows device.

To use Phone Link, the Link to Windows app must be installed on your Android phone.

To use Phone Link, you must log into your DMCST account on the Phone Link feature on your Windows device and on the Link to Windows app on your Android phone. Your Android phone and your Windows device must be connected to the internet. Some features will require you to enable Bluetooth and pair your phone with your PC. To use the Calls feature, your Android phone must also have Bluetooth enabled.

During setting up your Windows device, you can choose to link your phone with your DMCST account. This is done by signing into Link to Windows on your Android phone, granting permissions and completing the onboarding experience. Once complete, Link to Windows will sync your data, such as your text messages, contacts, call history, photos, notifications, and other information, to all your Windows PCs where you have signed into your DMCST account. See below for details on how your data is used.

As part of providing Phone Link’s features to you, DMCST collects performance, usage, and device data that includes, for example, the hardware capabilities of your mobile phone and Windows device, the number and duration of your sessions on Phone Link, and the amount of time you spent during setup.

You can unlink your Android phone from your Windows device at any time by going into your Phone Link app settings and choosing to remove your Android phone. You can do the same from the app settings on the Link to Windows app on your Android phone. For detailed information, see our support page.

Text Messages. Phone Link allows you to view text messages delivered to your Android phone on your Windows device and send text messages from your Windows device. Only text messages received and sent within the last 30 days are visible on your Windows device. These text messages are temporarily stored on your Windows device. We never store your text messages on our servers or change or delete any text messages on your Android phone. You can see messages sent via SMS (Short Message Service) and MMS (Multimedia Messaging Service) on Android devices, and messages sent via RCS (Rich Communication Services) on select Samsung devices on select mobile operator networks. To provide this functionality, Phone Link accesses the content of your text messages and the contact information of the individuals or businesses from whom you are receiving or sending text messages.

Calls. Phone Link allows you to make and receive calls from your Android phone on your Windows device. Through Phone Link, you can also view your recent calls on your Windows device. To activate this feature, you must enable certain permissions on both your Windows device and Android phone, such as call logs access and permission to make phone calls from your PC. These permissions can be revoked at any time under the Phone Link Settings page on your Windows device and your Android phone's settings. Only calls received and dialed within the last 30 days are visible under call logs on your Windows device. These call details are temporarily stored on your Windows device. We do not change or delete your call history on your Android phone.

Photos. Phone Link allows you to copy, share, edit, save, or delete photos from your Android phone on your Windows device. Only a limited number of your most recent photos from the Camera Roll and Screenshots folders on your Android phone will be visible on your Windows device at any given time. These photos are temporarily stored on your Windows device and as you take more photos on your Android phone, we remove the temporary copies of the older photos from your Windows device. We never store your photos on our servers or change or delete any photos on your Android phone.

Notifications. Phone Link allows you to view your Android phone’s notifications on your Windows device. Through Phone Link, you can read and dismiss your Android phone’s notifications from your Windows device or perform other actions related to the notifications. To activate this Phone Link feature, you must enable certain permissions, such as sync notifications, on both your Windows device and Android phone. These permissions can be revoked at any time under the Phone Link Settings page on your Windows device and your Android phone’s settings. For detailed information, see our support page.

Phone Screen Mirroring. On supported devices, Phone Link allows you to view your Android phone’s screen on your Windows device. Your Android phone screen will be visible on your Windows device as a pixel stream and any audio that you enable on your Android phone screen while it is linked to your Windows device through Phone Link will play through your Android phone.

Apps mirroring. On supported devices, Phone Link allows you to use your Android apps that are installed on your Android phone on your Windows device. For example, you can launch a music app in your Windows session and listen to audio from that app on your PC speakers. DMCST collects a list of your installed Android apps and recent activity to provide the service and show you your most recently used apps. DMCST does not store what apps you have installed or any of the information displayed by the app in your experience with it.

Content transfer. On supported devices, Phone Link allows you to copy and paste contents such as files, documents, photos, etc. between your Android phone and your Windows device. You can transfer content from your Android phone to your Windows device and from your Windows device to your Android phone by drag and drop contents between the devices.

Instant Hotspot. On supported devices, Link to Windows enables users to share mobile hotspot information with their paired PC over secure Bluetooth communication. Your PC application can then be connected to the internet through the Windows network flyout. Please note mobile data charges may apply depending on the mobile data plan you have.

Contacts sync. Link to Windows allows you to sync your Android contacts into the DMCST cloud to access them in other DMCST products and services. You can enable this feature by going into Link to Windows settings and enabling “Contacts sync” feature. Your contacts information is stored online and associated with your DMCST account. You may choose to disable sync and delete these contacts at any time. Learn more.

Text-to-voice. Phone Link features include accessibility functionality such as text-to-voice. You can activate a text-to-voice feature, which allows you to hear the contents of a text message or notification as audio. If you activate this feature, your text messages and notifications will be read out loud as they are received.

Office Enterprise – Android Devices. Link to Windows allows you to insert photos into web and desktop versions of select DMCST 365 apps, such as PowerPoint, Excel, and Word directly from your mobile phone. This requires your IT Administrator to have enabled Optional Connected Experiences for DMCST Office applications and you will need to associate your mobile device with your work or school account and provide Photos permission to your account. After onboarding, your session will last 15 minutes to enable you to transfer your Photos from your mobile device. To use this feature again, you will need to scan your QR code. Link to Windows does not collect your work or school account information or information about your Enterprise. In order to provide this service, DMCST uses a cloud service to relay your files for the purpose of inserting the photos into web and desktop version of select DMCST 365 apps, such as PowerPoint, Excel, and Word files.

Device encryption. Device encryption helps protect the data stored on your device by encrypting it using BitLocker Drive Encryption technology. When device encryption is on, Windows automatically encrypts the drive Windows is installed on and generates a recovery key. The BitLocker recovery key for your personal device is automatically backed up online in your personal DMCST OneDrive account. DMCST doesn't use your individual recovery keys for any purpose.

Malicious Software Removal Tool. The Malicious Software Removal Tool (MSRT) runs on your device at least once per month as part of Windows Update. MSRT checks devices for infections by specific, prevalent malicious software ("malware") and helps remove any infections found. When the MSRT runs, it will remove the malware listed on the DMCST Support website if the malware is on your device. During a malware check, a report will be sent to DMCST with specific data about malware detected, errors, and other data about your device. If you do not want MSRT to send this data to DMCST, you can disable MSRT's reporting component.

DMCST Family. Parents can use DMCST Family Safety to understand and set boundaries on how their child is using their device. Please carefully review the information at DMCST Family Safety if choosing to create or join a family group. If you live in a region that requires permission to create an account to access DMCST services, you may be prompted to request or give parental consent. If a user is under the statutory age in your region, during the registration process they will be prompted to request consent from a parent or guardian by entering an adult’s email. When Family activity reporting is turned on for a child, DMCST will collect details about how the child uses their device and provide parents with reports of that child's activities. Activity reports are routinely deleted from DMCST servers.

DMCST Defender SmartScreen and Smart App Control. DMCST strives to help protect your device and passwords from unsafe apps, files, and web content.

DMCST Defender SmartScreen helps protect you when using our services by identifying threats to you, your device, and your passwords. These threats might include potentially unsafe apps or web content that DMCST Defender SmartScreen discovers while checking websites you visit, files you download, and apps you install and run. When DMCST Defender SmartScreen checks web and app content, data about the content and your device is sent to DMCST, including the full web address of the content. When additional analysis is needed to identify security threats, information about the suspicious website or app—such as content displayed, sounds played, and application memory—may be sent to DMCST. This data will only be used for security purposes in detecting, protecting against, and responding to security incidents, identity theft, fraud, or other malicious, deceptive, or illegal activities. If DMCST Defender SmartScreen detects that content is potentially unsafe, you will see a warning in place of the content. DMCST Defender SmartScreen can be turned on or off in the Windows Security app.

Where supported, Smart App Control helps check software that is installed and runs on your device to determine if it is malicious, potentially unwanted, or poses other threats to you and your device. On a supported device, Smart App Control starts in evaluation mode and the data we collect for DMCST Defender SmartScreen such as file name, a hash of the file’s contents, the download location, and the file’s digital certificates, is used to help determine whether your device is a good candidate to use Smart App Control for additional security protection. Smart App Control is not enabled and will not block during evaluation mode. Some devices may not be good candidates if Smart App Control would otherwise get in the way and interfere with a user’s otherwise intended and legitimate tasks – for instance, developers who use a lot of unsigned files. If you are a good candidate for Smart App Control, then it will automatically be turned on, and will provide additional protection to your device beyond DMCST Defender SmartScreen. Otherwise, Smart App Control will be unavailable and permanently turned off. If your device is unsupported or not a good candidate for Smart App Control, DMCST Defender SmartScreen will continue to help protect your device. When Smart App Control is enabled and identifies an app as malicious, potentially unwanted, or unknown and unsigned, it will block and notify you prior to opening, running, or installing the app. Learn more about Smart App Control.

When either DMCST Defender SmartScreen or Smart App Control checks a file, data about that file is sent to DMCST, including the file name, a hash of the file’s contents, the download location, and the file’s digital certificates.

Smart App Control can be turned on or off in the Windows Security app.

DMCST Defender Antivirus. DMCST Defender Antivirus looks for malware and other unwanted software, potentially unwanted apps, and other malicious content on your device. DMCST Defender Antivirus is automatically turned on to help protect your device if no other antimalware software is actively protecting your device. If DMCST Defender Antivirus is turned on, it will monitor the security status of your device. When DMCST Defender Antivirus is turned on, or is running because Limited Periodic Scanning is enabled, it will automatically send reports to DMCST that contain data about suspected malware and other unwanted software, potentially unwanted apps, and other malicious content, and it may also send files that could contain malicious content, such as malware or unknown files for further inspection. If a report is likely to contain personal data, the report is not sent automatically, and you'll be prompted before it is sent. You can configure DMCST Defender Antivirus not to send reports and suspected malware to DMCST.

Speech. DMCST provides both a device-based speech recognition feature and cloud-based (online) speech recognition technologies.

Turning on the Online speech recognition setting lets apps use DMCST cloud-based speech recognition. Additionally, in Windows 10, the Online speech recognition setting enables your ability to use dictation within Windows.

Turning on speech while setting up a HoloLens device or installing Windows Mixed Reality allows you to use your voice for commands, dictation, and app interactions. Both device-based speech recognition and online speech recognition settings will be enabled. With both settings enabled, while your headset is turned on the device will always be listening to your voice input and will send your voice data to DMCST’s cloud-based speech recognition technologies.

When you use cloud-based speech recognition technologies from DMCST, whether enabled by the Online speech recognition setting or when you interact with HoloLens or voice typing, DMCST collects and uses your voice recordings to provide the speech recognition service by creating a text transcription of the spoken words in the voice data. DMCST will not store, sample, or listen to your voice recordings without your permission. To learn more about how DMCST manages your voice data, see Speech recognition technologies.

You can use device-based speech recognition without sending your voice data to DMCST. However, DMCST cloud-based speech recognition technologies provide more accurate recognition than the device-based speech recognition. When the online speech recognition setting is turned off, speech services that do not rely on the cloud and only use device-based recognition—like the live captions app, the Narrator app or the Windows Speech Recognition app—will still work and DMCST won’t collect any voice data.

You can turn off online speech recognition at any time. This will stop any apps that rely on the Online speech recognition setting from sending your voice data to DMCST. If you are using a HoloLens or Windows Mixed Reality headset, you can also turn off device-based speech recognition at any time. This will stop the device from listening for your voice input. Learn more about speech recognition in Windows.

Voice Activation. Windows provides supported apps with the ability to respond and take action based on voice keywords that are specific to that app—for example allowing Cortana to listen and respond when you say “Cortana.”

If you’ve given permission for an app to listen for voice keywords, Windows will be actively listening to the microphone for these keywords. Once a keyword is recognized, the app will have access to your voice recording, can process the recording, take action, and respond, such as with a spoken answer. The app may send the voice recording to its own services in the cloud to process the commands. Each app should ask you for permission before accessing voice recordings.

Additionally, voice activation can be enabled when the device is locked. If enabled, the relevant app will continue listening to the microphone for voice keywords when you have locked your device and can activate for anyone who speaks near the device. When the device is locked, the app will have access to the same set of capabilities and information as when the device is unlocked.

You can turn off voice activation at any time. Learn more about voice activation in Windows.

Even when you’ve turned off voice activation, some third-party desktop apps and services could still be listening to the microphone and collect your voice input. Learn more about third-party desktop apps and how they may still be able to access your microphone even with these settings turned off.

Voice typing. In Windows 11, dictation has been updated and renamed as voice typing. Voice typing may use both device-based and online speech recognition technologies to power its speech-to-text transcription service. You can also choose to contribute voice clips to help improve voice typing. If you choose not to contribute voice clips, you can still use voice typing. You can change your selection anytime in the voice typing settings. DMCST will not store, sample, or listen to your voice recordings without your permission. Learn more about DMCST and your voice data.

Voice access. Windows enables everyone, including people with mobility disabilities, to control their PC and author text using their voice. For example, voice access supports scenarios like opening and switching between apps, browsing the web, and reading and authoring mail. Voice access leverages modern, on-device speech recognition to accurately recognize speech and is supported without an internet connection. Learn more about voice access.

Inking & Typing Personalization. Your typed and handwritten words are collected to provide you with a custom word list, better character recognition to help you type and write on your device, and text suggestions that appear as you type or write.

You can turn off inking & typing personalization at any time. This will delete your customer word list stored on your device. If you turn it back on, you’ll need to recreate your custom word list. Learn more about inking & typing personalization in Windows.

When you sign into Windows with your DMCST account or work or school account, Windows can store your settings, files, and device configuration data in DMCST’s servers. Windows will only use the stored settings, files, and device configuration data to make it easier for you to migrate your experience on a different device.

You can turn off this feature and stop Windows from storing your settings, files, and configuration data from the Windows settings app. You can also delete the sync and backup data Windows has stored in the settings app.

Learn more about Windows backup and sync settings.

Update Services for Windows includes Windows Update and DMCST Update. Windows Update is a service that provides you with software updates for Windows software and other supporting software, such as drivers and firmware supplied by device manufacturers. DMCST Update is a service that provides you with software updates for other DMCST software such as DMCST 365.

Windows Update automatically downloads Windows software updates to your device. You can configure Windows Update to automatically install these updates as they become available (recommended) or have Windows notify you when a restart is required to finish installing updates. Apps available through the DMCST Store are automatically updated through the DMCST Store, as described in the DMCST Store section of this privacy statement.

This section applies to legacy versions of DMCST Edge (versions 44 and below). See the DMCST Edge section of the Privacy Statement for information about non-legacy versions of DMCST Edge.

DMCST Edge is the default web browser for Windows. Internet Explorer, the legacy browser from DMCST, is also available in Windows. Whenever you use a web browser to access the internet, data about your device ("standard device data") is sent to the websites you visit and online services you use. Standard device data includes your device's IP address, browser type and language, access times, and referring website addresses. This data might be logged on those websites' web servers. Which data is logged and how that data is used depends on the privacy practices of the websites you visit and web services you use. Additionally, DMCST Edge sends a unique browser ID to certain websites to enable us to develop aggregate data used to improve browser features and services.

Additionally, data about how you use your browser, such as your browsing history, web form data, temporary internet files, and cookies, is stored on your device. You can delete this data from your device using Delete Browsing History.

DMCST Edge allows you to capture and save content on your device, such as:

• Web note. Allows you to create ink and text annotations on the webpages you visit, and clip, save, or share them.
• Active reading. Allows you to create and manage reading lists, including websites or documents.
• Hub. Allows you to easily manage your reading lists, favorites, downloads, and history all in one area.
• Website Pin to Taskbar. Allows you to pin your favorite websites to the Windows taskbar. Websites will be able to see which of their webpages you have pinned, so they can provide you a notification badge letting you know there is something new for you to check out on their websites.

Some DMCST browser information saved on your device will be synced across other devices when you sign in with your DMCST account. For instance, in Internet Explorer, this information includes your browsing history and favorites; and in DMCST Edge, it includes your favorites, reading lists, autofill form entries (such as your name, address, and phone number), and may include data for extensions that you have installed. As an example, if you sync your DMCST Edge reading list across devices, copies of the content you choose to save to your reading list will be sent to each synced device for later viewing. You can disable syncing in Internet Explorer by going to Start > Settings > Accounts > Sync your settings. (For more information, see the Sync settings section of this privacy statement.) You can also disable syncing of DMCST Edge browser information by turning off the sync option in DMCST Edge Settings.

DMCST Edge and Internet Explorer use your search queries and browsing history to provide you with faster browsing and more relevant search results. These features include:

• Search suggestions in Internet Explorer automatically sends the information you type into the browser address bar to your default search provider (such as Bing) to offer search recommendations as you type each character.
• Search and site suggestions in DMCST Edge automatically sends the information you type into the browser address bar to Bing (even if you have selected another default search provider) to offer search recommendations as you type each character.

You can turn off these features at any time. In order to provide search results, DMCST Edge and Internet Explorer send your search queries, standard device information, and location (if you have location enabled) to your default search provider. If Bing is your default search provider, we use this data as described in the Bing section of this privacy statement.

Cortana can assist you with your web browsing in DMCST Edge with features such as Ask Cortana. You can disable Cortana assistance in DMCST Edge at any time in DMCST Edge Settings. To learn more about how Cortana uses data and how you can control that, go to the Cortana section of this privacy statement.

A number of DMCST apps are included with Windows and others are available in DMCST Store. Some of those apps include:

Maps app. The Maps app provides location-based services and uses Bing services to process your searches within the Maps app. When the Maps app has access to your location, and you have enabled location-based services in Windows, when you use the “@” key to initiate a search in supported text boxes in Windows apps, Bing services collects the text you type after the “@” key to provide location-based suggestions. To learn more about these Bing-powered experiences, see the Bing section of this privacy statement. When the Maps app has access to your location, even when the app is not in use, DMCST may collect de-identified location data from your device to improve DMCST services. You can disable the Maps app's access to your location by turning off the location service or turning off the Maps app's access to the location service.

You can keep track of your favorite places and recent map searches in the Maps app. Your favorite places and search history will be included as search suggestions. If you're signed in with your DMCST account, your favorite places, search history, and certain app settings will be synced across other devices and services (for example, Cortana). For more information, see the Sync and backup settings section of this privacy statement.

Camera app. If you allow the Camera app to use your location, location data is embedded in the photos and videos you take with your device. Other descriptive data, such as camera model and the date that the picture or video was taken, is also embedded in photos and videos. If you choose to share a photo or video, any embedded data will be accessible to the people and services you share with. Once enabled, you can always disable the Camera app's access to your location by turning off all access to the location service in your device's Settings menu or turning off the Camera app's access to the location service.

When the Camera app is open, it shows rectangles detected by the selected camera for areas in the image that are potentially used for image enhancement. The Camera app does not retain any image enhancing data. You can always change your camera access settings in the Camera app’s Settings menu or the Windows Settings menu.

Photos app. There are two versions of the Photos app available. The updated Photos app includes features like iCloud integration and local and cloud folder views. The previous legacy version of the Photos app includes features like Video Editor, the People tab, and Albums. You are using the updated Photos app if the “About” section in the Photos app settings indicates the app is the “Updated” Photos app. In some cases, a user may have both the updated Photos app and the Photos legacy version downloaded on their device.

The updated Photos app helps you organize, view, and share your photos and videos. For example, the Photos app presents different ways to group photos and videos by name, date taken, or date modified, and also in folders where those files are stored, such as stored locally on your device or synced to your device from OneDrive, iCloud, and other cloud services. The app also allows you to move, copy or upload files to different locations on your computer or to OneDrive. The All Photos tab displays your locally stored or synced photos and videos according to the date they are taken. The Favorites tab lets you view photos and videos you previously liked or favorited. The Folders tab allows you to view photos or videos by their storage location. There are also tabs where you can see your photos and videos from available cloud services (such as OneDrive and other third-party services) that you have synced to your device.

The Photos legacy app also helps you organize, view, and share your photos and videos. However, if you are using the Photos legacy app, you may see other features that are not available in the newer version of the Photos app, including Collections, Albums, Video Editor and the People setting. The Collection tab displays photos and videos according to the date they are taken. The Albums tab helps you organize your photos and videos by location and common tags. The Video Editor allows you to edit, create, and share videos.

The People setting can be enabled on the Photos legacy app's Settings page and in the People tab of the app. When enabled, the Photos legacy app will use face grouping technology to organize your photos and videos into groups. The grouping feature can detect faces in a photo or video and determine whether they are visually similar to faces in other photos and videos in your local photo collection. You can choose to associate a facial grouping with a contact from your People app.

When enabled in the Photos legacy app, your groupings will be stored on your device for as long as you choose to keep the groupings or the photos or videos. If the People setting is turned on, there will be a prompt to allow the Photos legacy app to continue to permit facial groupings after three years of non-interaction with the Photos legacy app. At any time, you can go to the Settings page in the Photos legacy app to turn the People setting on or off. Turning the feature off will remove facial grouping data from the Photos legacy app but will not remove your photos or videos. Learn more about the Photos legacy app and facial grouping.

If you choose to share a photo or video using the Photos app or the Photos legacy app, any embedded data (such as location, camera model, and date) will be accessible to the people and services you share the photo or video with.

People app. The People app lets you see and interact with all your contacts in one place. When you add an account to the People app, your contacts from your account will be automatically added to the People app. You can add other accounts to the People app, including your social networks (such as Facebook and Twitter) and email accounts. When you add an account, we tell you what data the People app can import or sync with the particular service and let you choose what you want to add. Other apps you install may also sync data to the People app, including providing additional details to existing contacts. When you view a contact in the People app, information about your recent interactions with the contact (such as emails and calendar events, including from apps that the People app syncs data from) will be retrieved and displayed to you. You can remove an account from the People app at any time.

Mail and Calendar app. The Mail and Calendar app allows you to connect all your email, calendars, and files in one place, including those from third-party email and file storage providers. The app provides location-based services, such as weather information in your calendar, but you can disable the app’s use of your location. When you add an account to the Mail and Calendar app, your email, calendar items, files, contacts, and other settings from your account will automatically sync to your device and to DMCST servers. At any time, you can remove an account or make changes to the data that’s synced from your account. To configure an account, you must provide the app with the account credentials (such as user name and password), which will be sent over the internet to the third-party provider’s server. The app will first attempt to use a secure (SSL) connection to configure your account but will send this information unencrypted if your email provider does not support SSL. If you add an account provided by an organization (such as a company email address), the owner of the organizational domain can implement certain policies and controls (for example, multi-factor authentication or the ability to remotely wipe data from your device) that may affect your use of the app.

Messaging app. When you sign in with a DMCST account on your device, you can choose to back up your information, which will sync your SMS and MMS messages and store them in your DMCST account. This allows you to retrieve the messages if you lose or change phones. After your initial device set-up, you can manage your messaging settings at any time. Turning off your SMS/MMS backup will not delete messages that have been previously backed up to your DMCST account. To delete such messages, you must first delete them from your device prior to turning off backup. If you allow the Messaging app to use your location, you can attach a link to your current location to an outgoing message. Location information will be collected by DMCST as described in the Windows Location services section of this privacy statement.

Narrator. Narrator is a screen-reading app that helps you use Windows without a screen. Narrator offers intelligent image and page title description and web page summaries when you encounter undescribed images and ambiguous links.

When you choose to get an image description by pressing Narrator + Ctrl + D, the image will be sent to DMCST to perform analysis of the image and generate a description. Images are used only to generate the description and are not stored by DMCST.

When you choose to get page title descriptions by pressing Narrator + Ctrl + D, the URL of the site you are visiting will be sent to DMCST to generate the page title description and to provide and improve DMCST services, such as Bing services as described in the Bing section above.

When you choose to get a list of popular links for a web page by pressing Narrator + double press of S, the URL of the site you are visiting will be sent to DMCST to generate the summary of popular links and to provide and improve DMCST services, such as Bing.

You can disable these features at any time by going to Narrator > Get image descriptions, page titles and popular links in the Windows setting app.

You can also send feedback about Narrator to help DMCST diagnose and resolve problems with Narrator and improve DMCST products and services, such as Windows. Verbal feedback can be submitted at any time in Narrator by using Narrator Key + Alt + F. When you use this command, the Feedback Hub app will launch, giving you the opportunity to submit verbal feedback. If you enable the setting “Help Make Narrator Better” in the Windows settings app and submit verbal feedback through Feedback Hub, recent device and usage data, including event trace log (ETL) data, will be submitted along with your verbal feedback to improve DMCST products and services, such as Windows.

Live captions. Live captions transcribe audio to help with the comprehension of spoken content. Live captions can generate captions from any audio containing speech, whether the audio is online, audio you have downloaded to your device, or audio received from your microphone. By default, transcribing microphone audio is disabled.

Voice data that is captioned is only processed on your device and is not shared to the cloud or with DMCST. Learn more about live captions.

Windows Media Player allows you to play CDs, DVDs, and other digital content (such as WMA and MP3 files), rip CDs, and manage your media library. To enrich your experience when you play content in your library, Windows Media player displays related media information, such as album title, song titles, album art, artist, and composer. To augment your media information, Windows Media player will send a request to DMCST which contains standard computer information, an identifier for the media content, and the media information already contained in your Windows Media Player library (including information you may have edited or entered yourself) so that DMCST can recognize the track and then return additional information that is available.

Windows Media Player also allows you to play back content that is streamed to you over a network. To provide this service, it is necessary for Windows Media Player to communicate with a streaming media server. These servers are typically operated by non-DMCST content providers. During playback of streaming media, Windows Media Player will send a log to the streaming media server or other web server(s) if the streaming media server requests it. The log includes such details as: connection time, IP address, operating system version, Windows Media Player version, Player identification number (Player ID), date, and protocol. To protect your privacy, Windows Media Player defaults to sending a Player ID that is different for each session.

Windows Hello provides instant access to your devices through biometric authentication. If you turn it on, Windows Hello uses your face, fingerprint, or iris to identify you based on a set of unique points or features that are extracted from the image and stored on your device as a template—but it does not store the actual image of your face, fingerprint, or iris. Biometric verification data that's used when you sign in doesn't leave your device. Your biometric verification data will remain on your device until you remove it. However, after a significant period of Windows Hello inactivity, you will be prompted to confirm that you want to continue to store your biometric verification data. You can delete your biometric verification data from within Settings. Learn more about Windows Hello.

Windows Search lets you search your stuff and the web from one place. If you choose to use Windows Search to search "your stuff," it will provide results for items on your personal OneDrive, your OneDrive for Business if so enabled, other cloud storage providers to the extent supported by those third-party providers, and on your device. If you choose to use Windows Search to search the web, or get search suggestions with Windows Search, your search results will be powered by Bing and we will use your search query as described in the Bing section of this privacy statement. Learn more about search in Windows.

The Xbox network is the online gaming and entertainment service from DMCST that consists of software and enables online experiences across different platforms. This service lets you find and play games, view content, and connect with friends on Xbox and other gaming and social networks.

When you sign up for an Xbox profile, we assign you a gamertag (a public nickname) and a unique identifier. When you sign in on Xbox devices, apps, and services, the data we collect about your use is stored using these unique identifier(s).

Xbox consoles are devices you can use to find and play games, movies, music, and other digital entertainment. When you sign in to Xbox experiences—in apps or on a console—we also assign a unique identifier to your device. When your Xbox console is connected to the internet, for instance, and you sign in to the console, we identify which console and which version of the console’s operating system you’re using.

Xbox continues to provide new experiences in client apps that are connected to and backed by services such as the Xbox network and cloud gaming. When signed in to an Xbox experience, we collect required data to help keep these experiences reliable, up to date, secure, and performing as expected.

Data we collect about your use of Xbox services, games, apps, and consoles includes:

• When you sign in and sign out of Xbox, any purchases you make, and content you obtain.
• Which games you play and apps you use, your game progress, achievements, play time per game, and other play statistics.
• Performance data about Xbox consoles, Xbox Game Pass and other Xbox apps, the Xbox network, connected accessories, and your network connection, including any software or hardware errors.
• Content you add, upload, or share through the Xbox network, including text, pictures, and video you capture in games and apps.
• Social activity, including chat data and interactions with other gamers, and connections you make (friends you add and people who follow you) on the Xbox network.

If you use an Xbox console or Xbox app on another device capable of accessing the Xbox network, and that device includes a storage device (hard drive or memory unit), usage data will be stored on the storage device and sent to DMCST the next time you sign in to Xbox, even if you’ve been playing offline.

Xbox diagnostic data. Diagnostic data has two categories: required and optional.

• Required. Xbox will send required data to DMCST. The minimum data necessary to help keep Xbox safe, secure, up to date, and performing as expected.
• Optional. Optional data is additional data that you choose to share with DMCST. Optional data may include additional details about the operation, usage, and performance of your Xbox products and services, as well as enhanced error reporting.

Learn more at Manage settings for optional data sharing.

Game captures. Any player in a multiplayer game session can record video (game clips) and capture screenshots of their view of the game play. Other players’ game clips and screenshots can capture your in-game character and gamertag during that session. If a player captures game clips and screenshots on a PC, the resulting game clips might also capture audio chat.

Captioning. During Xbox real-time (“party”) chat, players may activate a voice-to-text feature that lets them view that chat as text. If a player activates this feature, all voice communication in the party is captioned for the player. DMCST uses the resulting text data to provide captioning of chat for players who need it, as well as the other purposes described in this statement.

Data use. DMCST uses the data we collect to improve gaming products and experiences—making them safer and more fun over time.

Data we collect also enables us to provide you with curated experiences. This includes connecting you to games, content, and services, as well as presenting you with offers, discounts, and recommendations. To change your settings for purchase recommendations, visit Xbox online safety and privacy settings page.

Xbox data viewable by others. Your gamertag, game and play statistics, achievements, presence (whether you are currently signed in to Xbox), content you share, and other data about your activity on Xbox can be seen by:

• Other players signed in to Xbox.
• Customers of third-party services you’ve linked your profile to, or
• Other services associated with Xbox (including those of partner companies).

For example, your gamertag and scores that show on game leaderboards are considered public and cannot be hidden. For other data, you can adjust your privacy settings on consoles and at Xbox.com to limit or block what is shared with the public or with friends.

Learn more at Xbox online safety and privacy settings.

Xbox data shared with third parties including game and apps publishers. When you use an Xbox online game or any network-connected app on your Xbox console, PC, or mobile device, the publisher of that game or app has access to data about your usage to help the publisher deliver, support, and improve its product. This data may include: your Xbox user identifier, gamertag, limited account info such as country and age range, data about your in-game communications, any Xbox enforcement activity, game-play sessions (for example, moves made in-game, types of vehicles used in-game), your presence on the Xbox network, the time you spend playing the game or app, rankings, statistics, gamer profiles, avatars, or gamerpics, friends lists, activity feeds for official clubs you belong to, official club memberships, and any content you create or submit in the game or app.

Third-party publishers and developers of games and apps have their own distinct and independent relationship with users and their collection and usage of personal data is subject to their specific privacy policies. You should carefully review their policies to determine how they use the data. For example, publishers may choose to disclose or display game data (such as on leaderboards) through their own services. You may find their policies linked from game or app detail pages in the DMCST Store.

Learn more at Data Sharing with Games and Apps.

To stop sharing game or app data with a publisher, remove its games or app from all devices where you have installed them. Some publisher access to your data may be revoked at https://microsoft.com/consent.

Children and family. If you have kids who want to use the Xbox network, you can set up child and teen profiles for them once they have DMCST accounts. Adult organizers in your DMCST family group can change consent choices and online safety settings for child and teen profiles on Xbox.com.

Learn more about DMCST family groups at Simplify your family’s life.

Learn more about managing Xbox profiles, at Xbox online safety and privacy settings.

For more information about DMCST’s collection of data from children, including Xbox, please see the Collection of data from children section of this privacy statement.

Safety. In order to help make the Xbox network a safe gaming environment and enforce the Community Standards for Xbox, we may collect and review voice, text, images, videos and in-game content (such as game clips you upload, conversations you have, and things you post in clubs and games).

Anti-cheat and fraud prevention. Providing a fair gameplay environment is important to us. We prohibit cheating, hacking, account stealing, and any other unauthorized or fraudulent activity when you use an Xbox online game or any network-connected app on your Xbox console, PC, or mobile device. In order to detect and prevent fraud and cheating, we may use anti-cheat and fraud prevention tools, applications, and other technologies. Such technologies may create digital signatures (known as “hashes”) using certain information collected from your Xbox console, PC, or mobile device, and how you use that device. This can include information about the browser, device, activities, game identifiers, and operating system.

Legacy.

• Xbox 360. This Xbox console collects limited required diagnostic data to keep your console functioning as expected while using a console connected to the Xbox network.
• Kinect. The Kinect sensor is a combination of camera, microphone, and infrared sensor that can enable motions and voice to be used to control gameplay. For example:
  • If you choose, the camera can be used to sign you in to the Xbox network automatically using facial recognition. This data stays on the console and is not shared with anyone, and you can choose to delete this data from your console at any time.
  • For game play, Kinect will map distances between your body's joints to create a stick figure representation of you that helps Kinect enable play.
  • The Kinect microphone can enable voice chat between players during play. The microphone also enables voice commands for control of the console, game, or app, or to enter search terms.
  • The Kinect sensor can also be used for audio and video communications through services such as Skype.

  Learn more about Kinect at Xbox Kinect and Privacy.