Each card below is one plan tier. Every fact comes from Anthropic’s own published page, with a short quote and the link. Where the page does not say, I write “not stated” and do not guess. Plans and policies change, so open the source before you decide.
Claude by plan
Free or consumer
Claude Free
Used only if you allow it
- Training on your data
Anthropic uses your chats and coding sessions to improve its models if you choose to allow it, or if a conversation is flagged for safety review. Incognito chats are not used.
Vendor wording: “We will use your chats and coding sessions (including to improve our models) if: You choose to allow us”
Anthropic Privacy Center: Is my data used for model training? (consumer), checked 2026-10-17
- Retention
Deleted chats leave your history at once and are removed from back-end storage within 30 days. If you allow training, de-identified data can be kept up to 5 years. Chats flagged for policy violations: up to 2 years.
Vendor wording: “Deleted from our back-end storage systems within 30 days”
Anthropic Privacy Center: How long do you store my data? (consumer), checked 2026-10-17
- Admin controls
Not applicable. Individual plans have no admin console.
- The setting to change
Settings > Privacy > Help Improve our AI models. Turning it off stops new chats from being used in future training runs.
Vendor wording: “Under Help Improve our AI models, click the button to toggle it off/on”
Anthropic Privacy Center: How do I change my model improvement privacy settings?, checked 2026-10-17
- BAA (HIPAA)
Not stated. Anthropic's BAA article names the first-party API and Enterprise plans, not individual plans.
Paid individual
Claude Pro, Claude Max
Used only if you allow it
- Training on your data
Same rule as Free: Pro and Max are covered by the consumer article, so your chats are used if you allow it. The same applies to Claude Code on these accounts.
Vendor wording: “our consumer products such as Claude Free, Pro, Max and when accounts from those plans use Claude Code”
Anthropic Privacy Center: Is my data used for model training? (consumer), checked 2026-10-17
- Retention
Same as Free: deleted chats are removed from back-end storage within 30 days; up to 5 years if you allow training.
Vendor wording: “up to 5 years in our model training pipelines”
Anthropic Privacy Center: How long do you store my data? (consumer), checked 2026-10-17
- Admin controls
Not applicable. Individual plans have no admin console.
- The setting to change
Settings > Privacy > Help Improve our AI models.
Vendor wording: “Help Improve our AI models”
Anthropic Privacy Center: How do I change my model improvement privacy settings?, checked 2026-10-17
- BAA (HIPAA)
Not stated. Anthropic's BAA article names the first-party API and Enterprise plans, not individual plans.
Team or business
Claude Team (Claude for Work)
Not used for training by default
- Training on your data
Not used to train Anthropic's models by default. Feedback you submit with thumbs up or down, or data you choose to allow, can be used.
Vendor wording: “By default, we will not use your inputs or outputs from our commercial products (e.g. Claude for Work, Anthropic API, Claude Gov, etc.) to train our models.”
Anthropic Privacy Center: Is my data used for model training? (commercial), checked 2026-10-17
- Retention
Chats are kept so the product works. Deleted conversations are removed from back-end storage within 30 days. Chats flagged for policy violations can be kept up to 2 years.
Vendor wording: “Deleted from our back-end storage systems within 30 days”
Anthropic Privacy Center: How long do you store my organization's data?, checked 2026-10-17
- Admin controls
Owners can turn off the thumbs up or down feedback button for the organization under Organization settings > Data and Privacy > Rate chats.
Vendor wording: “using the Rate chats setting, under Organization settings > Data and Privacy”
Anthropic Privacy Center: Is my data used for model training? (commercial), checked 2026-10-17
- The setting to change
Not applicable. Nothing to switch off: training is off by default for commercial plans.
- BAA (HIPAA)
Not stated. Anthropic's BAA article names the first-party API and Enterprise plans; it does not mention Team.
Enterprise
Claude Enterprise
Not used for training by default
- Training on your data
Not used to train Anthropic's models by default. Feedback you submit, or data you choose to allow, can be used.
Vendor wording: “we will not use your inputs or outputs from our commercial products”
Anthropic Privacy Center: Is my data used for model training? (commercial), checked 2026-10-17
- Retention
Owners can set custom retention periods for chats and projects, counted from the last activity. Without custom controls, deleted conversations are removed within 30 days.
Vendor wording: “Custom data retention controls allow organizations to manage how long Claude stores conversation and project data.”
Anthropic Privacy Center: Configure custom data retention controls for Enterprise plans, checked 2026-10-17
- Admin controls
Custom data retention (Primary Owner or Owner role), the Rate chats feedback setting, and a HIPAA-ready configuration.
Vendor wording: “you must have either a Primary Owner or Owner role”
Anthropic Privacy Center: Configure custom data retention controls for Enterprise plans, checked 2026-10-17
- The setting to change
Not applicable. Nothing to switch off: training is off by default for commercial plans.
- BAA (HIPAA)
Available. The Primary Owner turns on HIPAA compliance in organization settings under Data and privacy and accepts Anthropic's BAA. Standard Enterprise plans do not include BAA coverage until they do. Some features stay outside the BAA.
Vendor wording: “Standard Claude Enterprise plans do not include BAA coverage without action from a Primary Owner.”
Anthropic Privacy Center: Business Associate Agreements (BAA) for commercial customers, checked 2026-10-17
Worth knowing
- The Anthropic API is a separate product from the Claude apps. Anthropic says it deletes API inputs and outputs within 30 days unless you agreed otherwise, for example a zero data retention agreement. API customers also need a signed BAA before using protected health information.
- Anthropic's commercial terms say Anthropic may not train models on Customer Content from its services.
Sources
- Anthropic Privacy Center: Is my data used for model training? (consumer), checked 2026-10-17
- Anthropic Privacy Center: How long do you store my data? (consumer), checked 2026-10-17
- Anthropic Privacy Center: How do I change my model improvement privacy settings?, checked 2026-10-17
- Anthropic Privacy Center: Is my data used for model training? (commercial), checked 2026-10-17
- Anthropic Privacy Center: How long do you store my organization's data?, checked 2026-10-17
- Anthropic Privacy Center: Configure custom data retention controls for Enterprise plans, checked 2026-10-17
- Anthropic Privacy Center: Business Associate Agreements (BAA) for commercial customers, checked 2026-10-17
- Claude Help Center: HIPAA-ready Enterprise plans, checked 2026-10-17