·Anthropic is an AI safety and research company working to build reliable, interpretable, and steerable AI systems.

·This Privacy Policy explains how we collect, use, disclose, and process your personal data when you use our website, Claude.ai, or other Anthropic products and services (the "Services"). This Privacy Policy does not apply to content that we process on behalf of customers of our business offerings, such as our Enterprise accounts. Our use of that data is governed by our customer agreements covering access to and use of those offerings.

·Please see our Non-User Privacy Policy for information on how our large language models are 'trained' and how personal data obtained from third party sources, including where others may submit personal data when using our services, may be used when developing or delivering our products and services.

·This Privacy Policy also describes your privacy rights. More information about your rights, and how to exercise them, is set out in Section 4 ("Rights and Choices").

·If you are located in Canada, Brazil, or the Republic of Korea, please read the relevant Regional Supplemental Disclosure which applies to you.

·If you are located in Washington or a state with similar consumer health data laws, please read our Consumer Health Data Privacy Policy which applies to you if you integrate third party health applications with Claude.

11. Collection of Personal Data

·We collect the following categories of personal data:

·Personal data you provide to us directly

• ·Identity and Contact Data: Anthropic collects identifiers, including your name, email address, and phone number when you sign up for an Anthropic account, or to receive information on our Services. We may also collect or generate indirect identifiers (e.g., "USER12345").
• ·Payment Information: We shall collect your payment information if you choose to purchase access to Anthropic's Services.
• ·Inputs and Outputs: You are able to interact with our Services in a variety of formats, including but not limited to chat, coding, agentic sessions (where Claude performs multi-step tasks or takes actions on your behalf), and connected services. The content you submit to the Services through these interactions, including via third-party applications, services, and content you choose to upload, integrate or interact with using our Services, are your "Inputs". Inputs generate responses and actions ("Outputs"). If you include personal data or reference external content in your Inputs, we will collect that information and it may be reproduced in your Outputs. Depending on the permissions you grant Claude, some Outputs may result in actions with effects outside the Services, such as sending communications, modifying files, or interacting with third-party services on your behalf.
• ·Feedback on your use of our Services: We appreciate feedback, including ideas and suggestions for improvement or rating an Output in response to an Input ("Feedback"). If you rate an Output in response to an Input-for example, by using the thumbs up/thumbs down icon-we may store the entire related conversation as part of your Feedback. You can learn more about how we use Feedback here.
• ·Study Participation Data: If you participate in Anthropic research studies, surveys, or interviews (for example our Anthropic Interviewer), we collect the responses you provide, associated account data, and related Technical Information. We may combine this data with other data from your account for aggregated analysis.
• ·Communication Information: If you communicate with us, including via our chatbot on our Help site, we collect your name, contact information, and the contents of any messages you send.
• ·Verification Data: In certain circumstances, we may ask you to verify your age or identity. If you choose to do so, data we will collect includes, depending on the method: an image of your government-issued identity document and the information appearing on it (such as your ID number and date of birth); your image in photo or video form, facial geometry templates (which may be considered 'biometric data' in some jurisdictions); and the result of the verification (for example, whether your age meets the applicable threshold).

·When you provide Inputs-including by uploading files, granting Claude access to third-party services, or instructing Claude to retrieve or act on information-you are responsible for ensuring you have the necessary rights, permissions, or authority to do so.

·Personal data we receive automatically from your use of the Services

·When you use the Services, we also receive certain technical data automatically (described below, collectively "Technical Information"). This includes:

• ·Device and Connection Information: Consistent with your device or browser permissions, your device or browser automatically sends us information about when and how you install, access, or use our Services. This includes information such as your device type, operating system information, browser information and web page referers, mobile network, connection information, mobile operator or internet service provider (ISP), time zone setting, IP address (including information about the location of the device derived from your IP address), identifiers (including device or advertising identifiers, probabilistic identifiers, and other unique personal or online identifiers), and device location.
• ·Usage Information: We collect information about your use of the Services, such as the dates and times of access, browsing history, search, information about the links you click and about third-party applications, services, and content you integrate or interact with, pages you view, and other information about how you use the Services, and technology on the devices you use to access the Services.
• ·Log and Troubleshooting Information: We collect information about how our Services are performing when you use them. This information includes log files. If you or your device experiences an error, we may collect information about the error, the time the error occurred, the feature being used, the state of the application when the error occurred, and any communications or content provided at the time the error occurred.
• ·Cookies & Similar Technologies: We and our service providers use cookies, scripts, or similar technologies ("Cookies") to manage the Services and to collect information about you and your use of the Services. These technologies help us to recognize you, customize or personalize your experience, market additional products or services to you, and analyze the use of our Services to make them safer and more useful to you. For more details about how we use these technologies, and your opt-out controls and other options, please visit our Cookie Policy.

·Personal data we collect or receive to train our models

·Anthropic obtains personal data from third party sources in order to train our models. Specifically, we train our models using data from the following sources:

• ·Publicly available information via the Internet
• ·Datasets that we obtain through commercial agreements with third party businesses
• ·Data that our users or crowd workers provide, including Inputs and Outputs from our Services (unless users opt out)
• ·Feedback that users explicitly provide about our Services
• ·Materials flagged for safety, security, or policy review Data that we generate internally

·For more information about how we collect and use personal data to develop our language models that power our Services, the steps we take to minimize the privacy impact on individuals through the training process, and your choices with respect to that information, please see our separate Non-User Privacy Policy.

22. Uses of Personal Data Permitted Under Applicable Data Protection Laws

·We use your personal data for the following purposes:

• ·To provide, maintain and facilitate any products and services offered to you with respect to your Anthropic account, which are governed by our Terms of Service;
• ·To provide, maintain and facilitate optional services and features that enhance platform functionality and user experience;
• ·To provide you with service updates, communications, and to provide tailored recommendations about our Services that may be of interest to you;
• ·To create and administer your Anthropic account;
• ·To facilitate payments for products and services provided by Anthropic;
• ·To prevent and investigate fraud, abuse, and violations of our Usage Policy, unlawful or criminal activity, unauthorized access to or use of personal data or Anthropic systems and networks, to protect our rights and the rights of others, to protect your safety or that of any other person, and to meet legal, governmental and institutional policy obligations;
• ·To investigate and resolve disputes;
• ·To investigate and resolve security issues;
• ·To debug and to identify and repair errors that impair existing functionality;
• ·To improve the Services and conduct research, including training our models and conducting broader research on AI-related topics such as the societal impacts of AI; and
• ·To enforce our Terms of Service and similar terms and agreements, including our Usage Policy.

·We may use your Inputs and Outputs to train and improve Anthropic AI models, unless you opt out through your account settings. Even if you opt-out, we will use Inputs and Outputs for model improvement when: (i) your conversations are flagged for safety review to improve our ability to detect harmful content, enforce our policies, or advance AI safety research, or (ii) you've explicitly reported the materials to us (for example via our feedback mechanisms).

·Please see Section 10 below for details of our legal bases for processing your personal data.

33. Recipients and Third-Party Data Sources

·Anthropic will disclose personal data to, or receive personal data from, the following categories of third parties for the purposes explained in this Policy:

• ·Affiliates & corporate partners: Anthropic discloses the categories of personal data described above between and among its affiliates and related entities.
• ·Service providers & business partners: Anthropic may receive and disclose the categories of personal data described above with service providers and business partners for a variety of business purposes, including website and data hosting, ensuring compliance with industry standards, research, auditing, data processing, investigating and resolving safety and security issues, preventing and investigating fraud, abuse, and violations of our Usage Policy, and providing you with the Services.
• ·Your Organization and Administrator: If you use an email address owned by your employer or another organization, your account may be linked to the organization's enterprise account with us, as described in our Consumer Terms of Service.

·Anthropic may also receive or disclose personal data in the following circumstances:

• ·As part of a significant corporate event: If Anthropic is involved in a merger, corporate transaction, bankruptcy, or other situation involving the transfer of business assets, Anthropic will receive or disclose your personal data as part of these corporate transactions.
• ·Third-Party Websites, Integrations, and Services: Our Services allow you to connect to and interact with third-party applications, services, and content ("Third-Party Services") via the Services and through integrations you enable, such as Connectors, plugins, webhooks, and external APIs. When you connect to or interact with Third-Party Services:
• ·Claude may send your Inputs, Outputs, and instructions to Third-Party Services to perform actions on your behalf (such as reading files, sending messages, or retrieving information). The Third-Party Service receives this data directly and processes it according to its own privacy policy.
• ·Claude may retrieve content and data from Third-Party Services you interact with. This data becomes part of your Inputs.
• ·Some integrations or features may allow Claude to access Third-Party Services on an ongoing basis until you disable the feature or disconnect the integration in your settings.
• ·Anthropic does not control, and is not responsible for, the data practices of Third-Party Services. Before enabling an integration, granting Claude access to, or instructing Claude to take actions on a Third-Party Service, you should ensure you have the authority to grant such access and that doing so complies with any applicable terms, policies, or confidentiality obligations. Before enabling an integration, you should review the third party's privacy policy. Our Services may also link to third-party websites (such as social media); by following these links, you provide information directly to those third parties. Our linking to, or supporting an integration with, a Third-Party Service does not mean we endorse it or speak for that third party.
• ·Pursuant to regulatory or legal requirements, safety, rights of others, and to enforce our rights or our terms. We may share personal data with government authorities, law enforcement, or other third parties where, based on the information available to us, we have a good-faith belief that disclosure is reasonably necessary to (i) comply with applicable law, regulation or legal process, including for legal, tax or accounting purposes, or in response to an enforceable governmental request; (ii) prevent serious harm to any person or to property; (iii) detect, prevent, or otherwise address fraud or other illegal activity; or (iv) enforce our terms, or protect the rights, property, security, or safety of Anthropic, our users, or others.
• ·Research publications: We may publish aggregated, de-identified, or anonymized findings from our research, including research into how our Services are used and AI safety research.
• ·With an individual's consent: Anthropic will otherwise disclose personal data when an individual gives us permission or directs us to disclose this information, including as a part of our Services.

·You can find information about the third parties Anthropic engages to help us process personal data here.

44. Rights and Choices

·Depending on where you live and the laws that apply in your country of residence, you may enjoy certain rights regarding your personal data, as described further below. However, please be aware that these rights are limited, and that the processes by which we may need to action your requests regarding our training dataset are complex. We may also decline a request if we have a lawful reason for doing so. That said, we strive to prioritize the protection of personal data, and comply with all applicable privacy laws.

·To exercise your rights, you or an authorized agent may submit a request by contacting us. After we receive your request, we may verify it by requesting information sufficient to confirm your identity (e.g. email address, billing details). Where a third party representative submits a request on behalf of a data subject, we require evidence of authorization to act on behalf of the data subject.

·We will respond to your request within the period required by the data protection law that applies to you. For example, where the EU GDPR or UK GDPR applies, we will respond within one calendar month of receiving a verifiable request, and where your request is complex or you have made a number of requests within a short timeframe, we may extend that period by up to a further two months. Where another law applies to you and sets a different period, we will respond within that period. You may also have the right to appeal requests that we deny by emailing privacy@anthropic.com. Anthropic will not discriminate based on the exercising of privacy rights you may have. Set out below is a summary of the rights which you may enjoy, depending on the laws that apply in your country of residence.

• ·Right to know: the right to know what personal data Anthropic processes about you, including the categories of personal data, the categories of sources from which it is collected, the business or commercial purposes for collection, and the categories of third parties to whom we disclose it.
• ·Access & data portability: the right to request a copy of the personal data Anthropic processes about you, subject to certain exceptions and conditions. In certain cases and subject to applicable law, you have the right to port your information.
• ·Deletion: the right to request that we delete personal data collected from you when you use our Services, subject to certain exceptions. You also are able to delete individual conversations, which will be removed immediately from your conversation history and automatically deleted from our back-end within 30 days. Learn more here.
• ·Correction: the right to request that we correct inaccurate personal data Anthropic retains about you, subject to certain exceptions. Please note that we cannot guarantee the factual accuracy of Outputs. If Outputs contain factually inaccurate personal data relating to you, you can submit a correction request and we will make a reasonable effort to correct this information-but due to the technical complexity of our large language models, it may not always be possible for us to do so.
• ·Objection: the right to object to processing of your personal data, including profiling conducted on grounds of public or legitimate interest. In places where such a right applies, we will no longer process the personal data in case of such objection unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or for the establishment, exercise or defense of legal claims. If we use your information for direct marketing, you can object and opt out of future direct marketing messages using the unsubscribe link in such communications.
• ·Restriction: the right to restrict our processing of your personal data in certain circumstances.
• ·Withdrawal of consent: Where Anthropic's processing of your personal data is based on consent, you have the right to withdraw your consent. For example, you can disconnect your health app integration and withdraw your consent in your settings. The withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.
• ·Automated decision-making: Anthropic does not engage in decision making based solely on automated processing or profiling in a manner which produces a legal effect (i.e., impacts your legal rights) or significantly affects you in a similar way (e.g., significantly affects your financial circumstances or ability to access essential goods or services).
• ·Sale & targeted Anthropic marketing of its products and services: Anthropic does not "sell" your personal data as that term is defined by applicable laws and regulations. You can opt-out of sharing your personal data for targeted advertising to promote our products and services, and we will honor global privacy controls. To learn more, click here.

·Anthropic gives you access to a variety of tools to help you manage your data. You can access these in your Privacy Settings.

55. Data Transfers

·Anthropic is a global company, and when you access our Services, your personal data is transferred to our servers in the US, or to other countries outside the European Economic Area ("EEA") and the UK for the purposes outlined in Section 2 of this Privacy Policy, for example to provide you with the Service, or to train our models, or to conduct research. This may be a direct provision of your personal data to us, or a transfer that we or a third party make. You can find more details about the affiliates and third parties we transfer data to, including their locations, in our Trust Center.

·Where Anthropic transfers information outside the EEA or the UK, we ensure it benefits from an adequate level of data protection by relying on:

• ·Adequacy decisions: These are decisions from the European Commission under Article 45 GDPR (or equivalent decisions under other laws) where they recognize that a country outside of the EEA offers an adequate level of data protection. We transfer your information as described in "Collection of Personal Data" to some countries with adequacy decisions, such as the countries with EU adequacy decisions listed here and countries with UK adequacy decisions listed here; or
• ·Standard contractual clauses: The European Commission has approved contractual clauses under Article 46 GDPR that allows companies in the EEA to transfer data outside the EEA. These (and their approved equivalent for the UK and Switzerland) are called standard contractual clauses. We rely on standard contractual clauses to transfer information as described in "Collection of Personal Data" to certain affiliates and third parties in countries without an adequacy decision.

·In certain situations, we rely on derogations provided for under applicable data protection law to transfer information to a third country. If you have questions about international transfers, or the safeguards we apply, you can contact us.

66. Data Retention, Data Lifecycle, and Security Controls

·Anthropic retains your personal data for as long as reasonably necessary for the purposes and criteria outlined in this Privacy Policy and explained further in our privacy center.

·When the personal data collected is no longer required by us, we and our service providers will perform the necessary procedures for destroying, deleting, erasing, or converting it into an anonymous form as permitted or required under applicable laws.

·Aggregated or De-Identified Information

·We apply aggregation and de-identification techniques where appropriate as part of our data minimization practices. For example, we may process personal data in an aggregated or de-identified form to analyze and improve the effectiveness of our Services including to conduct analytics, conduct research, study user behavior, and train our AI models as permitted under applicable laws. For instance:

• ·When you submit Feedback, we disassociate Inputs and Outputs from your user ID to use them for training and improving our models.
• ·If our systems flag Inputs or Outputs for harmful content or for potentially violating our policies, we disassociate the content from your user ID to train our trust and safety internal classification and generative models. However, we may re-identify the Inputs or Outputs to enforce our Terms of Service or Usage Policy with the responsible user if necessary.
• ·To improve user experience, we may analyze and aggregate general user behavior and usage data. This information does not identify individual users.

·Where data is de-identified, Anthropic will maintain and use this information in its de-identified form, and will not attempt to re-identify such information, except as permitted by law.

·Security Controls Relating to our Processing of Personal Data

·We implement appropriate technical and organizational security measures designed to protect personal data from loss, misuse, and unauthorized access, disclosure, alteration, or destruction.

77. Children

·Our Services are not directed towards, and we do not knowingly collect, use, disclose, sell, or share any information from children under the age of 18. We have measures in place to detect and remove children from our Services. If you become aware that a child under the age of 18 has provided any personal data to us while using our Services, please email us at privacy@anthropic.com and we will investigate the matter and, if appropriate, delete the personal data.

88. Changes to Our Privacy Policy

·Anthropic may update this Privacy Policy from time to time. We will notify you of any material changes to this Privacy Policy, as appropriate, and update the Effective Date at the top of https://www.anthropic.com/legal/privacy. You can view a summary of privacy policy changes and previous versions in our Privacy Center.

99. Contact Information

·If you live in the European Economic Area (EEA), UK or Switzerland (the "European Region"), the data controller responsible for your personal data is Anthropic Ireland, Limited. If you live outside the European Region, the data controller responsible for your personal data is Anthropic PBC.

·If you have any questions about this Privacy Policy, or have any questions, complaints or requests regarding your personal data, you can contact us as described below:

• ·Anthropic PBC with a registered address at 548 Market St, PMB 90375, San Francisco, CA 94104 (United States).
• ·Anthropic Ireland, Limited with a registered address at 6th Floor, South Bank House, Barrow Street, Dublin 4, D04 TR29 (Ireland).

·You can email us at privacy@anthropic.com and contact our Data Protection Officer at dpo@anthropic.com.

·Please note that under many countries' laws, you have the right to lodge a complaint with the supervisory authority in the place in which you live or work. A full list of EU supervisory authorities' contact details is available here. If you live or work in the UK, you have the right to lodge a complaint with the UK Information Commissioner's Office. If you live in Brazil, you have the right to lodge a complaint with the Brazilian Data Protection Authority (ANPD). If you live in Australia, you have the right to lodge a complaint with the Office of the Australian Information Commissioner.

1010. Legal Bases for Processing

1111. Regional Supplemental Disclosures

·Supplemental Disclosures for Residents of Canada

·These supplemental disclosures contain additional information relevant to residents of Canada. This content should be read in conjunction with the rest of our Privacy Policy. In case of conflict between our Privacy Policy and these supplemental disclosures, the supplemental disclosures shall prevail in relation to residents of Canada.

·Consent. By expressly consenting to this Privacy Policy, you confirm you have read, understand, and consent to the collection, use, processing, and disclosure of your personal data in accordance with this Privacy Policy and understand that, in jurisdictions where it is available, Anthropic also relies on other lawful bases for the foregoing as more fully set out in this policy. We will only collect, use and disclose your personal data with your consent, unless otherwise permitted or required by law. Your consent may be given expressly or implied, depending on the circumstances and the sensitivity of the information involved. You may withdraw consent at any time, subject to legal or contractual restrictions and reasonable notice.

·Cross-jurisdictional Transfers. By providing us with personal data, you acknowledge and agree that your personal data may be transferred or disclosed to other jurisdictions for processing and storage outside of Canada, including to the United States and the countries listed on our Subprocessor List, where laws regarding the protection of personal data may be less stringent than the laws in your jurisdiction. Furthermore, we may disclose your personal data in these jurisdictions in response to legal processes or where we believe in good faith that disclosure is required or permitted by law.

·Contact. If you have any questions or comments about our processing of your personal data, or to exercise your rights as outlined in Section 4 ("Rights and Choices"), please contact us at privacy@anthropic.com.

·Supplemental Disclosures for Residents of Brazil

·These supplemental disclosures contain additional information relevant to residents of Brazil. This content should be read in conjunction with the rest of our Privacy Policy. In case of conflict between our Privacy Policy and these supplemental disclosures, the supplemental disclosures shall prevail in relation to residents of Brazil.

·Legal Bases. Depending on the specific purpose of the processing, we may rely on different grounds than those listed under section 2, where permitted by and in accordance with the Brazilian General Data Protection Law (LGPD). For example, we may rely on the "exercise of legal rights" basis to process personal data associated with customer complaints and to enforce our Terms of Service and similar terms and agreements, including our Usage Policy.

·Data Subject's Rights. LGPD grants certain rights regarding your personal data, which differ from the ones listed under section 4. We will respond to your requests to exercise your rights below in accordance with applicable law:

• ·Confirmation of whether your data is being processed. You have the right to receive a confirmation on whether Anthropic processes your data.
• ·Access to your data. You have the right to know what personal data Anthropic processes about you.
• ·Correction of incomplete, inaccurate or outdated data. You have the right to request the correction of your data that is incomplete, inaccurate, or outdated.
• ·Anonymization, blocking or erasure of data. You have the right to request the anonymization, blocking or erasure of data that is unnecessary, excessive or processed in non-compliance with the provisions of the law.
• ·Portability of personal data to a third party. You have the right to request portability of your data to a third-party, as long as this does not infringe on our trade secrets.
• ·Information of public and private entities with which we shared data. You have the right to request information of public and private entities with which we have shared your data.
• ·Information about the possibility to refuse to provide consent and the respective consequences, when applicable.
• ·Withdrawal of your consent. You have the right to withdraw your consent. This procedure will be carried out free of charge.
• ·Request a review of decisions made solely based on automated processing of personal data.

·Please keep in mind that these rights are not absolute and may not apply in certain circumstances. For example, in certain cases we may continue to process and retain data regardless of your request for deletion, objection, blocking or anonymisation, in order to comply with legal, contractual and regulatory obligations, safeguard and exercise rights, including in judicial, administrative and arbitration proceedings and in other cases provided for by law.

·International Data Transfers. You acknowledge that Anthropic is a company based and headquartered in the United States. Any information we hold about you will be transferred to, used, processed, and stored in the United States and other countries and territories, which may not have data privacy or data protection laws equivalent to those in your country or territory. For the proper operation of the Services, Anthropic needs to carry out international transfers of personal data. In the case of Brazil, we will rely on standard contractual clauses (SCCs) for our data transfers where required and in instances where they are not covered by an adequacy decision. These SCCs have been approved by the Brazilian Data Protection Authority (ANPD), which is the "competent supervisory authority" for these transfers, as governed by Brazilian Data Protection Laws. You can view the SCCs adopted by the ANPD here.

·Supplemental Disclosures for Residents of the Republic of Korea

·This section applies to the extent that Anthropic is subject to the Personal Information Protection Act ("PIPA"), and supplements the information in the Privacy Policy. This is an addendum to the Privacy Policy and should be read in conjunction with the Privacy Policy. In case of any inconsistency between the Privacy Policy and this Addendum, this Addendum prevails for users in the Republic of Korea. This Addendum may be amended or updated from time to time.

·Items of Personal Data Collected and Purpose of Use

·In addition to "1. Collection of Personal Data", we collect and use your information as follows:

• ·Purpose: Identity verification, Fraud and abuse monitoring
• ·Items of Data: Name, birthdate, sex, native-foreigner-code, and DI (duplication information)
• ·Period of retention and use: Until account deletion

·Delegation of Processing of Personal Data

·Anthropic delegates the processing of personal data as described here and below, and the delegatees may process personal data according to the purpose of the delegation.

• ·Korea Credit Bureau: Fraud and abuse detection and identity verification
• ·Kim & Chang: Assisting with the domestic representative related duties

·Overseas Transfer of Personal Data

·Anthropic delegates the processing of personal data to affiliates and third parties, all of whom are located overseas. In addition, Anthropic transfers personal data overseas as follows:

• ·Recipient's Name (Contact Information): Persona (privacy@withpersona.com)
• ·Country to which Personal Data to be Transferred: United States
• ·Items of Personal Data to be Transferred: Name, birthdate, sex, native-foreigner-code, and DI (duplication information)
• ·Recipient's Purpose of Use: Fraud and abuse detection and identity verification
• ·Period of Retention and Use by Recipient: 3 years
• ·Legal Basis for Overseas Transfer: PIPA Article 28-8(1)(iii) delegation

·Following collection, personal data is transferred to the overseas recipients listed below from time to time, as necessary, via a dedicated network. You may have the right to request that your personal data not be transferred overseas as described above. If so, you may request this by email us at privacy@anthropic.com and contact our Data Protection Officer at dpo@anthropic.com. However, in doing so, Anthropic may not be able to provide you with all or any of the services we make available through our website.

·Domestic Representative in the Republic of Korea

·The domestic representative of Anthropic PBC for data protection and related regulatory purposes under Article 31-2 of the Personal Information Protection Act and Article 32-5 of the Act on Promotion of Information and Communications Network Utilization and Data Protection, Etc. in the Republic of Korea is as follows:

·Entity Name and Representative: Anthropic Korea, Limited (Representative Patrick Azubike Ekeruo)

·Registered Address: (Yeoksam-dong), 41F, 152 Teheran-ro, Gangnam-gu, Seoul, South Korea Telephone: +82 2 734 0940 Email: anthropic_privacy@kimchang.com

·Download PDF version

·Our Usage Policy (also referred to as our "Acceptable Use Policy" or "AUP") applies to anyone who submits inputs to Anthropic's products or services, all of whom we refer to as "users." This includes individuals using our apps (such as Claude.ai and Claude Code), developers and businesses using our API and developer platforms, customers accessing Claude through cloud providers and authorized resellers, and the end users of products or services integrating Claude. The Usage Policy is intended to prevent our products and services from being used to create or contribute to real-world harm, and to promote the responsible use of our products and services.

·Please review this Usage Policy carefully before using our products or services.

·We will update our policy as our technology and the associated risks evolve or as we learn about unanticipated risks.

·Our Usage Policy is divided into three categories:

• ·Universal Usage Standards: Our Universal Usage Standards are prohibitions that apply to all users and use cases.
• ·High-risk Use Case Requirements: Our High-risk Use Case Requirements apply to specific use cases that pose an elevated risk of harm to individuals.
• ·Additional Use Case Guidelines: Our Additional Use Case Guidelines apply to certain other use cases, including consumer-facing chatbots and agents, products serving minors, agentic use, and software listed in our directories.

·Our Usage Policy focuses on how our products and services are used. Its prohibitions and requirements do not categorically prohibit use by any particular industry or line of business, provided the use of our products and services complies with this Usage Policy.

·Anthropic's Safeguards Team implements detection and monitoring to enforce our Usage Policy. If we suspect that you may have violated our Usage Policy, we may warn you or throttle, limit, suspend, or terminate your access to our products and services.

·Our products also include real-time safeguards that may block or limit certain outputs, but encountering a block does not by itself indicate a violation of the Usage Policy. For certain dual-use or high-risk use cases covered by real-time safeguards in select domains, we may offer programs where you can apply to be granted access to our products and services with adjusted safeguards, such as our Cyber Verification Program and Life Sciences Verification Program, subject to program-specific eligibility criteria.

·If you believe that our model outputs are potentially inaccurate, biased, or harmful, please notify us at usersafety@anthropic.com, or report it directly in our product through the "report issues" thumbs down button or similar feedback features (where available). You can read more about our Safeguards practices and recommendations in our Safeguards Support Center.

·This Usage Policy is calibrated to strike an optimal balance between enabling beneficial uses and mitigating potential harms. Anthropic may enter into contracts with certain governmental customers that tailor use restrictions to that customer's public mission and legal authorities if, in Anthropic's judgment, the contractual use restrictions and applicable safeguards are adequate to mitigate the potential harms addressed by this Usage Policy.

·Universal Usage Standards

·High-risk Use Case Requirements

·Additional Use Case Guidelines

·Do Not Violate Applicable Laws or Engage in Illegal Activity

·This includes using our products or services to:

• ·Illegally produce, acquire, sell, or distribute controlled or regulated substances
• ·Engage in or facilitate human trafficking or prostitution
• ·Infringe, misappropriate, or violate the intellectual property rights of a third party
• ·Violate any other applicable laws or regulations in your jurisdiction

·Do Not Compromise Critical Infrastructure

·This includes using our products or services to:

• ·Facilitate the destruction or disruption of critical infrastructure such as power grids, water treatment facilities, medical devices, telecommunication networks, emergency services, or transportation systems
• ·Obtain unauthorized access to critical systems such as election, healthcare, or financial systems
• ·Interfere with the operation of military bases and related infrastructure

·Do Not Compromise Computer or Network Systems Without Authorization

·This includes using our products or services to:

• ·Discover or exploit vulnerabilities in systems, networks, or applications without authorization of the system owner
• ·Gain unauthorized access to, or escalate unauthorized privileges within, systems, networks, applications, or devices through technical attacks or social engineering
• ·Create or install tools designed to intercept communications or monitor devices without authorization of the system owner
• ·Develop persistent unauthorized remote access tools designed to operate below normal system security levels, including firmware modifications or hardware implants
• ·Create automated tools designed to compromise multiple systems at scale without authorization
• ·Bypass security controls such as authentication systems, endpoint protection, or monitoring tools without authorization
• ·Create or distribute malware, ransomware, or other types of malicious code
• ·Conduct denial-of-service attacks, or develop tools for denial-of-service attacks or managing botnets

·This section does not prohibit security research, testing, or tool development conducted on systems you own or operate, with the authorization of the system owner, or within the scope of an authorized bug bounty program or vulnerability disclosure policy, provided the activity complies with applicable law. For work covered by our real-time cyber safeguards, users may apply for adjusted access through our Cyber Verification Program.

·Do Not Develop or Design Weapons

·This includes using our products or services to:

• ·Develop, produce, modify, design, or test weapons, explosives, dangerous materials, weapons functionalities of weapons systems, or other systems, including retrofitted hardware, designed to deliver lethal or destructive force
• ·Develop or operate software or components for the testing or operation of weapons or weapons functionalities of weapons systems, including targeting, fire control, or engagement
• ·Weaponize or integrate weapons onto drones, vehicles, or any unmanned or autonomous platforms, or develop weapons delivery systems
• ·Illegally acquire, sell, or transfer weapons, or circumvent regulatory controls (including licensing or export controls) for their acquisition or transfer
• ·Design, synthesize, produce, acquire, operate, test, deploy, or plan the deployment of biological, chemical, radiological, or nuclear weapons, explosive or improvised explosive devices, or their precursors or delivery mechanisms, including developing weapons-critical technology (such as fissile material production, enrichment, or device design)
• ·Modify, design, or test biological or chemical agents to adjust or optimize their lethality, transmissibility, virulence, environmental persistence, or resistance to detection or medical countermeasures

·Do Not Incite Violence or Hateful Behavior

·This includes using our products or services to:

• ·Incite, facilitate, or promote violent extremism, terrorism, or hateful behavior
• ·Provide material support for organizations or individuals associated with violent extremism, terrorism, or hateful behavior
• ·Facilitate or promote any act of violence or intimidation targeting individuals, groups, animals, or property
• ·Engage in or promote discriminatory practices or behaviors against individuals or groups on the basis of one or more protected attributes, including race, ethnicity, religion, national origin, gender, sexual orientation, caste, or disability

·Do Not Compromise Privacy or Identity Rights

·This includes using our products or services to:

• ·Violate privacy rights as defined by applicable privacy laws, such as sharing personal information without consent or accessing private data unlawfully
• ·Misuse, collect, solicit, or gain access without permission to private information such as non-public contact details, health data, biometric or neural data (including facial recognition), or confidential or proprietary data
• ·Compile, aggregate, or enrich personal data from multiple sources to build profiles of individuals for sale, licensing, or disclosure to third parties without those individuals' awareness and agreement, in furtherance of use prohibited under this Usage Policy

·Do Not Compromise Children's Safety

·This includes using our products or services to:

• ·Create, distribute, promote, or facilitate the creation of child sexual abuse material ("CSAM"), including AI-generated CSAM, or other sexually exploitative content involving minors
• ·Facilitate the trafficking, sextortion, or any other form of exploitation of a minor
• ·Facilitate minor grooming, including generating content designed to impersonate a minor
• ·Facilitate child abuse of any form, including instructions for how to conceal abuse
• ·Promote or facilitate pedophilic relationships, including via roleplay with the model
• ·Fetishize or sexualize minors, including in fictional settings or via roleplay with the model

·When we detect CSAM (including AI-generated CSAM), activity facilitating the production or dissemination of CSAM, or scenarios where a minor may be at imminent risk of sexual abuse or exploitation, we will report our findings to relevant authorities. We define a minor or child to be any individual under the age of 18 years old, regardless of jurisdiction.

·Any specific age eligibility requirements for use of our products will be set out in our Terms of Service.

·Do Not Engage in Cruel, Abusive, or Psychologically Harmful Conduct

·This includes using our products or services to:

• ·Promote, facilitate, or glamorize suicide or self-harm, such as soliciting methods, instructions for engaging in these behaviors, or instructions for hiding them from others
• ·Promote or facilitate eating disorders, including generating pro-eating disorder content or requesting methods for restriction, purging, or compensatory exercise
• ·Create or share content that promotes harmful idealization of body weight, shape, or type, including shaming, ranking, or critiquing people's bodies based on their size or shape, or presenting weight or shape as a measure of a person's inherent worth or discipline
• ·Create, distribute, threaten to share, promote, or facilitate the creation of non-consensual intimate imagery ("NCII"), including AI-generated material or tools designed to produce it
• ·Shame, humiliate, intimidate, bully, harass, or celebrate the suffering of individuals
• ·Coordinate the harassment or intimidation of an individual or group
• ·Promote, trivialize, or glorify graphic violence, gore, sexual violence, or animal cruelty or abuse
• ·Develop a new product or service, or support an existing product or service, that employs or facilitates deceptive techniques with the intent of causing emotional harm
• ·Engage in sustained and needless abusive or cruel behavior toward our models

·Do Not Create or Spread Disinformation

·This includes using our products or services to:

• ·Create or disseminate deceptive or misleading information about a group, entity, or person, or about events, laws, regulations, procedures, or the standards of an institution or governing body
• ·Create, disseminate, or amplify conspiratorial narratives meant to target a specific group, individual, or entity
• ·Impersonate real individuals or entities, or create fake personas or accounts, to falsely attribute content or mislead audiences about its origin, or to convince people they are interacting with a human when they are not. This does not prohibit clearly disclosed parody, satire, or fiction.
• ·Create or disseminate false or misleading information related to medical, health, or science issues

·Do Not Engage in Deceptive Campaigns or Artificial Activity

·This includes using our products or services to:

• ·Create or operate fake personas, accounts, media outlets, or organizations, or impersonate real people, organizations, or media outlets, in order to mislead people about their origin or attribution, how widely a view is held, or whether they are interacting with a human (e.g., sockpuppets, astroturfing, fake reviews, or bots that claim to be human)
• ·Misrepresent or intentionally conceal the sponsorship of content or messaging intended to influence public opinion, officials, or other decision-makers
• ·Distribute content through networks of fake or ostensibly independent outlets, websites, or accounts to hide that it comes from a common source
• ·Manipulate the sources from which search engines or AI systems draw answers by seeding them with content that misrepresents its origin, authorship, or independence (e.g., networks of sites posing as unaffiliated sources corroborating the same claims)
• ·Build, improve, maintain, or contribute to tools, systems, or infrastructure designed to facilitate or enable deceptive campaigns, including astroturfing, sockpuppet account creation, coordinated inauthentic behavior, or scaled impersonation
• ·Market, sell, or solicit funding for any of the above as a product or service

·Do Not Undermine Democratic Processes

·This includes using our products or services to:

• ·Generate automated calls or messages to voters or public officials at scale that conceal their artificial origin
• ·Create content, or operate accounts or systems, that falsely appear to come from or on behalf of a real candidate, official, election authority, campaign, or news outlet, including fabricated statements, endorsements, or synthetic media not disclosed as synthetic
• ·Generate or disseminate false or misleading information in political and electoral contexts, including about candidates, parties, policies, voting procedures, or election security
• ·Encourage, glorify or facilitate the disruption of electoral or civic processes, including interference with voting systems, vote counting, certification processes, or any other infrastructure used for voting
• ·Create or disseminate content or engage in behavior designed to suppress voter turnout or discourage legitimate political participation through deception or intimidation

·Do Not Use for Surveillance, Censorship, or Prohibited Law Enforcement or Criminal Justice Purposes

·This includes using our products or services to:

• ·Make or suggest decisions in law enforcement or criminal justice processes, including decisions to investigate, charge, arrest or detain, prosecute, sentence, or grant or revoke early or conditional release
• ·Target or track a person or their property without that person's consent by monitoring their physical location, biometrics, movements, online activities, communications, or associations, whether in real time, on an ongoing basis, or through analysis of previously collected data. This includes using our products for facial recognition, battlefield management, predictive policing, or monitoring in law enforcement investigations.
• ·Build, improve, or enhance the surveillance capabilities of tools, systems, or infrastructure designed for the surveillance uses prohibited in this section
• ·Identify, unmask, or locate people from anonymous or pseudonymous activity, or compile dossiers or aggregate personal information on individuals, in order to harass, intimidate, surveil, or cause harm to the target (e.g., doxxing)
• ·Utilize models to assign scores or ratings to individuals based on an assessment of their trustworthiness or social behavior without notification or their consent
• ·Build or support emotional recognition systems or techniques that are used to infer emotions of a natural person, except for medical or safety reasons
• ·Analyze or identify specific content to censor on behalf of a government organization
• ·Utilize models as part of any biometric categorization system for categorizing people based on their biometric data to infer their race, political opinions, trade union membership, religious or philosophical beliefs, sex life or sexual orientation
• ·Utilize models as part of any law enforcement application that violates or impairs the liberty, civil liberties, or human rights of natural persons

·This section does not prohibit analysis or tracking that individuals have agreed to, such as for fraud detection or anti-money laundering screening on a financial account, or consumer apps where a user has opted in. It also does not prohibit aggregated or anonymized analysis, content moderation, authorized security research, legal research and analysis by law enforcement agencies or courts, or journalism, provided these activities are not used for the purposes prohibited above.

·Do Not Engage in Fraudulent, Abusive, or Predatory Practices

·This includes using our products or services to:

• ·Facilitate the production, acquisition, or distribution of counterfeit or illicitly acquired goods
• ·Promote or facilitate the generation or distribution of spam
• ·Undertake, facilitate, or generate content for fraudulent activities, schemes, scams, extortion, phishing (including websites or domains that mimic legitimate webpages), social engineering, or malware
• ·Create, buy, or sell falsified documents including fake IDs, licenses, currency, government documents, or financial or employment records, or misrepresent professional credentials
• ·Develop, promote, or otherwise facilitate the sale or distribution of fraudulent or deceptive products
• ·Engage in deceptive or abusive practices that exploit individuals, including based on age, disability, or a specific social or economic situation, such as pyramid schemes, predatory lending, or abusive debt collection
• ·Deploy, develop, or support a product or service that uses subliminal, manipulative, or deceptive techniques to distort behavior by impairing decision-making
• ·Engage in actions or behaviors that circumvent the guardrails or terms of other platforms or services
• ·Plagiarize or submit AI-assisted work without proper permission or attribution

·Do Not Abuse Our Platform

·This includes using our products or services to:

• ·Coordinate malicious activity across multiple accounts, or create multiple accounts, to avoid detection, circumvent product guardrails, or generate identical or similar inputs that otherwise violate our Usage Policy
• ·Utilize automation in account creation or to engage in spammy behavior
• ·Circumvent a ban through the use of a different account, such as the creation of a new account, use of an existing account, or providing access to a person or entity that was previously banned
• ·Access, facilitate, or provide others (including end users) with access to our products or services in violation of our Supported Regions Policy
• ·Intentionally bypass or interfere with capabilities, restrictions, or guardrails established within our products, including by circumvention of the account sign-up or log-in process or by instructing the model to produce harmful outputs (e.g., jailbreaking or prompt injection), without prior authorization from Anthropic
• ·Use stolen, fraudulent, or unauthorized payment methods, or otherwise evade payment for our services
• ·Use outputs to train an AI model (e.g., "model scraping" or "model distillation") without prior authorization from Anthropic
• ·Resell, proxy, or otherwise provide access to Claude through unauthorized means, including services that route requests through consumer subscriptions or misrepresent the product or client being used

·Do Not Generate Sexually Explicit Content

·This includes using our products or services to:

• ·Depict or request sexual intercourse or sex acts
• ·Generate content related to sexual fetishes or fantasies
• ·Facilitate, promote, or depict incest or bestiality Engage in erotic chats

·Certain uses of our products and services can impact an individual's health, legal rights, finances, livelihoods, or access to housing, education, or essential services. When our products are used for these high-risk use cases, we require that a qualified person remain accountable for what is delivered or decided, and that the impacted individual knows AI was involved in the advice or decision. These requirements apply to anyone who uses our products to make a High-risk AI Recommendation or control equipment capable of High-risk Physical Actions.

·These requirements for high-risk use cases are meant to protect individuals. However, they do not replace local legal requirements and restrictions. Users should always default to following local laws if those laws conflict with or add additional requirements to the requirements listed below. Our products and services may not be suitable for all use cases.

·Requirements

·For High-risk AI Recommendations or Physical Actions, users must implement the following controls:

• ·Qualified human-in-the-loop for advice and decisions - A qualified person must meaningfully review a High-risk AI Recommendation, with the authority to change or modify it, before it is delivered as advice to an individual who might rely on it or before it is used to implement a decision. A qualified person is someone with the training or experience to evaluate the output in that field, and who holds a license where applicable law requires one for the underlying activity. The qualified person remains responsible for the accuracy and appropriateness of what is delivered or decided.
• ·Disclosure for advice and decisions - An individual who receives advice or who is the subject of a decision based on a High-risk AI Recommendation must be clearly told that AI was used to produce it. Users do not need to identify Anthropic, Claude, or the model used.
• ·Human control and independent safety limits for physical actions - For High-risk Physical Actions, there must be a qualified individual who is able to observe the equipment's operation and stop it at any time, and the equipment must stop or hold a safe state when that individual intervenes or when connection to our services is lost. Any operating limits to keep the equipment within safe bounds, such as speed, force, reach, temperature, pressure, voltage, energy output, dose, or operating area, must be enforced by the equipment or a controller independent of model output.

·These requirements apply alongside applicable law. For physical devices, they do not replace vehicle, aviation, medical device, machinery, or workplace safety law or certification.

·High-risk AI Recommendations

·The requirements apply when users use our products or services to provide a recommendation in any of the following, which are "High-risk Areas":

• 1Legal - advising an individual on their legal rights, obligations, or liability, or on what to do in a specific legal matter, or preparing legal documents for them to sign or file.
• 2Medical - diagnosing a condition; recommending, starting, stopping, or adjusting a treatment or medication, including dose; interpreting an individual's symptoms or test results to triage, provide a diagnosis, advise on treatment risks or side effects, or create a treatment plan. This includes assessing, diagnosing, or treating a mental health condition.
• 3Finance - a personalized recommendation to buy, sell, hold, or allocate among specific investment products, such as securities, funds, digital assets, or annuities; advising an individual on their own taxes, such as what to report, deduct, or claim; or preparing a tax return for them to sign or file.
• 4Credit - approving, denying, or setting the amount, rate, or limit of a loan, mortgage, credit line, or similar product, or reducing or closing an existing one, or producing a credit score or creditworthiness assessment used for such decisions.
• 5Insurance - underwriting or pricing a policy; determining the outcome of a claim; making a coverage, prior-authorization, or medical-necessity determination; cancelling or declining to renew a policy.
• 6Housing - approving, denying, or ranking a rental or purchase application; terminating a tenancy or initiating eviction or foreclosure.
• 7Employment - screening, ranking, advancing, or rejecting candidates; hiring; promoting or demoting; setting or changing shifts, hours, or pay; evaluating a worker's performance or behavior, including through disciplining, suspending, or terminating a worker.
• 8Education and credentials - admitting, rejecting, or ranking applicants; grading an exam or assessment that determines admission, graduation, licensure, or certification (outside of multiple-choice testing); granting, denying, or revoking a professional license or certification; making a determination of academic misconduct or suspending or expelling a student.
• 9Healthcare access - setting triage or waitlist priority; determining eligibility for, denying, or discontinuing a treatment, service, or care program.
• 10Public benefits and services - determining eligibility for, or the amount of, government benefits, assistance, or essential services, including suspension and termination.
• 11Legal status and adjudication - deciding or recommending the outcome of a civil, administrative, or arbitral matter; determining immigration, asylum, or citizenship status.

·Prohibition Reminder: Use of our products or services to make or suggest decisions in law enforcement or criminal justice processes is prohibited under our Universal Usage Standards and is not a High-risk AI Recommendation.

·High-risk Physical Actions

·When connecting our models to hardware that can take physical actions, users should assess and understand 1) the range of possible outcomes if something goes wrong, 2) the nature and extent of potential impact to individuals, groups or populations, and 3) the degree of control the user maintains relative to the autonomy the model has, including possible risks such as prompt injection or manipulation. The requirements apply when outputs of our products and services are acted upon by hardware without human approval where the hardware or linked equipment can:

• 1Move through shared space - steer, accelerate, brake, or navigate a vehicle, vessel, aircraft, drone, or mobile robot in a place where people may be present, or on roads, waterways, or airspace.
• 2Apply force that could cause injury - actuate arms, presses, lifts, hoists, doors, gates, conveyors, or other machinery capable of striking, crushing, pinning, or dropping a load on a person nearby.
• 3Control hazardous energy or materials - operate heating elements or open flame, pressure systems, high-voltage or high-current circuits, lasers or radiation sources above eye- and skin-safe levels, or control the release, mixing, or dispensing of hazardous chemical or biological materials, at levels capable of causing injury.
• 4Act on the human body - administer or adjust a drug, fluid, gas, electrical stimulation, or radiation or other energy dose to a person, or cut, penetrate, or move instruments within a person's body or tissue, including through a surgical, interventional, worn, attached, or implanted device.
• 5Control safety systems - arm, disarm, trigger, or override fire suppression, emergency shutoffs, alarms, ventilation, or locks and barriers that could confine a person.
• 6Run industrial processes - control plant or process equipment where a fault could injure workers or a member of the public (including diffuse or indirect harms, such as food poisoning or defective products).

·Prohibition Reminder: Our Universal Usage Standards prohibit actions related to weapons, critical infrastructure, violence, and surveillance.

·Exclusions

·The requirements do not apply to:

·AI Recommendations

·Using our products to assist in workflows that are related to, but do not actually provide, High-risk AI Recommendations. Some non-exhaustive examples are:

• ·General information or educational content, including explaining what a law says, how a condition or treatment works, or how investing works, without applying it to the individual's circumstances.
• ·Wellness content, such as education on sleep, stress, nutrition, or exercise.
• ·Explaining or helping an individual understand advice, a diagnosis, or a decision that a qualified person has already given them (as long as it is not an additional High-risk AI Recommendation).
• ·Internal drafting, research, summarization, or analysis that is not the ultimate High-risk AI Recommendation delivered.
• ·Carrying out a decision a person has already made, or applying a fixed rule, formula, or algorithm where the model exercises no judgment about the individual.
• ·Business operations that do not advise or decide about a specific individual.

·Physical Actions

• ·Consumer and household devices operating within the manufacturer's built-in safety limits, where the worst possible outcome is discomfort or inconvenience.
• ·Generating plans, code, toolpaths, waypoints, or commands that a qualified person reviews before they are executed on equipment.
• ·Monitoring, sensing, or reporting on equipment without controlling it.
• ·Laboratory automation handling non-hazardous materials inside enclosed instruments.

·Favorable Decisions

·Where permitted by law, human-in-the-loop review is not required before acting on a High-risk AI Recommendation wholly favorable to the individual in the following circumstances:

• ·Paying an insurance claim.
• ·Approving coverage or prior authorization for care a clinician has ordered.
• ·Granting eligibility for a healthcare service or program.
• ·Granting or continuing a public benefit or service.

·Additional legal obligations such as disclosure may still apply. A partial approval, reduced amount, or approval with conditions is not considered "wholly favorable."

·The below use cases - regardless of whether they involve High-risk AI Recommendations or Physical Actions - must comply with the additional guidelines provided.

• ·All consumer-facing chatbots or AI agents that communicate directly with external users must disclose to users that they are interacting with AI rather than a human. This disclosure must be provided at a minimum at the beginning of each chat session or in the product interface. The disclosure does not need to identify Anthropic, Claude, or the model used.
• ·Products serving minors, including organizations providing minors with the ability to directly interact with products that incorporate our API(s), must comply with the additional guidelines outlined in our Support article and all applicable laws.
• ·Agentic use cases must comply with the Usage Policy. Users are responsible for ensuring that agents they build or deploy, including actions those agents take through tools, browsers, or connected systems, comply with this Usage Policy.
• ·Software listed in our Directories must comply with our Software Directory Policy.

·We also provide additional informational resources in our Safeguards Support Center, including:

• ·Our Child Safety Guidance for Developers for detailed guidance on identifying and mitigating child safety risks.
• ·Additional information about our mental health safeguards on Claude.ai.