Adobe Firefly — privacy & data policy

Provider: Adobe. PromptPrivacy score: 53/100. Last verified November 01, 2026.

What happens to your data?

Adobe collects your account information, usage activity, and uploaded or generated content (such as prompts and images) to provide services, detect fraud or abuse, and customize features. Data is stored on Adobe and third-party vendor servers and shared with service providers, affiliates, and advertising networks. You can manage or delete your stored files and photos through your account.

Does it train on your data?

Not specified. The provided text does not state whether user content, inputs, or prompts are used to train generative AI models. It only mentions using automated techniques on cloud content for general content analytics to improve service experiences, subject to user opt-out rights.

Can you opt out?

Not specified. The policy does not specify whether user content is used for AI model training or provide an opt-out mechanism for model training.

Data retention

Adobe retains most personal information as long as your account remains active. Personal data associated with contracts and business transactions is retained for ten years following your last interaction. Other personal information is removed once Adobe no longer has a business need for it, and users can directly delete their stored files and photos at any time.

Encryption & security

Adobe states that it utilizes administrative, technical, and physical controls where appropriate, including encryption, two-step verification, and confidentiality requirements for employees and contractors. The policy does not specify exact cryptographic standards (such as TLS or AES-256) or third-party audit certifications.

Is it safe for work?

Caution is advised. While Adobe provides user deletion controls and baseline security measures, this consumer-facing policy allows broad data sharing with advertising networks and third-party partners. Because the text does not define enterprise data isolation or AI model training commitments for Firefly, businesses handling confidential or proprietary information should ensure they are covered by an enterprise agreement with an appropriate Data Processing Addendum.

Source policy: https://www.adobe.com/privacy/policy.html