Elicit — privacy & data policy

Provider: Elicit. PromptPrivacy score: 47/100. Last verified August 26, 2026.

What happens to your data?

Elicit collects account credentials, contact information, and technical usage telemetry to provide its research platform and manage accounts. Information is only shared to comply with legal obligations, protect safety, or when you give consent. When data is no longer needed or when an account is terminated, it is scheduled for deletion or anonymization.

Does it train on your data?

Not specified. The privacy policy does not state whether research inputs, queries, or user data are used to train or fine-tune machine learning models.

Can you opt out?

Users can reject cookies via browser settings and may withdraw consent or request account deletion by emailing operations@elicit.com. Opting out of AI training specifically is not specified.

Data retention

Elicit retains personal information for as long as necessary to fulfill the business purposes described in the policy or to satisfy legal, tax, and accounting requirements. When there is no ongoing legitimate need, data is deleted, anonymized, or isolated in backup archives until deletion is possible.

Encryption & security

The policy states that Elicit uses appropriate technical and organizational security measures to safeguard personal data, but specific encryption standards (such as TLS or AES-256) and security certifications are not specified.

Is it safe for work?

Caution is recommended for sensitive or confidential business data. While Elicit restricts data sharing to legal requirements and consent, the policy does not provide enterprise-specific data commitments, SOC 2/ISO certifications, or explicit AI model training exclusions.

Source policy: https://elicit.com/operations/privacy