Elicit — privacy & data policy

Provider: Elicit. PromptPrivacy score: 48/100. Last verified November 01, 2026.

What happens to your data?

Elicit collects your account details and technical usage data to manage your account and deliver its research services. Your data is stored on servers in the United States and is only disclosed to meet legal obligations, defend legal rights, or with your direct consent. Information is retained as long as necessary for business purposes and can be deleted upon account termination request.

Does it train on your data?

Not specified. The privacy policy does not state whether user content, research tasks, or queries are used to train AI models.

Can you opt out?

Not specified. The policy does not discuss AI model training or provide any opt-out mechanism for it.

Data retention

Personal data is kept for as long as necessary to fulfill the business purposes described in the policy or to satisfy legal requirements. When data is no longer needed, it is deleted, anonymized, or isolated in backup archives until deletion is feasible. Users can also request account termination to remove their data from active databases.

Encryption & security

Elicit states that it maintains technical and organizational security measures to protect personal data, but it does not detail specific encryption standards (such as TLS in transit or AES at rest) or third-party security certifications.

Is it safe for work?

Caution is advised for sensitive or confidential business data. The policy does not specify encryption standards, sub-processor handling, enterprise data isolation, or whether research content is excluded from internal model training and evaluation.

Source policy: https://elicit.com/operations/privacy