Replit AI — privacy & data policy

Provider: Replit. PromptPrivacy score: 33/100. Last verified November 01, 2026.

What happens to your data?

Replit collects your submitted code, prompts, project files, and usage information when you use its tools. This content is used to run the platform, shared with third-party machine learning providers powering features like Agent, and used internally to train code-generation models. Publicly shared projects and profile information may also be visible to other users and search engines by default.

Does it train on your data?

Trains on your content by default. Replit states that it relies on legitimate interest to process personal data—including code, project files, prompts, and inputs—to improve the accuracy of its machine learning technologies, such as code generation, and for product development.

Can you opt out?

Not specified. While the policy states that personal data is used to improve machine learning technologies such as code generation under legitimate interest, it does not state whether or how users can opt out of this AI training.

Data retention

Replit does not state concrete retention timelines. Data is retained until it is deemed no longer necessary to be kept in identifiable form, after which Replit takes steps to delete it or de-identify it, unless legal obligations mandate longer retention.

Encryption & security

The policy references general technical, organizational, and physical safeguards, but explicitly disclaims any security or privacy guarantees. It does not mention encryption standards (such as TLS or AES-256) or third-party certifications like SOC 2 or ISO 27001.

Is it safe for work?

Use with caution for proprietary or sensitive workplace code. Replit reserves the right to use personal data and code to train machine learning models, shares data with third-party AI providers, disclaims security guarantees, and does not provide an enterprise Data Processing Agreement (DPA) within this policy.

Source policy: https://replit.com/privacy