Microsoft Copilot users who upload photos for AI editing may not be the only people who can see those images. A new report has raised privacy concerns after describing how human contractors working on Copilot can review user prompts, uploaded images, and the AI-generated results.
The reported reviews are part of the company’s efforts to assess whether Copilot responds correctly to requests and follows safety rules. Contractors can examine both the uploaded photos and the instructions given to the AI.
This means users must be careful before sending personal or sensitive images to Copilot, particularly when they contain identifiable people or private information.
Microsoft's own Copilot privacy documentation acknowledges that some conversations can be subject to automated and human review for product improvement and digital safety. It also says trained AI experts may review conversations to evaluate and improve the accuracy and safety of its models.
The tech giant said limited human review may also be required when investigating suspected violations of its Code of Conduct. Users cannot opt out of human review in these circumstances.
The company's terms of use also warn that Copilot may involve automated and manual processing of user data. Microsoft advises users not to share information they would not want reviewed.
Microsoft's current transparency documentation says Copilot can analyze uploaded images, edit them, and use image inputs to respond to user requests. For Copilot Vision, Microsoft said it processes images captured or shared during a session to provide the requested response and deletes them within 30 days after the conversation ends.
According to the company, it excludes identifying information in images or files from AI model training after steps such as de-identification, metadata removal, and face blurring. However, Microsoft's privacy rules differ depending on the Copilot product and how it is being used. Users should therefore check the relevant privacy settings and terms before uploading sensitive material.
Also Read: Microsoft Steps Back from Copilot+ PC Branding While Keeping AI Features
While these features can be used for creative edits, they also raise questions about who can access uploaded material and how long it remains available. For consumers, the takeaway is straightforward: Avoid uploading confidential documents, highly sensitive photographs, or images containing private information unless you understand the service's data-handling terms.