Free tools Windows power users keep installed
One-click scans. No signup required.
Some links on this page are affiliate links: if you buy through them we may earn a commission, at no extra cost to you.
There is no single privacy winner for sensitive work. The safer choice depends on the exact edition, account type, retention settings, administrator controls, connected tools, and your organization’s contract. For confidential material, start with an approved, organization-managed workspace—not a personal account—and verify five things before use: whether prompts can improve models, how long data is retained, when humans can review it, what administrators can access, and which integrations receive the content.
This guide compares the documented privacy behavior of Microsoft Copilot Chat for work or school, ChatGPT’s business and personal offerings, Anthropic Claude, and Google Gemini Apps. These are vendor statements for the named products and policies; they are not an independent audit of implementation or a guarantee that your configuration matches the defaults.
As an Amazon Associate I earn from qualifying purchases.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Quick answer: which chatbot should you use for confidential work?
Use the service your employer or school has formally approved, with the managed edition and retention settings that security or legal teams have reviewed. If no service is approved, do not paste confidential, regulated, client, employee, source-code, or unpublished business information into a consumer chatbot.
The products differ in important ways:
- Microsoft Copilot Chat for work or school says work-account sign-in automatically supplies enterprise data protection. Prompts, work content, and responses are not used to train foundation models, but prompts, triggered Bing searches, and responses are logged and can be available to IT administrators through search and audit tools.
- ChatGPT provides no-training-by-default terms for Business, Enterprise, Edu, Healthcare, Teachers, and API data. Personal-account controls are separate. Temporary Chat avoids history, memories, and model training, but is retained for 30 days for safety.
- Claude gives consumer users an opt-in model-improvement choice and says Incognito chats are not used for improvement. Deleted consumer conversations are removed from backend systems within 30 days, while conversations used for improvement can remain in de-identified training pipelines for up to five years. Work and API terms are separate.
- Gemini Apps says a subset of chats can be reviewed by human reviewers and retained for up to three years. Its default activity auto-delete period is 18 months; temporary chats and chats with Keep Activity off have a stated 72-hour retention period, while service and safety processing can still occur.
Those statements describe different controls, not a league table. A no-training promise does not mean no retention, no review, or no administrator visibility.
#1 Best Overall
- Read Before You Buy — No Video Output: These adapters support charging and USB 2.0 data transfer, but cannot transmit video signals. Except for standard USB webcams (which use USB data only), they are not compatible with HDMI/DisplayPort cables, video-capable USB-C hubs, or docking stations with video output.
- Convert USB-A Ports to USB-C: Designed to connect USB-C earphones, cables, flash drives, card readers, and other USB-C accessories to standard USB-A ports. Plug-and-play with no drivers or software required.
- Aluminum Alloy Housing: Built with a sturdy aluminum alloy shell that aids in heat dissipation and protects against daily wear and scratches. Designed to maintain a stable and secure connection.
- Compact & Travel-Friendly: The ultra-compact design allows the adapter to stay plugged into your device without blocking adjacent ports or adding bulk, reducing wear and tear on your original USB ports.
- 12-Month Warranty: Backed by a 12-month manufacturer warranty for peace of mind. Designed to meet strict quality control standards for reliable everyday performance.
Privacy comparison by product edition
Read the table as a starting point, then open the linked policy for the exact account and region you will use. Consumer and managed-work terms can differ materially even when the product name is similar.
| Product and account | Training or improvement use | Retention and deletion described by the vendor | Human review | Administrator visibility |
|---|---|---|---|---|
| Microsoft Copilot Chat for work or school | Microsoft says prompts, including work content, and responses are not used to train foundation models. | The cited documentation describes encrypted session data and logging, but does not establish a universal deletion period. | The cited work/school page does not state a general human-review window. | Prompts, Bing searches triggered by prompts, and responses are logged and may be viewed by IT administrators through search and audit tools. Microsoft Support details |
| ChatGPT Business, Enterprise, Edu, Healthcare, Teachers, and API | OpenAI says business data is not used to train models by default. Qualifying API organizations can configure retention controls, including zero data retention. | Retention depends on the product and configuration. Personal settings do not automatically delete existing chats. Temporary Chat is retained for 30 days for safety before deletion. | Product-specific safety and abuse processes still apply; the linked business documentation should be checked for your agreement and service. | Workspace administrators can have organization-level controls and access defined by the plan and configuration; confirm the exact audit and export settings with your administrator. |
| ChatGPT personal account | Model-improvement controls are separate from business-workspace guarantees. Disabling model improvement prevents that use going forward but does not delete chats. | Temporary Chat does not appear in history or create memories and is retained for 30 days for safety. Ordinary chat deletion and retention depend on the account controls and policy. | Safety processes can apply under the personal service terms. | There is no employer workspace boundary unless the account is organization-managed. |
| Claude consumer | Anthropic says chats and coding sessions may be used to improve Claude when the user allows it, when a conversation is flagged for safety review, or under another explicit opt-in. Incognito chats are not used for model improvement. | Deleted conversations disappear from chat history immediately and are removed from backend systems within 30 days. If improvement is enabled, new or resumed conversations may be retained in de-identified training pipelines for up to five years, subject to stated exceptions. | Anthropic documents safety-review use as an exception to the ordinary improvement choice. | Consumer accounts do not provide the same organization-managed boundary as a contracted work deployment. |
| Claude for Work or API | Separate commercial and API terms apply; do not infer them from consumer settings. | Retention, deletion, and any zero-retention option must be confirmed in the applicable contract and technical documentation. | Check the commercial terms for safety review and support access. | Organization controls depend on the purchased edition and configuration. |
| Google Gemini Apps | Turning Keep Activity off stops future chats from being used to improve Google AI, but chats may still be retained for service response and safety. Feedback can have separate handling. | Gemini Apps has an 18-month default auto-delete period that can be changed to another period or indefinite retention. Temporary chats and chats with Keep Activity off have a stated 72-hour retention period. Reviewed chats may be retained for up to three years. | Google says a subset of chats is reviewed by trained human reviewers or service providers. Reviewed chats are disconnected from the account. | The cited Gemini Apps policy is not a statement about Workspace administrator access. Check Workspace edition controls separately. |
For the underlying terms, see OpenAI’s business data policy, ChatGPT data controls, OpenAI’s privacy explainer, Anthropic’s model-training explanation, Anthropic’s retention explanation, and the Google Gemini Apps Privacy Hub.
Quick wins for a faster PC:
Repair Windows errors before they cause bigger problemsFix Now →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Clear out junk files and repair common Windows errorsFree Scan →What “private” must mean for sensitive work
Privacy is not one switch. Evaluate each of these dimensions separately because a strong result in one can coexist with a weak result in another.
1. Model-training and improvement use
Ask whether prompts, files, outputs, feedback, and support records can be used to train or improve models. “Not used to train foundation models” is narrower than “never processed” and does not erase operational logs. A setting that stops future improvement use also may not delete conversations already stored.
2. Retention and deletion
Find the actual clock for ordinary chats, temporary chats, deleted chats, backups, safety records, legal holds, and human-review copies. A delete button can remove an item from the visible history immediately while backend copies remain for a defined period. Conversely, an auto-delete setting may govern activity history rather than every service log.
3. Human review
Determine whether reviewers or service providers can inspect a subset of conversations for safety, abuse prevention, quality, or feedback handling. Review may involve a copy disconnected from your account, so account deletion does not necessarily remove a review record on the same schedule.
Rank #2
- 5-in-1 USB-C Hub: Experience comprehensive connectivity featuring a Power Delivery input, two USB-A 2.0 ports, a USB-A 3.0 port, and an HDMI port. (Note: The USB-C power delivery input port is only for connecting an external wall charger to power your laptop and cannot power peripheral devices.)
- 90W Pass-Through Charging: Achieve optimal charging with 90W pass-through power to your laptop, supported by a total input of 100W, with the hub reserving 10W for operational efficiency. (Note: Wall charger not included.)
- Quick Data Transfers: Accelerate your productivity with rapid data transfers using a high-speed 5Gbps USB 3.0 port and two 480Mbps USB 2.0 ports.
- 4K HDMI Display: Enhance your visual experience with a hub capable of delivering 4K resolution at 30Hz in both mirror and extend modes. Please note that this hub is compatible with MacBook (macOS 12 and newer), Windows 10 and 11, ChromeOS, and laptops equipped with DP Alt Mode and Power Delivery. Note: This device is not compatible with Linux.
- What You Get: Anker USB-C Hub (5-in-1, 4K HDMI), welcome guide, 18-month warranty, and our friendly customer service.
4. Administrator and support access
Managed workspaces can improve control while increasing organizational visibility. Your employer may be able to search, audit, export, or investigate prompts and responses. That is not a defect if policy requires it, but it is a material confidentiality boundary. Tell users explicitly that “not used for training” does not mean “invisible to IT.”
5. Connected tools and uploaded material
File uploads, cloud drives, browsing, calendars, code repositories, plug-ins, and custom connectors can send data to additional systems. Review each integration’s permissions, data path, retention, and administrator ownership. A chatbot’s privacy terms do not automatically cover a connected third-party service.
6. Edition, geography, and contract
Consumer apps, education editions, business workspaces, APIs, and regulated-industry offerings can have different defaults and legal terms. Verify the country or region, data-residency commitment, subprocessors, incident-notification language, and whether your organization is covered by a written data-processing agreement.
Microsoft Copilot Chat for work or school
Microsoft’s work/school Copilot Chat documentation is unusually clear about the central trade-off. When you sign in with a work or school account, Microsoft says enterprise data protection applies automatically. It states that prompts—including work content added to a prompt—and Copilot responses are not used to train foundation models. It also says session data is encrypted.
The same documentation says prompts, Bing search queries triggered by prompts, and responses are logged. IT administrators may be able to view that information through search and audit tools. Therefore, this option can fit organizations that need a managed service with no foundation-model training use, but it is not a private notebook hidden from the employer.
When it fits
- Your organization already manages Microsoft work or school identities and has approved the service.
- Security teams need auditability, investigation, and policy enforcement.
- You understand that web searches generated from prompts can become part of the organization’s records.
Checks before entering confidential text
- Confirm that you are signed into the organization’s work or school tenant, not a personal account.
- Ask IT which Copilot product is enabled and whether its audit, search, retention, and eDiscovery policies apply to your prompts.
- Check whether connected Microsoft 365 content is in scope and whether the connector permissions match your role.
- Assume prompts and responses may be discoverable by authorized administrators, and write them accordingly.
ChatGPT: separate personal controls from managed workspaces
OpenAI says data from ChatGPT Business, Enterprise, Edu, Healthcare, Teachers, and the API is not used to train models by default. Business data is encrypted in transit and at rest. Qualifying organizations can configure retention controls on the API platform, including zero data retention. Those are managed-service capabilities, not a blanket promise about every ChatGPT account.
Rank #3
- Sleek 7-in-1 USB-C Hub: Features an HDMI port, two USB-A 3.0 ports, and a USB-C data port, each providing 5Gbps transfer speeds. It also includes a USB-C PD input port for charging up to 100W and dual SD and TF card slots, all in a compact design.
- Flawless 4K@60Hz Video with HDMI: Delivers exceptional clarity and smoothness with its 4K@60Hz HDMI port, making it ideal for high-definition presentations and entertainment. (Note: Only the HDMI port supports video projection; the USB-C port is for data transfer only.)
- Double Up on Efficiency: The two USB-A 3.0 ports and a USB-C port support a fast 5Gbps data rate, significantly boosting your transfer speeds and improving productivity.
- Fast and Reliable 85W Charging: Offers high-capacity, speedy charging for laptops up to 85W, so you spend less time tethered to an outlet and more time being productive.
- What You Get: Anker USB-C Hub (7-in-1), welcome guide, 18-month warranty, and our friendly customer service.
Personal-account controls work differently. OpenAI’s data-controls documentation says disabling model improvement does not delete chats. Temporary Chat does not appear in chat history, does not create memories, and is not used to train models, but OpenAI says it is retained for 30 days for safety before deletion. That safety window matters when a document is subject to strict deletion requirements.
Choosing the right account boundary
- Use a business or institutional workspace when an organization needs centralized identity, contractual terms, administrator controls, and documented retention.
- Use the API only after security staff confirm the applicable retention configuration, logging, key management, vendor terms, and application-side storage.
- Do not treat a personal opt-out as an enterprise contract. It changes model-improvement handling but does not create employer governance, data residency, or zero-retention guarantees.
Safer personal-session procedure
- Open the account’s data-control settings before starting the conversation.
- Disable model improvement if your policy permits the service for the material involved.
- Use Temporary Chat for a short-lived, low-risk task where the 30-day safety retention is acceptable.
- Do not upload regulated records, credentials, customer lists, trade secrets, or identifiable personnel data unless an approved agreement covers them.
- Delete the conversation when finished, then remember that deletion and model-improvement controls are separate actions.
Anthropic Claude: consumer Incognito is not a work contract
Anthropic’s consumer documentation says chats and coding sessions may be used to improve Claude when the user permits it, when a conversation is flagged for safety review, or under another explicit opt-in. Incognito chats are not used for model improvement. For consumer conversations that are deleted, Anthropic says the item disappears from chat history immediately and is removed from backend systems within 30 days.
The Tool Desk
Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →If model improvement is enabled, Anthropic says new or resumed conversations may be kept in de-identified form for up to five years in training pipelines. Legal requirements and safety-policy violations are among the stated exceptions. The five-year figure is therefore a conditional training-pipeline retention period, not a universal lifetime for every Claude chat.
What this means for work
Incognito is a useful consumer control, but it does not establish an organization-managed boundary, administrator audit policy, data-residency commitment, or contractual deletion schedule. Claude for Work and the API have separate terms. Before approving either for sensitive material, obtain the commercial privacy, retention, subprocessors, support-access, and incident-response documents that apply to your plan.
Google Gemini Apps: review and activity settings require care
Google’s Gemini Apps Privacy Hub says a subset of chats is reviewed by human reviewers, including trained service providers. Reviewed chats are disconnected from the account and may be retained for up to three years. Google also warns users not to enter confidential information they would not want a reviewer to see or Google to use to improve services, including machine-learning technologies.
Gemini Apps activity has an 18-month default auto-delete period. Google says users can change that to another period or indefinite retention. Turning Keep Activity off stops future chats from being used to improve Google AI, but chats may still be retained for service response and safety. The same page describes 72-hour retention for temporary chats and chats made while Keep Activity is off. Feedback can receive separate review and retention.
Recommended Free Tools
Rank #4
- Dual Converters, Infinite Potential：Includes 2× USB C male to USB A female adapters and 2× USB A male to USB C female adapters. Perfect for a wide range of uses—tablets with Bluetooth keyboards, expand USB ports on macbook, and more. Two different converters for all your daily needs
- Next-Level 10Gbps & 3A Charging: No more slow 480Mbps, this usb to usb c adapter has a transfer speed of up to 10Gbps, allowing you to do more transferring in less time. This usb adapter fits both USB A and USB C charger, supporting up to 3A fast charging
- Upgraded Exquisite Craftsmanship: With an aluminum alloy housing and metal connector, the usbc to usb adapter is extremely durable and sturdy. Rigorously tested to withstand more than 10,000 times of plugging and unplugging, ensuring long-lasting performance
- Broad Compatible: The usb c to usb adapter widely supports all USB C/ USB A devices like laptops, tablets, cellphones, car chargers, and phone chargers. Such as compatible with MacBook Pro/Air 2023/2022, Thunderbolt 4/3 Devices,Apple MagSafe Watch 9/8/7/SE/Ultra, iPad Pro 2022/2021, Samsung Galaxy S23/S20/S10, and iPhone 17/16/15 Pro. Plug and play
- Please Note: To reach 10Gbps speed, keep the cable under 3.3 ft. For USB A Male to USB C adapters, try flipping the USB C connector. USB C Male to USB A adapters support bidirectional 10Gbps transfer within 3.3 ft
Important scope limit
These statements concern Gemini Apps. Do not apply them automatically to a Google Workspace edition, another Google service, or an organization’s negotiated controls. If your employer provides Gemini through Workspace, ask the administrator for the Workspace-specific terms, audit behavior, connector permissions, and retention configuration.
Before using Gemini Apps for a work task
- Open the Gemini Apps activity and privacy controls and identify whether Keep Activity is on.
- Decide whether the stated 72-hour handling for temporary or off-activity chats is acceptable; it is not the same as instant deletion.
- Do not submit information that would create unacceptable exposure if selected for human review.
- Check feedback options separately, because sending feedback can create an additional review path.
How to choose a chatbot for your organization
Use this sequence with security, legal, procurement, and the actual users who handle sensitive material.
Step 1: Classify the information
Write down the highest sensitivity involved: public, internal, confidential, personal data, regulated data, export-controlled material, customer data, source code, credentials, or legally privileged content. If the policy forbids a category in external AI services, no privacy setting makes it permissible.
Step 2: Select the account and edition
Record the exact product name, plan, tenant, country, and login identity. “The company uses this chatbot” is not precise enough; a personal account and a managed enterprise workspace can have different data terms.
Do these 3 things before closing this tab:
1Fix the driver behind crashes, sound loss and screen glitches2Repair Windows errors before they cause bigger problems3Scan for outdated or missing drivers - takes under a minuteStep 3: Confirm the five controls in writing
- Training or model-improvement use, including feedback and safety exceptions.
- Retention for active, deleted, temporary, reviewed, backed-up, and legally held data.
- Human-review conditions and reviewer access.
- Administrator, support, audit, export, and eDiscovery access.
- Connected-app permissions, subprocessors, data residency, and deletion responsibilities.
Step 4: Configure the workspace before users arrive
Set identity and single sign-on, least-privilege groups, approved connectors, retention labels, audit logging, sharing restrictions, and incident contacts. Disable integrations that are not needed. Decide whether prompts and outputs belong in corporate records and whether users may copy them into other systems.
Step 5: Test with synthetic data
Use invented names and fake records to verify what appears in chat history, admin search, audit logs, exports, browser history, connected applications, and deletion workflows. Test a normal chat, a temporary chat, an uploaded file, a connected-tool request, a deleted chat, and a safety-blocked request. Document the observed behavior without treating a small test as proof of all production guarantees.
Best Value
- 5-in-1 Connectivity: Equipped with a 4K HDMI port, a 5 Gbps USB-C data port, two 5 Gbps USB-A ports, and a USB C 100W PD-IN port. Note: The USB C 100W PD-IN port supports only charging and does not support data transfer devices such as headphones or speakers.
- Powerful Pass-Through Charging: Supports up to 85W pass-through charging so you can power up your laptop while you use the hub. Note: Pass-through charging requires a charger (not included). Note: To achieve full power for iPad, we recommend using a 45W wall charger.
- Transfer Files in Seconds: Move files to and from your laptop at speeds of up to 5 Gbps via the USB-C and USB-A data ports. Note: The USB C 5Gbps Data port does not support video output.
- HD Display: Connect to the HDMI port to stream or mirror content to an external monitor in resolutions of up to 4K@30Hz. Note: The USB-C ports do not support video output.
- What You Get: Anker 332 USB-C Hub (5-in-1), welcome guide, our worry-free 18-month warranty, and friendly customer service.
Step 6: Train users on the visibility boundary
Tell users whether administrators can inspect prompts, whether reviewers may see samples, how long records persist, and which data classes are prohibited. Explain that rewriting a confidential document inside a chatbot can still disclose the underlying facts, even if names are removed.
Practical handling rules for sensitive prompts
- Minimize first: remove names, account numbers, exact dates, credentials, secrets, and unnecessary attachments.
- Use a synthetic example: ask for a workflow, checklist, or code pattern using invented values, then apply the result inside an approved system.
- Separate instructions from source data: provide only the fields needed to answer the question.
- Keep secrets out: never paste passwords, private keys, session tokens, recovery codes, or unredacted access logs.
- Check outputs independently: privacy controls do not make generated text accurate, legally safe, or authorized for release.
- Control downloads and sharing: generated files can contain copied confidential content and may leave the managed workspace.
- Review connectors: an assistant with access to mail, drives, calendars, or repositories can process more data than the visible prompt suggests.
Common privacy mistakes and how to fix them
“I turned off training, so the chat is gone.”
Training controls and deletion controls solve different problems. OpenAI says disabling model improvement does not delete chats; Google says Keep Activity off can still allow service and safety retention; Microsoft’s work/school documentation describes logging despite its no-training statement. Fix this by recording both the improvement setting and the retention/deletion schedule.
“Temporary means zero retention.”
Temporary modes can have safety windows. OpenAI states that Temporary Chat is retained for 30 days. Google describes 72-hour retention for temporary chats and chats with Keep Activity off. Fix this by matching the mode’s stated window to your policy rather than assuming immediate erasure.
“My employer cannot see it because the vendor does not train on it.”
Microsoft explicitly says work/school Copilot prompts, triggered searches, and responses are logged and may be available to IT administrators. Fix this by treating managed-chat records as potentially discoverable organizational data.
“Incognito is the same as an enterprise agreement.”
Anthropic’s consumer Incognito setting addresses model improvement, not every contractual, administrative, residency, or audit question. Fix this by obtaining the commercial terms for Claude for Work or the API when business data is involved.
“The product name tells me the policy.”
It does not. Consumer apps, business plans, APIs, education editions, and Workspace products can have different terms. Fix this by recording the exact edition and linking users to the applicable policy in your internal guidance.
A procurement checklist you can reuse
Ask the vendor and your administrator for clear answers to these questions before approval:
- Are prompts, uploads, outputs, feedback, and support tickets used for model training or service improvement? Under what exceptions?
- What are the retention periods for active, deleted, temporary, reviewed, backed-up, and legally held data?
- Can human reviewers or service providers access content? How is access logged and restricted?
- Can our administrators search, export, audit, or place legal holds on conversations?
- Where is data processed and stored, and can the organization select a region?
- What subprocessors receive content, and which connected tools can receive it?
- Can the organization configure zero or limited retention, and does that cover application logs as well as prompts?
- What happens when an employee leaves, a workspace is deleted, or a contract ends?
- How are incidents reported, and what support personnel can view customer content?
- Which controls are defaults, which are configurable, and which require a written agreement?
Bottom line for 2026
For sensitive work, choose the approved managed edition whose data terms match your organization’s risk classification. Microsoft Copilot Chat for work or school emphasizes no foundation-model training use alongside administrator-visible logging. ChatGPT’s business products provide no-training-by-default terms and configurable API retention for qualifying organizations, while personal controls remain separate. Claude’s consumer Incognito and deletion controls have explicit limits, and its work/API terms must be evaluated independently. Gemini Apps offers activity controls but documents human review and retention windows that may be unsuitable for confidential material.
Recheck the official policy pages at the time of deployment and whenever the product, plan, or administrator settings change. Vendor documentation describes intended policy; your security team must verify the configuration that users actually receive.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
