Microsoft said Wednesday that by the end of July it will implement an updated, simplified privacy and services policy that makes clear the company will not snoop on your email or Skype calls to sell you advertising.
The updated privacy policy is already available to examine on Microsoft’s site, where the company breaks down what information it does collect from users, and for what purpose. Microsoft said that it had worked to simplify the agreement, while trying to call out the important details that Microsoft’s users care about. The related Microsoft Services Agreement applies to all of Microsoft’s services, from Outlook.com to Office to OneDrive.
The new policy will take effect on July 31. At that time, use of Microsoft’s services will constitute opting into the agreement, Microsoft said. If you want to opt out, you’ll need to stop using the services or close your account.
Microsoft made it clear that, at least for advertising purposes, it does not listen in on your private communications. “As part of our ongoing commitment to respecting your privacy, we have updated the Microsoft Services Agreement to state that we do not use what you say in email, chat, video calls, or voice mail to target advertising to you,” the company said. “Nor do we use your documents, photos, or other personal files to target advertising to you.”
Microsoft did not explicitly refer to Google or any other competitor, but the message was clear: While rivals like Google may sell ads against your content, Microsoft will not. In 2012, Google consolidated its privacy policy as well, sharing information to provide a more cohesive profile of its users. U.S. lawmakers and Europeans went ballistic, charging that the information was being collected without consent, and without enough provisions to opt out.
Oh, Microsoft’s snooping, all right
But that doesn’t mean that Microsoft isn’t collecting your data at all—quite the opposite, in fact. The policy makes clear that Microsoft may ask for personal information when you sign up for a service, including your name and location.
Users also implicitly consent to Microsoft’s recording their voices and other content to improve its services. “And you may provide content – your communications and your files – while using our sites and services,” the updated privacy policy states. “Content includes the words in an email in Outlook.com or the photos and documents stored on OneDrive.”
And if Microsoft doesn’t get the information it wants, it can always buy what it needs from a third-party company, it warns.
Microsoft already uses your information to improve its services. (Its digital assistant, Cortana, is governed by the privacy policy of Windows Phone.) It also uses that information to provide targeted ads—the more information an advertiser knows about you, the more interesting the ad. (A Microsoft page allows you to opt out of targeted ads.)
Calling down the banhammer
Microsoft also made clear what behavior would result in pulling a user’s access rights to its services, essentially banning the person from the Microsoft ecosystem:
-
Don’t engage in any activity that exploits, harms, or threatens to harm children;
-
Don’t send spam or use your account to help others send spam, defined as unsolicited bulk email, postings or instant messages;
-
Don’t publicly display inappropriate images, such as nudity, bestiality, or pornography;
-
Don’t engage in activity that is false or misleading, such as an attempt to ask for money under false pretenses or impersonating another user;
-
Don’t engage in activity that is harmful to the services or others, such as emailing viruses or engaging in hate speech;
-
Don’t infringe upon the rights of others, such as sharing copyrighted content
-
Don’t engage in activity that violates the privacy of others.
- And, if that’s not enough: Don’t use Microsoft’s services to do anything illegal.
Microsoft also made clear that it would not examine the contents of your email, even if it suspected users of trafficking in contraband Microsoft products, as happened earlier this year. Microsoft said then that it would simply refer the matter to law enforcement.
Here’s another no-no: If you fail to log in once a year to your Microsoft account, Microsoft will terminate your account and delete all or most of the data associated with it.
“You must sign in to your Microsoft account periodically, at a minimum every year, to keep services associated with your Microsoft account active, unless provided otherwise in an offer for a paid portion of the Services,” Microsoft’s updated services agreement states. “If you don’t sign in during this period, we will close your account (which means you won’t have access to the Windows Services, Office Services, Content stored in your account, and any other product or service that uses Microsoft account). If your Services are canceled, we will delete information or Content (as defined below) associated with your Microsoft account, or will otherwise disassociate it from you and your Microsoft account, unless the law requires us to keep it.”
Sign in, or else
It’s very possible that simply logging into your Windows PC or an app will constitute signing into your account. And frequent Windows users won’t have to worry. But for soldiers on deployment, for example, it might be something to think about.
As of now, there’s no apparent mechanism for opting out of Microsoft’s data collection practices, short of terminating your account and discontinuing to use Microsoft’s services. And there’s no indication that Microsoft is necessarily expanding its data collection practices.
Nevertheless, the simplified policies will undoubtedly be scrutinized by lawmakers and privacy advocates in the wake of Google’s effort. It’s worth a few minutes of your time.
Correction: Microsoft’s Cortana service, at press time, is governed by the privacy policy of Windows Phone. A point concerning Microsoft’s login policies has also been clarified.