01 · The Question
Can the Prompt You Submit to an AI Tool Be Kept?
A researcher types a prompt, receives an answer, and closes the browser. It is tempting to imagine that the exchange ended there.
But can the AI provider retain what the researcher typed? Yes, depending on the service. Prompts may be stored as conversation history, logs, compliance records, safety records, or other forms of retained interaction data under the provider's applicable terms and settings.
For researchers, this matters because a "prompt" may contain far more than an instruction. It can contain participant information, unpublished findings, manuscript text, research ideas, reviewer comments, confidential proposals, or material belonging to collaborators.
03 · What You Need to Know
Prompt Storage Is Not One Simple Yes-or-No Policy
A prompt can itself be a research record containing sensitive information
In ordinary conversation, a prompt might be a sentence such as "Explain logistic regression." In research practice, prompts can be much richer:
"Summarize this participant transcript," followed by several pages of qualitative data.
"Improve this abstract," followed by unpublished findings.
"Respond to these reviewer comments," followed by confidential peer-review correspondence.
"Assess the novelty of this proposal," followed by a grant application.
From a confidentiality perspective, calling something a prompt does not make the information less consequential. The relevant issue is what the prompt contains.
Regular conversation history is one form of storage
Some AI services retain conversations so users can return to them later. That convenience requires some form of persistence.
OpenAI currently states that regular and archived ChatGPT conversations remain saved to an account until the user deletes them or an applicable workspace retention policy removes them. Google states that when Keep Activity is enabled for personal Gemini Apps accounts, Gemini Apps activity is stored in the user's Google Account. Microsoft states that Copilot interaction data can include stored prompts and responses.
Those examples demonstrate why researchers should not assume that closing a tab or ending a session means the prompt ceased to exist.
Retention periods can depend on the mode you choose
Not every interaction within the same AI product necessarily follows the same retention arrangement.
OpenAI's Temporary Chat provides a useful example. Temporary Chats do not appear in ordinary chat history unless saved, but OpenAI states that a copy may be retained for up to 30 days for safety purposes. A regular ChatGPT conversation, by contrast, can remain saved until the user deletes it or a workspace retention policy removes it.
The lesson is broader than one provider: "not in my history" does not necessarily mean "never stored."
Conversation history
A user-facing record that allows you to return to an interaction.
Provider retention
Information kept by the service according to its operational, safety, contractual, legal, or other documented retention rules, whether or not it remains visible in ordinary history.
Enterprise storage can exist precisely because organizations need records
Researchers sometimes assume that an enterprise or institutional AI account should store less information than a consumer account. That is not necessarily how enterprise information governance works.
Organizations may need records for audit, eDiscovery, compliance, investigations, retention policies, or continuity. Microsoft, for example, states that prompts and responses in Copilot Chat under enterprise data protection are logged, retained, and can be available for audit, eDiscovery, and Microsoft Purview capabilities. It also states that these prompts and responses are not used to train foundation models under enterprise data protection.
This illustrates an important distinction: strong enterprise data protection can coexist with deliberate organizational retention. Retention itself is not evidence that information is being used to train an AI model.
Storage and model training are separate questions
A researcher who asks, "Does the provider save my prompt?" is not necessarily asking the same question as, "Will the provider use my prompt to train a model?"
Question
What it concerns
Why researchers should separate it
Is the prompt stored?
Whether a copy or record persists
Determines whether information remains after the immediate interaction
How long is it retained?
The duration of persistence
Affects exposure, governance, and deletion expectations
Who can access it?
User, administrator, provider, or other authorized access
Matters for confidentiality and institutional governance
Is it used for model improvement?
Whether eligible content contributes to model or service improvement processes
Storage does not automatically imply training
Can it be deleted?
User or organizational control over removal
Deletion rules and timing can differ from storage rules
The specific issue of whether research prompts can be used to train or improve AI models therefore needs its own answer rather than being inferred from retention alone.
Turning off model improvement does not necessarily stop prompt storage
This is one of the easiest settings to misunderstand. A control concerning model improvement normally answers a question about how eligible content may be used. It does not necessarily answer whether the conversation remains in history or is otherwise retained.
OpenAI explicitly states that turning off "Improve the model for everyone" prevents new conversations from being used to train its models, but regular chats can still appear in chat history. Researchers should therefore read the purpose of each control literally rather than assuming that a privacy-related switch governs every aspect of data handling.
Deleting a prompt can involve a retention window
A delete button can initiate a deletion process rather than guarantee instantaneous removal from every system.
OpenAI currently states that deleting a saved ChatGPT conversation removes it from the account view immediately and schedules it for permanent deletion from its systems within 30 days, unless the conversation has already been de-identified and disassociated from the account or longer retention is required for security or legal obligations.
Other providers and organizational systems can have different arrangements. For research involving sensitive information, the relevant question is therefore not merely "Can I delete it?" but "What does deletion mean under this service's current policy?"
Institutional administrators may control retention
If you use an institutionally managed AI account, your personal settings may not be the only settings that matter. Workspace administrators may configure retention, compliance, access, or other controls depending on the service.
Google notes, for example, that Gemini Apps activity settings for work or school accounts can be controlled by the Google Workspace administrator. Microsoft provides organizational retention and compliance mechanisms for Copilot interactions. Researchers working through institutional accounts should therefore check local configuration rather than assuming that consumer documentation describes their environment.
Storage location and retention duration are different questions
"Where is my prompt stored?" and "How long is my prompt stored?" are also distinct. Enterprise services may make contractual commitments about data residency, service boundaries, encryption, or organizational control while separately defining retention periods.
For highly regulated or restricted research, both may matter. A project may impose requirements about approved systems, geographic processing locations, institutional control, or retention schedules. Knowing only that the provider eventually deletes a prompt may therefore be insufficient.
Watch Out
Do not upload confidential research information first and investigate the retention policy afterward. Once the prompt has been submitted, the disclosure has already occurred, even if you subsequently delete the conversation.
Third-party features can have different retention rules
An AI interface may send information to another service through actions, plugins, connectors, web search, or other integrations. The receiving service may then apply its own retention practices.
OpenAI, for example, states that data sent to third parties through GPT actions is governed by the recipient's privacy policy and may be retained longer than OpenAI's Temporary Chat retention period. This means that selecting a temporary mode in the main AI interface does not automatically impose the same retention rule on every external service involved.
To understand the broader sequence, it helps to consider the full lifecycle of information entered into an AI system rather than examining storage in isolation.
04 · A Practical Example
A Prompt Can Be Stored Even When It Is Not Used for Training
Hypothetical Example
A university researcher uses an institutionally managed AI service
A researcher uses an AI assistant provided through the university and asks it to summarize a non-sensitive project document. The institution's agreement states that prompts are not used to train foundation models. The researcher interprets this as meaning that no record of the prompt exists after the response is generated.
Training question
The applicable service commitment establishes that the interaction is not used to train the relevant foundation models.
Storage question
The service can nevertheless retain the prompt and response as interaction records under its organizational data-handling arrangements.
Access question
Depending on the platform and institutional configuration, authorized administrators may have compliance, audit, retention, or eDiscovery capabilities.
Research implication
The researcher should evaluate storage and institutional access separately from model training when deciding what material is appropriate to submit.
The apparent contradiction disappears once the questions are separated. "Not used to train the model" does not mean "not stored."
06 · What This Means for You
Assume Persistence Until You Verify Otherwise
For ordinary public questions, prompt retention may have little practical consequence. The calculation changes when your prompt contains information that should not persist outside an approved research environment.
A simple retention check
If your prompt contains only public or genuinely non-sensitive information
Retention may present relatively little confidentiality concern, although applicable terms and institutional rules still matter.
If your prompt contains unpublished research
Check retention, deletion, model-improvement settings, ownership, and any institutional or collaborator restrictions before submission.
If your prompt contains confidential, identifiable, restricted, or third-party information
Do not rely on assumptions about short retention or privacy settings. Establish that the service and its retention arrangements are approved for the information concerned.
If you cannot establish the retention arrangement
Keep the sensitive material out of the prompt until you can verify the policy or use an appropriately approved alternative.
This is particularly important for unpublished research entered into public AI tools . A prompt can contain enough of an idea, method, finding, or document to create a meaningful disclosure even without uploading the complete research file.
07 · A Quick Checklist
Check Prompt Retention Before Submitting Sensitive Research
Before entering non-public research into a prompt, check:
Identify whether you are using a consumer, enterprise, education, API, temporary, or institutionally managed AI service.
Find the provider's current documentation describing prompt and conversation retention for that specific service.
Determine whether the prompt appears in persistent conversation history or other interaction records.
Check the applicable retention period and whether your organization can configure it.
Determine separately whether stored prompts can be used for model or service improvement.
Check who may have authorized access to retained prompts, including organizational administrators where relevant.
Verify the deletion process, timing, and documented exceptions rather than relying only on the presence of a delete button.
Keep confidential material out of the service if its retention arrangements are incompatible with your research obligations.
09 · The Bottom Line
Your Research Prompt May Persist After the Answer Appears
The Bottom Line
AI providers can store research prompts, but whether they do so, for how long, and under what controls depends on the specific service, account, settings, organizational configuration, and applicable terms.
Do not infer retention from the interface or from model-training settings. Before placing sensitive research in a prompt, verify storage, retention, access, deletion, and model-improvement arrangements separately. If those arrangements are unclear or incompatible with your obligations, keep the information out.
11 · Cite this Guide
How to Cite This Guide
This guide is intended to be read, shared, and used in research, teaching, and academic work. If you draw on its ideas, explanations, or other content, please acknowledge the source by citing the guide. Doing so gives appropriate credit and helps your readers locate the original resource.
Recommended (Field Guide)
APA
MLA
Chicago
Copy Citation