Amazon Alexa Plus

Amazon explicitly states it uses customer data to train machine learning models. The privacy notice indicates 'We use a variety of data sources to train these models and provide responses to your requests, including Amazon content, content from the use of our services, content licensed from third parties, and content publicly available on the internet.' This includes voice interactions, text inputs, and user-generated content.

“Alexa uses machine learning models to interpret and provide responses to your requests. We use a variety of data sources to train these models...including Amazon content, content from the use of our services”

The license granted is extremely broad. By using Alexa, users consent to Amazon recording, processing, and retaining 'Alexa Interactions' which includes voice inputs, text, music playlists, shopping lists, and information from third-party services. Amazon can use this data for service improvement, personalization, and machine learning without explicit per-use consent.

“Amazon records, processes, and retains Alexa Interactions and other information from your account...in the cloud to provide, personalize, and improve our services.”

Amazon shares data extensively with third parties. The terms explicitly state: 'If you use a Third-Party Service, we may exchange related information with that service, such as your ZIP code...the content of your requests.' Additionally, Amazon shares payment information, contact details, and account information with third-party service providers and payment processors.

“If you use a Third-Party Service, we may exchange related information with that service, such as your ZIP code when you ask for the weather...the content of your requests, which may include text transcripts.”

While users can delete voice recordings and visual IDs through settings, the default is indefinite retention. The terms state data is retained 'in the cloud' to improve services with no specified retention period. Users must actively manage deletion, and other interaction data (transcripts, shopping history, contact information) retention periods are not clearly specified.

“Amazon records, processes, and retains Alexa Interactions and other information from your account...You can delete your voice ID or turn off personalization...You can delete your visual ID...at any time”

The terms do not explicitly grant users ownership of their generated content or outputs. Amazon retains broad rights to use user-generated content (voice recordings, messages, interactions) for service improvement and machine learning. Users cannot claim ownership of Alexa's responses or outputs, which are based on Amazon's models and training data.

“Alexa's machine learning models may produce content that is based, in part, on patterns in data used to train these models. Alexa may provide responses that do not represent Amazon's views.”

Amazon mentions some compliance frameworks but lacks comprehensive certification disclosure. The privacy notice references 'EU-US Data Privacy Framework, UK Extension, and Swiss-US Data Privacy Framework' and states they 'follow the Payment Card Industry Data Security Standard (PCI DSS)' for credit cards. However, no mention of SOC2, HIPAA, or ISO certifications specific to Alexa services.

“We follow the Payment Card Industry Data Security Standard (PCI DSS) when handling credit card data. Amazon.com, Inc. participates in the EU-US Data Privacy Framework, the UK Extension”