data report card

Data Report Card · Qwen (Alibaba Cloud)

Qwen (Alibaba Cloud) Data Report Card

D
4/12 Policy grade · AI assistant · Qwen Studio · Alibaba Cloud (Singapore) Private Limited
Help me make a request →
Reviewed Jun 2026  ·  some cells re-verified Aug 2026 · policies are checked weekly for changes  ·  stated — every cell is read from Qwen (Alibaba Cloud)'s published policy; none has been tested (run by us) yet.
1Accessstated
Rights are jurisdiction-conditional — “Depending on the jurisdiction in which you are residing, you may have the right to … access”; some rights are exercisable in-account, the rest by emailing the Data Protection Officer. No portal, and no stated scope or timeline.
Qwen Privacy Policy — §X Your rights · accessed Aug 2026 ↗
0Portabilitystated
No export tool is documented anywhere. Portability appears only as a conditional legal right — “if required by applicable law and technically feasible, you may have the right to request that we provide your personal data in a structured, commonly used, and machine-readable format” — exercised by contacting Qwen, with no product path. Naming a format is not offering an export; legal-request-only is the lowest rung, consistent with DeepSeek at 0.
Qwen Privacy Policy — §X Your rights · accessed Aug 2026 ↗
Connects to apps: No. The Qwen API platform serves model inference; there is no consumer-data OAuth API, and the Terms of Service bar automated retrieval of your own content from the Services. Qwen API Platform · Terms of Service §II · accessed Aug 2026 ↗
1Frictionstated
Account deletion is self-serve — “you may choose to delete your account yourself from the Qwen Settings page” — while every other right runs through an email request answered “within the period required by law”, with no stated timeline and no form. Withdrawing consent may still leave Qwen “unable to continue providing our products or services”, with remedies reserved, but that is standard conditional wording rather than a trap.
Qwen Privacy Policy — §X Your rights / §XII How to contact us · accessed Aug 2026 ↗
1Deletionstated
Account deletion exists and erasure is a listed jurisdiction-conditional right, but “In certain circumstances, we may need to retain your personal data after your account has been deleted”, and no purge timeline is stated.
Qwen Privacy Policy — §VII Data Retention Period · accessed Aug 2026 ↗
1Sells / sharesstated
The policy contains no statement that Qwen does not sell or share data for advertising — and none that it does. Disclosure recipients include group companies, service providers, analytics providers, and “any business partner, investor, assignee or transferee (actual or prospective)”. Silence grades to the middle: no no-sell commitment, no stated advertiser sharing.
Qwen Privacy Policy — §V How we share or disclose your personal data · accessed Aug 2026 ↗
0Trains AIstated
Qwen “may use de-identified user content and feedback data to train and improve” its AI models by default, and the Service Agreement uses content “to develop other products and Services, including to train models”. The policy adds one limit — “we will not use your raw input data to directly train AI models” — but that narrows the scope, not your control: no opt-out is offered anywhere, in any jurisdiction. Trains by default with no opt-out is the lowest rung (R4).
Qwen Privacy Policy — §II How we use your personal data / §IV How we process your input data · accessed Aug 2026 ↗
Re-verified 2026-09-18 against the replacement Privacy Policy (effective September 7, 2026) and Service Agreement (effective September 10, 2026), which superseded the May 19, 2026 documents this company was first graded against on 2026-08-30. The operating entity changed: Qwen is now provided by NTH POWER GLOBAL TECH SINGAPORE PTE. LTD., with Alibaba Cloud (Singapore) Private Limited named as technology provider, which “will promptly delete the relevant user input data after content generation is complete”. Under the superseded documents the operator was Alibaba Cloud (Singapore) Private Limited; the policy states personal data is stored and processed “in Singapore and Mainland China”, with corporate-group access from both. Beyond the graded cells, the ToS takes a perpetual, transferable, sub-licensable licence to “publish … and/or distribute any User Content” plus your username, image and likeness, with privacy- and publicity-rights waivers — recorded here because it falls outside the Sells cell’s advertising scope. The Memory feature retains details from past conversations; voice/video input “may be considered biometric identifiers”. This company also publishes its models as open weights. Running them yourself, or through another host, is not governed by this policy — this grade describes Qwen's own service. All cells stated, not tested.

Events

Breaches, policy changes, and export-format changes we’ve recorded at Qwen (Alibaba Cloud) — other parties’ actions, alongside the enforcement record above. An event never changes a grade by itself. All events →

18 Sep 2026Qwen replaced its Privacy Policy, effective 7 September 2026, and its Terms of Service, now a Service Agreement, effective 10 September 2026. The operating entity changed: the service is now provided by NTH POWER GLOBAL TECH SINGAPORE PTE. LTD., with Alibaba Cloud (Singapore) Private Limited named as technology provider that deletes user input data once generation is complete. Account deletion is now self-serve from the Settings page, and the policy states that raw input data will not be used to directly train AI models, while training on de-identified user content continues by default with no opt-out. The clause barring retrieval of your own content in an automated manner is gone from the Service Agreement.policy change
On the events page →

Grade history

Every change to this company’s grade since it was first published, and why. All grade changes →

18 Sep 2026Friction & speedscore

Score moved 1 from 0. Qwen replaced its Privacy Policy (effective September 7, 2026) and Terms of Service, now a Service Agreement (effective September 10, 2026). The sentence the lowest rung rested on — that withdrawing consent could leave you “in breach of your contractual obligations” — is gone from the replacement policy, and account deletion is now self-serve from the Qwen Settings page. What remains is an email route with no stated timeline, answered “within the period required by law”, plus standard conditional wording about service loss. That is the moderate rung, matching DeepSeek at 1 on the same shape: self-serve deletion in settings, every other right by email with no stated timeline. Consistency note (R7): before this change Qwen was the only company of 72 scored at the lowest rung on this dimension.

18 Sep 2026Portabilitysource

Score unchanged (0). Half the stated rationale no longer exists: the Terms of Service clause barring retrieval of your own content “in an automated manner” is absent from the replacement Service Agreement, so the citation moves from the Terms to the Privacy Policy rights section. The replacement policy now names a “structured, commonly used, and machine-readable format”, but only as a right available “if required by applicable law and technically feasible”, with no export tool or request form documented anywhere. Naming a format is not offering an export; legal-request-only remains the lowest rung, consistent with DeepSeek at 0 on the same facts.

18 Sep 2026Trains AI on your datanote

Score unchanged (0). The replacement documents drop the clause under which users “expressly authorise and consent” to machine-learning training, and add one limit — “we will not use your raw input data to directly train AI models”. Training on de-identified user content and feedback continues by default, and no opt-out is offered in any jurisdiction, so the limit narrows scope rather than granting control. R4 turns on the default and the presence of an opt-out, not on which subset is trained on.

18 Sep 2026Accesssource

Score unchanged (1). Citation corrected: the replacement Privacy Policy is restructured and the rights section is now §X, not §IX. The underlying facts are unchanged — rights remain jurisdiction-conditional, with no portal and no stated timeline.

18 Sep 2026Deletionsource

Score unchanged (1). Citation corrected to §VII Data Retention Period in the replacement Privacy Policy; the former §VI no longer exists. Retention after account deletion is still contemplated with no stated purge timeline, which caps the cell at the moderate rung (R2).

18 Sep 2026Sells / shares your datasource

Score unchanged (1). Citation corrected to §V How we share or disclose your personal data in the replacement Privacy Policy; the former §IV no longer exists. The policy still carries no statement that Qwen does not sell or share for advertising, and none that it does, so silence continues to grade to the middle.

How to request your data from Qwen (Alibaba Cloud)

  1. Go to https://qwen.ai/privacypolicy — Qwen (Alibaba Cloud)'s data-request entry point.
  2. Some rights in-account; everything else via DPO_qwenlm-intl@service.alibaba.com — no portal, no export tool.
  3. Expected wait: email requests answered "in accordance with applicable data protection laws"; no stated response timeline — Qwen (Alibaba Cloud)'s stated turnaround (we haven't independently timed a request yet).
  4. No self-serve option, or want a formal request? Contact Qwen — Data Protection Officer: mailto:DPO_qwenlm-intl@service.alibaba.com.

These steps reflect Qwen (Alibaba Cloud)'s documented process as of Jun 2026. The wait time is the company's stated figure, not yet independently measured by us.