Perplexity Computer Privacy Review: Safe for Client Work?

Bywarren_admin

Short answer: Perplexity Computer can now run scheduled Automations across your Gmail, Outlook, Slack and Linear with long-term memory, and on Free, Pro and Max plans your activity feeds model training unless you switch it off. Our verdict is USE WITH CAUTION for client work. Policy reviewed October 2026, twelve days after Automations launched on September 29. Perplexity Computer is the company’s agent workspace: you describe a recurring job once, such as monitoring sources, compiling a weekly report or drafting follow-ups, and an agent repeats it on a schedule or when a trigger fires. It remembers earlier runs and builds on them. For a solo consultant, that means client emails, project tickets and research briefs can sit inside a system that is always on and always learning about you. Below is what the documents say, measured against how we vet privacy claims.

What Perplexity Computer does with your data

Privacy at a glance

Privacy dimensionPerplexity Computer’s answer
Trains on your data?Yes by default on Free, Pro and Max
Training opt-out“AI data retention” toggle, future data only
Data retentionThreads kept until deleted; uploads purged after 30 days
Third-party sharingOutside AI model vendors, cloud hosts, ad partners
Storage regionUnited States; no region choice for individuals
Enterprise-team tierNo training, 7-day file purge, custom retention
Agent memoryBrain memory persists across tasks until you edit it

A note on sourcing: Perplexity’s legal pages returned a Cloudflare block (HTTP 403) to our fetch on October 11, 2026, so this review relies on five independent analyses that quote or paraphrase the current Privacy Notice, last updated July 2, 2026, plus Perplexity’s public product timeline.

Training. Individual plans ship with a setting called AI data retention switched on. While it stays on, your searches, prompts and answers can be used to improve Perplexity’s models (per coverage in Proton’s Perplexity policy explainer and the Strac data-privacy analysis, citing Perplexity’s privacy policy as of July 2026). Turning it off only affects new activity. Anything already collected stays in the training pipeline, and the switch does nothing when you use Perplexity while logged out (per coverage in AskSafely and Fast.io, citing Perplexity’s privacy policy as of July 2026).

Retention. Threads and Sessions remain in your Library until you delete them by hand. Uploaded files and images are purged after roughly 30 days on personal accounts and about 7 days on Enterprise workspaces. The Notice sets no fixed retention period for other records, keeps backups, and limits deletion to cases where the law requires it (per coverage in the terms.law policy review, citing Perplexity’s privacy policy as of July 2, 2026).

Who sees it. Complex queries are routed to outside model vendors such as OpenAI and Anthropic, whose models now power Computer. Data is encrypted in transit but not end to end, staff can access content in limited cases, and storage sits in the US. The Notice also allows identifiers and usage data to flow to advertising partners, while stating that data is not sold for money.

What Automations add. Each automation draws on Brain, the memory layer launched in June, plus your connected apps. A task that reads your inbox every morning builds a growing profile of your clients without any new prompt from you.

What this means for solo freelancers

The risk is not one leaked prompt. It is the combination of default training, open-ended memory and an agent that keeps reading your accounts after you close the tab. Based on the policy as written, here is where that combination can bite a one-person business.

Scenario 1: the daily client digest. You build an automation that scans Gmail each morning and summarizes new requests. Every client email it touches becomes processed content, and if you never flipped the training toggle, that content can feed model improvement on a Pro plan. A client under NDA never agreed to that use. The opt-out does not reach backward, so a week of digests before you notice cannot be pulled back out.

Scenario 2: memory that outlives the contract. Brain stores facts it learns from completed tasks: project names, rates, deadlines, who signs off on what. When the engagement ends, those facts stay in memory until you find and remove them. If a former client later asks you to confirm their data is gone, you would need to audit memory entries, threads and Projects one by one, and the Notice only commits to deletion where the law requires it.

Scenario 3: the EU client and the processor question. A consumer Pro account is governed by the consumer Privacy Notice, which states that it does not cover Enterprise and API data, where Perplexity acts as a processor. On a personal plan, Perplexity is deciding how your data is used. Based on the policy as written, that leaves you without a data processing agreement to show an EU client whose personal data passes through your automations. Our guide to data processing agreements covers what to request before you connect client inboxes.

Scenario 4: an agent that acts. Automations can draft and send follow-ups through connected apps. A misread trigger can send a draft to the wrong person, and the outgoing message then carries client details outside your control.

How to use it safely

If you keep Perplexity Computer in your stack, configure it before the first automation runs:

  1. Turn off training. Open Settings, go to Preferences, and switch off AI data retention. Do it on every device you sign in from, and never run work queries while logged out, because logged-out use always falls under the training default.
  2. Set connectors to Always ask. Perplexity added an approval control in August that pauses each tool action until you confirm it. Turn it on for Gmail, Outlook and Slack so no message leaves without your click.
  3. Connect the narrowest account possible. Create a dedicated work mailbox or a filtered label for automations rather than linking your full personal inbox. Leave client folders, contract archives and invoices out of scope.
  4. Exclude sensitive folders from local indexing. On Personal Computer, remove directories holding client deliverables, SSH keys or financial records from indexed paths.
  5. Prune memory monthly. Open the Customize panel, review what Brain has stored, and delete entries tied to finished projects. Delete the matching threads and Projects too.
  6. Use Incognito for one-off sensitive questions. Incognito chats skip your Library and expire after about a day, though Perplexity still processes what you type.
  7. Redact before you paste. Replace client names, rates and identifiers with placeholders in any brief you hand the agent.

For a deeper look at how other always-on agents handle the same trade-offs, compare our OpenAI Dots review.

Privacy-friendlier alternatives

None of these replicate every Computer feature, but each covers a core freelance use case with a tighter data posture. Quick picks:

  • Research and drafting: Lumo by Proton
  • Cited answers from several models: Kagi Assistant
  • Scheduled automations on your own hardware: n8n with Ollama

Lumo by Proton is the closest swap for research questions and drafting. Proton states that Lumo keeps no logs of your chats and never trains on them, and it is run by a Swiss company outside US jurisdiction. There is a free tier, and Lumo Plus costs around $9.99 per month billed yearly. Best for consultants who want an AI writing and research helper without a training default to remember to switch off. It does not run scheduled agents, which is a feature here: nothing reads your inbox unless you paste it in.

Kagi Assistant gives you search-grounded answers from several frontier models inside a paid, ad-free search engine. Kagi’s business model is subscriptions rather than advertising, and it does not offer an ad-partner pipeline for your queries. Plans start at $5 per month, the Professional tier at $10 per month includes the Assistant with a larger allowance, and Ultimate at $25 per month unlocks Research mode and flagship models. Best for researchers, writers and analysts who mostly use Perplexity for cited answers rather than automation.

n8n with Ollama covers the automation side. n8n is a workflow tool you can self-host for free, and Ollama runs open-weight models on your own machine. Together they handle a scheduled inbox digest or report without your client data ever reaching a third-party model vendor. Expect an afternoon of setup and a laptop or small server with enough memory. Best for technical freelancers and developers who want Automations-style workflows and full control over where data lives.

If you also store client credentials for connected apps, a password manager such as Bitwarden (free tier, low-cost premium plan) lets you issue separate logins for an automation account instead of reusing your main password.

The verdict

ATP Privacy-Vetted: USE WITH CAUTION

Use with caution: Perplexity Computer is workable for client-adjacent research and drafting once you disable AI data retention, set every connector to Always ask, and keep client inboxes out of scheduled automations. The policy posture is weaker than its enterprise sibling: training is on by default for individual plans, the opt-out never reaches backward, memory and threads persist until you clean them, ad partners receive usage data, and personal plans come with no processing agreement. Upgrade to Enterprise, or keep NDA and regulated work out entirely.

Frequently asked questions

Does Perplexity train on my prompts and automation results?

On Free, Pro and Max plans, yes by default. The AI data retention setting is enabled when you sign up, and while it stays on your searches and agent interactions can be used to improve Perplexity’s models. You can turn it off under Settings, Preferences, but the change only applies to future activity. Enterprise Pro and Enterprise Max workspaces are excluded from training automatically, according to every analysis we reviewed.

Is Perplexity Computer GDPR-friendly for EU client work?

Based on the policy as written, personal plans are covered by a consumer Privacy Notice in which Perplexity decides how data is used, with storage in the United States and no region choice. Perplexity offers a processor role only for Enterprise and API customers. If an automation will touch an EU client’s personal data, request an Enterprise agreement with a data processing addendum first, or keep that client’s data out of Computer.

Can I use Perplexity Computer for HIPAA data?

Based on the policy as written, not on personal plans. None of the sources we reviewed describe a business associate agreement for Free, Pro or Max, and queries can be routed to outside model vendors. Therapists, health coaches and medical consultants handling protected health information should keep patient details out of prompts, memory and connected inboxes entirely, and ask Perplexity’s sales team directly about Enterprise terms before any regulated use.

How long does Perplexity keep my data?

Threads and Sessions stay in your account until you delete them yourself. Uploaded files and images are purged after about 30 days on personal accounts and about 7 days on Enterprise workspaces. Brain memory persists until you edit or remove entries. Account deletion takes around 30 days, and the Notice reserves the right to keep some records for legal, dispute and other business purposes.

Does turning off AI data retention stop Automations from reading my email?

No. The toggle controls whether your data is used for training, not what the agent can access. A connected Gmail or Outlook account remains readable by any automation you create. To limit access, disconnect apps you do not need, connect a dedicated work mailbox, and set connector approvals to Always ask so each action waits for your confirmation.

Sources

Reviewed by Jérémy, founder of AidTaskPro and GreenBudgetHub. Based in central France. Privacy posture sourced from public policies and vendor documentation as of October 11, 2026.

Get Your Free Cybersecurity Checklist

Protect your digital life in 5 minutes. Free checklist + weekly productivity & security tips.

Similar Posts