Coze
ByteDance · Agent platform · CN · www.coze.com
services/coze.yamlVendor data-handling terms
“To understand how you use the Platform, including reviewing user feedback, to conduct product development, and to monitor, improve and develop the Platform and to train and improve our technology, such as our machine learning models and algorithms.”
“We retain information for as long as necessary to provide the Platform and for the other purposes set out in this Privacy Policy.”
“We store the information we collect in secure servers located in the United States and Singapore.”
Domains and endpoints
observed means seen in Unseen deployments; vendor-documented means listed by the vendor. Vendors do not publish complete lists.
| Host | Role | Source |
|---|---|---|
| api.coze.com | api | observed |
| coze.com | app | observed |
Assessment
Reasoning: A bot-building platform from ByteDance: prompts, knowledge bases, and the bots built on it are used for model training with no opt-out described, stored in the United States and Singapore. Bots are typically wired to internal documents and connected accounts, which multiplies what leaves.
Flags: Training on content with no opt-out · GDPR Chapter V (US and Singapore storage) · Connected accounts via OAuth · Assessed 2026-09-16. The assessment is Unseen's; the terms above are the vendor's.
Changelog
- 2026-09-16Documented. Training, retention, and storage terms verified against the Coze privacy policy.
- 2026-09-15Listed from the Unseen catalogue with observed domains.
Corrections
Pull request on GitHub, or the form below. Changes are reviewed and recorded in the changelog.