Home / AI Service Directory / Hugging Face

Hugging Face

Hugging Face · Model API · US · huggingface.co

Last verified 2026-09-16
Entry services/hugging-face.yaml
Training on your data (default tier)
Not stated; the privacy policy does not describe using user content for model training
Retention
As long as necessary to deliver the Services; no fixed period stated
Data residency
Servers in the United States; data may be processed in any country where the company has facilities

Vendor data-handling terms

Training on your data (default tier)
Not stated; the privacy policy does not describe using user content for model training

The Hugging Face privacy policy checked on the date below covers account and usage data. It does not state that content uploaded to the Hub or sent to inference endpoints is used to train models. Hub content is public or private according to the repository's own visibility setting.

not stated by vendor
Retention
As long as necessary to deliver the Services; no fixed period stated
“We retain your Information for as long as necessary to deliver the Services, to comply with any applicable legal requirements, to maintain security and prevent incidents and, in general, to pursue our legitimate interests.”
checked 2026-09-16
Hugging Face Privacy Policy
Data residency
Servers in the United States; data may be processed in any country where the company has facilities
“The Company and its servers are located in the United States. / Personal Information collected by the Services may be stored and processed in the United States or any other country in which the Company or its affiliates, subsidiaries or agents maintain facilities.”
checked 2026-09-16
Hugging Face Privacy Policy, Location of processing and data transfers

Domains and endpoints

observed means seen in Unseen deployments; vendor-documented means listed by the vendor. Vendors do not publish complete lists.

HostRoleSource
api-inference.huggingface.coappobserved
api.huggingface.coapiobserved
huggingface.coappobserved

Assessment

Hub and Spaces: mediumInference API and Endpoints: unrated

Reasoning: The exposure on the Hub is what gets uploaded: models, datasets, and code pushed to a public repository are public, and the platform runs on US infrastructure with no fixed retention period. The policy makes no training commitment either way, so the entry records that as not stated rather than assuming. Enterprise Hub and dedicated inference terms are separate and not yet verified.

Flags: GDPR Chapter V (US processing) · Public repositories by default for uploads · Assessed 2026-09-16. The assessment is Unseen's; the terms above are the vendor's.

Changelog

  • 2026-09-16HuggingChat entry merged into this one; it ran on huggingface.co under the same privacy policy.
  • 2026-09-16Documented. Retention and transfer terms verified against the Hugging Face privacy policy; training use is not stated by the vendor.
  • 2026-09-15Listed from the Unseen catalogue with observed domains.

Corrections

Pull request on GitHub, or the form below. Changes are reviewed and recorded in the changelog.

Edit on GitHub