Skip to content

Privacy Policy changed OpenAI, Jan 1, 2026

OpenAI · Jan 1, 2026 · 25 added, 29 removed · found in an Internet Archive capture

  1. Removed: If you live in the European Economic Area (EEA) or Switzerland, OpenAI Ireland Limited, with its registered office at 1st Floor, The Liffey Trust Centre, 117-126 Sheriff Street Upper, Dublin 1, D01 YC43, Ireland, is the controller and is responsible for the processing of your Personal Data as described in this Privacy Policy.
  2. Removed: If you live in the UK, OpenAI OpCo, LLC, with its registered office at 1960 Bryant Street, San Francisco, California 94110, United States, is the controller and is responsible for the processing of your Personal Data as described in this Privacy Policy.
  3. Added: To provide, analyze, and maintain our Services, for example to respond to your questions for ChatGPT;
  4. Removed: To provide analyze, and maintain our Services, for example to respond to your questions for ChatGPT;
  5. Added: Depending on where you live, you may have certain statutory rights in relation to your Personal Data. For example, you may have the right to:
  6. Removed: You have the following statutory rights in relation to your Personal Data:
  7. Added: Update or correct your Personal Data.
  8. Removed: Rectify or update your Personal Data.
  9. Added: Object to how we process your Personal Data.
  10. Added: Lodge a complaint with your local data protection authority.
  11. Added: You can exercise some of these rights through your OpenAI account. If you are unable to exercise your rights through your account, please submit your request through privacy.openai.com ⁠ (opens in a new window) or to dsar@openai.com ⁠ . You can contact our data protection officer at privacy@openai.com⁠ ⁠ .
  12. Added: A note about accuracy: Services like ChatGPT generate responses by reading a user's request and, in response, predicting the words most likely to appear next. In some cases, the words most likely to appear next may not be the most factually accurate. For this reason, you should not rely on the factual accuracy of output from our models. If you notice that ChatGPT output contains factually inaccurate information about you and you would like to request a correction or removal of the information, you can submit these requests through privacy.openai.com ⁠ (opens in a new window) or to dsar@openai.com ⁠ , and we will consider your request based on applicable law and the technical capabilities of our models.
  13. Added: For information on how to exercise your rights with respect to data we have collected from the internet to train our models, please see this help center article ⁠ (opens in a new window) .
  14. Added: OpenAI processes your Personal Data for the purposes described in this Privacy Policy on servers located in various jurisdictions, including processing and storing your Personal Data in our facilities and servers in the United States. While data protection law varies by country, we apply the protections described in this policy to your Personal Data regardless of where it is processed, and only transfer that data pursuant to legally valid transfer mechanisms
  15. Removed: Lodge a complaint with your local data protection authority (see below).
  16. Removed: You have the following rights to object:
  17. Removed: Object to our processing of your Personal Data for direct marketing at any time.
  18. Removed: Object to how we process your Personal Data when our processing is based on legitimate interests.
  19. Removed: You can exercise some of these rights through your OpenAI account. If you are unable to exercise your rights through your account, please submit your request through privacy.openai.com ⁠ (opens in a new window) or send it to dsar@openai.com ⁠ .
  20. Removed: We hope that we are able to address any questions or concerns you may have. If you have any unresolved complaints with us or our Data Protection Officer, you can reach out to the Irish Data Protection Commission ⁠ (opens in a new window) as our lead supervisory authority, or your local supervisory authority ⁠ (opens in a new window) . For any unresolved complaints relating to the UK you can reach out to the Information Commissioner's Office ⁠ (opens in a new window) and for Switzerland, to the Federal Data Protection and Information Commissioner ⁠ (opens in a new window) .
  21. Removed: A note about accuracy: Services like ChatGPT generate responses by reading a user's request and, in response, predicting the words most likely to appear next. In some cases, the words most likely to appear next may not be the most factually accurate. For this reason, you should not rely on the factual accuracy of output from our models. If you notice that ChatGPT output contains factually inaccurate information about you and you would like to request a correction or removal of the information, you can submit these requests through privacy.openai.com or to dsar@openai.com ⁠ , and we will consider your request based on applicable law and the technical capabilities of our models.
  22. Removed: For information on how to exercise your rights with respect to data we have collected from the internet to train our models, please see this notice ⁠ (opens in a new window) .
  23. Added: Some U.S. state privacy laws require specific disclosures. The following table provides additional information about the categories of Personal Data we collect and how we use and disclose that information. You can read more about the Personal Data we collect and where we collect it from in "Personal Data we collect" above, how we use Personal Data in "How we use Personal Data" above, and how we retain Personal Data in "Security and Retention" below.
  24. Added: We collect the following information, as described above:
  25. Added: We use this information for the following purposes, as described above:
  26. Added: We may disclose this information in the following circumstances, as described above:
  27. Added: Depending on where you live and subject to applicable exceptions, you may have the following privacy rights in relation to your Personal Data:
  28. Added: The right to know information about our processing of your Personal Data, including the right to access your Personal Data, often in a portable format;
  29. Added: The right to request deletion of your Personal Data;
  30. Added: The right to correct your Personal Data; and
  31. Added: The right to be free from discrimination relating to the exercise of any of your privacy rights.
  32. Added: We don't "sell" Personal Data or "share" Personal Data for cross-contextual behavioral advertising, and we do not process Personal Data for "targeted advertising" purposes (as those terms are defined under state privacy laws). We also don't process sensitive Personal Data for the purposes of inferring characteristics about a consumer.
  33. Added: Exercising Your Rights. You can exercise privacy rights described in this section by submitting a request through privacy.openai.com ⁠ (opens in a new window) or to dsar@openai.com ⁠ . Review our California privacy rights reporting ⁠ .
  34. Added: Verification. In order to protect your Personal Data from unauthorized access, change, or deletion, we may require you to verify your credentials before you can submit a request to know, correct, or delete Personal Data. If you do not have an account with us, or if we suspect fraudulent or malicious activity, we may ask you to provide additional Personal Data for verification. If we cannot verify your identity, we will not be able to honor your request.
  35. Added: Authorized Agents. You may also submit a rights request through an authorized agent. If you do so, the agent must present signed written permission to act on your behalf and you may also be required to independently verify your identity with us. Authorized agent requests can be submitted to dsar@openai.com.
  36. Added: Appeals. Depending on where you live, you may have the right to appeal a decision we make relating to requests to exercise your rights. To appeal a decision, please send your request to dsar@openai.com ⁠ .
  37. Added: 9. Changes to the privacy policy
  38. Removed: Where necessary to perform a contract with you, such as processing a user's prompts to provide a response.
  39. Removed: See here ⁠ (opens in a new window) for more specific information on the data used to train our models.
  40. Removed: Where necessary for our legitimate interests and those of third parties and broader society, including in developing, improving, or promoting our Services, such as when we train and improve our models. See here ⁠ (opens in a new window) for more information.
  41. Removed: Where necessary to perform a contract with you, such as processing your contact information to send you a technical announcement about the Services.
  42. Removed: Your consent when we ask for it to process your Personal Data for a specific purpose that we communicate to you, such as processing your contact information to send you certain forms of marketing communications.
  43. Removed: Where necessary to comply with a legal obligation.
  44. Removed: Where we are not under a specific legal obligation, where necessary for our legitimate interests and those of third parties, including in protecting our Services from abuse, fraud, or security risks, such as processing data from security partners to protect against fraud, abuse and security threats in our Services.
  45. Removed: Where necessary to comply with a legal obligation, such as retaining transaction information to comply with record-keeping obligations.
  46. Removed: Where we are not under a specific legal obligation, where necessary for our legitimate interests and those of third parties and broader society, including in protecting our or our affiliates', users', or third parties' rights, safety, and property, such as analyzing log data to identify fraud and abuse in our Services.
  47. Removed: OpenAI processes your Personal Data on servers located outside of the EEA, Switzerland and the UK for the purposes described in this Privacy Policy. This includes processing and storing your Personal Data in our facilities and servers in the United States. While data protection law varies by country and these countries may not offer the same level of data protection as your home country, we apply the protections described in this policy to your Personal Data regardless of where it is processed. When transferring Personal Data outside of the EEA, Switzerland or the UK, we rely on the following transfer mechanisms to comply with applicable data protection law:
  48. Removed: We rely on the European Commission's adequacy decisions ⁠ (opens in a new window) pursuant to Article 45(1) GDPR when transferring your Personal Data to any country that has been considered to provide an adequate level of protection.
  49. Removed: For other jurisdictions, we rely on the Standard Contractual Clauses ("SCCs") as approved by the European Commission pursuant to Article 46(2)(c) GDPR and on the UK Data Transfer Addendum.
  50. Removed: For more information or to obtain a copy of the appropriate safeguards we have in place when transferring Personal Data, please contact us at privacy@openai.com ⁠ .
  51. Removed: 11. Changes to the privacy policy
  52. Added: Please contact support ⁠ (opens in a new window) if you have any questions or concerns not already addressed in this Privacy Policy.
  53. Removed: Please contact support ⁠ (opens in a new window) if you have any questions or concerns not already addressed in this Privacy Policy. Alternatively, you can write to us at privacy@openai.com ⁠ or the address above under Section 1 (Data Controller).
  54. Removed: You can contact our Data Protection Officer at dpo@openai.com ⁠ in matters related to Personal Data processing.
About this change
Page
openai.com/policies/privacy-policy/
Kind
Privacy policy
Text hash
32c6e1ac6dc1 to e0c8a0dbad60
Dated by
the first Internet Archive capture sampled that shows the new text; the change happened on or before this date

Terms changes by email

Mondays, only in weeks when a watched page changed.

Double opt-in. Unsubscribe any time.