Privacy Policy
128 of 144 blocks carry cards. 71 cards.
Updated: September 10, 2026
- This US policy version is dated September 10, 2026 Legal Rights & Agreement Rules
US privacy policy
([Previous version](https://openai.com/policies/us-privacy-policy/revisions/2026-05-18/))
For individuals in the European Economic Area, United Kingdom, and Switzerland, you can read [this version](https://openai.com/policies/eu-privacy-policy/) of our Privacy Policy.
- People in the EEA, UK and Switzerland are pointed to a separate privacy policy Legal Rights & Agreement Rules
At OpenAI, our mission is to ensure that artificial general intelligence benefits everyone. We build tools like ChatGPT to help people learn, create, and solve problems. We at OpenAI (together with our affiliates, “OpenAI”, “we”, “our” or “us”) are committed to respecting your privacy and are strongly committed to keeping secure any information we obtain from you or about you. This Privacy Policy describes our practices with respect to personal data that we collect from or about you, and how we use it when you use our website, applications, and services (collectively, “Services”).
- The policy covers personal data from your use of OpenAI's website, apps and services Use & Processing
- OpenAI states a general commitment to respect privacy and keep information secure Security & Safeguards
This Privacy Policy does not apply to content that we process on behalf of customers of our business offerings, such as our API. Our use of that data is governed by our customer agreements covering access to and use of those offerings.
- Content processed for business customers, such as the API, is outside this policy Legal Rights & Agreement Rules
For information about how we collect and use training information to develop our language models that power ChatGPT and other Services, and your choices with respect to that information, please see this policy as well as [this help center article(opens in a new window)](https://help.openai.com/articles/7842364-how-chatgpt-and-our-language-models-are-developed).
- Training details and choices are in a separate help article, plus statements in this policy Use & Processing
- Your Content may be used to improve the Services, including training models, with an opt-out Use & Processing
1. Personal Data we collect
We collect personal data relating to you (“Personal Data”) as follows:
- OpenAI collects personal data you provide, data from your use, and data from other sources Data Access & Collection
Personal Data You Provide: We collect Personal Data if you create an account to use our Services or communicate with us as follows:
- OpenAI collects personal data you provide, data from your use, and data from other sources Data Access & Collection
Account Information: When you create an account with us, we will collect information associated with your account, including your name, contact information, account credentials, date of birth, payment information, and transaction history, (collectively, “Account Information”). Some of our Services may also allow you to upload a profile picture, a username, or other information as part of your Account Information.
- Creating an account means OpenAI collects your name, contact details, credentials, birth date and payment information Data Access & Collection
User Content: We collect Personal Data that you provide in the input to our Services (“Content”), including your prompts and other content you upload, such as [files(opens in a new window)](https://help.openai.com/articles/8555545-file-uploads-faq), [images(opens in a new window)](https://help.openai.com/articles/8400551-chatgpt-image-inputs-faq), [audio and video(opens in a new window)](https://help.openai.com/articles/8400625-voice-mode-faq), and data from [connected services(opens in a new window)](https://help.openai.com/articles/11487775-connectors-in-chatgpt), depending on the features you use. Some of our Services allow you to interact with other users, such as post, comment, or send messages, and we treat those interactions as Content, too.
- Your prompts, uploads and interactions with other users are collected as Content Data Access & Collection
- You can choose whether your Content is used to improve and train models; Temporary Chats are not used Use & Processing
- Table column 1: nine categories of personal data OpenAI says it collects Data Access & Collection
Communication Information: If you communicate with us, such as via email or our pages on social media sites, we may collect Personal Data like your name, contact information, and the contents of the messages you send (“Communication Information”).
- Messages you send to OpenAI, including by email or social media, are collected Data Access & Collection
Contact Data: If you choose to connect your device contacts, we upload information from your device address books and check which of your contacts also use our Services. If any of your contacts aren’t yet using our Services, we’ll update you if they sign up for our Services later. [Learn more(opens in a new window)](http://help.openai.com/articles/20001058) about connecting your contacts and [how we use uploaded contact information(opens in a new window)](http://help.openai.com/articles/20001059) of people who don’t use our Services.
- If you connect your device contacts, OpenAI uploads your address book and checks which contacts use its Services Data Access & Collection
- Table column 1: nine categories of personal data OpenAI says it collects Data Access & Collection
Other Information You Provide: We collect other information that you provide to us, such as when you participate in our events or surveys, or when you provide us or a vendor operating on our behalf with information to establish your identity or age (collectively, “Other Information You Provide”).
- Event, survey and identity or age verification information you provide is collected Data Access & Collection
Personal Data We Receive from Your Use of the Services: When you visit, use, or interact with the Services, we receive the following information about your visit, use, or interactions:
- OpenAI collects personal data you provide, data from your use, and data from other sources Data Access & Collection
Log Data: We collect information that your browser or device automatically sends when you use our Services. Log data includes your Internet Protocol address, browser type and settings, the date and time of your request, and how you interact with our Services.
- Browser and device information is collected automatically when you use the Services Data Access & Collection
Usage Data: We collect information about your use and activity across the Services, such as the types of content that you view or engage with, the features you use and the actions you take, when you submit feedback to a model response, the people with whom you interact, as well as your time zone, country, the dates and times of access, user agent and version, type of computer or mobile device, and your computer connection. For [Free(opens in a new window)](https://chatgpt.com/plans/free/?openaicom-did=278f0e37-a781-4d7a-a273-c7c6fb7fbd6b&openaicom_referred=true) and [Go(opens in a new window)](https://help.openai.com/articles/11989085-what-is-chatgpt-go) users, we also collect information about your ads history and interests, such as the types of ad content that you view or engage with. If you use the in-app browser we may also collect your browser data according to your controls and use of the service.
- Usage data covers your activity and feedback; Free and Go users also have ad history and interests collected Data Access & Collection
- For Free and Go users, personal data is used to personalize and measure ads, subject to your settings Use & Processing
Device Information: We collect information about the device you use to access the Services, such as the name of the device, operating system, device identifiers, and browser you are using. Information collected depends on the type of device you use and its settings.
- Browser and device information is collected automatically when you use the Services Data Access & Collection
Location Information: We determine the general area from which your device accesses our Services based on information like its IP address for security reasons and to make your product experience better, for example to protect your account by detecting unusual login activity or to provide more accurate responses. In addition, some of our Services allow you to choose to provide more precise location information from your device, such as location information from your device’s GPS.
- OpenAI estimates your general location from IP address and may collect precise location if you provide it Data Access & Collection
- Table column 1: nine categories of personal data OpenAI says it collects Data Access & Collection
Cookies and Similar Technologies: We use cookies and similar technologies to operate and administer our Services, and improve your experience. We store some of the information described in this Policy with cookies, for example to help maintain your preferences across sessions if you’re not logged in, or to assist with authentication and customer support. For details about our use of cookies, please read our [Cookie Notice](https://openai.com/policies/cookie-policy/).
- Cookies and similar technologies are used to run the Services and store some of your information Data Access & Collection
Information We Receive from Other Sources: We receive information from other sources, such as our trusted security and safety partners to protect safety and prevent fraud, abuse, and other threats to our Services, and from marketing vendors who provide us with information about potential customers of our business services.
- OpenAI also receives information from security partners, marketing vendors, advertisers and the public internet Data Access & Collection
We receive information from advertisers and other data partners, which we use for purposes described in this Policy including to help us measure and improve the effectiveness of our Services, including ads shown to Free and Go users on our Services. For example, we could receive information about purchases you make from these advertisers.
- OpenAI also receives information from security partners, marketing vendors, advertisers and the public internet Data Access & Collection
- Data from advertisers, partners and the public internet is used to measure effectiveness and develop models Use & Processing
We also collect information from other sources, like information that is publicly available on the internet, to develop the models that power our Services. For more information on the sources of information used to develop the models that power ChatGPT and other Services, please see [this help center article(opens in a new window)](https://help.openai.com/articles/7842364-how-chatgpt-and-our-language-models-are-developed).
- Training details and choices are in a separate help article, plus statements in this policy Use & Processing
- OpenAI also receives information from security partners, marketing vendors, advertisers and the public internet Data Access & Collection
- Data from advertisers, partners and the public internet is used to measure effectiveness and develop models Use & Processing
2. How we use Personal Data
We use Personal Data for the following purposes:
- OpenAI uses personal data to run, improve and personalize the Services and for research Use & Processing
To provide, analyse, and maintain our Services, for example to respond to your questions for ChatGPT;
- OpenAI uses personal data to run, improve and personalize the Services and for research Use & Processing
To improve and develop our Services and conduct research, for example to develop new features;
- OpenAI uses personal data to run, improve and personalize the Services and for research Use & Processing
To personalize and customize your experience across our Services, for example to provide you with more relevant Content;
- OpenAI uses personal data to run, improve and personalize the Services and for research Use & Processing
For Free and Go users, to personalize the ads you see on our Services (subject to your settings), and to measure the effectiveness of ads shown on our Services. [Learn more(opens in a new window)](https://help.openai.com/articles/20001047-ads-in-chatgpt) about ads on our services;
- For Free and Go users, personal data is used to personalize and measure ads, subject to your settings Use & Processing
To communicate with you, including to respond to your questions, and send you information about our Services and events, for example about changes or improvements to the Services;
- OpenAI uses personal data to communicate with you, including information about the Services and events Use & Processing
To promote our products and services to you through direct marketing and on third-party properties, and to assess the effectiveness of those efforts, subject to your choices and controls ([learn more(opens in a new window)](https://help.openai.com/articles/20001156));
- OpenAI promotes its products through direct marketing and third-party properties, subject to your choices Sharing & Disclosure
- Limited information is shared with select marketing partners; you can opt out of this sharing Sharing & Disclosure
Identify your contacts who use our Services when you choose to connect your contacts and update you if they join our Services later;
- Connected contacts are used to identify which of your contacts use the Services and to update you Use & Processing
To prevent fraud, illegal activity, or misuses of our Services, and to protect the security of our systems and Services, including by monitoring any Content submitted or exchanged on our platforms (learn more [here](https://openai.com/transparency-and-content-moderation/)); and
- Personal data and submitted Content are used to prevent fraud and misuse, including by monitoring Content Use & Processing
To comply with legal obligations and to protect the rights, privacy, safety, or property of our users, OpenAI, or third parties, for instance to prevent harm to you or others, or to estimate your age to give you an age-appropriate experience.
- Personal data is used to meet legal duties, protect rights and safety, and estimate age Use & Processing
We also aggregate or de-identify Personal Data so that it no longer identifies you and use this information for the purposes described above, such as to analyze the way our Services are being used, to improve and add features to them, and to conduct research. We will maintain and use de-identified information in de-identified form and not attempt to reidentify the information, unless required by law.
- Aggregated or de-identified data is used for the same purposes and kept de-identified, unless required by law Use & Processing
- After you delete data it is removed within 30 days, with exceptions for longer retention and de-identified data Retention & Deletion
As noted above, we may use Content you provide us to improve our Services, for example to train the models that power ChatGPT. Read [our instructions(opens in a new window)](https://help.openai.com/articles/5722486-how-your-data-is-used-to-improve-model-performance) on how you can opt out of our use of your Content to train our models.
- Training details and choices are in a separate help article, plus statements in this policy Use & Processing
- Your Content may be used to improve the Services, including training models, with an opt-out Use & Processing
- You can choose whether your Content is used to improve and train models; Temporary Chats are not used Use & Processing
3. Disclosure of Personal Data
We disclose your Personal Data in the following circumstances:
- OpenAI discloses personal data in listed circumstances Sharing & Disclosure
Vendors, Service Providers, and Marketing Partners: To assist us in meeting business operations needs and to perform certain services and functions, we disclose Personal Data to vendors, service providers, and marketing partners, including providers of hosting services, customer service vendors, cloud services, content delivery services, support and safety services, email communication software, web analytics services, payment and transaction processors, search and shopping providers, and information technology providers. We also work with service providers who help us with age and identity verification, and you can learn more [here(opens in a new window)](https://help.openai.com/articles/12652064-age-prediction-in-chatgpt). When we work with Service Providers, these parties will access, process, or store Personal Data based on our instructions and only in the course of performing their duties to us. We also share limited information with select marketing partners who are not service providers in order to promote our products and services on third-party properties and help us assess the effectiveness of those efforts. Some of these partners may receive information through cookies and similar technologies. Learn more about these practices and the choices available to you [here(opens in a new window)](https://help.openai.com/articles/20001156-how-we-promote-openai-on-third-party-properties).
- OpenAI promotes its products through direct marketing and third-party properties, subject to your choices Sharing & Disclosure
- Personal data goes to vendors and service providers who may use it only on OpenAI's instructions Sharing & Disclosure
- Limited information is shared with select marketing partners; you can opt out of this sharing Sharing & Disclosure
- Table column 3: six kinds of recipients, with marketing partners addressed in the text after the table Sharing & Disclosure
Business Transfers: If we are involved in strategic transactions, reorganization, bankruptcy, receivership, or transition of service to another provider (collectively, a “Transaction”), your Personal Data may be disclosed in the diligence process with counterparties and others assisting with the Transaction and transferred to a successor or affiliate as part of that Transaction along with other assets.
- Your personal data may be disclosed and transferred if OpenAI is involved in a business transaction Sharing & Disclosure
Government Authorities or Other Third Parties: We may share your Personal Data, including information about your interaction with our Services, with government authorities, industry peers, or other third parties in compliance with the law (i) if required to do so to comply with a legal obligation, or in the good faith belief that such action is necessary to comply with a legal obligation, (ii) to protect and defend our rights or property, (iii) if we determine, in our sole discretion, that there is a violation of our terms, policies, or the law; (iv) to detect or prevent fraud or other illegal activity; (v) to protect the safety, security, and integrity of our products, employees, users, or the public, or (vi) to protect against legal liability.
- Personal data may be shared with government authorities, industry peers or others for legal, rights and safety reasons Sharing & Disclosure
Affiliates: We disclose Personal Data to our affiliates, meaning an entity that controls, is controlled by, or is under common control with OpenAI. Our affiliates may use this Personal Data in a manner consistent with this policy.
- Personal data is disclosed to OpenAI affiliates, who may use it consistently with this policy Sharing & Disclosure
Business Account Administrators: When you join a ChatGPT Enterprise or business account, the administrators of that account may access and control your OpenAI account, including being able to access your Content. In addition, if you create an account using an email address belonging to your employer or another organization, we may share the fact that you have an account and certain account information, such as your email address, with your employer or organization to, for example, enable you to be added to their business account.
- Administrators of business accounts can access your account and Content; employers may be told you have an account Sharing & Disclosure
Parent or Guardian of a Teen: Teen users and their parents or guardians can choose to link their accounts, allowing the parent or guardian to manage certain settings, and receive alerts if we detect a serious safety concern. These accounts can be unlinked at any time. [Learn more(opens in a new window)](https://help.openai.com/articles/12315553-parental-controls-on-chatgpt-faq) about account linking.
- Teens and parents or guardians can link accounts, giving the parent settings control and safety alerts Sharing & Disclosure
Other Users and Third Parties You Interact or Share Information With: Certain Services allow you to interact or share information with other users or third parties. For example, you can share content like [ChatGPT conversations(opens in a new window)](https://help.openai.com/articles/7925741-chatgpt-shared-links-faq), or share information with third-party [search(opens in a new window)](https://help.openai.com/articles/9237897-chatgpt-search) and [shopping(opens in a new window)](https://help.openai.com/articles/12440090-instant-checkout-buy-directly-from-merchants-through-chatgpt) partners. Information you share with third-party partners is governed by their own terms and privacy policies, and you should make sure you understand those terms and policies before sharing information with them.
- Information you share with other users or third-party partners is governed by their own terms Sharing & Disclosure
We also aggregate or de-identify Personal Data so that it no longer identifies you and share it with third parties for the purposes described above, such as to help improve our Services.
- Aggregated or de-identified data may be shared with third parties Sharing & Disclosure
4. Retention
- OpenAI keeps personal data only as long as needed, depending on data type, use and your settings Retention & Deletion
We’ll retain your Personal Data for only as long as we need in order to provide our Services to you, or for other legitimate business purposes such as resolving disputes, safety and security reasons, or complying with our legal obligations. How long we retain Personal Data depends on the type of data, how we use it, and in many cases your settings:
- OpenAI keeps personal data only as long as needed, depending on data type, use and your settings Retention & Deletion
Information we retain until you delete it: Some of our Services allow you to delete Personal Data stored in your account. For example, you can delete specific, or all, of your ChatGPT conversations, delete specific [Memories(opens in a new window)](https://help.openai.com/articles/8590148-memory-faq), or delete your account. Once you choose to delete Personal Data, we will remove it from our systems within 30 days unless we need to retain it for longer as described below, or it has already been de-identified and disassociated from your account when you allow us to use your Content to [improve our models(opens in a new window)](https://help.openai.com/articles/5722486-how-your-data-is-used-to-improve-model-performance).
- After you delete data it is removed within 30 days, with exceptions for longer retention and de-identified data Retention & Deletion
Information we delete automatically: In some cases, Personal Data will be deleted automatically. For example, [Temporary Chats(opens in a new window)](https://help.openai.com/articles/8914046-temporary-chat-faq) will be automatically deleted within 30 days (unless we have to retain them for safety or legal reasons, as described further below).
- Temporary Chats are deleted automatically within 30 days, unless kept for safety or legal reasons Retention & Deletion
Information we retain for longer for legitimate security, safety, or legal reasons: In some cases, we need to retain Personal Data for longer even after you delete it, for example because we are legally required to, to address fraud and abuse, for security reasons, or for financial record-keeping purposes. For instance:
- Data can be kept after deletion for banned content, legal requirements, fraud and security Retention & Deletion
If specific Content, or your account, is banned because of violations of our [usage policies](https://openai.com/policies/usage-policies/), we may retain that data for to protect our services from fraud, abuse, or other violations of our policies;
- Data can be kept after deletion for banned content, legal requirements, fraud and security Retention & Deletion
If we are legally required to retain your data (for instance, we receive a lawful subpoena) then we may retain it for the duration of the relevant legal or regulatory obligation;
- Data can be kept after deletion for banned content, legal requirements, fraud and security Retention & Deletion
When we are a party to a financial transaction (for instance, when we process your payment for a ChatGPT Plus or Pro account, or facilitate a purchase on ChatGPT), we may retain payment and transaction related information to meet our accounting, dispute resolution, and regulatory compliance purposes;
- Payment records and an audit record of erasure requests are kept after deletion Retention & Deletion
When you ask us to delete your Personal Data, we retain the audit record of the erasure request to be able to verify that we have complied with the request.
- Payment records and an audit record of erasure requests are kept after deletion Retention & Deletion
In determining these retention periods, we consider a number of factors, such as:
- Retention periods are set by considering purpose, data sensitivity, risk of harm and legal requirements Retention & Deletion
Our purpose for processing the Personal Data (such as whether we need to retain it to provide our Services);
- Retention periods are set by considering purpose, data sensitivity, risk of harm and legal requirements Retention & Deletion
The amount, nature, and sensitivity of the information;
- Retention periods are set by considering purpose, data sensitivity, risk of harm and legal requirements Retention & Deletion
The potential risk of harm from unauthorized use or disclosure;
- Retention periods are set by considering purpose, data sensitivity, risk of harm and legal requirements Retention & Deletion
Any legal requirements that we are subject to.
- Retention periods are set by considering purpose, data sensitivity, risk of harm and legal requirements Retention & Deletion
5. Data controls
Our Services provide you with a number of controls over your Personal Data and how it is used and retained. You can always change these settings in your account. These include the following controls:
- Account settings give you controls over how personal data is used and retained Account & Service Control
You can easily [choose whether your Content can be used to improve and train our models(opens in a new window)](https://help.openai.com/articles/5722486-how-your-data-is-used-to-improve-model-performance).
- You can choose whether your Content is used to improve and train models; Temporary Chats are not used Use & Processing
You can decide whether we will remember details between chats to make Content more personalized and relevant.
- You can decide whether ChatGPT remembers details between chats Use & Processing
You can [export your ChatGPT history and data(opens in a new window)](https://help.openai.com/articles/7260999-exporting-your-chatgpt-history-and-data) in your account’s data controls.
- You can export your ChatGPT data, delete or archive chats, and delete your account Account & Service Control
You can delete or archive chats in ChatGPT, or [delete your account(opens in a new window)](https://help.openai.com/articles/6378407-how-to-delete-your-account) entirely.
- You can export your ChatGPT data, delete or archive chats, and delete your account Account & Service Control
If you enable [Temporary Chat(opens in a new window)](https://help.openai.com/articles/8914046-temporary-chat-faq) in ChatGPT, those conversations with ChatGPT will not appear in your history or be used to improve OpenAI’s models.
- You can choose whether your Content is used to improve and train models; Temporary Chats are not used Use & Processing
Depending on applicable law, you may be able to choose which cookies are used when you use our Services.
- Cookie choices depend on law; Free and Go users have ad controls; you can unsubscribe from marketing Account & Service Control
For Free and Go users, you can use the advertising controls in your account settings to control what data we use to personalize the ads we show you on our Services.
- Cookie choices depend on law; Free and Go users have ad controls; you can unsubscribe from marketing Account & Service Control
You can unsubscribe from marketing communications you receive from us by using the choices provided in those communications.
- Cookie choices depend on law; Free and Go users have ad controls; you can unsubscribe from marketing Account & Service Control
You can find more information on data controls [here(opens in a new window)](https://help.openai.com/articles/7730893-data-controls-faq) and by visiting [privacy.openai.com(opens in a new window)](http://privacy.openai.com/).
- Account settings give you controls over how personal data is used and retained Account & Service Control
6. Your rights
Depending on where you live, you may have certain statutory rights in relation to your Personal Data. For example, you may have the right to:
- Depending on where you live, you may have statutory rights such as access, correction, deletion and portability Account & Service Control
Access your Personal Data and information relating to how it is processed.
- Depending on where you live, you may have statutory rights such as access, correction, deletion and portability Account & Service Control
Rectify or update your Personal Data
- Depending on where you live, you may have statutory rights such as access, correction, deletion and portability Account & Service Control
Delete your Personal Data from our records.
- Depending on where you live, you may have statutory rights such as access, correction, deletion and portability Account & Service Control
Restrict how we process your Personal Data.
- Depending on where you live, you may have statutory rights such as access, correction, deletion and portability Account & Service Control
Transfer your Personal Data to a third party (right to data portability).
- Depending on where you live, you may have statutory rights such as access, correction, deletion and portability Account & Service Control
Withdraw your consent—where we rely on consent as the legal basis for processing.
- Depending on where you live, you may have statutory rights such as access, correction, deletion and portability Account & Service Control
Lodge a complaint with your local data protection authority.
- Depending on where you live, you may have statutory rights such as access, correction, deletion and portability Account & Service Control
You can exercise some of these rights through your OpenAI account using the tools described in the [Data controls ](https://openai.com/policies/privacy-policy/#data-controls)section, or you can submit your request through [privacy.openai.com(opens in a new window)](https://privacy.openai.com/) or to dsar@openai.com. You can contact our data protection officer at dpo@openai.com.
- You can use account tools, the privacy portal or email to exercise rights, and contact the data protection officer Account & Service Control
- Depending on where you live, you may have rights to know, delete and correct data, and to be free from retaliation Account & Service Control
A note about accuracy: Services like ChatGPT generate responses by reading a user’s request and, in response, predicting the words most likely to appear next. In some cases, the words most likely to appear next may not be the most factually accurate. For this reason, you should not rely on the factual accuracy of output from our models. If you notice that ChatGPT output contains factually inaccurate information about you and you would like to request a correction or removal of the information, you can submit these requests through [privacy.openai.com(opens in a new window)](https://privacy.openai.com/) or to dsar@openai.com, and we will consider your request based on applicable law and the technical capabilities of our models.
- ChatGPT output can be wrong; you can request correction or removal of inaccurate information about you Account & Service Control
For information on how to exercise your rights with respect to data we have collected from the internet to train our models, please see [this help center article(opens in a new window)](https://help.openai.com/en/articles/7842364-how-chatgpt-and-our-language-models-are-developed).
- Rights over internet data collected to train models are explained in a help article Account & Service Control
OpenAI processes your Personal Data for the purposes described in this policy on servers located in various jurisdictions, including processing and storing your Personal Data in our facilities and servers in the United States, or in countries or territories where our affiliates and partners or our vendors and service providers are located. While data protection law varies by country, we apply the protections described in this policy to your Personal Data regardless of where it is processed, and only transfer that data pursuant to legally valid transfer mechanisms.
- Data is processed on servers in various countries, including the US, under legally valid transfer mechanisms Use & Processing
7. Children
Our Services are not directed to, or intended for, children under 13. We do not knowingly collect Personal Data from children under 13. If you have reason to believe that a child under 13 has provided Personal Data to OpenAI through the Services, please email us at privacy@openai.com. We will investigate any notification and, if appropriate, delete the Personal Data from our systems. Users under 18 must have permission from their parent or guardian to use our Services. [Learn more(opens in a new window)](https://help.openai.com/articles/12315553-parental-controls-on-chatgpt-faq) about how teens and parents or guardians can choose to link their accounts.
- Services are not for children under 13; users under 18 need a parent's or guardian's permission Account & Service Control
8. Security
We implement commercially reasonable technical, administrative, and organizational measures designed to protect Personal Data from loss, misuse, and unauthorized access, disclosure, alteration, or destruction. However, no Internet or email transmission is ever fully secure or error free. Therefore, you should take special care in deciding what information you provide to the Services. In addition, we are not responsible for circumvention of any privacy settings or security measures contained on the Service, or third-party websites.
- OpenAI uses commercially reasonable security measures but says no transmission is fully secure Security & Safeguards
9. Additional U.S. state disclosures
- A table gives extra disclosures for U.S. state privacy laws and cross-refers to the earlier sections Legal Rights & Agreement Rules
Some [U.S. state privacy laws(opens in a new window)](http://help.openai.com/articles/20001055) require specific disclosures. The following table provides additional information about the categories of Personal Data we collect and how we use and disclose that information. You can read more about the Personal Data we collect and where we collect it from in “[Personal Data we collect](https://openai.com/policies/privacy-policy/#personal-data-we-collect)” above, how we use Personal Data in “[How we use Personal Data](https://openai.com/policies/privacy-policy/#how-we-use-personal-data)” above, when we disclose Personal Data in “[Disclosure of Personal Data](https://openai.com/policies/privacy-policy/#disclosure-of-personal-data)” above and how we retain Personal Data in “[Retention](https://openai.com/policies/privacy-policy/#retention)” above. We don’t process sensitive data for the purpose of inferring characteristics about you.
- A table gives extra disclosures for U.S. state privacy laws and cross-refers to the earlier sections Legal Rights & Agreement Rules
- OpenAI says it does not process sensitive data to infer characteristics about you Use & Processing
Category of Personal Data
- The state disclosures table is one row of three lists: categories collected, purposes, and disclosures Legal Rights & Agreement Rules
Use of Personal Data
- The state disclosures table is one row of three lists: categories collected, purposes, and disclosures Legal Rights & Agreement Rules
Disclosure of Personal Data
- The state disclosures table is one row of three lists: categories collected, purposes, and disclosures Legal Rights & Agreement Rules
We collect the following information, as described above:
- Table column 1: nine categories of personal data OpenAI says it collects Data Access & Collection
- Identifiers, such as your name, contact details, IP address, and other device identifiers
- Table column 1: nine categories of personal data OpenAI says it collects Data Access & Collection
- Commercial information, such as your transaction history
- Table column 1: nine categories of personal data OpenAI says it collects Data Access & Collection
- Network activity information, such as how you interact with our Services, including Log Data, Usage Data, and information about the device you use to access the Services
- Table column 1: nine categories of personal data OpenAI says it collects Data Access & Collection
- Content, including your prompts and content you upload to the Services and interactions and messages with other users
- Table column 1: nine categories of personal data OpenAI says it collects Data Access & Collection
- Communication Information, such as your contact information when you send us email
- Table column 1: nine categories of personal data OpenAI says it collects Data Access & Collection
- Contact Data if you choose to connect your device contacts
- Table column 1: nine categories of personal data OpenAI says it collects Data Access & Collection
- Geolocation data, such as the general area from which your device accesses our Services based on information like its IP address, or precise location information you choose to provide
- Table column 1: nine categories of personal data OpenAI says it collects Data Access & Collection
- Other Account Information, such as your account credentials, and payment information, date of birth, and profile picture
- Table column 1: nine categories of personal data OpenAI says it collects Data Access & Collection
- Other Information You Provide, such as if you choose to participate in our events or surveys or when you provide us or a vendor operating on our behalf with information to establish your identity or age.
- Table column 1: nine categories of personal data OpenAI says it collects Data Access & Collection
We use this information for the following purposes, as described above:
- Table column 2: eight purposes for which this information is used, including training models subject to your control Use & Processing
- Provide, analyze, and maintain our Services
- Improve and develop our Services and conduct research, including using your Content to train our models (subject to your [control)](https://help.openai.com/en/articles/7730893-data-controls-faq#h_3fb7cda882)
- To personalize and customize your experience across our Services
- For Free and Go users, subject to your controls, to personalize the ads you see on our Services and measure the effectiveness of ads shown on our Services. [Learn more.](https://help.openai.com/en/articles/20001047-ads-in-chatgpt)
- Communicate with you, including to respond to your questions, and send you information about our Services and events, for example about changes or improvements to the Services or offers or information that may interest you
- To identify your contacts who use our Services when you choose to connect your contacts and update you if they join our Services later.
- Prevent fraud, illegal activity, or misuses of our Services, and to protect the security of our systems and Services, including by monitoring any Content submitted or exchanged on our platforms (learn more [here](https://openai.com/transparency-and-content-moderation/))
- Comply with legal obligations and protect the rights, privacy, safety, or property of our users, OpenAI, or third parties, for instance to prevent harm to you or others, and to estimate your age to give you an age-appropriate experience
We may disclose this information in the following circumstances, as described above:
- Table column 3: six kinds of recipients, with marketing partners addressed in the text after the table Sharing & Disclosure
- Vendors, service providers, and affiliates to assist us in meeting business operations needs and to perform certain services and functions described above
- Government authorities or other third parties for the legal reasons described above
- Parties involved in Transactions
- Business account administrators for the reasons described above
- Parents or guardians of teen users for account linking purposes described above
- Other users and third parties you interact or share information with
Your Opt-Out Rights. We don’t “sell” Personal Data. Depending upon your choices, we may share limited data with select marketing partners for purposes of promoting our products and services to you on third-party properties.
- OpenAI says it does not sell personal data, but may share limited data with marketing partners depending on your choices Sharing & Disclosure
This is known as “targeted advertising” or sharing for “cross-context behavioral advertising” under certain state privacy laws. You can opt out using the marketing privacy control in your account settings. If you’re not logged in, you can opt out within Settings > Data Controls on ChatGPT or using the Your Privacy Choices [link](https://openai.com/policies/us-privacy-policy/#manage-cookies) on our website. You can also opt out using a legally recognized opt-out mechanism, like Global Privacy Control. You can learn more about the types of data we use and share for these purposes and controls we offer you [here(opens in a new window)](https://help.openai.com/articles/20001156). We don’t engage in these activities for users we know to be under 18 years of age.
- Limited information is shared with select marketing partners; you can opt out of this sharing Sharing & Disclosure
- OpenAI says it does not sell personal data, but may share limited data with marketing partners depending on your choices Sharing & Disclosure
- You can opt out of targeted advertising sharing in account settings, on the website or through Global Privacy Control Sharing & Disclosure
Your Other Rights. Depending on where you live and subject to applicable exceptions, you may have the following privacy rights in relation to your Personal Data:
- Depending on where you live, you may have rights to know, delete and correct data, and to be free from retaliation Account & Service Control
The right to know information about our processing of your Personal Data, including the right to access your Personal Data, often in a portable format;
- Depending on where you live, you may have rights to know, delete and correct data, and to be free from retaliation Account & Service Control
The right to request deletion of your Personal Data;
- Depending on where you live, you may have rights to know, delete and correct data, and to be free from retaliation Account & Service Control
The right to correct your Personal Data; and
- Depending on where you live, you may have rights to know, delete and correct data, and to be free from retaliation Account & Service Control
The right to be free from retaliation relating to the exercise of any of your privacy rights. Review our California privacy rights reporting [here](https://openai.com/policies/privacy-policy/california-privacy-rights-reporting/).
- Depending on where you live, you may have rights to know, delete and correct data, and to be free from retaliation Account & Service Control
Verification. In order to protect your Personal Data from unauthorized access, change, or deletion, we may require you to verify your credentials before you can submit a request to know, correct, or delete Personal Data. If you do not have an account with us, or if we suspect fraudulent or malicious activity, we may ask you to provide additional Personal Data for verification. If we cannot verify your identity, we will not be able to honor your request.
- OpenAI may require verification of your identity before acting on a request to know, correct or delete Account & Service Control
Authorized Agents. Depending upon where you reside, you may also submit a rights request through an authorized agent. If you do so, the agent must present authority to act on your behalf, such as signed written permission, and you may also be required to independently verify your identity with us. Authorized agent requests can be submitted to dsar@openai.com.
- Depending on where you live, an authorized agent can submit a rights request for you Account & Service Control
Appeals. Depending on where you live, you may have the right to appeal a decision we make relating to requests to exercise your rights. To appeal a decision, please send your request to dsar@openai.com.
- Depending on where you live, you may appeal a decision on a rights request by email Account & Service Control
10. Changes to the privacy policy
We may update this policy from time to time. When we do, we will publish an updated version and effective date on this page, unless another type of notice is required by applicable law.
- OpenAI may update the policy and will publish the new version and date on the page, unless the law requires other notice Legal Rights & Agreement Rules
11. Data controller
If you live in the European Economic Area (EEA) or Switzerland, OpenAI Ireland Limited, with its registered office at 1st Floor, The Liffey Trust Centre, 117-126 Sheriff Street Upper, Dublin 1, D01 YC43, Ireland, is the controller and is responsible for the processing of your Personal Data as described in this policy.
- The controller is OpenAI Ireland Limited for EEA and Swiss residents, and OpenAI OpCo, LLC for everyone else Legal Rights & Agreement Rules
If you live anywhere else, OpenAI OpCo, LLC, with its registered office at 1455 Third Street, San Francisco, California 94158, United States, is the controller and is responsible for the processing of your Personal Data as described in this policy.
- The controller is OpenAI Ireland Limited for EEA and Swiss residents, and OpenAI OpCo, LLC for everyone else Legal Rights & Agreement Rules
12. How to contact us
Please [contact support(opens in a new window)](https://help.openai.com/articles/6614161-how-can-i-contact-support#:~:text=If%20you%20already%20have%20an,of%20help.openai.com.) if you have any questions or concerns not already addressed in this policy.
- Questions not covered in the policy go to OpenAI support Account & Service Control
13. Useful resources
[How your data is used to improve model performance(opens in a new window)](https://help.openai.com/articles/5722486-how-your-data-is-used-to-improve-model-performance)
- Linked resources include a privacy portal and a separate Health Privacy Notice, which are not supplied Legal Rights & Agreement Rules
[Data Controls FAQ(opens in a new window)](https://help.openai.com/articles/7730893-data-controls-faq)
[Privacy Portal(opens in a new window)](https://privacy.openai.com/policies)
- Linked resources include a privacy portal and a separate Health Privacy Notice, which are not supplied Legal Rights & Agreement Rules
[Memories FAQ(opens in a new window)](https://help.openai.com/articles/8590148-memory-faq)
[Voice Mode FAQ(opens in a new window)](https://help.openai.com/articles/8400625-voice-mode-faq)
[Health Privacy Notice](https://openai.com/policies/health-privacy-policy/)
- Linked resources include a privacy portal and a separate Health Privacy Notice, which are not supplied Legal Rights & Agreement Rules