Account settings give you controls over how personal data is used and retained
Section 5 says the Services provide a number of controls over your Personal Data and how it is used and retained, and that you can always change these settings in your account. The controls described are listed in the cards that follow, and more information is in a linked Data Controls FAQ and the privacy portal.
Supporting quotations
Our Services provide you with a number of controls over your Personal Data and how it is used and retained. You can always change these settings in your account. These include the following controls:
You can find more information on data controls
Qualifications & exceptions
The controls described are those listed in this section.
Not stated here
The Data Controls FAQ and privacy portal are linked but not supplied.
Account & Service Control · User right or choice
You can export your ChatGPT data, delete or archive chats, and delete your account
In your account's data controls you can export your ChatGPT history and data. You can also delete or archive chats in ChatGPT, or delete your account entirely. Deleted data is then removed within 30 days subject to the exceptions in the retention section.
Supporting quotations
export your ChatGPT history and data
in your account’s data controls.
You can delete or archive chats in ChatGPT, or
Qualifications & exceptions
Deleting is subject to the longer-retention and de-identification exceptions in section 4.
Not stated here
The export format and what an export includes are in linked help articles that are not supplied.
Account & Service Control · User right or choice
Cookie choices depend on law; Free and Go users have ad controls; you can unsubscribe from marketing
Depending on applicable law, you may be able to choose which cookies are used. For Free and Go users, advertising controls in account settings let you control what data OpenAI uses to personalize the ads shown to you. You can also unsubscribe from marketing communications using the choices provided in those communications.
Supporting quotations
Depending on applicable law, you may be able to choose which cookies are used when you use our Services.
For Free and Go users, you can use the advertising controls in your account settings to control what data we use to personalize the ads we show you on our Services.
You can unsubscribe from marketing communications you receive from us by using the choices provided in those communications.
Qualifications & exceptions
Cookie choice depends on applicable law.
Advertising controls are stated for Free and Go users.
Not stated here
The policy does not say which jurisdictions give cookie choice.
Account & Service Control · User right or choice
Depending on where you live, you may have statutory rights such as access, correction, deletion and portability
The policy says that, depending on where you live, you may have certain statutory rights over your Personal Data. As examples it lists the rights to access your data and information about how it is processed, to rectify or update it, to delete it from OpenAI's records, to restrict how it is processed, to transfer it to a third party (data portability), to withdraw consent where OpenAI relies on consent as the legal basis, and to lodge a complaint with your local data protection authority. This general list is not tied to a specific place; the state disclosures section later lists rights for some U.S. residents.
Supporting quotations
Depending on where you live, you may have certain statutory rights in relation to your Personal Data. For example, you may have the right to:
Access your Personal Data and information relating to how it is processed.
Rectify or update your Personal Data
Delete your Personal Data from our records.
Restrict how we process your Personal Data.
Transfer your Personal Data to a third party (right to data portability).
Withdraw your consent—where we rely on consent as the legal basis for processing.
Lodge a complaint with your local data protection authority.
Qualifications & exceptions
Rights depend on where you live ("you may have" and "for example").
The right to withdraw consent applies where OpenAI relies on consent as the legal basis.
Not stated here
The policy does not say which places give which rights, or which legal bases OpenAI relies on.
Any exceptions to these rights are not stated in this list.
Account & Service Control · Procedure
You can use account tools, the privacy portal or email to exercise rights, and contact the data protection officer
You can exercise some of these rights through your OpenAI account using the tools in the data controls section, or by submitting a request through the privacy portal or by email to the data subject request address. OpenAI also gives an email address for its data protection officer. The wording "some of these rights" means not every listed right is available through the account tools.
Supporting quotations
You can exercise some of these rights through your OpenAI account using the tools described in the
or to dsar@openai.com
You can contact our data protection officer at dpo@openai.com
Qualifications & exceptions
Account tools cover only some of the rights.
Not stated here
Response times and any verification steps are not stated here; the later state-law section describes verification.
Account & Service Control · User right or choice
ChatGPT output can be wrong; you can request correction or removal of inaccurate information about you
OpenAI explains that ChatGPT generates responses by predicting the words most likely to appear next, which may not be the most factually accurate, and tells you not to rely on the factual accuracy of its output. If ChatGPT output contains factually inaccurate information about you, you can request a correction or removal through the privacy portal or by email, and OpenAI says it will consider your request based on applicable law and the technical capabilities of its models. The statement is that it will consider the request, not that it will always grant it.
Supporting quotations
In some cases, the words most likely to appear next may not be the most factually accurate. For this reason, you should not rely on the factual accuracy of output from our models.
If you notice that ChatGPT output contains factually inaccurate information about you and you would like to request a correction or removal of the information, you can submit these requests through
and we will consider your request based on applicable law and the technical capabilities of our models.
Qualifications & exceptions
OpenAI will consider requests based on applicable law and the technical capabilities of its models; the policy does not promise correction or removal.
Not stated here
The policy does not say how requests are decided or which technical limits apply.
Account & Service Control · Procedure
Rights over internet data collected to train models are explained in a help article
For how to exercise your rights over data OpenAI has collected from the internet to train its models, the policy refers you to a help center article, which is not supplied here.
Supporting quotations
For information on how to exercise your rights with respect to data we have collected from the internet to train our models, please see
Qualifications & exceptions
Refers to data collected from the internet for training.
Not stated here
The help article is linked but not supplied, so the steps and any limits are unknown.
Account & Service Control · Company commitment
Services are not for children under 13; users under 18 need a parent's or guardian's permission
OpenAI says its Services are not directed to or intended for children under 13 and that it does not knowingly collect Personal Data from them. If you think a child under 13 has provided Personal Data, you can email the privacy address, and OpenAI says it will investigate and, if appropriate, delete the data. Users under 18 must have permission from a parent or guardian to use the Services. A linked help article covers account linking for teens and parents.
Supporting quotations
Our Services are not directed to, or intended for, children under 13. We do not knowingly collect Personal Data from children under 13.
If you have reason to believe that a child under 13 has provided Personal Data to OpenAI through the Services, please email us at privacy@openai.com. We will investigate any notification and, if appropriate, delete the Personal Data from our systems.
Users under 18 must have permission from their parent or guardian to use our Services.
Qualifications & exceptions
"Does not knowingly collect" is a statement about knowledge; deletion happens "if appropriate".
Users under 18 must have a parent's or guardian's permission; the policy does not describe how that is checked.
Not stated here
How age is checked at sign-up is not described here; age prediction is mentioned in the disclosure section.
Account & Service Control · User right or choice
Depending on where you live, you may have rights to know, delete and correct data, and to be free from retaliation
Under the heading Your Other Rights, the policy says that, depending on where you live and subject to applicable exceptions, you may have these privacy rights: to know information about OpenAI's processing of your Personal Data, including access, often in a portable format; to request deletion; to correct your Personal Data; and to be free from retaliation for exercising any of your privacy rights. A link leads to California privacy rights reporting. You can exercise some rights through your account tools, the privacy portal or the data subject request email address described earlier.
Supporting quotations
Your Other Rights. Depending on where you live and subject to applicable exceptions, you may have the following privacy rights in relation to your Personal Data:
The right to know information about our processing of your Personal Data, including the right to access your Personal Data, often in a portable format;
The right to request deletion of your Personal Data;
The right to correct your Personal Data; and
The right to be free from retaliation relating to the exercise of any of your privacy rights. Review our California privacy rights reporting
You can exercise some of these rights through your OpenAI account using the tools described in the
Qualifications & exceptions
Rights depend on where you live and are subject to applicable exceptions.
Introduced as "Your Other Rights", in addition to the opt-out right in the preceding text and the general rights list in section 6.
Not stated here
The policy does not say which states or places give which rights, or what the exceptions are.
The California privacy rights reporting page is linked but not supplied.
Account & Service Control · Procedure
OpenAI may require verification of your identity before acting on a request to know, correct or delete
To protect your Personal Data from unauthorized access, change or deletion, OpenAI may require you to verify your credentials before you submit a request to know, correct or delete. If you do not have an account, or if OpenAI suspects fraudulent or malicious activity, it may ask for additional Personal Data for verification. If OpenAI cannot verify your identity, it will not be able to honor your request.
Supporting quotations
In order to protect your Personal Data from unauthorized access, change, or deletion, we may require you to verify your credentials before you can submit a request to know, correct, or delete Personal Data. If you do not have an account with us, or if we suspect fraudulent or malicious activity, we may ask you to provide additional Personal Data for verification. If we cannot verify your identity, we will not be able to honor your request.
Qualifications & exceptions
Verification "may" be required; additional Personal Data may be requested if you have no account or fraud is suspected.
Consequence: if identity cannot be verified, the request is not honored.
Not stated here
The policy does not say what additional information may be requested or how long verification takes.
Account & Service Control · Procedure
Depending on where you live, an authorized agent can submit a rights request for you
Depending on where you reside, you may submit a rights request through an authorized agent. The agent must present authority to act for you, such as signed written permission, and you may also be required to verify your own identity independently with OpenAI. Authorized agent requests can be submitted to the data subject request email address.
Supporting quotations
Depending upon where you reside, you may also submit a rights request through an authorized agent. If you do so, the agent must present authority to act on your behalf, such as signed written permission, and you may also be required to independently verify your identity with us. Authorized agent requests can be submitted to dsar@openai.com.
Qualifications & exceptions
Depends on where you reside.
The agent must show authority; you may also have to verify your identity yourself.
Not stated here
Which places allow authorized agents is not stated.
Account & Service Control · User right or choice
Depending on where you live, you may appeal a decision on a rights request by email
Depending on where you live, you may have the right to appeal a decision OpenAI makes about your request to exercise your rights. To appeal, you send your request to the data subject request email address.
Supporting quotations
Appeals. Depending on where you live, you may have the right to appeal a decision we make relating to requests to exercise your rights. To appeal a decision, please send your request to dsar@openai.com.
Qualifications & exceptions
Depends on where you live.
Not stated here
Appeal deadlines and process are not described.
Account & Service Control · Procedure
Questions not covered in the policy go to OpenAI support
For questions or concerns not already addressed in the policy, OpenAI directs you to contact support through a linked help article. Other contact addresses for specific requests appear earlier in the policy.
Supporting quotations
if you have any questions or concerns not already addressed in this policy.
Qualifications & exceptions
Applies to questions or concerns not already addressed in the policy.