fineprint what AI companies quietly changed · RSS

2026-09-15 17:12 UTC · openai/privacy · live page

Updated the privacy policy on July 30, 2026, to include a Korea Addendum and data collection for Free and Go users' ads history.

Summary by gemma-4-12b. It may be wrong; the diff below is what actually changed. Raw: e4014fb662-openai-privacy.diff · commit e4014fb662

diff --git a/snapshots/openai/privacy.md b/snapshots/openai/privacy.mdindex 8dd3a19..43d8960 100644--- a/snapshots/openai/privacy.md+++ b/snapshots/openai/privacy.md@@ -1,9 +1,11 @@ <!-- fineprint snapshot: openai/privacy | source: https://openai.com/policies/privacy-policy/ --> -Updated: May 18, 2026+Updated: July 30, 2026 -(Previous version)  For individuals in the European Economic Area, United Kingdom, and Switzerland, you can read this version of our Privacy Policy.+For individuals in the European Economic Area, United Kingdom, and Switzerland, you can read this version of our Privacy Policy. -At OpenAI, our mission is to ensure that artificial general intelligence benefits everyone. We build tools like ChatGPT and Sora to help people learn, create, and solve problems. We at OpenAI (together with our affiliates, "OpenAI", "we", "our" or "us") are committed to respecting your privacy and are strongly committed to keeping secure any information we obtain from you or about you. This Privacy Policy describes our practices with respect to personal data that we collect from or about you, and how we use it when you use our website, applications, and services (collectively, "Services").+For individuals in the Republic of Korea, please refer to the Korea Addendum.++At OpenAI, our mission is to ensure that artificial general intelligence benefits everyone. We build tools like ChatGPT to help people learn, create, and solve problems. We at OpenAI (together with our affiliates, "OpenAI", "we", "our" or "us") are committed to respecting your privacy and are strongly committed to keeping secure any information we obtain from you or about you. This Privacy Policy describes our practices with respect to personal data that we collect from or about you, and how we use it when you use our website, applications, and services (collectively, "Services").  This Privacy Policy does not apply to content that we process on behalf of customers of our business offerings, such as our API. Our use of that data is governed by our customer agreements covering access to and use of those offerings.@@ -16,5 +18,5 @@ Personal Data You Provide: We collect Personal Data if you create an account to  - Account Information: When you create an account with us, we will collect information associated with your account, including your name, contact information, account credentials, date of birth, payment information, and transaction history, (collectively, "Account Information"). Some of our Services may also allow you to upload a profile picture, a username, or other information as part of your Account Information.-- User Content: We collect Personal Data that you provide in the input to our Services ("Content"), including your prompts and other content you upload, such as files, images, audio and video, Sora characters, and data from connected services, depending on the features you use. Some of our Services allow you to interact with other users, such as post, comment, or send messages, and we treat those interactions as Content, too.+- User Content: We collect Personal Data that you provide in the input to our Services ("Content"), including your prompts and other content you upload, such as files, images, audio and video, and data from connected services, depending on the features you use. Some of our Services allow you to interact with other users, such as post, comment, or send messages, and we treat those interactions as Content, too. - Communication Information: If you communicate with us, such as via email or our pages on social media sites, we may collect Personal Data like your name, contact information, and the contents of the messages you send ("Communication Information"). - Contact Data: If you choose to connect your device contacts, we upload information from your device address books and check which of your contacts also use our Services. If any of your contacts aren't yet using our Services, we'll update you if they sign up for our Services later. Learn more about connecting your contacts and how we use uploaded contact information of people who don't use our Services.@@ -24,5 +26,5 @@ Personal Data We Receive from Your Use of the Services: When you visit, use, or  - Log Data: We collect information that your browser or device automatically sends when you use our Services. Log data includes your Internet Protocol address, browser type and settings, the date and time of your request, and how you interact with our Services.-- Usage Data: We collect information about your use and activity across the Services, such as the types of content that you view or engage with, the features you use and the actions you take, when you submit feedback to a model response, the people with whom you interact, as well as your time zone, country, the dates and times of access, user agent and version, type of computer or mobile device, and your computer connection. If you use the Atlas browser we may also collect your browser data according to your controls and use of the service.+- Usage Data: We collect information about your use and activity across the Services, such as the types of content that you view or engage with, the features you use and the actions you take, when you submit feedback to a model response, the people with whom you interact, as well as your time zone, country, the dates and times of access, user agent and version, type of computer or mobile device, and your computer connection. For Free and Go users, we also may collect information about your ads history and interests, such as the type of ad content that you view or engage with. If you use the in-app browser we may also collect your browser data according to your controls and use of the service. - Device Information: We collect information about the device you use to access the Services, such as the name of the device, operating system, device identifiers, and browser you are using. Information collected depends on the type of device you use and its settings. - Location Information: We determine the general area from which your device accesses our Services based on information like its IP address for security reasons and to make your product experience better, for example to protect your account by detecting unusual login activity or to provide more accurate responses. In addition, some of our Services allow you to choose to provide more precise location information from your device, such as location information from your device's GPS.@@ -31,5 +33,5 @@ Personal Data We Receive from Your Use of the Services: When you visit, use, or Information We Receive from Other Sources: We receive information from other sources, such as our trusted security and safety partners to protect safety and prevent fraud, abuse, and other threats to our Services, and from marketing vendors who provide us with information about potential customers of our business services. -We may receive information from advertisers and other data partners, which we use for purposes including to help us measure and improve the effectiveness of ads shown to Free and Go users on our Services. For example, we could receive information about purchases you make from these advertisers.+We may receive information from advertisers and other data partners, which we use for purposes including to help us measure and improve the effectiveness of our Services, including to help us show more relevant ads to Free and Go users on our Services. For example, we could receive information about purchases you make from these advertisers.  We also collect information from other sources, like information that is publicly available on the internet, to develop the models that power our Services. For more information on the sources of information used to develop the models that power ChatGPT and other Services, please see this help center article.@@ -40,5 +42,5 @@ We use Personal Data for the following purposes: - To improve and develop our Services and conduct research, for example to develop new features; - To personalize and customize your experience across our Services, for example to provide you with more relevant Content;-- For Free and Go users, to personalize the ads you see on our Services (subject to your settings), and to measure the effectiveness of ads shown on our Services. Learn more about ads on our services;+- For Free and Go users, to personalize the ads you see on our Services (subject to your choices and controls), and to measure the effectiveness of ads shown on our Services. Learn more about ads on our services; - To communicate with you, including to respond to your questions, and send you information about our Services and events, for example about changes or improvements to the Services; - To promote our products and services to you through direct marketing and on third-party properties, and to assess the effectiveness of those efforts, subject to your choices and controls (learn more);@@ -59,5 +61,5 @@ We disclose your Personal Data in the following circumstances: - Business Account Administrators: When you join a ChatGPT Enterprise or business account, the administrators of that account may access and control your OpenAI account, including being able to access your Content. In addition, if you create an account using an email address belonging to your employer or another organization, we may share the fact that you have an account and certain account information, such as your email address, with your employer or organization to, for example, enable you to be added to their business account. - Parent or Guardian of a Teen: Teen users and their parents or guardians can choose to link their accounts, allowing the parent or guardian to manage certain settings, and receive alerts if we detect a serious safety concern. These accounts can be unlinked at any time. Learn more about account linking.-- Other Users and Third Parties You Interact or Share Information With: Certain Services allow you to interact or share information with other users or third parties. For example, you can share content like ChatGPT conversations or Sora videos and characters, or share information with third-party search and shopping partners. Information you share with third-party partners is governed by their own terms and privacy policies, and you should make sure you understand those terms and policies before sharing information with them.+- Other Users and Third Parties You Interact or Share Information With: Certain Services allow you to interact or share information with other users or third parties. For example, you can share content like ChatGPT conversations or share information with third-party search and shopping partners. Information you share with third-party partners is governed by their own terms and privacy policies, and you should make sure you understand those terms and policies before sharing information with them.  We also aggregate or de-identify Personal Data so that it no longer identifies you and share it with third parties for the purposes described above, such as to help improve our Services.@@ -65,8 +67,8 @@ We also aggregate or de-identify Personal Data so that it no longer identifies y We'll retain your Personal Data for only as long as we need in order to provide our Services to you, or for other legitimate business purposes such as resolving disputes, safety and security reasons, or complying with our legal obligations. How long we retain Personal Data depends on the type of data, how we use it, and in many cases your settings: -- Information we retain until you delete it: Some of our Services allow you to delete Personal Data stored in your account. For example, you can delete specific, or all, of your ChatGPT conversations, delete specific Saved Memories, or delete your account. Once you choose to delete Personal Data, we will remove it from our systems within 30 days unless we need to retain it for longer as described below, or it has already been de-identified and disassociated from your account when you allow us to use your Content to improve our models.-- Information we delete automatically: In some cases, Personal Data will be deleted automatically. For example, Temporary Chats will be automatically deleted within 30 days (unless we have to retain them for safety or legal reasons, as described further below), and your Atlas incognito browsing history won't be saved after you end your session.+- Information we retain until you delete it: Some of our Services allow you to delete Personal Data stored in your account. For example, you can delete specific, or all, of your ChatGPT conversations, delete specific Memories, or delete your account. Once you choose to delete Personal Data, we will remove it from our systems within 30 days unless we need to retain it for longer as described below, or it has already been de-identified and disassociated from your account when you allow us to use your Content to improve our models.+- Information we delete automatically: In some cases, Personal Data will be deleted automatically. For example, Temporary Chats will be automatically deleted within 30 days (unless we have to retain them for safety or legal reasons, as described further below). - Information we retain for longer for legitimate security, safety, or legal reasons: In some cases, we need to retain Personal Data for longer even after you delete it, for example because we are legally required to, to address fraud and abuse, for security reasons, or for financial record-keeping purposes. For instance:-  - If specific Content, or your account, is banned because of violations of our usage policies, we may retain that data for to protect our services from fraud, abuse, or other violations of our policies;+  - If specific Content, or your account, is banned because of violations of our usage policies, we may retain that data to protect our services from fraud, abuse, or other violations of our policies;   - If we are legally required to retain your data (for instance, we receive a lawful subpoena) then we may retain it for the duration of the relevant legal or regulatory obligation;   - When we are a party to a financial transaction (for instance, when we process your payment for a ChatGPT Plus or Pro account, or facilitate a purchase on ChatGPT), we may retain payment and transaction related information to meet our accounting, dispute resolution, and regulatory compliance purposes;@@ -88,6 +90,5 @@ Our Services provide you with a number of controls over your Personal Data and h - If you enable Temporary Chat in ChatGPT, those conversations with ChatGPT will not appear in your history or be used to improve OpenAI's models. - Depending on applicable law, you may be able to choose which cookies are used when you use our Services, and you can make choices about the use of your information for purposes of promoting our products and services to you on third-party properties (learn more).-- For Free and Go users, you can use the advertising controls in your account settings to control what data we use to personalize the ads we show you on our Services.-- If you use the Atlas browser, you can delete your browsing history or choose to browse the web in incognito mode, which helps keep your browsing private from other people who use your device.+- Free and Go users can use the advertising controls in your account settings to control what data we use to personalize the ads we show you on our Services. - You can unsubscribe from marketing communications you receive from us by using the choices provided in those communications. @@ -116,28 +117,4 @@ Our Services are not directed to, or intended for, children under 13. We do not We implement commercially reasonable technical, administrative, and organizational measures designed to protect Personal Data from loss, misuse, and unauthorized access, disclosure, alteration, or destruction. However, no Internet or email transmission is ever fully secure or error free. Therefore, you should take special care in deciding what information you provide to the Services. In addition, we are not responsible for circumvention of any privacy settings or security measures contained on the Service, or third-party websites. -Some U.S. state privacy laws require specific disclosures. The following table provides additional information about the categories of Personal Data we collect and how we use and disclose that information. You can read more about the Personal Data we collect and where we collect it from in "Personal Data we collect" above, how we use Personal Data in "How we use Personal Data" above, when we disclose Personal Data in "Disclosure of Personal Data" above and how we retain Personal Data in "Retention" above. We don't process sensitive data for the purpose of inferring characteristics about you.--| Category of Personal Data | Use of Personal Data | Disclosure of Personal Data |-|---|---|---|-| We collect the following information, as described above:Identifiers, such as your name, contact details, IP address, and other device identifiersCommercial information, such as your transaction historyNetwork activity information, such as how you interact with our Services, including Log Data, Usage Data, and information about the device you use to access the ServicesContent, including your prompts and content you upload to the Services and interactions and messages with other usersCommunication Information, such as your contact information when you send us emailContact Data if you choose to connect your device contactsGeolocation data, such as the general area from which your device accesses our Services based on information like its IP address, or precise location information you choose to provideOther Account Information, such as your account credentials, and payment information, date of birth, and profile pictureOther Information You Provide, such as if you choose to participate in our events or surveys or when you provide us or a vendor operating on our behalf with information to establish your identity or age. | We use this information for the following purposes, as described above:Provide, analyze, and maintain our ServicesImprove and develop our Services and conduct research, including using your Content to train our models (subject to your control)To personalize and customize your experience across our ServicesFor Free and Go users, subject to your controls, to personalize the ads you see on our Services and measure the effectiveness of ads shown on our Services. Learn more.Communicate with you, including to respond to your questions, and send you information about our Services and events, for example about changes or improvements to the Services or offers or information that may interest youTo identify your contacts who use our Services when you choose to connect your contacts and update you if they join our Services later.Prevent fraud, illegal activity, or misuses of our Services, and to protect the security of our systems and Services, including by monitoring any Content submitted or exchanged on our platforms (learn more here)Comply with legal obligations and protect the rights, privacy, safety, or property of our users, OpenAI, or third parties, for instance to prevent harm to you or others, and to estimate your age to give you an age-appropriate experience | We may disclose this information in the following circumstances, as described above:Vendors, service providers, and affiliates to assist us in meeting business operations needs and to perform certain services and functions described aboveGovernment authorities or other third parties for the legal reasons described aboveParties involved in TransactionsBusiness account administrators for the reasons described aboveParents or guardians of teen users for account linking purposes described aboveOther users and third parties you interact or share information with |--Your Opt-Out Rights. We don't "sell" Personal Data. Depending upon your choices, we may share limited data with select marketing partners for purposes of promoting our products and services to you on third-party properties.--This is known as "targeted advertising" or sharing for "cross-context behavioral advertising" under certain state privacy laws. You can opt out using the marketing privacy control in your account settings. If you're not logged in, you can opt out within Settings > Data Controls on ChatGPT or using the Your Privacy Choices link on our website. You can also opt out using a legally recognized opt-out mechanism, like Global Privacy Control. You can learn more about the types of data we use and share for these purposes and controls we offer you here. We don't engage in these activities for users we know to be under 18 years of age.--Your Other Rights. Depending on where you live and subject to applicable exceptions, you may have the following privacy rights in relation to your Personal Data:--- The right to know information about our processing of your Personal Data, including the right to access your Personal Data, often in a portable format;-- The right to request deletion of your Personal Data;-- The right to correct your Personal Data; and--The right to be free from retaliation relating to the exercise of any of your privacy rights. Review our California privacy rights reporting here.--Verification. In order to protect your Personal Data from unauthorized access, change, or deletion, we may require you to verify your credentials before you can submit a request to know, correct, or delete Personal Data. If you do not have an account with us, or if we suspect fraudulent or malicious activity, we may ask you to provide additional Personal Data for verification. If we cannot verify your identity, we will not be able to honor your request.--Authorized Agents. Depending upon where you reside, you may also submit a rights request through an authorized agent. If you do so, the agent must present authority to act on your behalf, such as signed written permission, and you may also be required to independently verify your identity with us. Authorized agent requests can be submitted to dsar@openai.com.--Appeals. Depending on where you live, you may have the right to appeal a decision we make relating to requests to exercise your rights. To appeal a decision, please send your request to dsar@openai.com.- We may update this policy from time to time. When we do, we will publish an updated version and effective date on this page, unless another type of notice is required by applicable law. @@ -157,4 +134,2 @@ Memories FAQ  Voice Mode FAQ--Health Privacy Notice

← OpenAI timeline