Our privacy policy was updated as of January 31, 2024. These updates do not apply to individuals located in the European Economic Area, the United Kingdom, and Switzerland. If you reside in those areas, our previous version of the privacy policy still applies to you.
Introduction
At OpenAI OpCo, LLC (along with our affiliates “OpenAI” or “we” or “us”), we respect your privacy and are deeply committed to keeping any information we obtain from you or about you confidential. This privacy policy describes our practices regarding the personal information we collect from you or when you use our website, applications, and services (collectively, “the services”). This privacy policy does not apply to the content we process on behalf of our business customers, such as our API. Our use of that data is governed by customer agreements that cover access to and use of those offerings.
1. Personal Information We Collect
We collect personal information relating to you (“personal information”) as follows:
Personal information you provide
We collect personal information if you create an account to use our services or communicate with us as follows:
Account information: When you create an account with us, we will collect information associated with your account, including your name, contact information, account credentials, payment information, and transaction history (collectively, “account information”).
User content: When you use our services, we collect personal information included in inputs or file uploads or comments you provide to our services (“content”).
Contact information: If you contact us, we collect your name, contact information, and the content of any messages you send (“contact information”).
Social media information: We have pages on social media platforms such as Instagram, Facebook, Medium, Twitter, YouTube, and LinkedIn. When you interact with our social media pages, we will collect personal information that you choose to provide to us, such as your contact details (collectively, “social media information”). Additionally, social media hosting companies may provide us with aggregated information and analytics about our social media activity.
Other information you provide: We collect other information you may provide to us, such as when you participate in events or surveys or provide us with information to establish your identity (collectively, “other information you provide”).
Personal information we receive automatically from your use of the services
When you visit, use, or interact with the services, we receive the following information about your visit, use, or interactions (“technical information”):
Log data: Information that your browser or device automatically sends when you use our services. Log data includes your Internet Protocol address, browser type, settings, and the date and time of your request, along with how you interact with our services.
Usage data: We may automatically collect information about your use of the services, such as the types of content you view or interact with, the features you use, and the actions you take, along with your time zone, country, and dates and times of access, user agent, version and type of computer or mobile device, and your computer’s connection.
Device information: This includes the device name, operating system, device identifiers, and the browser you are using. The information collected may depend on the type of device you are using and its settings.
Cookies: We use cookies to operate and manage our services and improve your experience. A “cookie” is a piece of information that is sent to your browser from a website you visit. You can set your browser to accept all cookies, reject all cookies, or notify you each time a cookie is presented so you can decide whether to accept it. However, rejecting cookies may, in some cases, prevent you from using a website or affect the display or functionality of a particular website. For more details about cookies, please visit All About Cookies.
Analytics:
We may use a variety of online analytics products that utilize cookies to help us analyze how users interact with our services and enhance your experience when using the services.
2. How We Use Personal Information
We may use personal information for the following purposes:
To provide, manage, maintain, and/or analyze the services.
To improve our services and conduct research.
To communicate with you, including sending information about our services and events.
To develop new programs and services.
To prevent fraud and criminal activities or misuse of our services, and to protect our systems, IT infrastructure, and networks.
To carry out business transfers.
To comply with legal obligations and legal processes and to protect our rights, privacy, and safety or property, and/or the property of our affiliates, you, or other third parties.
3. Disclosure of Personal Information
Under certain circumstances, we may disclose your personal information to third parties without further notice to you, unless required by law:
Vendors and service providers: To help us meet our business operation needs and perform certain services and functions, we may provide personal information to vendors and service providers, including hosting service providers, customer service providers, cloud service providers, email communication software, web analytics services, and other IT service providers. According to our instructions, these parties will access, process, or store personal information only in the context of performing their duties to us.
Business transfers: If we are involved in strategic transactions, reorganization, bankruptcy, or transferring service to another provider (collectively, “the transaction”), your personal information and other information may be disclosed in the due diligence process to the concerned parties and others who assist in the process and transferred to the back or affiliate as part of that transaction along with other assets.
Legal requirements: We may share your personal information, including information about your interactions with our services, with government authorities or industry peers or other third parties (a) if required by law or in good faith believing that such action is necessary to comply with a legal obligation, (b) to protect and defend our rights or property, (c) if we determine in our sole discretion that there has been a violation of our terms or policies or the law, (d) to detect or prevent fraud or other illegal activities, (e) to protect the safety and security and integrity of our products or our employees or users, or the public, or (f) to protect against legal liability.
4. Your Rights
Depending on your location, individuals may have certain legal rights regarding their personal information. For example, you may have the right to:
Access your personal information and information regarding how it is processed.
Delete your personal information from our records.
Correct or update your personal information.
Transfer your personal information to a third party (the legal right to data portability).
Restrict how your personal information is processed.
Withdraw your consent – when we rely on consent as the legal basis for processing at any time.
Object to how your personal information is processed.
File a complaint with your local data protection authority.
You can exercise some of these rights through your OpenAI account. If you are unable to exercise your rights through your account, please submit your request through privacy.openai.com or send it to dsar@openai.com.
Note on accuracy: Services like ChatGPT generate responses by reading the user’s request and predicting the most likely words to follow. In some cases, the predicted words may not be the most accurate in reality. For this reason, you should not rely on the factual accuracy of outputs from our models. If you notice that ChatGPT’s outputs contain inaccurate information about you and wish to correct the inaccuracy, you can submit a correction request through privacy.openai.com or send it to dsar@openai.com. Due to the technical complexity of how our models work, we may not be able to correct the inaccuracy in every case. In such cases, you may request the removal of your personal information from ChatGPT’s output by filling out this form.
5.Additional Disclosures for the United States
The following table provides additional information about the categories of personal information we collect and how that information is disclosed. You can read more about the personal information we collect in the “Personal Information We Collect” section above, how personal information is used in the “How We Use Personal Information” section above, and how personal information is retained in the “Security and Retention” section below.
Category of Personal Information Disclosure of Personal Information
Identifiers, such as your name and contact details, IP addresses, and other device identifiers We may disclose this information to our affiliates and service providers for processing according to our instructions; to government authorities and other third parties for the legal reasons mentioned above; to parties involved in transactions; to corporate account administrators or teams; and to other users and third parties with whom you choose to share it.
Commercial information, such as your transaction history We may disclose this information to our affiliates and service providers for processing according to our instructions; to government authorities and other third parties for the legal reasons mentioned above; to parties involved in transactions; and to corporate account administrators or teams.
Network activity information, such as content and how you interact with our services We may disclose this information to our affiliates and service providers for processing according to our instructions; to government authorities and other third parties for the legal reasons mentioned above; to parties involved in transactions; and to other users and third parties with whom you choose to share it.
Geolocation data We may disclose this information to our affiliates and service providers for processing according to our instructions; to government authorities and other third parties for the legal reasons mentioned above; and to parties involved in transactions.
Login data for your account and your payment card information (sensitive personal information) We disclose this information to our affiliates, service providers, government authorities, and parties involved in transactions.
With regard to local law and except for applicable exceptions, individuals may have the following specific privacy rights concerning their personal information:
The right to know more about how your personal information is processed by us, including the specific pieces of personal information we have collected from you.
The right to request deletion of your personal information.
The right to correct your personal information.
The right not to be subject to discrimination concerning the exercise of any of your privacy rights.
We do not sell personal information or share it for behavioral advertising across contexts (as defined under applicable local law). We also do not process sensitive personal information for the purpose of inferring characteristics about consumers.
Exercising your rights. In accordance with applicable local law, you can exercise the privacy rights described in this section by submitting a request through privacy.openai.com or sending it to dsar@openai.com.
Verification. To protect your personal information from unauthorized access, alteration, or deletion, we may ask you to verify your credentials before you can submit a request to know, correct, or delete your personal information. If you do not have an account with us, or if we suspect fraudulent or harmful activity, we may ask you to provide additional personal information and proof of residency for verification. If we cannot verify your identity, we will not be able to fulfill your request.
Authorized agents. You may also submit a request for rights through an authorized agent. If you do so, the agent must provide a signed written authorization to act on your behalf, and you may also be required to verify your identity independently and provide proof of residency to us. Authorized agent requests can be submitted to dsar@openai.com.
Appeals. Depending on where you live, you may have the right to appeal our decision regarding requests to exercise your rights under applicable local law. To appeal a decision, please submit your request to dsar@openai.com.
6.Children
Our service is not directed to children under the age of 13. OpenAI does not collect personal information from children under the age of 13. If you have reason to believe that a child under the age of 13 has provided personal information to OpenAI through the service, please email us at legal@openai.com. We will investigate any notice and if appropriate, we will delete the personal information from our systems. If you are 13 years old or older but under 18, you must have permission from your parent or legal guardian to use our services.
7. Links to Other Websites
The service may contain links to other websites not operated or controlled by OpenAI, including social media services (“Third-Party Sites”). Any information you share with third-party sites will be governed by the privacy policies and terms of service of those third-party sites and not this privacy policy. By providing these links, we do not imply endorsement or review of these sites. Please contact third-party sites directly for information on their privacy practices and policies.
8. Security and Retention
We implement commercially reasonable technical, administrative, and organizational measures to protect personal information online and offline from loss, misuse, unauthorized access, disclosure, alteration, or destruction. However, no internet or email transmission sent by us or to us is completely secure or error-free. In particular, emails sent to or from us may not be secure. Therefore, you should exercise caution in deciding what information to send to us through the service or email. Additionally, we are not responsible for bypassing privacy settings or security measures in the service or third-party websites.
We will retain your personal information for only as long as we need it to provide our services to you, or for other legitimate business purposes such as resolving disputes or safety and security reasons, or complying with our legal obligations. The retention period for personal information will depend on several factors, such as the amount, nature, and sensitivity of the information, the potential risk of harm from unauthorized use or disclosure, the purpose of processing the information, and any legal requirements.
9. International Users
By using our services, you understand and acknowledge that your personal information will be processed and stored in our facilities and servers in the United States and may be disclosed to our service providers and affiliates in other jurisdictions.
Legal basis for processing. The legal bases for processing your personal information include:
Performance of a contract with you when we provide and maintain our services. When we process account information, content, and technical information solely to provide our services to you, this information is necessary for us to provide our services. If you do not provide this information, we may not be able to provide our services to you.
Our legitimate interest in protecting our services from misuse, fraud, or security risks, or in developing and improving or enhancing our services, including when we train our models. This processing may include account information, content, social media information, and technical information. Please read our instructions on how to unsubscribe from the use of your information to train our models.
Your consent when we request your consent to process your personal information for specific purposes we disclose to you.
Compliance with our legal obligations when we use your personal information to comply with applicable law or when we protect our rights or property or the rights of users or third parties, or their safety and security, or when we protect against legal liability.
10.
Changes to the Privacy Policy
We may update this privacy policy from time to time. When we do, we will post the updated version on this page, unless some other form of notice is required by applicable law.
11. How to Contact Us
Please contact support if you have any questions or concerns that have not already been addressed in this privacy policy.
Leave a Reply