AI supplier change log · OpenAI

OpenAI ChatGPT EU privacy policy, with its model-training page: 8 sections reworded, 8 sections added, 6 sections removed

Page
ChatGPT EU privacy policy, with its model-training page · https://openai.com/policies/eu-privacy-policy/
Recorded
2026-05-18 10:30 UTC, by Open Terms Archive
Unchanged until
at least 2026-05-25 10:30 UTC

What changed

“1. Data controller” · section removed

Its wording

  • If you live in the European Economic Area (EEA) or Switzerland, OpenAI Ireland Limited, with its registered office at 1st Floor, The Liffey Trust Centre, 117-126 Sheriff Street Upper, Dublin 1, D01 YC43, Ireland, is the controller and is responsible for the processing of your Personal Data as described in this Privacy Policy.
  • If you live in the UK, OpenAI OpCo, LLC, with its registered office at 1960 Bryant Street, San Francisco, California 94110, United States, is the controller and is responsible for the processing of your Personal Data as described in this Privacy Policy.

“2. Personal Data we collect” · section removed

Its wording

  • We collect personal data relating to you (“Personal Data”) as follows:
  • Personal Data You Provide:
  • We collect Personal Data if you create an account to use our Services or communicate with us as follows:
  • Account Information:
  • When you create an account with us, we will collect information associated with your account, including your name, contact information, account credentials, date of birth, payment information, and transaction history, (collectively, “Account Information”).
  • User Content:
  • We collect Personal Data that you provide in the input to our Services (“Content”), including your prompts and other content you upload, such as files, images, and audio, depending on the features you use.
  • Communication Information:
  • If you communicate with us, such as via email or our pages on social media sites, we may collect Personal Data like your name, contact information, and the contents of the messages you send (“Communication Information”).
  • Other Information You Provide:
  • We collect other information that you may provide to us, such as when you participate in our events or surveys or provide us with information to establish your identity or age (collectively, “Other Information You Provide”).
  • Personal Data We Receive from Your Use of the Services:
  • When you visit, use, or interact with the Services, we receive the following information about your visit, use, or interactions (“Technical Information”):
  • Log Data:
  • We collect information that your browser or device automatically sends when you use our Services.
  • Log data includes your Internet Protocol address, browser type and settings, the date and time of your request, and how you interact with our Services.
  • Usage Data:
  • We collect information about your use of the Services, such as the types of content that you view or engage with, the features you use and the actions you take, as well as your time zone, country, the dates and times of access, user agent and version, type of computer or mobile device, and your computer connection.
  • Device Information:
  • We collect information about the device you use to access the Services, such as the name of the device, operating system, device identifiers, and browser you are using.

“3. How we use Personal Data” · section removed

Its wording

  • We may use Personal Data for the following purposes:
  • To provide analyze, and maintain our Services, for example to respond to your questions for ChatGPT;
  • To improve and develop our Services and conduct research, for example to develop new product features;
  • To communicate with you, including to send you information about our Services and events, for example about changes or improvements to the Services;
  • To prevent fraud, illegal activity, or misuses of our Services, and to protect the security of our systems and Services;
  • To comply with legal obligations and to protect the rights, privacy, safety, or property of our users, OpenAI, or third parties.
  • We may also aggregate or de-identify Personal Data so that it no longer identifies you and use this information for the purposes described above, such as to analyze the way our Services are being used, to improve and add features to them, and to conduct research.
  • We will maintain and use de-identified information in de-identified form and not attempt to reidentify the information, unless required by law.
  • As noted above, we may use Content you provide us to improve our Services, for example to train the models that power ChatGPT.
  • Read our instructions on how you can opt out of our use of your Content to train our models.

“4. Disclosure of Personal Data” · section removed

Its wording

  • We may disclose your Personal Data in the following circumstances:
  • Vendors and Service Providers:
  • To assist us in meeting business operations needs and to perform certain services and functions, we may disclose Personal Data to vendors and service providers, including providers of hosting services, customer service vendors, cloud services, content delivery services, support and safety monitoring services, email communication software, web analytics services, payment and transaction processors, and other information technology providers.
  • Pursuant to our instructions, these parties will access, process, or store Personal Data only in the course of performing their duties to us.
  • Business Transfers:
  • If we are involved in strategic transactions, reorganization, bankruptcy, receivership, or transition of service to another provider (collectively, a “Transaction”), your Personal Data may be disclosed in the diligence process with counterparties and others assisting with the Transaction and transferred to a successor or affiliate as part of that Transaction along with other assets.
  • Government Authorities or Other Third Parties:
  • We may share your Personal Data, including information about your interaction with our Services, with government authorities, industry peers, or other third parties in compliance with the law (i) if required to do so to comply with a legal obligation, or in the good faith belief that such action is necessary to comply with a legal obligation, (ii) to protect and defend our rights or property, (iii) if we determine, in our sole discretion, that there is a violation of our terms, policies, or the law;
  • (iv) to detect or prevent fraud or other illegal activity;
  • (v) to protect the safety, security, and integrity of our products, employees, users, or the public, or (vi) to protect against legal liability.
  • Affiliates:
  • We may disclose Personal Data to our affiliates, meaning an entity that controls, is controlled by, or is under common control with OpenAI.
  • Our affiliates may use this Personal Data in a manner consistent with this Privacy Policy.
  • Business Account Administrators:
  • When you join a ChatGPT Enterprise or business account, the administrators of that account may access and control your OpenAI account, including being able to access your Content.
  • In addition, if you create an account using an email address belonging to your employer or another organization, we may share the fact that you have an account and certain account information, such as your email address, with your employer or organization to, for example, enable you to be added to their business account.
  • Other Users and Third Parties You Interact or Share Information With:
  • Certain features allow you to interact or share information with other users or third parties.
  • For example, you can share ChatGPT conversations with other users via shared links.
  • You can also send information to third-party applications, such as via custom actions for GPTs, or for searching the web to help answer questions that benefit from more recent information.

“5. Retention” · section removed

Its wording

  • We’ll retain your Personal Data for only as long as we need in order to provide our Services to you, or for other legitimate business purposes such as resolving disputes, safety and security reasons, or complying with our legal obligations.
  • How long we retain Personal Data will depend on a number of factors, such as:
  • Our purpose for processing the data (such as whether we need to retain the data to provide our Services);
  • The amount, nature, and sensitivity of the information;
  • The potential risk of harm from unauthorized use or disclosure;
  • Any legal requirements that we are subject to.
  • In some cases, the length of time we retain data depends on your settings.
  • For example, ChatGPT temporary chats will not appear in your history and will be kept up to 30 days for safety purposes.
  • You can find more information on data controls here.

“12. How to contact us” · section removed

Its wording

  • Please contact support if you have any questions or concerns not already addressed in this Privacy Policy.
  • Alternatively, you can write to us at privacy@openai.com or the address above under Section 1 (Data Controller).
  • You can contact our Data Protection Officer at dpo@openai.com in matters related to Personal Data processing.
  • Table of contents.
  • Services for individuals, such as ChatGPT, Sora, and Operator.
  • Services for businesses, such as ChatGPT Team, ChatGPT Enterprise, and our API Platform.
  • What the process looks like.
  • Updated:
  • April 28, 2025.

“1. Personal Data we collect” · section added

Its wording

  • We collect personal data relating to you (“Personal Data”) as follows:
  • Personal Data You Provide:
  • We collect Personal Data if you create an account to use our Services or communicate with us as follows:
  • Account Information:
  • When you create an account with us, we will collect information associated with your account, including your name, contact information, account credentials, date of birth, payment information, and transaction history, (collectively, “Account Information”).
  • Some of our Services may also allow you to upload a profile picture, a username, or other information as part of your Account Information.
  • User Content:
  • We collect Personal Data that you provide in the input to our Services (“Content”), including your prompts and other content you upload, such as files, images, audio and video, Sora characters, and data from connected services, depending on the features you use.
  • Some of our Services allow you to interact with other users, such as post, comment, or send messages, and we treat those interactions as Content, too.
  • Communication Information:
  • If you communicate with us, such as via email or our pages on social media sites, we may collect Personal Data like your name, contact information, and the contents of the messages you send (“Communication Information”).
  • Contact Data:
  • If you choose to connect your device contacts, we upload information from your device address books and check which of your contacts also use our Services.
  • If any of your contacts aren’t yet using our Services, we’ll update you if they sign up for our Services later.
  • Learn more about connecting your contacts and how we use uploaded contact information of people who don’t use our Services.
  • Other Information You Provide:
  • We collect other information that you provide to us, such as when you participate in our events or surveys, or when you provide us or a vendor operating on our behalf with information to establish your identity or age (collectively, “Other Information You Provide”).
  • Personal Data We Receive from Your Use of the Services:
  • When you visit, use, or interact with the Services, we receive the following information about your visit, use, or interactions:
  • Log Data:

“2. How we use Personal Data” · section added

Its wording

  • We use Personal Data for the following purposes:
  • To provide, analyse, and maintain our Services, for example to respond to your questions for ChatGPT;
  • To improve and develop our Services and conduct research, for example to develop new features;
  • To personalize and customize your experience across our Services, for example to provide you with more relevant Content;
  • To communicate with you, including to respond to your questions, and send you information about our Services and events, for example about changes or improvements to the Services;
  • Identify your contacts who use our Services when you choose to connect your contacts and update you if they join our Services later;
  • To prevent fraud, illegal activity, or misuses of our Services, and to protect the security of our systems and Services, including by monitoring any Content submitted or exchanged on our platforms (learn more here); and.
  • To comply with legal obligations and to protect the rights, privacy, safety, or property of our users, OpenAI, or third parties, for instance to prevent harm to you or others, or to estimate your age to give you an age-appropriate experience.
  • We also aggregate or de-identify Personal Data so that it no longer identifies you and use this information for the purposes described above, such as to analyze the way our Services are being used, to improve and add features to them, and to conduct research.
  • We will maintain and use de-identified information in de-identified form and not attempt to reidentify the information, unless required by law.
  • As noted above, we may use Content you provide us to improve our Services, for example to train the models that power ChatGPT.
  • Read our instructions on how you can opt out of our use of your Content to train our models.

“3. Disclosure of Personal Data” · section added

Its wording

  • We disclose your Personal Data in the following circumstances:
  • Vendors and Service Providers:
  • To assist us in meeting business operations needs and to perform certain services and functions, we disclose Personal Data to vendors and service providers, including providers of hosting services, customer service vendors, cloud services, content delivery services, support and safety services, email communication software, web analytics services, payment and transaction processors, search and shopping providers, and information technology providers.
  • We also work with service providers who help us with age and identity verification, and you can learn more here.
  • Based on our instructions, these parties will access, process, or store Personal Data only in the course of performing their duties to us.
  • Business Transfers:
  • If we are involved in strategic transactions, reorganization, bankruptcy, receivership, or transition of service to another provider (collectively, a “Transaction”), your Personal Data may be disclosed in the diligence process with counterparties and others assisting with the Transaction and transferred to a successor or affiliate as part of that Transaction along with other assets.
  • Government Authorities or Other Third Parties:
  • We may share your Personal Data, including information about your interaction with our Services, with government authorities, industry peers, or other third parties in compliance with the law (i) if required to do so to comply with a legal obligation, or in the good faith belief that such action is necessary to comply with a legal obligation, (ii) to protect and defend our rights or property, (iii) if we determine, in our sole discretion, that there is a violation of our terms, policies, or the law;
  • (iv) to detect or prevent fraud or other illegal activity;
  • (v) to protect the safety, security, and integrity of our products, employees, users, or the public, or (vi) to protect against legal liability.
  • Affiliates:
  • We disclose Personal Data to our affiliates, meaning an entity that controls, is controlled by, or is under common control with OpenAI.
  • Our affiliates may use this Personal Data in a manner consistent with this policy.
  • Business Account Administrators:
  • When you join a ChatGPT Enterprise or business account, the administrators of that account may access and control your OpenAI account, including being able to access your Content.
  • In addition, if you create an account using an email address belonging to your employer or another organization, we may share the fact that you have an account and certain account information, such as your email address, with your employer or organization to, for example, enable you to be added to their business account.
  • Parent or Guardian of a Teen:
  • Teen users and their parents or guardians can choose to link their accounts, allowing the parent or guardian to manage certain settings, and receive alerts if we detect a serious safety concern.
  • These accounts can be unlinked at any time.

“4. Retention” · section added

Its wording

  • We’ll retain your Personal Data for only as long as we need in order to provide our Services to you, or for other legitimate business purposes such as resolving disputes, safety and security reasons, or complying with our legal obligations.
  • How long we retain Personal Data depends on the type of data, how we use it, and in many cases your settings:
  • Information we retain until you delete it:
  • Some of our Services allow you to delete Personal Data stored in your account.
  • For example, you can delete specific, or all, of your ChatGPT conversations, delete specific Saved Memories, or delete your account.
  • Once you choose to delete Personal Data, we will remove it from our systems within 30 days unless we need to retain it for longer as described below, or it has already been de-identified and disassociated from your account when you allow us to use your Content to improve our models.
  • Information we delete automatically:
  • In some cases, Personal Data will be deleted automatically.
  • For example, Temporary Chats will be automatically deleted within 30 days (unless we have to retain them for safety or legal reasons, as described further below), and your Atlas incognito browsing history won’t be saved after you end your session.
  • Information we retain for longer for legitimate security, safety, or legal reasons:
  • In some cases, we need to retain Personal Data for longer even after you delete it, for example because we are legally required to, to address fraud and abuse, for security reasons, or for financial record-keeping purposes.
  • For instance:
  • If specific Content, or your account, is banned because of violations of our usage policies, we may retain that data for to protect our services from fraud, abuse, or other violations of our policies;
  • If we are legally required to retain your data (for instance, we receive a lawful subpoena) then we may retain it for the duration of the relevant legal or regulatory obligation;
  • When we are a party to a financial transaction (for instance, when we process your payment for a ChatGPT Plus or Pro account, or facilitate a purchase on ChatGPT), we may retain payment and transaction related information to meet our accounting, dispute resolution, and regulatory compliance purposes;
  • When you ask us to delete your Personal Data, we retain the audit record of the erasure request to be able to verify that we have complied with the request.
  • In determining these retention periods, we consider a number of factors, such as:
  • Our purpose for processing the Personal Data (such as whether we need to retain it to provide our Services);
  • The amount, nature, and sensitivity of the information;
  • The potential risk of harm from unauthorized use or disclosure;

“5. Data controls” · section added

Its wording

  • Our Services provide you with a number of controls over your Personal Data and how it is used and retained.
  • You can always change these settings in your account.
  • These include the following controls:
  • You can easily choose whether your Content can be used to improve and train our models.
  • You can decide whether we will remember details between chats to make Content more personalized and relevant.
  • You can export your ChatGPT history and data in your account’s data controls.
  • You can delete or archive chats in ChatGPT, or delete your account entirely.
  • If you enable Temporary Chat in ChatGPT, those conversations with ChatGPT will not appear in your history or be used to improve OpenAI’s models.
  • Depending on applicable law, you may be able to choose which cookies are used when you use our Services.
  • You can use the advertising controls in your account settings to control what data we use to personalize the ads we show you on our Services.
  • If you use the Atlas browser, you can delete your browsing history or choose to browse the web in incognito mode, which helps keep your browsing private from other people who use your device.
  • You can unsubscribe from marketing communications you receive from us by using the choices provided in those communications.
  • You can find more information on data controls here and by visiting privacy.openai.com.

“12. Data controller” · section added

Its wording

  • If you live in the European Economic Area (EEA) or Switzerland, OpenAI Ireland Limited, with its registered office at 1st Floor, The Liffey Trust Centre, 117-126 Sheriff Street Upper, Dublin 1, D01 YC43, Ireland, is the controller and is responsible for the processing of your Personal Data as described in this policy.
  • If you live anywhere else, OpenAI OpCo, LLC, with its registered office at 1455 Third Street, San Francisco, California 94158, United States, is the controller and is responsible for the processing of your Personal Data as described in this policy.

“13. How to contact us” · section added

Its wording

  • Please contact support if you have any questions or concerns not already addressed in this policy.
  • Alternatively, you can write to us at privacy@openai.com or the address above under Section # (Data Controller).
  • You can contact our Data Protection Officer at dpo@openai.com in matters related to Personal Data processing.

“14. Useful resources” · section added

Its wording

  • How your data is used to improve model performance.
  • Data Controls FAQ.
  • Privacy Portal.
  • Memories FAQ.
  • Voice Mode FAQ.
  • Health Privacy Notice.
  • Table of contents.
  • Services for individuals, such as ChatGPT, Sora, and Operator.
  • Services for businesses, such as ChatGPT Team, ChatGPT Enterprise, and our API Platform.
  • What the process looks like.
  • Updated:
  • March 13, 2026.

“Opening” · section reworded

Wording removed

  • Data controller.
  • 2.
  • 3.
  • 4.
  • 5.
  • November 4, 2024.

Wording added

  • 2.
  • 3.
  • 4.
  • 5.
  • Data controls.
  • Data controller.
  • 13.
  • 14.
  • Useful resources.
  • April 1, 2026.

“Europe privacy policy” · section reworded

Wording removed

  • We at OpenAI OpCo, LLC (together with our affiliates, “OpenAI”, “we”, “our” or “us”) respect your privacy and are strongly committed to keeping secure any information we obtain from you or about you.
  • This Privacy Policy describes our practices with respect to Personal Data that we collect from or about you when you use our website, applications, and services (collectively, “Services”).
  • For information about how we collect and use training information to develop our language models that power ChatGPT and other Services, and your choices with respect to that information, please see this help center article.

Wording added

  • (Previous version).
  • At OpenAI, our mission is to ensure that artificial general intelligence benefits everyone.
  • We build tools like ChatGPT and Sora to help people learn, create, and solve problems.
  • We at OpenAI (together with our affiliates, “OpenAI”, “we”, “our” or “us”) are committed to respecting your privacy and are strongly committed to keeping secure any information we obtain from you or about you.
  • This Privacy Policy describes our practices with respect to personal data that we collect from or about you, and how we use it when you use our website, applications, and services (collectively, “Services”).
  • For information about how we collect and use training information to develop our language models that power ChatGPT and other Services, and your choices with respect to that information, please see this policy as well as this help center article.

“6. Your rights” · section reworded

Wording removed

  • Withdraw your consent—where we rely on consent as the legal basis for processing at any time.
  • Object to our processing of your Personal Data for direct marketing at any time.
  • You can exercise some of these rights through your OpenAI account.
  • If you have any unresolved complaints with us or our Data Protection Officer, you can reach out to the Irish Data Protection Commission as our lead supervisory authority, or your local supervisory authority.
  • For any unresolved complaints relating to the UK you can reach out to the Information Commissioner's Office and for Switzerland, to the Federal Data Protection and Information Commissioner.

Wording added

  • Withdraw your consent—where we rely on consent as the legal basis for processing.
  • Object to our processing of your Personal Data for direct marketing.
  • You can exercise some of these rights through your OpenAI account using the tools described in the Data controls section.
  • If you have any unresolved complaints with us or our Data Protection Officer:
  • If you reside in the European Economic Area, you can reach out to the Irish Data Protection Commission as our lead supervisory authority, or your local supervisory authority;
  • If you reside in the UK, you can reach out to the Information Commissioner's Office;
  • If you reside in Switzerland, you can reach out to the Federal Data Protection and Information Commissioner.

“7. Children” · section reworded

Wording added

  • Learn more about how teens and parents or guardians can choose to link their accounts.

“9. Legal bases for processing” · section reworded

Wording removed

  • To provide, analyze, and maintain our Services * Account Information * User Content * Communication Information * Other Information You Provide * Log Data * Usage Data * Device Information * Location Information * Cookies and Similar Technologies Where necessary to perform a contract with you, such as processing a user’s prompts to provide a response.
  • To improve and develop our Services and conduct research * Account Information * User Content * Communication Information * Other Information You Provide * Data We Receive From Other Sources * Log Data * Usage Data * Device Information * Cookies and Similar Technologies See here for more specific information on the data used to train our models.
  • Where necessary for our legitimate interests and those of third parties and broader society, including in developing, improving, or promoting our Services, such as when we train and improve our models.
  • To communicate with you, including to send you information about our Services and events * Account Information * Communication Information * Social Media Information * Other Information You Provide * Log Data * Usage Data * Device Information * Cookies and Similar Technologies Where necessary to perform a contract with you, such as processing your contact information to send you a technical announcement about the Services.
  • To prevent fraud, illegal activity, or misuses of our Services, and to protect the security of our systems and Services * Account Information * User Content * Communication Information * Social Media Information * Other Information You Provide * Data We Receive From Other Sources * Log Data * Usage Data * Device Information * Cookies and Similar Technologies Where necessary to comply with a legal obligation.
  • Where we are not under a specific legal obligation, where necessary for our legitimate interests and those of third parties, including in protecting our Services from abuse, fraud, or security risks, such as processing data from security partners to protect against fraud, abuse and security threats in our Services.
  • To comply with legal obligations and to protect the rights, privacy, safety, or property of our users, OpenAI, or third parties * Account Information * User Content * Communication Information * Social Media Information * Other Information You Provide * Data We Receive From Other Sources * Log Data * Usage Data * Device Information * Cookies and Similar Technologies Where necessary to comply with a legal obligation, such as retaining transaction information to comply with record-keeping obligations.

Wording added

  • To provide, analyse, and maintain our Services For example, * We use your email address and password to authenticate your login. * We use your payment card details to process subscription charges or purchases on ChatGPT. * We use your prompts and other Content to provide you with responses. * We conduct analytics, measurement, and other types of analysis to understand how our Services are used, for example, we analyze usage data to ensure uptime and the reliability and safety of our Services. * Account Information * User Content * Communication Information * Other Information You Provide * Log…
  • To personalise and customise your experience across our Services for you.
  • For example, * If Memory is on, we may remember details you’ve shared across conversations to provide more personalised and consistent responses in future chats. * Using information you add in Custom Instructions (such as “I like concise answers”) to tailor how the model responds to you. * Suggesting conversation topics based on subjects you’ve previously discussed or saved in your Memory * Tailoring recommendations for Sora videos that may be relevant to you. * To give you an age-appropriate experience. * Account Information * User Content * Other Information You Provide * Log Data * Usage Da…
  • Where necessary for our legitimate interests and those of third parties to provide you with a better user experience.
  • For example, to personalise features and content or make suggestions for topics that you may be interested in.
  • Where necessary to comply with a legal obligation (or, where not under a specific legal obligation, where necessary for our legitimate interests and those of third parties), such as to provide you with an age-appropriate experience.
  • To improve and develop our Services, and conduct research For example, * If training is enabled (see your data controls here) or if you provide feedback, we use the content you share with us to help our models become more accurate and better at solving your specific problems and help improve their general capabilities and safety. * We use publicly available content that is freely and openly accessible on the internet, as well as data from third-party partners, to train our models. * Account Information * User Content * Communication Information * Other Information You Provide * Information We …
  • To communicate with you, including to send you information about our Services and events, and to promote our Services to you. * Sending updates about feature changes or outages. * Sending certain forms of marketing communications. * Responding to a request you send through the Help Center. * Sending surveys to ask for feedback or input about our products and services. * Account Information * Communication Information * Information We Receive From Other Sources * Other Information You Provide * Log Data * Usage Data * Device Information * Cookies and Similar Technologies Where necessary to perf…
  • Where necessary for our legitimate interests and those of third parties, for example when sending surveys to ask for feedback.
  • To identify your contacts who use our Services when you choose to connect your contacts, and to update you if they join our Services later. * Contact Data * Log Data * Device Information Where necessary to perform a contract with you when you choose to connect your contacts on our Services.
  • Where necessary for our legitimate interests and those of third parties, to enable you to connect your contacts and collaborate with people you may know on our Services.
  • To prevent fraud, illegal activity, or misuses of our Services, and to protect the security of our systems and Services For example, * Monitoring for suspicious sign-in attempts or unusual activity on your account. * Using IP addresses and device identifiers to detect abuse. * Retaining information about accounts that violate policies. * Account Information * User Content * Communication Information * Other Information You Provide * Information We Receive From Other Sources * Log Data * Usage Data * Device Information * Cookies and Similar Technologies Where necessary to comply with a legal ob…
  • Where we are not under a specific legal obligation, where necessary for our legitimate interests and those of third parties, including in protecting our Services from abuse, fraud, or security risks, such as processing data from trusted partners to protect against fraud, abuse and security threats in our Services.
  • To comply with legal obligations and to protect the rights, privacy, safety, or property of our users, OpenAI, or third parties For example, * Retaining billing information to comply with financial requirements. * Providing information to law enforcement when required by a valid legal request. * Investigating and enforcing violations of our Terms of Use, including by monitoring content submitted or exchanged on our platforms (learn more here). * Taking steps to prevent harm, for example notifying parents/guardians or authorities when we detect a risk of harm to teen users with linked accounts.…
  • When necessary to protect the vital interests of you or another person, for example when teen safety alerts are triggered.

“10. Data transfers” · section reworded

Wording removed

  • OpenAI processes your Personal Data on servers located outside of the EEA, Switzerland and the UK for the purposes described in this Privacy Policy.
  • This includes processing and storing your Personal Data in our facilities and servers in the United States.
  • When transferring Personal Data outside of the EEA, Switzerland or the UK, we rely on the following transfer mechanisms to comply with applicable data protection law:
  • We rely on the European Commission’s adequacy decisions pursuant to Article 45(1) GDPR when transferring your Personal Data to any country that has been considered to provide an adequate level of protection.
  • For other jurisdictions, we rely on the Standard Contractual Clauses (“SCCs”) as approved by the European Commission pursuant to Article 46(2)(c) GDPR and on the UK Data Transfer Addendum.

Wording added

  • OpenAI processes your Personal Data on servers located outside of the EEA, Switzerland and the UK for the purposes described in this policy.
  • This includes processing and storing your Personal Data in our facilities and servers in the United States or in countries or territories where our affiliates and partners or our vendors and service providers are located.
  • When transferring Personal Data outside of the EEA, Switzerland or the UK, we rely on valid transfer mechanisms to comply with applicable data protection law, such as:
  • We rely on the European Commission’s adequacy decisions and the UK Secretary of State’s adequacy regulations pursuant to Article 45(1) EU and UK GDPR (“GDPR”) when transferring your Personal Data to any country that has been considered to provide an adequate level of protection.
  • For other jurisdictions, we rely on the Standard Contractual Clauses as approved by the European Commission pursuant to Article 46(2)(c) GDPR (“SCCs”) and on the UK International Data Transfer Addendum to the SCCs.

“11. Changes to the privacy policy” · section reworded

Wording removed

  • We may update this Privacy Policy from time to time.

Wording added

  • We may update this policy from time to time.

“How your data is used to improve model performance” · section reworded

Wording removed

  • We don’t use your content to market our services or create advertising profiles of you—we use it to make our models more helpful.

What this does not say

This shows which wording changed, quoted exactly from the recorded versions of the public page. It does not say whether a change is better or worse, why it was made, or what it means for anyone. The supplier’s own page is the authority on what it says.

Check the record yourself

Nymbrink did not read this page itself, and has not signed this entry. It shows the change between two versions Open Terms Archive recorded. Compare them in the archive: the version before and this version.

Some suppliers’ sites turn automated readers away. For those, entries show the documents as Open Terms Archive recorded them (GenAI Governance Archive, University of Bremen). A recorded change is listed once the archive has recorded nothing else in that document for seven days, and the archive’s own reformatting of its copies is never counted as a change. Nymbrink did not read those pages itself and has not signed those entries. If this entry is wrong, write to contact@nymbrink.com.

Entries marked “Recorded by Open Terms Archive” are derived from the GenAI Governance Archive, University of Bremen, by Open Terms Archive contributors, licensed under the Open Data Commons Attribution License 1.0.