OpenAI updated its Privacy Policy on May 1, 2026 to add explicit language about direct marketing to users and disclosure of data sharing with marketing partners. The policy now states that OpenAI will promote products and services to users through direct marketing on third-party properties, subject to user choices and controls. Additionally, the policy introduces a new category called 'Vendors, Service Providers, and Marketing Partners,' specifying that OpenAI shares limited information with select marketing partners who are not traditional service providers to help promote products and assess marketing effectiveness. Users can now make choices about the use of their information for third-party product promotion purposes.
The updated policy now explicitly authorizes OpenAI to promote products and services to users through direct marketing on third-party properties and to share limited information with select marketing partners (who are not service providers) to support these efforts. The policy states that some marketing partners may receive information through cookies and similar technologies. The revised terms establish that these marketing practices are subject to user choices and controls, with additional information and opt-out options available. You can make choices about the use of your information for third-party product promotion purposes through controls referenced in the policy.
The updated terms establish explicit authorization for OpenAI to engage in direct marketing to users and to share data with non-service-provider marketing partners to support those efforts. This change operationalizes a new category of data recipient and marketing use case that was not previously disclosed with this level of specificity. The addition of user-control mechanisms suggests OpenAI intends to scale direct-marketing activities while maintaining an option for users to opt out, which affects how personal data flows through the company's marketing operations.
→ Review the updated privacy policy language describing direct marketing practices and marketing partner sharing.
→ Access the 'learn more' links provided in the policy to understand the specific opt-out or control mechanisms available for third-party product promotion.
→ Configure your preferences regarding cookies and direct marketing through the controls referenced in the updated policy.
→ Your information may be used for direct marketing to you on third-party platforms as described in the updated terms.
→ Information about your use of OpenAI services may be shared with marketing partners to assess the effectiveness of product promotion efforts.
→ Cookies and similar technologies may be used to share information with marketing partners unless you exercise available controls.
ConductAtlas has recorded 2 material changes to this document (since April 2026). An additional minor or cosmetic changes were excluded.
Policy now explicitly permits OpenAI to promote products and services through direct marketing on third-party properties, subject to user choices and controls.
Policy introduces new disclosure that OpenAI shares limited information with select marketing partners (not traditional service providers) to assess effectiveness of product promotion efforts.
Policy clarifies that some marketing partners may receive information through cookies and similar technologies.
This change record describes what was added, removed, or modified in the document. Analysis reflects what the updated agreement states or permits. It does not constitute a legal determination about enforceability. Applicability may vary by jurisdiction. Methodology
OpenAI now discloses that it will use your information to market its products on third-party platforms, but you can control whether this happens.
OpenAI now shares information with third-party marketing partners (not just operational vendors) to help promote its services, and these partners may receive data through cookies.
OpenAI's Privacy Policy now explicitly discloses direct marketing practices and introduces a new data-sharing category for non-service-provider marketing partners. This change operationalizes marketing disclosures that may trigger obligations under GDPR (lawful basis for direct marketing), CCPA/CPRA (opt-out rights for sale or sharing), and similar privacy regimes. Organizations that have OpenAI in their vendor stack should evaluate whether their own privacy notices and vendor agreements adequately reflect these third-party marketing disclosures, and whether downstream consumer consent mechanisms (if required by applicable law) cover marketing partner sharing. No immediate enforcement risk is evident from the change itself, but the expanded transparency may signal OpenAI's intention to scale direct-to-consumer marketing activities.
GDPR (lawful basis for direct marketing; international data transfers to marketing partners); CCPA/CPRA (opt-out rights for sale or sharing of personal information); UK PECR (electronic marketing to individuals); ePrivacy Directive (cookie consent); similar state and international privacy laws.
Full compliance analysis
Obligation analysis, escalation trigger, board language, and recommended action.
Watcher: regulatory citations + obligations. Professional: full compliance memo.
ConductAtlas provides verified policy intelligence sourced directly from platform documents. All analysis is intended to support, not replace, legal and compliance review. Record CA-C-001503.
See the full side-by-side comparison of every sentence added, removed, and modified.
🔒 Full diff — WatcherOpenAI's Privacy Policy was updated on May 9, 2026 with a single language modification in the document header. The change …
OpenAI removed language describing advertiser data partnerships and ad personalization controls for free users, while also removing the specific statement …
OpenAI added a new statement clarifying that sensitive data is not processed to infer characteristics about users. The policy also …
OpenAI expanded its data sharing terms to include third-party marketing partners. The updated policy authorizes the use of personal data fo…
Get alerted when this policy changes again — including what changed and why it matters.
Prefer a weekly summary instead?
Get the biggest policy changes across 320+ platforms every Sunday.