OpenAI removed language describing advertiser data partnerships and ad personalization controls for free users, while also removing the specific statement that free and go users could control ad personalization through account settings. The policy now presents a more general framework for direct marketing and promotional efforts. Additionally, OpenAI added a reference to a Korea Addendum for users in the Republic of Korea and changed the document title from 'US privacy policy' to 'Privacy policy'.
The updated policy no longer explicitly states that OpenAI receives information from advertisers and other data partners for ad measurement and improvement, nor does it mention that users can control what data is used to personalize ads shown on the service. The revised terms now establish a broader direct marketing authority, stating the company may promote products and services to users through direct marketing and on third-party properties to assess effectiveness, subject to user choices and controls. The policy adds a reference to a Korea Addendum for Korean users. You can review the linked resources to understand what choices and controls remain available.
The updated policy removes specific disclosures about where ad targeting data comes from and what controls users have over ad personalization, while simultaneously expanding the stated scope of direct marketing activities on third-party properties. For free and go tier users, this creates reduced transparency about advertiser data flows. For organizations with data processing agreements or privacy notices that reference OpenAI's policy, this change may require contract or notice updates to accurately reflect what OpenAI now discloses about its practices.
→ Review your account settings to identify what advertising controls remain available, as the policy no longer explicitly describes them.
→ For users in the Republic of Korea, consult the Korea Addendum referenced in the updated policy for jurisdiction-specific privacy rights and controls.
→ Free and go users will not have explicit notice in the privacy policy about which advertisers or data partners share information with OpenAI.
→ Free and go users will not have guidance in the privacy policy about how to control what data is used for ad personalization, despite any account-level controls that may still exist.
This is the 2nd significant Transparency Removal change OpenAI has made since ConductAtlas began monitoring.
ConductAtlas has recorded 3 material changes to this document (since April 2026). An additional minor or cosmetic changes were excluded.
2 of OpenAI's significant changes have been classified as negative for consumers.
Removed statement that OpenAI receives information from advertisers and data partners for ad measurement purposes.
Removed explicit disclosure that free and go users can use account settings to control ad personalization data.
Expanded to explicitly authorize promoting products and services on third-party properties and assessing effectiveness of those efforts.
This change record describes what was added, removed, or modified in the document. Analysis reflects what the updated agreement states or permits. It does not constitute a legal determination about enforceability. Applicability may vary by jurisdiction. Methodology
The policy no longer tells free users they have a specific tool in account settings to control how their data personalizes ads.
The policy no longer explains that advertisers share purchase and other data with OpenAI to help measure ad effectiveness.
+ 2 more obligation changes. Full breakdown available with Watcher.
Track changes →OpenAI removed disclosure language regarding advertiser data partnerships and free user ad personalization controls while simultaneously expanding the stated scope of direct marketing activities. For organizations relying on OpenAI's privacy representations in their own privacy notices or data processing agreements, this creates a material change in what OpenAI discloses about its data practices. Depending on your jurisdiction and how OpenAI's practices are referenced in your vendor contracts or privacy documentation, you may need to update representations about what OpenAI discloses or what controls are available to free tier users. The addition of a Korea Addendum suggests OpenAI may be implementing jurisdiction-specific policies; confirmation of the content and requirements of that addendum may be necessary for compliance assessment.
GDPR (marketing and consent provisions), CCPA (direct marketing opt-out rights), FTC Act Section 5 (unfair or deceptive practices regarding disclosure of data practices), COPPA (if minors are affected by advertising changes), Korea's Personal Information Protection Act (given new Korea Addendum reference)
Full compliance analysis
Obligation analysis, escalation trigger, board language, and recommended action.
Watcher: regulatory citations + obligations. Professional: full compliance memo.
ConductAtlas provides verified policy intelligence sourced directly from platform documents. All analysis is intended to support, not replace, legal and compliance review. Record CA-C-001608.
See the full side-by-side comparison of every sentence added, removed, and modified.
🔒 Full diff — WatcherOpenAI's Privacy Policy was updated on May 9, 2026 with a single language modification in the document header. The change …
OpenAI added a new statement clarifying that sensitive data is not processed to infer characteristics about users. The policy also …
OpenAI updated its Privacy Policy on May 1, 2026 to add explicit language about direct marketing to users and disclosure …
OpenAI expanded its data sharing terms to include third-party marketing partners. The updated policy authorizes the use of personal data fo…
Get alerted when this policy changes again — including what changed and why it matters.
Prefer a weekly summary instead?
Get the biggest policy changes across 320+ platforms every Sunday.