OpenAI Enterprise Privacy

This document governs how OpenAI handles your business data when you use its enterprise products or API. By default, OpenAI does not use your data to train its models, and it deletes your API inputs and outputs after 30 days. Only a narrow set of authorized OpenAI employees can access your conversations, and only for specific permitted reasons.

This document establishes OpenAI's data handling obligations and customer rights for enterprise and API use of its services. It sets a default of no model training from business data, with training permitted only upon explicit customer opt-in, and imposes a 30-day retention ceiling on API inputs and outputs followed by deletion unless law or harm-protection purposes require longer retention. Access to customer conversations and API business data is restricted to authorized personnel for an exhaustive set of enumerated purposes. Customers retain intellectual property rights over their inputs and outputs to the extent permitted by law, and fine-tuned models are exclusively reserved for the creating customer with no sharing or cross-training permitted.

As a business customer, your data is not used for model training unless you explicitly opt in, and your API inputs and outputs are deleted after 30 days by default. Your fine-tuned models are kept exclusively for your use and never shared with other customers or used to train other models. You own the rights to your inputs and the outputs you receive, to the extent permitted by law. If you have a qualifying use case, you can request zero data retention for eligible API endpoints.