“After 30 days, API inputs and outputs are removed from our systems, unless we are legally required to retain them.”
This analysis describes what OpenAI's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The clause establishes a default deletion timeline for API data, with the only exception being a legal retention obligation.
Your API inputs and outputs will be deleted from OpenAI's systems after 30 days unless a legal requirement compels retention.
How other platforms handle this
Except for the IP address used to create your account, Reddit will delete any IP addresses collected after 100 days.
In jurisdictions where we offer Friendly Faces, if you enable Friendly Faces, we delete any Facial Data after 30 days if you do not assign it a name...
We may retain some of your Data even after you cease to use our Services, for instance if the Data is necessary to meet our legal obligations, such as tax and accounting requirements.
"After 30 days, API inputs and outputs are removed from our systems, unless we are legally required to retain them.Excerpt from OpenAI's Enterprise Privacy
Get the weekly coverage letter
Companies change their terms without announcing it. We capture governance documents, compare each new version with the last, and publish what changed, with the source text behind it. One email a week on what we found and what we could not reach.
The clause establishes a default deletion timeline for API data, with the only exception being a legal retention obligation.
Your API inputs and outputs will be deleted from OpenAI's systems after 30 days unless a legal requirement compels retention.
ConductAtlas has identified this type of provision across 268 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by OpenAI.