Provision record
OpenAI · OpenAI Enterprise Privacy · View original document ↗

Fine-tuning data retained until customer deletes files

Medium severity Explicit document language Common · 275 of 352 platforms
Stay ahead of the changes
Track OpenAI and get the diff the day its terms change.
Share 𝕏 Share in Share 🔒 PDF

This analysis describes what OpenAI's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

Recent Activity

This document changed recently

Medium Jul 18, 2026

The updated terms state that workspace admins 'can control' data retention rather than directly controlling it. This conditional phrasing may suggest that retention control is optional or contingent rather than a guaranteed capability. Enterprise customers relying on admin-driven data retention policies should clarify with OpenAI whether this change affects their ability to set specific retention timelines for workspace data.

View change record →
High May 28, 2026

The updated terms shift governance of conversation access and retention from end users to workspace administrators. Under the revised policy, workspace admins can now view, access, export, and delete any end user conversations within their workspace and control how long workspace data is retained. Additionally, OpenAI now reserves the right to retain deleted or unsaved conversations beyond the standard 30-day deletion window if retention is reasonably necessary to protect its services or any third party from harm, beyond prior language that limited retention extensions to legal requirements. Within an enterprise account, end users no longer have unilateral control over conversation visibility or deletion of their own conversations.

View change record →

Clause Stability Stable

0
Changes
3
Months Monitored
Jul 10, 2026
First Seen
Jul 10, 2026
Last Seen
This clause type exists across 1629 other provisions on other platforms.

How other platforms handle this

Google Gemini Medium

We keep some data until you delete your Google Account, such as information about how often you use Gemini Apps.

Salesforce Medium

We may retain your Personal Data for a period of time consistent with the original purpose of collection...or as long as required to fulfill our legal and/or regulatory obligations.

Cloudflare Medium

We store your personal information for a period of time that is consistent with the business purposes set forth in Section 3 of this policy or as long as needed to fulfill and comply with legal obligations.

See all platforms with this clause type →
▸ View Original Clause Language DOCUMENT RECORD
"
Data submitted to fine-tune a model is retained until the customer deletes the files.

Excerpt from OpenAI's Enterprise Privacy

Applicable regulations

CCPA/CPRA
California, USA
GDPR
European Union
Indiana Consumer Data Protection Act
US-IN
UK GDPR
United Kingdom

Provision details

Document information
Document
OpenAI Enterprise Privacy
Entity
OpenAI
Document last updated
May 12, 2026
Tracking information
First tracked
July 9, 2026
Last verified
July 9, 2026
Record ID
CA-P-062744
Document ID
CA-D-00825
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
1ae7d9fa2dca070b64ed5b07ad1ec3806fc650d1cfbfeddb552af548e6be6663
Analysis generated
July 9, 2026 04:24 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: OpenAI
Document: OpenAI Enterprise Privacy
Record ID: CA-P-062744
Captured: 2026-07-09 04:24:19 UTC
SHA-256: 1ae7d9fa2dca070b…
URL: https://conductatlas.com/platform/openai/openai-enterprise-privacy/provision/CA-P-062744/fine-tuning-data-retained-until-customer-deletes-files/
Accessed: Aug. 12, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
Medium
Categories

Other risks in this policy

Get the research letter

Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.

Frequently Asked Questions

What does OpenAI's Fine-tuning data retained until customer deletes files clause do?

The clause states: “Data submitted to fine-tune a model is retained until the customer deletes the files.”

How many platforms have this type of clause?

ConductAtlas has identified this type of provision across 275 platforms. See the full comparison.

Is ConductAtlas affiliated with OpenAI?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by OpenAI.