OpenAI · OpenAI Privacy Policy · View original document ↗

Data Collection from Third-Party Sources

Medium severity Rare · 4 of 325 platforms
Share 𝕏 Share in Share 🔒 PDF
Recent governance activity OpenAI recorded 11 documented changes in the last 30 days.
Start monitoring updates
Monitor governance changes for OpenAI Create a free account to receive the weekly governance digest and monitor one platform for governance changes.
Create free account No credit card required.

This analysis describes what OpenAI's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

The clause establishes OpenAI's authority to incorporate third-party sourced data into its user profiles and service operations, expanding the data streams that inform service delivery and user identification beyond direct user inputs.

Recent Activity

This document changed recently

Medium May 14, 2026

The updated policy now explicitly states four privacy rights that apply depending on your location and subject to applicable exceptions: the right to know about and access your personal data in portable format, the right to request deletion, the right to correct inaccurate data, and the right to be free from retaliation for exercising these rights. Previously, the policy referenced these rights only through procedural language about how to submit requests. The explicit enumeration establishes clearer notice of what protections the policy recognizes. You can exercise these rights by submitting a request through privacy.openai.com or dsar@openai.com.

View change record →
Medium May 11, 2026

The updated policy now explicitly discloses that OpenAI receives information from advertisers and data partners, including details about purchases you make, and uses this data to personalize ads shown to Free and Go users. Previously, the policy referenced ad effectiveness measurement without disclosing the specific source (advertiser data) or the personalization component. Under the revised terms, Free and Go users can use advertising controls in account settings to control what data OpenAI uses to personalize ads. You can access these controls through your OpenAI account settings to adjust ad personalization.

View change record →
Medium May 5, 2026

The updated policy no longer explicitly states that OpenAI receives information from advertisers and other data partners for ad measurement and improvement, nor does it mention that users can control what data is used to personalize ads shown on the service. The revised terms now establish a broader direct marketing authority, stating the company may promote products and services to users through direct marketing and on third-party properties to assess effectiveness, subject to user choices and controls. The policy adds a reference to a Korea Addendum for Korean users. You can review the linked resources to understand what choices and controls remain available.

View change record →

Consumer impact (what this means for users)

Users' information profiles may be supplemented with data originating from external sources and other users without requiring direct user submission of that information. This affects the scope and sources of data that OpenAI processes in connection with the user's account.

How other platforms handle this

Visa Medium

We may collect personal information about you from third parties, such as data brokers, social media platforms, and our business partners. This information may include demographic information, interests, and other information that helps us understand you better and provide you with relevant products...

Anthropic Medium

Anthropic obtains personal data from third party sources in order to train our models. Specifically, we train our models using data from the following sources: Publicly available information via the Internet; Datasets that we obtain through commercial agreements with third party businesses; Data tha...

Airtable Medium

Once the authentication is complete, we have the ability to access information you provided to us or was otherwise collected by the third-party service in accordance with the privacy practices of that third party. We will store the information and data we collect and associate it with your Airtable ...

See all platforms with this clause type →

Monitoring

OpenAI has changed this document before.

Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.

Start Watcher free trial Or create a free account →
▸ View Original Clause Language DOCUMENT RECORD
"
We may receive information about you from third parties, such as social media platforms, identity verification services, and other users who share content about you when using our services.

— Excerpt from OpenAI's OpenAI Privacy Policy

Applicable regulations

EU AI Act
European Union
BIPA
Illinois, USA
California AB 2013 AI Training Data Transparency
US-CA
CCPA/CPRA
California, USA
Connecticut Data Privacy Act Amendments
US-CT
CAN-SPAM
United States Federal
ePrivacy Directive
European Union
FTC Act Section 5
United States Federal
GDPR
European Union
Indiana Consumer Data Protection Act
US-IN
Kentucky Consumer Data Protection Act
US-KY
UK GDPR
United Kingdom
Universal Opt-Out Mechanism Expansion 2026
US

Provision details

Document information
Document
OpenAI Privacy Policy
Entity
OpenAI
Document last updated
May 5, 2026
Tracking information
First tracked
March 6, 2026
Last verified
April 10, 2026
Record ID
CA-P-002007
Document ID
CA-D-00010
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
90ad72975ac0d9d86d724561a29d464c061ec09345abf2fde0eccd43d6205bcf
Analysis generated
March 6, 2026 20:23 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: OpenAI
Document: OpenAI Privacy Policy
Record ID: CA-P-002007
Captured: 2026-03-06 20:23:45 UTC
SHA-256: 90ad72975ac0d9d8…
URL: https://conductatlas.com/platform/openai/openai-privacy-policy/data-collection-from-third-party-sources/
Accessed: May 20, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
Medium
Categories

Other risks in this policy

Related Analysis

Professional Governance Intelligence

Need to monitor specific governance provisions?

Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.

Arbitration clauses AI governance Data rights Indemnification Retention policies
Start Professional free trial

Or start with Watcher →

Built from archived source documents, structured governance mappings, and historical version tracking.

Frequently Asked Questions

What does OpenAI's Data Collection from Third-Party Sources clause do?

The clause establishes OpenAI's authority to incorporate third-party sourced data into its user profiles and service operations, expanding the data streams that inform service delivery and user identification beyond direct user inputs.

How does this clause affect you?

Users' information profiles may be supplemented with data originating from external sources and other users without requiring direct user submission of that information. This affects the scope and sources of data that OpenAI processes in connection with the user's account.

How many platforms have this type of clause?

ConductAtlas has identified this type of provision across 4 platforms. See the full comparison.

Is ConductAtlas affiliated with OpenAI?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by OpenAI.