Version history

OpenAI updated their OpenAI Privacy Policy on September 11, 2026. Change detected: 1 sentence(s) added, 1 sentence(s) removed, 11 sentence(s) modified. Document contained 142 sentences after update.

OpenAI's privacy policy was restructured on June 12, 2026, adding a table of contents and clarifying how personal data is used. The most material change is new language explicitly disclosing that Free and Go users' personal data may be received from advertisers and data partners, and that OpenAI personalizes ads and measures ad effectiveness for these users. The policy also adds explicit language stating Free and Go users can control ad personalization through account settings.

OpenAI removed language identifying this as a US-specific privacy policy and collapsed a multilingual language selector into an ellipsis (…) in the document header on June 8, 2026. Previously, the policy explicitly stated 'US privacy policy' and displayed a full list of 70+ language options. The updated version removes the explicit US designation and abbreviates the language selector, which may affect how users identify the applicable jurisdiction for this policy and how they access translations.

OpenAI updated its privacy policy on June 7, 2026 to add explicit language about how it collects and uses advertising data for Free and Go users. The updated policy now states that OpenAI receives information from advertisers and data partners to personalize ads shown to Free and Go users and to measure ad effectiveness. The policy also adds a new data control mechanism allowing Free and Go users to manage what data is used for ad personalization through account settings.

OpenAI modified two sentences in its US Privacy Policy on May 19, 2026. The document timestamp was updated from April 30, 2026 to May 18, 2026. More substantially, the opt-out mechanism for users who are not logged in was expanded: users can now opt out either through a new 'Settings > Data Controls' option within ChatGPT or through the existing 'Your Privacy Choices' link on the website.

OpenAI added a new statement clarifying that sensitive data is not processed to infer characteristics about users. The policy also changed how users who are not logged in can exercise privacy choices, replacing a reference to 'Manage Cookies' with 'Your Privacy Choices' as the tool for opting out of data processing.

OpenAI updated its Privacy Policy on May 1, 2026 to add explicit language about direct marketing to users and disclosure of data sharing with marketing partners. The policy now states that OpenAI will promote products and services to users through direct marketing on third-party properties, subject to user choices and controls. Additionally, the policy introduces a new category called 'Vendors, Service Providers, and Marketing Partners,' specifying that OpenAI shares limited information with select marketing partners who are not traditional service providers to help promote products and assess marketing effectiveness. Users can now make choices about the use of their information for third-party product promotion purposes.

OpenAI removed language describing a separate category of marketing partners and the cookie-based data sharing practices used with those partners. The updated policy now consolidates all third-party recipients under a single "Vendors and Service Providers" category and removes explicit disclosure of cookie-based marketing partner data sharing. Separately, language stating that OpenAI does not process sensitive data for inferring characteristics about users has been deleted.

OpenAI's privacy policy underwent substantial restructuring in an update detected on March 10, 2026. The policy removed multiple standalone sections including 'Disclosure of Personal Data', 'Retention', 'Data controls', 'Your rights', 'Children', 'Security', 'Additional U.S. state disclosures', and 'Changes to the privacy policy', consolidating or relocating their content. The policy added explicit links to jurisdiction-specific versions for EU/EEA/UK/Switzerland and Korea residents, and modified language describing how training data is collected from publicly available internet sources, removing prior references to advertiser data partnerships and replacing them with broader sourcing disclosures.