The policy authorizes disclosure of personal data to counterparties and advisors during due diligence for a transaction, and transfer of personal data to a successor entity as an asset in the event of a strategic transaction, reorganization, bankruptcy, receivership, or service transition.
This analysis describes what OpenAI's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision is a standard commercial clause that authorizes personal data transfer as a business asset in corporate transactions. The disclosure to counterparties during due diligence is noted as occurring before any transaction is completed, which means personal data may be shared with third parties in connection with a transaction that does not ultimately close.
The updated policy explicitly discloses that OpenAI receives information from advertisers and other data partners for Free and Go users, and uses this data to personalize ads and measure ad effectiveness. The policy now states that Free and Go users can control what data OpenAI uses to personalize ads through advertising controls in account settings. This represents clarified disclosure of an existing practice rather than a new authorization.
View change record →The updated privacy policy now explicitly states that OpenAI receives information from advertisers and other data partners, which is used to personalize ads shown to Free and Go users and to measure the effectiveness of those ads. For example, the policy notes that OpenAI could receive information about purchases users make from advertisers. The policy now includes a dedicated section on ad personalization and measurement as a primary use of personal data for these user tiers. You can manage what data OpenAI uses for ad personalization by accessing the advertising controls in your account settings or by using the Data Controls option.
View change record →The updated policy now explicitly authorizes OpenAI to promote products and services to users through direct marketing on third-party properties and to share limited information with select marketing partners (who are not service providers) to support these efforts. The policy states that some marketing partners may receive information through cookies and similar technologies. The revised terms establish that these marketing practices are subject to user choices and controls, with additional information and opt-out options available. You can make choices about the use of your information for third-party product promotion purposes through controls referenced in the policy.
View change record →Removal of explicit disclosure about data handling during business transactions, bankruptcies, and ownership changes reduces transparency about potential data transfer scenarios.
View full change record →Under this clause, personal data collected from users may be disclosed to third-party counterparties and advisors during the due diligence phase of a corporate transaction, and transferred to a successor entity as part of a completed transaction. Users would be subject to the successor entity's privacy practices following any such transfer.
Cross-platform context
See how other platforms handle Business Transfer and Transaction Disclosure and similar clauses.
Compare across platforms →"If we are involved in strategic transactions, reorganization, bankruptcy, receivership, or transition of service to another provider (collectively, a "Transaction"), your Personal Data may be disclosed in the diligence process with counterparties and others assisting with the Transaction and transferred to a successor or affiliate as part of that Transaction along with other assets.Excerpt from OpenAI's Privacy Policy
1) REGULATORY LANDSCAPE: Business transfer provisions engage FTC guidance on privacy policy compliance during corporate transactions, which requires that successor entities honor the original privacy commitments or provide users with notice and choice.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision is a standard commercial clause that authorizes personal data transfer as a business asset in corporate transactions. The disclosure to counterparties during due diligence is noted as occurring before any transaction is completed, which means personal data may be shared with third parties in connection with a transaction that does not ultimately close.
Under this clause, personal data collected from users may be disclosed to third-party counterparties and advisors during the due diligence phase of a corporate transaction, and transferred to a successor entity as part of a completed transaction. Users would be subject to the successor entity's privacy practices following any such transfer.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by OpenAI.