OpenAI can use what you type into ChatGPT — your questions, prompts, and conversations — to train and improve its AI models, unless you go into your settings and turn this off.
By default, your conversation content — including any sensitive information you type — may be used to train OpenAI's AI models; this is an opt-out rather than opt-in arrangement, meaning most users are enrolled without affirmative consent.
How other platforms handle this
Dropbox uses certain trusted third parties (for example, providers of customer support and IT services) for the business purposes of helping us provide, improve, protect, and promote our Services. These third parties will access your information to perform tasks on our behalf, and we'll remain respo...
As a global platform, we move data across borders to ensure seamless connectivity, Service provision and business operations. While our primary processing facilities are in the U.S., we use regulator-approved frameworks to ensure personal data receives the same high level of protection everywhere it...
We may disclose certain information, in connection with or during negotiations or closing of any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
If you share sensitive personal, medical, financial, or professional information in a ChatGPT conversation, that content may become part of OpenAI's training data, potentially influencing future AI outputs in ways that are difficult to fully audit or reverse.
(1) REGULATORY FRAMEWORK: This provision implicates GDPR Art. 6(1)(f) (legitimate interests as lawful basis for processing), Art. 9 (prohibition on processing special category data without explicit consent), and Art. 22 (automated decision-making). Under CCPA/CPRA §1798.120, use of personal information to train AI models may constitute a 'use' that triggers opt-out rights. The FTC Act Section 5 applies if the training use is insufficiently disclosed. The EU AI Act Articles 53 and 53a impose transparency obligations on GPAI model providers regarding training data sourcing. (2)
Compliance intelligence locked
Regulatory citations, enforcement risk, and due diligence action items.
Watcher: regulatory citations. Professional: full compliance memo.
Your genetic data may be transferred to a new owner as a business asset. Here is what the Terms of Service actually say and what you can do right now.