Users can request that OpenAI delete their personal data, including conversation history, subject to certain legal and operational exceptions.
This analysis describes what OpenAI's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The provision establishes the operational framework for compliance with data subject access rights under privacy regulations like GDPR and CCPA. It defines the process by which users exercise control over their stored personal information within OpenAI's systems.
The updated policy now explicitly states four privacy rights that apply depending on your location and subject to applicable exceptions: the right to know about and access your personal data in portable format, the right to request deletion, the right to correct inaccurate data, and the right to be free from retaliation for exercising these rights. Previously, the policy referenced these rights only through procedural language about how to submit requests. The explicit enumeration establishes clearer notice of what protections the policy recognizes. You can exercise these rights by submitting a request through privacy.openai.com or dsar@openai.com.
View change record →The updated policy now explicitly discloses that OpenAI receives information from advertisers and data partners, including details about purchases you make, and uses this data to personalize ads shown to Free and Go users. Previously, the policy referenced ad effectiveness measurement without disclosing the specific source (advertiser data) or the personalization component. Under the revised terms, Free and Go users can use advertising controls in account settings to control what data OpenAI uses to personalize ads. You can access these controls through your OpenAI account settings to adjust ad personalization.
View change record →The updated policy no longer explicitly states that OpenAI receives information from advertisers and other data partners for ad measurement and improvement, nor does it mention that users can control what data is used to personalize ads shown on the service. The revised terms now establish a broader direct marketing authority, stating the company may promote products and services to users through direct marketing and on third-party properties to assess effectiveness, subject to user choices and controls. The policy adds a reference to a Korea Addendum for Korean users. You can review the linked resources to understand what choices and controls remain available.
View change record →You have a right to request deletion of your personal information, though OpenAI may retain some data for legal compliance, safety, or operational reasons. Submitting a deletion request is available through OpenAI's help portal.
How other platforms handle this
To delete your information, you can: Delete your content from specific Google services; Search for and then delete specific items from your account using My Activity; Delete specific Google products, including your information associated with those products; Delete your entire Google Account.
You may submit a request to know, access, correct or delete the information we have collected from or about you here or by sending your request to the physical address provided in the "Contact Us" section below. Through your in-app settings, you can directly update your account information, request ...
Depending on your location, you may have certain rights regarding your personal data, including the right to access, correct, delete, or port your data, the right to restrict or object to processing, and where processing is based on consent, the right to withdraw consent at any time. California resi...
Monitoring
OpenAI has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.
Deletion rights are mandated under GDPR Article 17 and CCPA Section 1798.105; institutions should verify deletion request workflows are operationalized and that retention exceptions are documented and defensible.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.
Professional Governance Intelligence
Need to monitor specific governance provisions?
Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
The provision establishes the operational framework for compliance with data subject access rights under privacy regulations like GDPR and CCPA. It defines the process by which users exercise control over their stored personal information within OpenAI's systems.
You have a right to request deletion of your personal information, though OpenAI may retain some data for legal compliance, safety, or operational reasons. Submitting a deletion request is available through OpenAI's help portal.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by OpenAI.