OpenAI · Privacy Policy (ROW) · View original document ↗

Location and Device Data Collection

Low severity High confidence Explicitdocumentlanguage Rare · 2 of 325 platforms
Share 𝕏 Share in Share 🔒 PDF
Recent governance activity OpenAI recorded 5 documented changes in the last 30 days.
Start monitoring updates
Monitor governance changes for OpenAI Create a free account to receive the weekly governance digest and monitor one platform for governance changes.
Create free account No credit card required.

This analysis describes what OpenAI's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

Even without creating an account, your device details and approximate location are collected passively, which means some data collection occurs before any explicit consent.

Consumer impact (what this means for users)

The policy states that OpenAI collects content users submit, including conversations, uploaded files, images, audio, and video, and may use that content to train AI models. Data may also be shared with third-party API operators, vendors, affiliates, and in connection with business transactions such as mergers or asset sales, meaning user data could be transferred to entities with different privacy practices. You can opt out of having your content used to train AI models by navigating to Settings, then Data Controls in your ChatGPT account, and disabling the 'Improve the model for everyone' option.

How other platforms handle this

Uber Medium

Uber collects precise or approximate location data from riders' and order recipients' mobile devices when the Uber app is running in the foreground (app open and on-screen) or background (app open but not on-screen) of their device. Uber collects this data from the time a ride or order is requested ...

Robinhood Medium

Geolocation data, such as device location. Internet or other electronic network activity information, such as browsing history, search history, and information regarding a consumer's interaction with an internet website, application, or advertisement. Device identifiers, such as IP address, unique d...

PlanetScale Medium

When you visit the Careers portion of our websites, we collect the information that you provide to us in connection with your job application. This includes but is not limited to business and personal contact information, professional credentials and skills, educational and work history and other in...

See all platforms with this clause type →

Monitoring

OpenAI has changed this document before.

Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.

Start Watcher free trial Or create a free account →
▸ View Original Clause Language DOCUMENT RECORD
"
We collect information about the device you use to access our services and your general location. Device information includes your IP address, browser type and settings, and operating system. Location information includes general location inferred from your IP address.

— Excerpt from OpenAI's Privacy Policy (ROW)

Applicable regulations

EU AI Act
European Union
BIPA
Illinois, USA
California AB 2013 AI Training Data Transparency
US-CA
CCPA/CPRA
California, USA
Connecticut Data Privacy Act Amendments
US-CT
CAN-SPAM
United States Federal
ePrivacy Directive
European Union
FTC Act Section 5
United States Federal
GDPR
European Union
Indiana Consumer Data Protection Act
US-IN
Kentucky Consumer Data Protection Act
US-KY
UK GDPR
United Kingdom
Universal Opt-Out Mechanism Expansion 2026
US

Provision details

Document information
Document
Privacy Policy (ROW)
Entity
OpenAI
Document last updated
March 5, 2026
Tracking information
First tracked
March 10, 2026
Last verified
May 12, 2026
Record ID
CA-P-007092
Document ID
CA-D-00006
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
f3c083059dff1a3f26f2ce10f0072ca60f38c6921517ae6dd07e528e4bfc7ce2
Analysis generated
March 10, 2026 03:38 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: OpenAI
Document: Privacy Policy (ROW)
Record ID: CA-P-007092
Captured: 2026-03-10 03:38:17 UTC
SHA-256: f3c083059dff1a3f…
URL: https://conductatlas.com/platform/openai/privacy-policy-row/location-and-device-data-collection/
Accessed: May 14, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
Low
Categories

Other risks in this policy

Related Analysis

Professional Governance Intelligence

Need to monitor specific governance provisions?

Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.

Arbitration clauses AI governance Data rights Indemnification Retention policies
Start Professional free trial

Or start with Watcher →

Built from archived source documents, structured governance mappings, and historical version tracking.

Frequently Asked Questions

What does OpenAI's Location and Device Data Collection clause do?

Even without creating an account, your device details and approximate location are collected passively, which means some data collection occurs before any explicit consent.

How many platforms have this type of clause?

ConductAtlas has identified this type of provision across 2 platforms. See the full comparison.

Is ConductAtlas affiliated with OpenAI?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by OpenAI.