OpenAI · Privacy Policy (ROW) · View original document ↗

Third-Party and Data Broker Data Collection

Medium severity High confidence Explicitdocumentlanguage Unique · 0 of 325 platforms
Share 𝕏 Share in Share 🔒 PDF
Recent governance activity OpenAI recorded 5 documented changes in the last 30 days.
Start monitoring updates
Monitor governance changes for OpenAI Create a free account to receive the weekly governance digest and monitor one platform for governance changes.
Create free account No credit card required.

This analysis describes what OpenAI's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

Users may not be aware that OpenAI can accumulate personal information about them from external sources such as data brokers and marketing vendors, which may include data the user did not consciously provide to any OpenAI service.

Consumer impact (what this means for users)

The policy states that OpenAI collects content users submit, including conversations, uploaded files, images, audio, and video, and may use that content to train AI models. Data may also be shared with third-party API operators, vendors, affiliates, and in connection with business transactions such as mergers or asset sales, meaning user data could be transferred to entities with different privacy practices. You can opt out of having your content used to train AI models by navigating to Settings, then Data Controls in your ChatGPT account, and disabling the 'Improve the model for everyone' option.

How other platforms handle this

Groq Medium

We (or third parties acting on our behalf) may receive or collect additional information about you from public databases, partners, social media platforms, conference hosts, event companies, and other third parties that supplement the information we collect directly or automatically as described abo...

Anthropic Medium

Anthropic obtains personal data from third party sources in order to train our models. Specifically, we train our models using data from the following sources: Publicly available information via the Internet; Datasets that we obtain through commercial agreements with third party businesses; Data tha...

PlanetScale Medium

When you visit the Careers portion of our websites, we collect the information that you provide to us in connection with your job application. This includes but is not limited to business and personal contact information, professional credentials and skills, educational and work history and other in...

See all platforms with this clause type →

Monitoring

OpenAI has changed this document before.

Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.

Start Watcher free trial Or create a free account →
▸ View Original Clause Language DOCUMENT RECORD
"
We collect personal data from other data sources: Third party services: If you choose to connect a third-party service (like Google) to your OpenAI account, we will collect information about you from that service, such as your name and email address. Other sources: We may also receive your personal data from other sources, such as when you interact with us on social media or events, from our marketing vendors, or other third parties.

— Excerpt from OpenAI's Privacy Policy (ROW)

Applicable regulations

EU AI Act
European Union
BIPA
Illinois, USA
California AB 2013 AI Training Data Transparency
US-CA
CCPA/CPRA
California, USA
Connecticut Data Privacy Act Amendments
US-CT
CAN-SPAM
United States Federal
ePrivacy Directive
European Union
FTC Act Section 5
United States Federal
GDPR
European Union
Indiana Consumer Data Protection Act
US-IN
Kentucky Consumer Data Protection Act
US-KY
UK GDPR
United Kingdom
Universal Opt-Out Mechanism Expansion 2026
US

Provision details

Document information
Document
Privacy Policy (ROW)
Entity
OpenAI
Document last updated
March 5, 2026
Tracking information
First tracked
March 10, 2026
Last verified
May 12, 2026
Record ID
CA-P-009522
Document ID
CA-D-00006
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
f3c083059dff1a3f26f2ce10f0072ca60f38c6921517ae6dd07e528e4bfc7ce2
Analysis generated
March 10, 2026 03:38 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: OpenAI
Document: Privacy Policy (ROW)
Record ID: CA-P-009522
Captured: 2026-03-10 03:38:17 UTC
SHA-256: f3c083059dff1a3f…
URL: https://conductatlas.com/platform/openai/privacy-policy-row/third-party-and-data-broker-data-collection/
Accessed: May 14, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
Medium
Categories

Other risks in this policy

Related Analysis

Professional Governance Intelligence

Need to monitor specific governance provisions?

Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.

Arbitration clauses AI governance Data rights Indemnification Retention policies
Start Professional free trial

Or start with Watcher →

Built from archived source documents, structured governance mappings, and historical version tracking.

Frequently Asked Questions

What does OpenAI's Third-Party and Data Broker Data Collection clause do?

Users may not be aware that OpenAI can accumulate personal information about them from external sources such as data brokers and marketing vendors, which may include data the user did not consciously provide to any OpenAI service.

Is ConductAtlas affiliated with OpenAI?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by OpenAI.