OpenAI shares your personal data with its affiliated companies, outside vendors, business partners, law enforcement, and any company that acquires OpenAI in a merger or sale.
Your personal data including conversation content can be transferred to any company that acquires OpenAI, and is currently shared with a broad network of affiliates and vendors, with limited granular controls available to users.
Cross-platform context
See how other platforms handle Third-Party Data Disclosure and Sharing and similar clauses.
Compare across platforms →If OpenAI is sold or merges with another company, your personal data — including your conversations — goes with the deal, potentially to an entity with different privacy standards.
REGULATORY FRAMEWORK: GDPR Art. 6 requires a lawful basis for each data sharing relationship; Art. 28 requires data processing agreements with all processors. CCPA §1798.115 grants consumers the right to know third parties to whom their data is disclosed. Corporate transaction data transfers implicate GDPR Art. 46 (international transfer safeguards) if the acquiring entity is outside the EEA.
Compliance intelligence locked
Regulatory citations, enforcement risk, and due diligence action items.
Watcher: regulatory citations. Professional: full compliance memo.