OpenAI · Privacy Policy (ROW)

User Rights to Access, Delete, and Port Data

Medium severity
Share 𝕏 Share in Share

What it is

Depending on your location, you may have the following rights with respect to your Personal Data: Access, Correction, Deletion, Data Portability, Restriction of Processing, Objection, and Withdrawal of Consent. You can exercise many of these rights directly through our services or by contacting us at privacy.openai.com.

Why it matters

These rights are legally enforceable in California, the EU, and many other states, meaning OpenAI must respond to your requests within legally mandated timeframes or face regulatory consequences.

Consumer impact

OpenAI collects extensive personal data including conversation content, audio and image inputs, device identifiers, location data, and usage logs across all its services, and may use this data to train AI models unless users opt out. This creates a meaningful privacy risk because sensitive information shared in conversations β€” health queries, financial details, personal communications β€” could indirectly influence model outputs. You can opt out of conversation data being used for AI training by navigating to Settings > Data Controls in your ChatGPT account and disabling 'Improve the model for everyone'.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.
  • Delete Your Data
    Go to privacy.openai.com, select the type of request (access, deletion, or portability), verify your identity, and submit your request. OpenAI is required to respond within 45 days under CCPA or 30 days under GDPR.
  • Export Your Data
    Submit a data portability request at privacy.openai.com to receive a copy of your personal data in a structured, machine-readable format.

Applicable agencies

  • State AG
    State Attorneys General in California, Colorado, Virginia, and other states can enforce consumer rights to access, delete, and port personal data under their respective privacy statutes.
    File a complaint →

Provision details

Document information
Document
Privacy Policy (ROW)
Entity
OpenAI
Document last updated
March 5, 2026
Tracking information
First tracked
March 10, 2026
Last verified
April 4, 2026
Record ID
CA-P-001985
Document ID
CA-D-00006
Evidence Provenance
Source URL
Wayback Machine
SHA-256
f3c083059dff1a3f26f2ce10f0072ca60f38c6921517ae6dd07e528e4bfc7ce2
Verified
✓ Snapshot stored   ✓ Change verified
How to Cite
ConductAtlas Policy Archive
Entity: OpenAI | Document: Privacy Policy (ROW) | Record: CA-P-001985
Captured: 2026-03-10 03:38:17 UTC | SHA-256: f3c083059dff1a3f…
URL: https://conductatlas.com/platform/openai/privacy-policy-row/user-rights-to-access-delete-and-port-data/
Accessed: April 4, 2026
Classification
Severity
Medium
Categories

Other provisions in this document