9 Total
6 High severity
3 Medium severity
0 Low severity
Summary

This is OpenAI's Terms of Use for consumer products like ChatGPT and DALL·E, covering what you can and can't do with these AI tools and what OpenAI can do with your conversations and inputs. The single most important thing to know is that by default OpenAI may use your conversations and the content you submit to train its AI models, and you must actively opt out through your account settings to prevent this. If you disagree with any future changes to these terms, your only remedy is to stop using the services, as continued use counts as acceptance.

Technical Summary

This document governs individual use of OpenAI's consumer-facing services including ChatGPT and DALL·E, forming a binding agreement between users and OpenAI OpCo, LLC (a Delaware company), with legal basis in contract law and incorporating by reference Service Terms, a Privacy Policy, and Usage Policies. The most significant obligations include a mandatory binding arbitration clause with class action waiver, a prohibition on users under 13 (or applicable local minimum age), OpenAI's broad right to modify or terminate services at will, and users' grant of a license to their input content for service improvement. Notable deviations from industry standard include OpenAI's explicit reservation of the right to use user inputs to train AI models (subject to opt-out), an unusually broad indemnification obligation placed on users, and the unilateral right to modify terms with as little as 30 days' notice for material changes. This document engages GDPR (for non-US users via a separate EEA/UK/Swiss addendum referenced but not reproduced here), CCPA for California residents, COPPA for age-gating obligations, the FTC Act Section 5 for unfair/deceptive practices, and the EU AI Act given the deployment of generative AI systems; compliance teams should note that the arbitration clause and class action waiver may be unenforceable in certain EU member states and other jurisdictions, and that the content licensing provisions require careful data mapping to satisfy GDPR Art. 6 lawful basis requirements.

Institutional Analysis

REGULATORY EXPOSURE: This document implicates GDPR Arts. 6, 13, 14, and 17 (lawful basis for processing, transparency, and erasure rights) enforced by EU Data Protection Authorities; CCPA §§1798.100-…

REGULATORY EXPOSURE: This document implicates GDPR Arts. 6, 13, 14, and 17 (lawful basis for processing, transparency, and erasure rights) enforced by EU Data Protection Authorities; CCPA §§1798.100-1798.135 enforced by the California Privacy Protection Agency (CPPA); COPPA 16 C.F.R. Part 312 enfor…

🔒

Compliance intelligence locked

Regulatory exposure, material risk, and due diligence action items.

Evidence Provenance
Captured March 10, 2026 03:21 UTC
Document ID CA-D-000007
Version ID CA-V-000068
Wayback Machine View archived versions →
SHA-256 935c07e9eb72b62810338aba3bddec52263466aa6b2c316a8c9d9a069e21d3a1
✓ Snapshot stored ✓ Text extracted ✓ Change verified ✓ Cryptographically signed
Change Timeline
High Severity — 6 provisions
Medium Severity — 3 provisions