The policy prohibits using OpenAI services to build tools that enable stalkerware, mass surveillance of individuals without their knowledge or consent, or monitoring systems that violate civil rights.
This analysis describes what OpenAI's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This prohibition addresses the use of AI to enable invasive personal tracking, including applications designed to covertly monitor individuals' communications, location, or activity without consent.
Interpretive note: Verbatim text could not be extracted from the binary PDF. The exact scope of prohibited surveillance versus permissible monitoring use cases is not fully defined in available document text, creating interpretive ambiguity for edge cases.
Developers who use the OpenAI API to build applications that covertly monitor individuals' communications, location data, or online activity without their knowledge are in violation of this policy and subject to API access termination.
How other platforms handle this
When you use the Platform, we collect internet usage information about you, such as information about your browsing behavior, search history on the Platform, and information about your interactions with the Platform and our advertisements, including advertisement impressions and whether you clicked ...
We use cookies, web beacons, pixel tags, and other tracking technologies to collect information about your use of our services, including pages visited, links clicked, browser type, IP address, and device identifiers. We may use this information for analytics, advertising, and to improve our service...
We offer a Session Replay product that allows our customers to record and replay user sessions on their websites and applications. Session Replay may capture information such as mouse movements, clicks, scrolls, and form inputs. Amplitude customers are responsible for ensuring they have the necessar...
Monitoring
OpenAI has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
1. REGULATORY LANDSCAPE: This provision intersects with the Electronic Communications Privacy Act (ECPA), state wiretapping statutes, and GDPR Articles 5, 6, and 9 regarding lawful basis for processing personal data including location data and communications content. The FTC has previously brought enforcement actions against stalkerware developers under Section 5 of the FTC Act. The EU AI Act classifies certain real-time biometric identification and mass surveillance systems as prohibited AI practices. 2. GOVERNANCE EXPOSURE: High for operators in workforce monitoring, law enforcement technology, parental control, or relationship tracking sectors. The boundary between permissible monitoring (such as consented parental controls) and prohibited surveillance tools may require case-by-case legal assessment and is not fully defined in the available document text. 3. JURISDICTION FLAGS: EU operators face the EU AI Act's prohibition on certain mass surveillance AI systems and GDPR restrictions on processing location and communications data without a lawful basis. Illinois BIPA, California CCPA, and New York SHIELD Act create additional state-level exposure for operators processing biometric or personal identifiers in surveillance contexts. The FTC has jurisdiction over stalkerware operators in the US. 4. CONTRACT AND VENDOR IMPLICATIONS: Operators in workforce analytics, security, or parental monitoring sectors should seek written guidance from OpenAI on the scope of permissible use cases. Contracts should include representations about the lawful basis for any monitoring use case built on the API. 5. COMPLIANCE CONSIDERATIONS: Legal teams should assess whether existing monitoring products built on the OpenAI API fall within permissible bounds. Privacy impact assessments should be conducted for any application involving individual tracking or communications monitoring. Consent mechanisms should be reviewed to ensure they meet applicable legal standards.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Monitor: 25 platforms + same-day alerts. No credit card required.
We read the privacy policies and terms of service of 38 AI platforms. Here is what they say about training, retention, arbitration, and liability.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
This prohibition addresses the use of AI to enable invasive personal tracking, including applications designed to covertly monitor individuals' communications, location, or activity without consent.
Developers who use the OpenAI API to build applications that covertly monitor individuals' communications, location data, or online activity without their knowledge are in violation of this policy and subject to API access termination.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by OpenAI.