Collection and use of personal information (mandatory)
For consumer services, OpenAI collects and uses your personal information as described below when you use our Services. For customers of our business offerings, such as our API, our use of content that we process on behalf of customers is governed by our customer agreements covering those offerings. See our Enterprise privacy page.
Items of personal information to be collected:
Personal information you provide if you create an account to use our Services or communicate with us:
Account Information: When you create an account with us, we will collect information associated with your account, including your name, contact information, account credentials, date of birth, payment information, and transaction history, (collectively, “Account Information”). Some of our Services may also allow you to upload a profile picture, a username, or other information as part of your Account Information.
User Content: We collect personal information that you provide in the input to our Services (“Content”), including your prompts and other content you upload, such as files, images, audio and video, Sora characters, and data from connected services, depending on the features you use. Some of our Services allow you to interact with other users, such as post, comment, or send messages, and we treat those interactions as Content, too.
Communication Information: If you communicate with us, such as via email or our pages on social media sites, we may collect personal information like your name, contact information, and the contents of the messages you send (“Communication Information”).
Contact Data: If you choose to connect your device contacts, we upload information from your device address books and check which of your contacts also use our Services. If any of your contacts aren’t yet using our Services, we’ll update you if they sign up for our Services later. Learn more about connecting your contacts and how we use uploaded contact information of people who don’t use our Services.
Other Information You Provide: We collect the answers you provide to us when participating in our events or surveys, and information you provide us or a vendor operating on our behalf to establish your identity or age.
Personal information we receive when you visit, use, or interact with the services:
Log Data: We collect information that your browser or device automatically sends when you use our Services. Log data includes your Internet Protocol address, browser type and settings, the date and time of your request, and how you interact with our Services.
Usage Data: We collect information about your use of the Services, such as the types of content that you view or engage with, the features you use and the actions you take, as well as your time zone, country, the dates and times of access, and the general area from which your device accesses the Services, user agent and version, type of computer or mobile device, and your computer connection. If you use the Atlas browser we may also collect your browser data according to your controls and use of the service.
Ads data: For Free and Go users, subject to your choices and controls, we collect information about your ads history and interests, such as the types of ad content that you view or engage with.
Device Information: We collect information about the device you use to access the Services, such as the name of the device, operating system, device identifiers, and browser you are using. Information collected may depend on the type of device you use and its settings.
Cookies and Similar Technologies: We use cookies and similar technologies to operate and administer our Services, and improve your experience. We store some of the information described in the Privacy Policy with cookies, for example to help maintain your preferences across browsing sessions if you’re not logged in, or to assist with authentication and customer support. For details about our use of cookies, please read our Cookie Notice.
Purpose of collection and use:
To provide, analyse, and maintain our Services, for example to respond to your questions for ChatGPT;
To improve and develop our Services and conduct research, for example to develop new product features;
To personalize and customize your experience across our Services, for example to provide you with more relevant Content;
To show you ads in ChatGPT, to understand on an aggregate basis how users interact with such ads, and to assess the effectiveness of our marketing and advertising efforts in order to improve ad quality. Learn more about ads in ChatGPT;
To communicate with you, including to respond to your questions, and send you information about our Services and events, for example about changes or improvements to the Services;
To identify your contacts who use our Services when you choose to connect your contacts and update you if they join our Services later;
To prevent fraud, illegal activity, or misuses of our Services, including by monitoring any Content submitted or exchanged on our platforms (learn more here); and
To comply with legal obligations and to protect the rights, privacy, safety, or property of our users, OpenAI, or third parties, for instance to prevent harm to you or others, or to estimate your age to give you an age-appropriate experience.
Period of retention and use:
We’ll retain your personal information for only as long as we need in order to provide our Services to you, or for other legitimate business purposes such as resolving disputes, safety and security reasons, or complying with our legal obligations. How long we retain personal information depends on the type of data, how we use it, and in many cases your settings. For example:
Information we retain until you delete it: Some of our Services allow you to delete personal information stored in your account. For example, you can delete specific, or all, of your ChatGPT conversations, delete specific Saved Memories, or delete your account. Once you choose to delete personal information, we will remove it from our systems within 30 days unless we need to retain it for longer as described below, or it has already been de-identified and disassociated from your account when you allow us to use your Content to improve our models.
Information we delete automatically: In some cases, personal information will be deleted automatically. For example, Temporary Chats will be automatically deleted within 30 days (unless we have to retain them for safety or legal reasons, as described further below), and your Atlas incognito browsing history won’t be saved after you end your session.
Information we retain for longer for legitimate security, safety, or legal reasons: In some cases, we need to retain personal information for longer even after you delete it, for example because we are legally required to, to address fraud and abuse, for security reasons, or for financial record-keeping purposes. For instance:
If specific Content, or your account, is banned because of violations of our usage policies, we may retain that data to protect our services from fraud, abuse, or other violations of our policies;
If we are legally required to retain your data (for instance, we receive a lawful subpoena) then we may retain it for the duration of the relevant legal or regulatory obligation;
When we are a party to a financial transaction (for instance, when we process your payment for a ChatGPT Plus or Pro account, or facilitate a purchase on ChatGPT), we may retain payment and transaction related information to meet our accounting, dispute resolution, and regulatory compliance purposes;
When you ask us to delete your personal information, we retain the audit record of the erasure request to be able to verify that we have complied with the request.
In determining these retention periods, we consider a number of factors, such as:
Our purpose for processing the personal information (such as whether we need to retain it to provide our Services);
The amount, nature, and sensitivity of the information;
The potential risk of harm from unauthorized use or disclosure;
Any legal requirements that we are subject to.
You may refuse to consent to the collection and use of personal information as described above. However, if you refuse to consent, your registration to the website will be restricted.
Third-party provision of personal information/Overseas Transfer (mandatory)
In certain circumstances OpenAI may provide your personal information stated in the “Items of personal information to be collected” above to third-parties, for the specific and limited purposes described below:
Government Authorities or Other Third Parties: We may share your personal information, including information about your interaction with our Services, with government authorities, industry peers, or other third parties in compliance with the law (i) if required to do so to comply with a legal obligation, or in the good faith belief that such action is necessary to comply with a legal obligation, (ii) to protect and defend our rights or property, (iii) if we determine, in our sole discretion, that there is a violation of our terms, policies, or the law; (iv) to detect or prevent fraud or other illegal activity; (v) to protect the safety, security, and integrity of our products, employees, users, or the public, or (vi) to protect against legal liability.
Affiliates: We may disclose personal information to our affiliates, meaning an entity that controls, is controlled by, or is under common control with OpenAI. Our affiliates may use this personal information in a manner consistent with our Privacy Policy.
Business Account Administrators: When you join a ChatGPT Enterprise or business account, the administrators of that account may access and control your OpenAI account, including being able to access your Content. In addition, if you create an account using an email address belonging to your employer or another organization, we may share the fact that you have an account and certain account information, such as your email address, with your employer or organization to, for example, enable you to be added to their business account.
Other Users and Third Parties You Interact or Share Information With: Certain Services allow you to interact or share information with other users or third parties. For example, you can share content like ChatGPT conversations or Sora videos and characters, or share information with third-party search and shopping partners. Information you share with third-party partners is governed by their own terms and privacy policies, and you should make sure you understand those terms and policies before sharing information with them.
These disclosures may be made to countries other than Korea and the U.S. through telecommunication networks from time to time as needed.
You may refuse to consent to the provision and/or transfer of personal information by not providing consent or contacting us using the contact details in Korea Privacy Policy Addendum. However, if you refuse to consent, your registration to the website will be restricted.