OpenAI

Understanding responsibilities for your ChatGPT Sites

Learn your responsibilities for reviewing, publishing, and operating a ChatGPT Site.

Updated: yesterday

Overview

ChatGPT Sites lets eligible users create and share hosted Sites from ChatGPT. A Site may include content, code, generated artifacts, files, storage, logs, and other information needed to create, host, secure, and operate the Site.

This article helps explain your responsibilities when it comes to publishing and operating your Site.

Availability varies by plan and region.

Reviewing your Site

Before you share or publish a Site, you should review the preview or private version of your Site and make sure it behaves the way you expect. Please note that you are responsible for your Site and its content, including content submitted by visitors to your Site, as well as for compliance with any laws applicable to your Site or the service it provides. For example, you should make sure to only publish content that you have the right to share, and to not publish confidential, sensitive, or third-party content unless you have the appropriate rights.

Before sharing, review your Site’s access settings and confirm who should be able to open it. Where external invitations are available, you can share a private Site with named people outside your workspace. External viewers receive view-only access; they do not become workspace members or Site editors. Confirm the recipient’s access before sharing more widely.

Invite editors only if you trust them with your Site’s live data. Editors can inspect the database and, after the owner first publishes the Site, publish code that uses its runtime secrets and storage.

Review any features that let visitors provide personal information or other content, such as open-text fields, message boards, or sign-in functionality. Consider whether you want these features in your Site and whether you want to collect, share, or publish that information.

If visitors can submit or post content, you are responsible for monitoring and moderating that content, including addressing content that is inappropriate or unlawful.

For more information about your obligations when collecting and processing personal data from others through a public Site, see: Complying with data protection laws for ChatGPT Sites.

If you are using a workspace account, follow your organization's policies for public sharing.

Complying with data protection laws

If your Site collects or otherwise processes personal data from visitors, you are responsible for understanding and complying with the privacy and data-protection laws that apply to you.

ChatGPT Sites must not process Protected Health Information.

Payment-card data must be collected and processed solely by a third-party payment provider, not by OpenAI, as described in the ChatGPT Sites Terms.

Complying with policies

You are responsible for ensuring that your Site and visitor-submitted content comply with applicable law, the OpenAI Usage Policies, and the ChatGPT Sites Terms.

Sites must not:

  • Process Protected Health Information.

  • Target children under 13 or the applicable age of digital consent.

  • Distribute malware.

  • Enable phishing.

  • Impersonate people or organizations.

  • Otherwise enable abuse.

Financial transactions are prohibited except for e-commerce activities processed by a third-party payment provider under the ChatGPT Sites Terms. Payment-card data must be collected and processed solely by that provider, not by OpenAI.

OpenAI may use safety systems, abuse detection, review processes, and enforcement actions to help reduce harmful uses of public Sites. As described below, OpenAI may remove or restrict access to Sites that violate our policies.

Report a Site

If you believe a public Site violates OpenAI policies, infringes your rights, contains illegal content, impersonates you or your organization, or is being used for phishing, malware, or other abuse, report it through the content-reporting form. Include the full Site URL and enough detail to identify the issue. Add screenshots or other context only when it is safe to do so.

Takedowns, appeals, and restoration

OpenAI may remove or restrict a Site when required by policy, law, or platform-safety considerations. If you believe your Site was removed or restricted in error, use the appeal link in the notification email. If you cannot access that email, use the OpenAI appeal form.

If you’re using a workspace account, your workspace owner or admins may be able to change who can access a Site. Contact a workspace owner if a Site needs to be suspended or restored.

Was this article helpful?