OpenAI Assistants API
Graded against 804 verified platforms, from its own policy text. Automated assessment against a published rubric — not legal advice.
“Opt out. If you do not want us to use your Content to train our models, you can opt out by following the instructions in [this article](https://openai.com/policies/how-your-data-is-used-to-improve-model-performance/). Please note that in some cases this may limit the ability of our Services to better address your specific use case.”
Watch: Data retention
Start here. These are the highest-risk verified clauses AIRIN found in the platform's own policy text.
The carve-out for already de-identified data means that even if a user deletes their account, derivatives of their content embedded in model training data may be retained permanently. The 30-day deletion window also does not apply in this scenario.
This clause establishes exceptions to standard deletion timelines, permitting OpenAI to retain personal data for longer periods for legitimate security, safety, or legal reasons even after a user requests deletion.
The exceptions to user-requested deletion are wide-ranging and some (e.g., 'fraud, abuse, or other violations of our policies') are left to OpenAI's sole determination, effectively undermining the practical force of deletion rights.
Scores derived from 69 enriched findings — same verbatim citations as below. AI-generated, not legal advice.
- OpenAI Assistants API's terms explicitly protect your inputs from training use — the policy is affirmatively favorable on this point.
- Your outputs and prompts are explicitly yours — OpenAI Assistants API's terms include affirmatively protective IP language.
- Data handling is conditional — 5 privacy or retention clauses warrant review before using OpenAI Assistants API at scale.
Derived from AI-enriched analysis of the verified findings below — informational only, not legal advice.
How to read this page: Overall risk rates what OpenAI Assistants API's own policy terms mean for your prompts, outputs, and data. The benchmark bands below grade those same verified terms relative to peers — a platform in a risky-by-default category can rate HIGH risk and still grade STRONG against its peer set. Both trace to the cited findings.
Policy benchmark
rubric v1.0 — how this is scoredBased on 204 verified, verbatim-cited findings below — read the citations.
Based on 241 verified, verbatim-cited findings below — read the citations.
Automated assessment against a published rubric — not legal advice.
Fully verified — complete core corpus captured and read in full.
- Privacy PolicyVerified - read in full - 146 citationsstaticLast captured 2026-08-12
- Terms of ServiceVerified - read in full - 100 citationsstaticLast captured 2026-08-14
Only citation-backed plan differences are shown here; absent cells mean AIRIN has not verified a tier-specific claim.
This clause grants Free and Go tier users the right to use advertising controls to manage what data OpenAI uses to personalize ads shown within its services, creating a tier-specific data control right.
"- For Free and Go users, you can use the advertising controls in your account settings to control what data we use to personalize the ads we show you on our Services."
This segment carves out business API customer data from the scope of this Privacy Policy, directing that such processing is governed by separate customer agreements rather than this policy.
"This Privacy Policy does not apply to content that we process on behalf of customers of our business offerings, such as our API. Our use of that data is governed by our customer agreements covering access to and use of those offerings."
Ad personalization based on user data is a significant privacy risk applicable specifically to Free/Go tier users. The existence of 'advertising controls' implies ads are shown by default and data is used for ad targeting unless users affirmatively opt out.
"For Free and Go users, you can use the advertising controls in your account settings to control what data we use to personalize the ads we show you on our Services."
Grants data subjects the right to be free from retaliation for exercising their privacy rights and references a California-specific privacy rights reporting resource, establishing both a substantive right and an informational cross-reference.
"The right to be free from retaliation relating to the exercise of any of your privacy rights. Review our California privacy rights reporting [here](https://openai.com/policies/privacy-policy/california-privacy-rights-reporting/)."
This creates a meaningful privacy distinction between tiers. Free/Go users are subject to ad-targeting data use, including inbound advertiser data, which paid users presumably avoid. Users should be aware that the free tier carries additional data monetization exposure.
"For Free and Go users, to personalize the ads you see on our Services (subject to your settings), and to measure the effectiveness of ads shown on our Services."
Discloses that personal data is received from advertisers and data partners and used to measure and improve ad effectiveness for Free and Go users, with an example of purchase data received from advertisers.
" We may receive information from advertisers and other data partners, which we use for purposes including to help us measure and improve the effectiveness of ads shown to Free and Go users on our Services. For example, we could receive info..."
Enumerates the purposes for which personal data is used: providing, analysing, and maintaining services; improving and developing services and conducting research; personalizing user experience; personalizing and measuring ads for Free and Go users; and communicating with users — establishing the permitted uses of collected personal data.
" To provide, analyse, and maintain our Services, for example to respond to your questions for ChatGPT; To improve and develop our Services and conduct research, for example to develop new features; To personalize and customize your expe..."
Describes the procedure for submitting rights requests through an authorized agent, including requirements for the agent to present authority such as signed written permission and for the user to independently verify their identity, with requests submitted to a specified email address.
" The right to be free from retaliation relating to the exercise of any of your privacy rights. Review our California privacy rights reporting here . "
Evidence appendix
Showing priority citations first. The full appendix is available for audit trails; not every citation is a severe risk.
"We may receive information from advertisers and other data partners, which we use for purposes including to help us measure and improve the effectiveness of ads shown to Free and Go users on our Services. For example, we could receive information about purchases you make from these advertisers."
"We may receive information from advertisers and other data partners, which we use for purposes including to help us measure and improve the effectiveness of ads shown to Free and Go users on our Services."
This span carries the plan-specific language - verbatim from the policy.
Inbound data sharing from third-party advertisers (including purchase history) used for ad targeting creates a data-broker-style profile enrichment risk for free-tier users. Paid/Enterprise users appear excluded but the policy is not fully explicit.
AI-generated interpretation, not legal advice.
"Improve and develop our Services and conduct research, including using your Content to train our models (subject to your [control"
The clause grants OpenAI the right to use submitted content for model training. The parenthetical 'subject to your control' implies an opt-out mechanism exists, but does not confirm opt-out is the default. Users who do not actively manage settings may have their content used for training.
AI-generated interpretation, not legal advice.
" Cancellation. You can cancel (opens in a new window) your paid subscription at any time. Payments are non-refundable, except where required by law. These Terms do not override any mandatory local laws regarding your cancellation rights. "
States that payments are non-refundable except where required by law, while preserving the user's right to cancel at any time and acknowledging that mandatory local cancellation rights are not overridden — a limitation on the user's refund rights with a protective carve-out for mandatory legal rights.
AI-generated interpretation, not legal advice.
"Our use of content. We may use Content to provide, maintain, develop, and improve our Services, comply with applicable law, enforce our terms and policies, and keep our Services safe. If you're using ChatGPT through Apple's integrations, see [this Help Center article(opens in a new window)](https://help.openai.com/en/articles/9737562) for how we handle your Content."
This segment grants users the right to opt out of having their Content used to train OpenAI's models by following a linked procedure, while noting that opting out may limit service personalization — establishing an individual data rights mechanism with a restriction on its effect.
AI-generated interpretation, not legal advice.
"Similarity of content. Due to the nature of our Services and artificial intelligence generally, output may not be unique and other users may receive similar output from our Services. Our assignment above does not extend to other users’ output or any Third Party Output."
This segment grants OpenAI a broad permission to use Content (Input and Output) to provide, maintain, develop, and improve its Services, comply with law, enforce its terms and policies, and keep Services safe — including implicit permission to use Content for model training and service improvement.
AI-generated interpretation, not legal advice.
"Opt out. If you do not want us to use your Content to train our models, you can opt out by following the instructions in [this article](https://openai.com/policies/how-your-data-is-used-to-improve-model-performance/). Please note that in some cases this may limit the ability of our Services to better address your specific use case."
This segment disclaims the accuracy of AI-generated Output, noting that the probabilistic nature of machine learning may result in outputs that do not accurately reflect real people, places, or facts, providing context for the accuracy disclaimers that follow.
AI-generated interpretation, not legal advice.
"As noted above, we may use Content you provide us to improve our Services, for example to train the models that power ChatGPT. Read [our instructions(opens in a new window)](https://help.openai.com/articles/5722486-how-your-data-is-used-to-improve-model-performance) on how you can opt out of our use of your Content to train our models."
This segment grants OpenAI permission to use user-provided Content to improve Services including training the models powering ChatGPT, while referencing user opt-out instructions, establishing a conditional training use permission subject to user choice.
AI-generated interpretation, not legal advice.
"We also collect information from other sources, like information that is publicly available on the internet, to develop the models that power our Services. For more information on the sources of information used to develop the models that power ChatGPT and other Services, please see [this help center article(opens in a new window)](https://help.openai.com/articles/7842364-how-chatgpt-and-our-language-models-are-developed)."
This segment describes OpenAI's collection of publicly available internet data for the purpose of developing and training the AI models that power its Services, establishing a data collection obligation for model training purposes.
AI-generated interpretation, not legal advice.
"- _User Content:_ We collect Personal Data that you provide in the input to our Services (“Content”), including your prompts and other content you upload, such as [files(opens in a new window)](https://help.openai.com/articles/8555545-file-uploads-faq), [images(opens in a new window)](https://help.openai.com/articles/8400551-chatgpt-image-inputs-faq), [audio and video(opens in a new window)](https://help.openai.com/articles/8400625-voice-mode-faq), [Sora characters(opens in a new window)](https://help.openai.com/articles/12435986-generating-content-with-cameos), and data from [connected services(opens in a new window)](https://help.openai.com/articles/11487775-connectors-in-chatgpt), depending on the features you use. Some of our Services allow you to interact with other users, such as post, comment, or send messages, and we treat those interactions as Content, too."
This segment defines 'Content' as the personal data users provide as inputs to Services, including prompts, files, images, audio, video, and other uploads, establishing what constitutes user-provided input subject to subsequent use and ownership provisions.
AI-generated interpretation, not legal advice.
"- To improve and develop our Services and conduct research, for example to develop new features;"
This segment grants OpenAI permission to use personal data to improve and develop its Services and conduct research, including developing new features, which encompasses model training and development activities.
AI-generated interpretation, not legal advice.
"- _Cookies and Similar Technologies_: We use cookies and similar technologies to operate and administer our Services, and improve your experience. We store some of the information described in this Policy with cookies, for example to help maintain your preferences across sessions if you’re not logged in, or to assist with authentication and customer support. For details about our use of cookies, please read our [Cookie Notice](https://openai.com/policies/cookie-policy/)."
This segment describes the use of cookies and similar technologies to operate Services and improve user experience, and incorporates by reference the Cookie Notice for further detail, establishing a data collection and storage obligation through tracking technologies.
AI-generated interpretation, not legal advice.
"- To promote our products and services to you through direct marketing and on third-party properties, and to assess the effectiveness of those efforts, subject to your choices and controls ( [learn more(opens in a new window)](https://help.openai.com/articles/20001156));"
This segment grants OpenAI permission to use personal data for direct marketing and promotion on third-party properties, and to measure marketing effectiveness, subject to user choices and controls.
AI-generated interpretation, not legal advice.
"We also aggregate or de-identify Personal Data so that it no longer identifies you and use this information for the purposes described above, such as to analyze the way our Services are being used, to improve and add features to them, and to conduct research. We will maintain and use de-identified information in de-identified form and not attempt to reidentify the information, unless required by law."
This segment establishes OpenAI's practice of aggregating or de-identifying personal data for analytical and research purposes, and creates an obligation to maintain de-identified information in de-identified form and not attempt re-identification except as required by law.
AI-generated interpretation, not legal advice.
"- Our Services may provide incomplete, incorrect, or offensive Output that does not represent OpenAI’s views. If Output references any third party products or services, it doesn’t mean the third party endorses or is affiliated with OpenAI."
This clause disclaims OpenAI's responsibility for incomplete, incorrect, or offensive Output and clarifies that references to third parties do not imply endorsement or affiliation, limiting reliance on Output accuracy.
AI-generated interpretation, not legal advice.
"A note about accuracy: Services like ChatGPT generate responses by reading a user’s request and, in response, predicting the words most likely to appear next. In some cases, the words most likely to appear next may not be the most factually accurate. For this reason, you should not rely on the factual accuracy of output from our models. If you notice that ChatGPT output contains factually inaccurate information about you and you would like to request a correction or removal of the information, you can submit these requests through [privacy.openai.com(opens in a new window)](https://privacy.openai.com/) or to [dsar@openai.com](mailto:dsar@openai.com), and we will consider your request based on applicable law and the technical capabilities of our models."
Disclaims reliance on the factual accuracy of model outputs and explains that ChatGPT generates responses probabilistically, while providing a procedure for requesting correction or removal of inaccurate personal information, thereby limiting OpenAI's liability for output inaccuracies.
AI-generated interpretation, not legal advice.
"Third party Services. Our services may include third party software, products, or services, (“Third Party Services”) and some parts of our Services, like our browse feature, may include output from those services (“Third Party Output”). Third Party Services and Third Party Output are subject to their own terms, and we are not responsible for them."
This segment grants OpenAI an unrestricted, royalty-free right to use user feedback without compensation, which constitutes a broad permission for OpenAI to exploit user-submitted feedback in any manner.
AI-generated interpretation, not legal advice.
" more.](https://help.openai.com/en/articles/20001047-ads-in-chatgpt)<br>- Communicate with you, including to respond to your questions, and send you information about our Services and events, for example about changes or improvements to the Services or offers or information that may interest you<br>- To identify your contacts who use our Services when you choose to connect your contacts and update you if they join our Services later.<br>- Prevent fraud, illegal activity, or misuses of our Services, and to protect the security of our systems and Services, including by monitoring any Content submitted or exchanged on our platforms (learn more [here](https://openai.com/transparency-and-content-moderation/))<br>- Comply with legal obligations and protect the rights, privacy, safety, or property of our users, OpenAI, or third parties, for instance to prevent harm to you or others, and to estimate your age to give you an age-appropriate experience | We may disclose this information in the following circumstances, as described above:<br>- Vendors, service providers, and affiliates to assist us in meeting business operations needs and to perform certain services and functions described above<br>- Government authorities or other third parties for the legal reasons described above<br>- Parties involved in Transactions<br>- Business account administrators for the reasons described above<br>- Parents or guardians of teen users for account linking purposes described above<br>- Other users and third parties you interact or share information with |"
Describes the purposes for which collected personal data is used, including communicating with users, identifying contacts, and preventing fraud, constituting disclosures of data use obligations and purposes required under U.S. state privacy laws.
AI-generated interpretation, not legal advice.
"For Free and Go users, you can use the advertising controls in your account settings to control what data we use to personalize the ads we show you on our Services."
Ad personalization based on user data is a significant privacy risk applicable specifically to Free/Go tier users. The existence of 'advertising controls' implies ads are shown by default and data is used for ad targeting unless users affirmatively opt out.
AI-generated interpretation, not legal advice.
Common questions about OpenAI Assistants API's policies
- Does OpenAI Assistants API train its AI models on your data?
- Training possible — conditions or opt-outs apply — based on 12 verified findings from OpenAI Assistants API's published policy. Informational only, not legal advice.
- Who owns the content you create with OpenAI Assistants API?
- You own outputs — with license carve-outs — based on 3 verified findings from OpenAI Assistants API's published policy. Informational only, not legal advice.
- Can you use OpenAI Assistants API's output commercially?
- Commercial use allowed — based on 6 verified findings from OpenAI Assistants API's published policy. Informational only, not legal advice.
Clause detail — protections, your obligations, and coverage
Every clause below is a verbatim quote from OpenAI Assistants API's own published policy, read in full and linked to its exact location. Protections and user obligations are reported separately from risk because they are different kinds of clause — an obligation on you is not a risk to your data. Informational only, not legal advice.
✅ Protections found
36 verified clausesClauses in OpenAI Assistants API's policies that work in your favour — commitments the platform made to you.
- Privacy & data usechildren's data
“Our Services are not directed to, or intended for, children under 13. We do not knowingly collect Personal Data from children under 13. If you have reason to believe that a child under 13 has provided Personal Data to OpenAI through the Services, please email…”
Restricts the Services from being directed to children under 13, prohibits knowing collection of their personal data, establishes a reporting procedure for suspected child data collection, commits to investigation and de…
- Designated security contact: privacy@openai.com
📍 Privacy Policy › “7\. Children”Jump to exact text → - Privacy & data use
“**Verification.** In order to protect your Personal Data from unauthorized access, change, or deletion, we may require you to verify your credentials before you can submit a request to know, correct, or delete Personal Data. If you do not have an account with…”
Establishes the identity verification procedure OpenAI may require before honoring requests to know, correct, or delete personal data, and specifies that unverifiable identity will result in the request not being honored…
📍 Privacy Policy › “9\. Additional U.S. state disclosures”Jump to exact text → - Privacy & data use
“You can exercise some of these rights through your OpenAI account using the tools described in the [Data controls ](https://openai.com/policies/privacy-policy/#data-controls) section, or you can submit your request through [privacy.openai.com(opens in a new…”
Specifies the procedural mechanisms by which data subjects can exercise their privacy rights, including account-based tools, a dedicated web portal, an email address for data subject access requests, and contact informat…
- Designated security contact: dpo@openai.com
📍 Privacy Policy › “6\. Your rights”Jump to exact text → - Privacy & data usechildren's data
“- _Parent or Guardian of a Teen_: Teen users and their parents or guardians can choose to link their accounts, allowing the parent or guardian to manage certain settings, and receive alerts if we detect a serious safety concern. These accounts can be unlinked…”
This clause permits account linking between teen users and their parents or guardians, allowing the parent or guardian to manage settings and receive safety alerts, and grants users the right to unlink accounts at any ti…
📍 Privacy Policy › “3\. Disclosure of Personal Data”Jump to exact text → - Privacy & data use
“**Authorized Agents.** Depending upon where you reside, you may also submit a rights request through an authorized agent. If you do so, the agent must present authority to act on your behalf, such as signed written permission, and you may also be required to i…”
Establishes the procedure for submitting privacy rights requests through authorized agents, including requirements for the agent to present authority and for the data subject to independently verify identity, and specifi…
- Designated security contact: dsar@openai.com
📍 Privacy Policy › “9\. Additional U.S. state disclosures”Jump to exact text → - Moderation & enforcementauto-renewal & cancel window
“Cancellation. You can [cancel(opens in a new window)](https://help.openai.com/en/articles/7232927-how-do-i-cancel-my-chatgpt-plus-subscription) your paid subscription at any time. Payments are non-refundable, except where required by law. These Terms do not…”
This clause grants users the right to cancel paid subscriptions at any time while establishing that payments are non-refundable except as required by law, and preserves any mandatory local cancellation rights that may ov…
📍 Terms of Service › “Paid accounts”Jump to exact text →
+ 30 more verified clauses of this kind on this platform, cited in full in the report.
📋 Rules you must follow
12 verified clausesWhat OpenAI Assistants API requires of YOU. These are your obligations, not risks to your data or IP, so they are cited here and excluded from this platform's risk rating.
- Moderation & enforcementconduct restrictions
“Trade controls. You must comply with all applicable trade laws, including sanctions and export control laws. Our Services may not be used in or for the benefit of, or exported or re-exported to (a) any U.S. embargoed country or territory or (b) any individual…”
Imposes an obligation on users to comply with all applicable trade laws including sanctions and export controls, restricts use of Services in embargoed countries or with restricted parties, and prohibits inputs requiring…
📍 Terms of Service › “General Terms”Jump to exact text → - Moderation & enforcementconduct restrictions
“- You must not use any Output relating to a person for any purpose that could have a legal or material impact on that person, such as making credit, educational, employment, housing, insurance, legal, medical, or other important decisions about them.”
This clause restricts the use of AI-generated Output relating to a person, prohibiting its use for decisions with legal or material impact (credit, employment, housing, medical, etc.), thereby limiting how outputs may be…
📍 Terms of Service › “Content”Jump to exact text → - Moderation & enforcementconduct restrictions
“- Attempt to or assist anyone to reverse engineer, decompile or discover the source code or underlying components of our Services, including our models, algorithms, or systems (except to the extent this restriction is prohibited by applicable law).”
This segment prohibits automated or programmatic extraction of data or Output, referencing the defined term 'Output' and imposing a use restriction on data scraping activities.
📍 Terms of Service › “Using our Services”Jump to exact text → - Moderation & enforcement
“We and our affiliates own all rights, title, and interest in and to the Services. You may only use our name and logo in accordance with our [Brand Guidelines](https://openai.com/brand/).”
This clause asserts that OpenAI and its affiliates hold all rights, title, and interest in the Services, and restricts use of OpenAI's name and logo to compliance with Brand Guidelines, establishing proprietary ownership…
📍 Terms of Service › “Our IP rights”Jump to exact text → - Moderation & enforcementconduct restrictions
“- Interfere with or disrupt our Services, including circumvent any rate limits or restrictions or bypass any protective measures or safety mitigations we put on our Services.”
This segment explicitly prohibits using Output to develop models that compete with OpenAI, restricting the competitive use of AI-generated outputs and protecting OpenAI's commercial position.
📍 Terms of Service › “Using our Services”Jump to exact text →
+ 7 more verified clauses of this kind on this platform, cited in full in the report.
What the policies actually cover
16 topics- Product telemetry & usage tracking1 protective13 clauses
- Advertising & tracking1 protective11 clauses
- Sale or sharing of personal data1 clause
- Sensitive data (biometric, location, health)3 clauses
- Children's data2 protective3 clauses
- Government & law-enforcement disclosure6 clauses
- Does not train on your content3 protective3 clauses
- Trains by default, opt-out available4 clauses
- Trains with no opt-out1 clause
- Arbitration & class-action waiver1 protective9 clauses
- Damages & liability cap1 protective4 clauses
- Indemnity direction1 clause
- Terms can change at any time4 protective6 clauses
- Deletion rights & post-termination survival4 protective12 clauses
- Auto-renewal & cancel window1 protective2 clauses
- Conduct restrictions9 obligations9 clauses
158 further verified clauses are cited on this page but not yet assigned a topic.
Cross-clause notes
Two verified clauses intersect on the same subject matter: the Privacy Policy, Privacy Policy › “4\. Retention” addresses how long content is retained, and the Privacy Policy, § 2 (How we use Personal Data) addresses use of content in connection with model training or service improvement. Both clauses are in force at the same time — read them together.
The Terms of Service, Terms of Service › “Content” describes rights the platform takes in user content, and the Privacy Policy, Privacy Policy › “3\. Disclosure of Personal Data” describes disclosure of data to third parties or subprocessors. Both clauses are in force at the same time — read them together.
The Privacy Policy, § 2 (How we use Personal Data) describes a way to decline model training, and the Terms of Service, Terms of Service › “Paid accounts” states that terms differ by plan or tier. Whether the opt-out applies on every tier is determined by those clauses together — read both before relying on the opt-out.
Verified retention clauses point in different directions: the Privacy Policy, Privacy Policy › “4\. Retention” describes broad or open-ended retention, while the Privacy Policy, Privacy Policy › “4\. Retention” describes deletion or erasure. Which clause controls in a given situation is not resolved by the documents' text alone — this is surfaced as an ambiguity, treated as Caution.
Verified training clauses point in different directions: the Privacy Policy, § 2 (How we use Personal Data) describes use of content for training or improvement, while the Terms of Service, Terms of Service › “Content” states content is not used for training. The clauses may govern different products, tiers, or data categories — the documents' text alone does not resolve it. Surfaced as an ambiguity, treated as Caution.
Automated cross-reference against the published rubric — not legal advice.
Clause intelligence
Canonical clauses and stance patterns extracted from the same gate-verified citations shown on this page.
The clause provides a deletion or time-bounded retention path.
“- **Information we delete automatically:** In some cases, Personal Data will be deleted automatically. For example, [Temporary Chats(opens in a new window)](https://help.openai.com/articles/8914046-temporary-chat-faq) will be automatically deleted within 30 days (unless we have to retain them for safety or legal reasons, as described further below), and your [Atlas incognito browsing history(opens in a new windo...”Open source citation
The clause provides a deletion or time-bounded retention path.
“- **Information we retain until you delete it:** Some of our Services allow you to delete Personal Data stored in your account. For example, you can delete specific, or all, of your ChatGPT conversations, delete specific [Saved Memories(opens in a new window)](https://help.openai.com/articles/8590148-memory-faq), or delete your account. Once you choose to delete Personal Data, we will remove it from our systems w...”Open source citation
The clause provides a deletion or time-bounded retention path.
“Once you choose to delete Personal Data, we will remove it from our systems within 30 days unless we need to retain it for longer as described below, or it has already been de-identified and disassociated from your account when you allow us to use your Content to [improve our models”Open source citation
The clause provides a deletion or time-bounded retention path.
“- **Information we delete automatically:** In some cases, Personal Data will be deleted automatically. For example, [Temporary Chats(opens in a new window)](https://help.openai.com/articles/8914046-temporary-chat-faq) will be automatically deleted within 30 days (unless we have to retain them for safety or legal reasons, as described further below), and your [Atlas incognito browsing history(opens in a new windo...”Open source citation
The clause provides a deletion or time-bounded retention path.
“Information we retain until you delete it: Some of our Services allow you to delete Personal Data stored in your account. For example, you can delete specific, or all, of your ChatGPT conversations, delete specific Saved Memories (opens in a new window) , or delete your account. Once you choose to delete Personal Data, we will remove it from our systems within 30 days unless we need to retain it for longer as de...”Open source citation
Tier matrix
Plan-level conditions detected from citation-backed clauses. Empty tiers mean AIRIN has not captured decisive tier language yet.
| Tier | Surface | Verdict | Risk | Citations |
|---|---|---|---|---|
| All applicable tiers | commercial use | worsens | HIGH | 1 |
| All applicable tiers | data retention | improves | LOW | 5 |
| All applicable tiers | governing law disputes | conditional | MEDIUM | 31 |
| All applicable tiers | indemnity liability | conditional | MEDIUM | 2 |
| All applicable tiers | privacy data use | worsens | HIGH | 2 |
| All applicable tiers | subprocessors data sharing | worsens | HIGH | 2 |
| Free | data retention | worsens | HIGH | 1 |
| Free | indemnity liability | conditional | MEDIUM | 2 |
| Free | moderation enforcement | worsens | HIGH | 2 |
| Team / Business | indemnity liability | conditional | MEDIUM | 2 |
Policy evolution
Open full timelineBefore/after stance changes across captured policy versions. When no material delta exists yet, AIRIN shows the latest citation-backed stance events instead.
data sharing improved from high/sale or sell to medium/third party or vendor sharing.
“**Your Opt-Out Rights.** We don’t “sell” Personal Data. Depending upon your choices, we may share limited data with select marketing partners for purposes of promoting our products and services to you on third-party properties.”Before citation
“At OpenAI, our mission is to ensure that artificial general intelligence benefits everyone. We build tools like ChatGPT and Sora to help people learn, create, and solve problems. We at OpenAI (together with our affiliates, “OpenAI”, “we”, “our” or “us”) are committed to respecting your privacy and are strongly committed to keeping secure any information we obtain from you or about you. This Privacy Policy describes our practices with respect to personal data that we collect from or about you, and how we use it when you use our website, applications, and services (collectively, “Services”).”After citation
data sharing worsened from medium/third party or vendor sharing to high/sale or sell.
“- _Other Information You Provide_: We collect other information that you provide to us, such as when you participate in our events or surveys, or when you provide us or a vendor operating on our behalf with information to establish your identity or age (collectively, “Other Information You Provide”).”Before citation
“**Your Opt-Out Rights.** We don’t “sell” Personal Data. Depending upon your choices, we may share limited data with select marketing partners for purposes of promoting our products and services to you on third-party properties.”After citation
data sharing improved from high/sale or sell to medium/third party or vendor sharing.
“**Your Opt-Out Rights.** We don’t “sell” Personal Data. Depending upon your choices, we may share limited data with select marketing partners for purposes of promoting our products and services to you on third-party properties.”Before citation
“- _Other Users and Third Parties You Interact or Share Information With_: Certain Services allow you to interact or share information with other users or third parties. For example, you can share content like [ChatGPT conversations(opens in a new window)](https://help.openai.com/articles/7925741-chatgpt-shared-links-faq) or Sora [videos(opens in a new window)](https://help.openai.com/articles/12456897-getting-started-with-the-sora-app) and [characters(opens in a new window)](https://help.openai.com/articles/12435986-generating-content-with-cameos), or share information with third-party [search(opens in a new window)](https://help.openai.com/articles/9237897-chatgpt-search) and [shopping(opens in a new window)](https://help.openai.com/articles/12440090-instant-checkout-buy-directly-from-merchants-through-chatgpt) partners. Information you share with third-party partners is governed by their own terms and privacy policies, and you should make sure you understand those terms and policies before sharing information with them.”After citation
Latest stance: arbitration or waiver on governing law disputes
“YOU AND OPENAI AGREE TO THE FOLLOWING MANDATORY ARBITRATION AND CLASS ACTION WAIVER PROVISIONS:”Open timeline citation
Latest stance: arbitration or waiver on governing law disputes
“Exceptions. This section does not require informal dispute resolution or arbitration of the following claims: (i) individual claims brought in small claims court; and (ii) injunctive or other equitable relief to stop unauthorized use or abuse of the Services or intellectual property infringement or misappropriation.”Open timeline citation
Latest stance: rights or controls vary by tier on tier differences
“Billing. If you purchase any Services, you will provide complete and accurate billing information, including a valid payment method. For paid subscriptions, we will automatically charge your payment method on each agreed-upon periodic renewal until you cancel. You’re responsible for all applicable taxes, and we’ll charge tax when required. If your payment cannot be completed, we may downgrade your account or suspend your access to our Services until payment is received.”Open timeline citation
Latest stance: arbitration or waiver on governing law disputes
“MANDATORY ARBITRATION. You and OpenAI agree to resolve any claims arising out of or relating to these Terms or our Services, regardless of when the claim arose, even if it was before these Terms existed (a “Dispute”), through final and binding arbitration. You may opt out of arbitration within 30 days of account creation or of any updates to these arbitration terms within 30 days after the update has taken effect by filling out this form . If you opt out of an update, the last set of agreed upon arbitration terms will apply.”Open timeline citation
Capture recency
- Privacy Policy:Last captured 2026-08-12· verified 2026-08-12
- Terms of Service:Last captured 2026-08-14· verified 2026-08-14
Dates state when our pipeline captured and verified each document — not when the vendor last changed it. Documents are re-scanned on a recurring cadence; a document verified once says so until a re-scan confirms it again.
Same number of findings this quarter vs last (222 vs 222). First scan: June 2026.
Compare and stack are saved in your browser. Open compare · View your stack. A correction triggers an automated re-read of OpenAI Assistants API's policies — no human edits the data.
Need this for procurement or legal diligence?
Free shows today's risk. A Stack Audit gives you a citable, verbatim-sourced PDF across your whole AI stack — and flags the moment a vendor's terms change.
Every finding above is a verbatim quote from OpenAI Assistants API's own published policy, captured to an immutable snapshot and read in full through a two-gate verification pipeline. Confidence labels and any analysis are AI-generated and informational only — not legal advice.
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.