2 Concern2 Mixed0 Positive
D42 / 100
In Plain English
OpenAI collects account data, all prompts and responses, file uploads, voice inputs, and a separate Memory that persists even when you delete chats. Training on your conversations is on by default; you must opt out. A federal court order (May 2025) requires OpenAI to preserve and segregate ChatGPT conversation data — including deleted conversations. API and Enterprise: training is off; your data is never used for training. OpenAI states they don't sell personal data or use it for targeted advertising.
Category Breakdown
Known data breaches
No known public data breaches
OpenAI (ChatGPT) does not appear in the Have I Been Pwned database of publicly disclosed data breaches.
How OpenAI (ChatGPT) could earn a higher grade
Recommended changes
- Stop using conversation content to train models by default — make opt-out the default rather than requiring users to find and disable a settings toggle.
- Publish specific retention periods for conversation data in both training-on and training-off modes.
- Provide a clear technical explanation of what 'de-identified' means in practice — what residual data remains after de-identification.
- Offer a verifiable, audited 'zero training' mode where conversation data is guaranteed not to persist beyond the session.
- Extend GDPR-equivalent data rights (access, deletion, portability) to all users globally.
- Publish a transparency report covering government data requests for user conversation data.
Frequently asked questions
Alternatives to OpenAI (ChatGPT)
B
Anthropic
72/100
Anthropic collects your conversations and account data, uses them to train AI models unless you opt out in Privacy Setti…