ChatGPT Free, Plus and Pro

The document exists. The ledger fetched it at its publisher and quotes it.

Record ID

AVD-2026-0001

Kind

Consumer tier

Jurisdiction

United States

Last verified

15 September 2026

Added

15 September 2026

• Training is on by default on the consumer plans. The help centre says OpenAI may use content from services for individuals to train its models.
• The privacy policy commits to removing deleted personal data from OpenAI systems within 30 days.
• Saved memories sit apart from chat history, so deleting a chat does not delete a memory drawn from it.
• The enterprise privacy page names ChatGPT Business, ChatGPT Enterprise and the API as the products OpenAI will sign a DPA for. No consumer plan is on that list.

Used for training by default, Retention period, Deletion on request, Storage region and residency, Subprocessor list published, Human review of content, Opt out available, DPA available, Persistent memory across sessions, Last change to the terms. Stated means the document you can open below says it; silent means the ledger read the document and it does not.

Used for training by defaultStated

Yes by default. The help centre states that when you use services for individuals such as ChatGPT, OpenAI may use your content to train its models.OpenAI Help Center, how your data is used to improve model performance, primary source, 15 September 2026.

Retention periodStated

Kept until the person deletes it, then removed from OpenAI systems within 30 days, with longer retention where law, safety or fraud work requires it.OpenAI privacy policy, primary source, 6 February 2026.

Deletion on requestStated

Individual chats, whole history, single saved memories or the account can be deleted. Content already de identified for model improvement is not pulled back.OpenAI Help Center, data usage for consumer services FAQ, primary source, 15 September 2026.

Storage region and residencyStated

No residency guarantee. The consumer FAQ says content is stored on OpenAI and service provider systems in the United States and around the world.OpenAI Help Center, data usage for consumer services FAQ, primary source, 15 September 2026.

Subprocessor list publishedStated

The published list is scoped to the business products and names Plus and Pro only for web hosting of ChatGPT Sites, so consumers get categories rather than a list.OpenAI enterprise privacy, primary source, 8 January 2026.

Human review of contentStated

Yes. Authorised staff and service providers may access content for abuse work, support, legal matters and model improvement, and the page warns against entering sensitive information.OpenAI Help Center, data usage for consumer services FAQ, primary source, 15 September 2026.

Opt out availableStated

Yes. Improve the model for everyone under Settings and Data Controls, reversible at any time. Submitting thumbs up or thumbs down feedback re enables training on that conversation.OpenAI Help Center, how your data is used to improve model performance, primary source, 15 September 2026.

DPA availableSilent

None for the consumer plans. The enterprise privacy page lists ChatGPT Business, ChatGPT Enterprise and the API as the DPA products and no consumer tier appears.OpenAI enterprise privacy, primary source, 8 January 2026.

Persistent memory across sessionsStated

Yes, on by default, stored separately from chats. The memory article says a saved memory can still be used in future conversations even after the chat is deleted.OpenAI Help Center, memory FAQ, primary source, 15 September 2026.

Last change to the termsStated

The privacy policy prints Updated 6 February 2026. The help centre articles that govern training and controls print a relative age only and no absolute date.OpenAI privacy policy, primary source, 6 February 2026.

1. 30 days

   Deletion of personal data from OpenAI systems

   OpenAI privacy policy, primary source, as of 6 February 2026.

If your workplace policy says staff may use a personal ChatGPT account for work, this row is the reason to stop. The consumer tier trains on what is typed unless each person finds a setting, there is no contract you can sign, there is no residency choice, and a memory survives the deletion of the chat that created it. A policy that permits personal accounts is permitting an uncontrolled disclosure with no processor agreement behind it.

1. OpenAI privacy policyPrimary · 6 February 2026
2. OpenAI Help Center, how your data is used to improve model performancePrimary · 15 September 2026
3. OpenAI Help Center, data usage for consumer services FAQPrimary · 15 September 2026
4. OpenAI Help Center, memory FAQPrimary · 15 September 2026
5. OpenAI enterprise privacyPrimary · 8 January 2026

• VerifiedBusiness tierAVD-2026-0002

  ChatGPT Business, the plan formerly called Team

  United States · verified 15 September 2026

  The training article states that by default OpenAI does not train on inputs or outputs from its products for business users, including ChatGPT Business.

• VerifiedBusiness tierAVD-2026-0003

  ChatGPT Enterprise and ChatGPT Edu

  United States · verified 15 September 2026

  The enterprise privacy page states plainly that OpenAI does not train its models on your data by default.

• VerifiedAPI and platformAVD-2026-0004

  The OpenAI API and platform

  United States · verified 15 September 2026

  The platform guide states that as of 1 March 2023, data sent to the OpenAI API is not used to train or improve OpenAI models.

• Open questionOpen questionAVD-2026-0031

  Who owns the memory record an assistant builds about you?

  Global · verified 15 September 2026

  OpenAI states that even if you delete a chat, any saved memories from it can still be used in future conversations.

• VerifiedAPI and platformAVD-2026-0026

  Amazon Bedrock

  United States · verified 15 September 2026

  Amazon Bedrock uses a zero data retention security model, so by default it does not store model inputs or outputs.

• VerifiedBusiness tierAVD-2026-0025

  GitHub Copilot Business and Enterprise

  United States · verified 15 September 2026

  GitHub states it does not use Copilot Business or Copilot Enterprise customer data to train AI models.