Top 5 Concerns & Recommended Actions

1. Broad Collection of Personal Data:

   • Concern: OpenAI collects a significant amount of data, including:

     • Account Information: Name, contact info, credentials, DOB, payment details, transaction history.

     • User Content: Prompts, uploaded files, images, audio.

     • Communication Information: Email contents, social media messages.

     • Technical Information: IP address, browser info, usage patterns, device details, location.

     • Cookies and Similar Technologies: For preferences and tracking.

     • Data from Third Parties: Security partners, marketing vendors, publicly available internet information.

   • Action:

     • Minimize Information Sharing: Provide only essential information when creating an account or interacting with the services. Avoid uploading sensitive content that you don't want OpenAI to have.

     • Review Account Settings: Periodically review and adjust your account settings, including privacy settings.

     • Be Mindful of Prompts: Remember that anything you input is collected. Avoid including personal or sensitive information directly in prompts.

     • Limit Third Party Interactions: Be aware that interactions with third-party apps via OpenAI can expose your data to other privacy policies. Review before connecting with third parties.

2. Use of Content for Model Training:

   • Concern: OpenAI explicitly states it may use your Content (prompts, uploads) to improve its Services, including training the AI models (like ChatGPT).

   • Action:

     • Opt-Out of Training: Follow the instructions to opt out of the use of your Content for model training (linked in the policy as a help center article). This is crucial if you are concerned about your data being used to improve the AI.

     • Be Conscious of Content: Be aware that if you don't opt-out, everything you input could be used for model training. Avoid providing sensitive or confidential information.

3. Disclosure of Personal Data to Third Parties:

   • Concern: OpenAI may disclose your Personal Data to various third parties, including:

     • Vendors and Service Providers: For operational functions (hosting, customer service, etc.)

     • Business Transfers: During mergers, acquisitions, etc.

     • Government Authorities: For legal compliance, investigations, etc.

     • Affiliates: OpenAI related companies

     • Business Account Administrators: If using a business account.

     • Other Users and Third Parties: Through sharing features or third party apps.

   • Action:

     • Limit Account Sharing: If on a business account, understand your organization's data access policies. Be aware that your administrator might see your content.

     • Exercise Caution with Sharing: Only share content with users or third-party applications you trust, since their privacy policies apply.

     • Understand Potential Disclosure: Be aware that your data may be disclosed in legal or business events.

4. Data Retention Practices:

   • Concern: Data retention is dependent on various factors including the purpose of processing, the sensitivity of the data and legal obligations. There are also differences based on account settings (e.g. ChatGPT temporary chats vs. other data).

   • Action:

     • Understand Retention Periods: While they describe factors influencing the length, they lack specifics. Be aware your data may be retained longer than you assume.

     • Explore Account Deletion: If you are concerned about data retention, be sure you understand the account deletion process and how your data might be stored after deletion.

     • Use Temporary Chats: Consider using features like the 30-day temporary chat for more sensitive interactions.

5. Accuracy and Limitations of AI Output:

   • Concern: The policy explicitly states that the AI may produce factually inaccurate information, including incorrect information about you.

   • Action:

     • Verify Information: Do not rely on the output from OpenAI's models as factual, especially concerning yourself.

     • Request Correction: If you find inaccurate information about yourself, use the channels provided (privacy.openai.com or dsar@openai.com) to request a correction or removal. Understand that there are limitations to these capabilities.

General Actions:

• Stay Informed: Review the Privacy Policy regularly, especially for changes.

• Exercise Your Rights: Use the provided channels (privacy.openai.com and dsar@openai.com) to exercise your rights to access, correct, delete, or restrict the processing of your personal information.

• Privacy is an Ongoing Process: Being mindful of your interactions and data you are sharing with OpenAI's services is an ongoing process.

Key Takeaway: The key message is to be proactive in managing your privacy. Understand what data is collected, how it is used, and take the necessary steps to protect your personal information.

Chat GPT Privacy DataSAFE Guide