ChatGPT

"We determine the general area from which your device accesses our Services based on information like its IP address for security reasons and to make your product experience better. In addition, some of our Services allow you to choose to provide more precise location information from your device, such as location information from your device's GPS."

OpenAI collects location data via IP address by default and can also collect precise GPS location data through certain services.

"If you choose to connect your device contacts, we upload information from your device address books and check which of your contacts also use our Services. If any of your contacts aren't yet using our Services, we'll update you if they sign up for our Services later."

OpenAI uploads entire device address books and retains contact information of people who aren't even OpenAI users, monitoring when those non-users eventually sign up.

"We disclose Personal Data to vendors and service providers, including providers of hosting services, customer service vendors, cloud services, content delivery services, support and safety services, email communication software, web analytics services, payment and transaction processors, search and shopping providers, marketing service providers, and information technology providers."

OpenAI shares personal data with a very broad range of third-party vendors and service providers spanning marketing, analytics, shopping, and advertising categories.

"We collect information about your use and activity across the Services, such as the types of content that you view or engage with, the features you use and the actions you take... If you use the Atlas browser we may also collect your browser data according to your controls and use of the service."

OpenAI tracks user activity across all their services and products, and with the Atlas browser can collect browsing data, enabling a comprehensive cross-service profile of user behavior.

"We may update this policy from time to time. When we do, we will publish an updated version and effective date on this page, unless another type of notice is required by applicable law."

OpenAI can change the privacy policy at any time by simply posting an update on their website, with no requirement for user consent or direct notification.

"In some cases, we need to retain Personal Data for longer even after you delete it, for example because we are legally required to, to address fraud and abuse, for security reasons, or for financial record-keeping purposes. For instance: If specific Content, or your account, is banned because of violations of our usage policies, we may retain that data for to protect our services from fraud, abuse, or other violations of our policies."

OpenAI retains personal data even after users delete it, with broad justifications including security, fraud prevention, and financial record-keeping, and no clear maximum retention timeline.

"When you create an account with us, we will collect information associated with your account, including your name, contact information, account credentials, date of birth, payment information, and transaction history... When we are a party to a financial transaction (for instance, when we process your payment for a ChatGPT Plus or Pro account, or facilitate a purchase on ChatGPT), we may retain payment and transaction related information to meet our accounting, dispute resolution, and regulatory compliance purposes."

The privacy policy references paid subscription tiers (Plus, Pro) and retains payment information indefinitely for compliance purposes, but provides no details about auto-renewal terms, cancellation procedures, or billing cycles.