ChatGPT
Updated on 2025-07-25 Charlotte Leriche
Data Access
Terms Changes
5Policy changes detected by Open Terms Archive
OpenAI introduces acceptable uses for API and custom GPTs
January 10, 2024OpenAI splits prohibitions into three lists. GPT API users face new rules on sensitive data. Marketing on GPT Store restricts profanity and violence.
OpenAI specifies further plugin exports rules
January 10, 2024For European developers, OpenAI contracts with OpenAI Ireland Ltd. OpenAI no longer acts as a separate data controller. Export restrictions extended to plugins in sanctioned countries.
OpenAI delays the date of entry into force of their new non-European terms of service
December 3, 2023OpenAI delays non-European terms' effective date to January 31, 2024. Introduced tailored terms for European users, new functionalities, and use restrictions on November 13, 2023.
OpenAI tightens security and adds appeal mechanism for suspended accounts
November 14, 2023OpenAI prohibits service modification, limits liability, bans impactful use of output, and introduces appeal process for account suspension.
OpenAI enables transfer of control of non-European accounts to their employer
November 13, 2023OpenAI notifies organizations about individual accounts, enables transfer to business accounts, specifies shared information with third parties, and exempts EEA, Switzerland, and UK users from changes.
Sanctions and transfer policy
OpenAI processes your Personal Data on servers located outside the EEA, Switzerland, and the UK for the purposes described in this Privacy Policy.
This notably involves the processing and storage of your Personal Data at our facilities and servers in the United States.
While data protection laws vary from country to country and some countries may not offer the same level of data protection as your country of residence, we apply the protections described in this policy to your Personal Data, regardless of where it is processed.
When we transfer Personal Data outside the EEA, Switzerland, or the UK, we rely on the following transfer mechanisms to comply with applicable data protection laws.
