OpenAI's privacy changed
Hedging language on file: appropriate, de-identified, improve our Services, may share, may use, reasonable, such as. See what these phrases permit.
REMOVEDUpdated: November 14, 2023
ADDEDUpdated: November 4, 2024
Privacy policy
REMOVEDEffective: January 31, 2024 We've updated our Privacy Policy below. These updates do not apply to individuals located in the European Economic Area, UK, and Switzerland. If you reside in those areas, this version of our Privacy Policy applies to you. We at OpenAI OpCo, LLC (together with our affiliates, "OpenAI", "we", "our" or "us") respect your privacy and are strongly committed to keeping secure any information we obtain from you or about you. This Privacy Policy describes our practices with respect to Personal Information we collect from or about you when you use our website, applications, and services (collectively, "Services"). This Privacy Policy does not apply to content that we process on behalf of customers of our business offerings, such as our API. Our use of that data is governed by our customer agreements covering access to and use of those offerings. For information about how we collect and use training information to develop our language models that power ChatGPT and other Services, and your choices with respect to that information, please see this help center article (opens in a new window) . 1. Personal information we collect We collect personal information relating to you ("Personal Information") as follows: Personal information you provide : We collect Personal Information if you create an account to use our Services or communicate with us as follows: Account Information: When you create an account with us, we will collect information associated with your account, including your name, contact information, account credentials, payment card information, and transaction history, (collectively, "Account Information"). User Content: When you use our Services, we collect Personal Information that is included in the input, file uploads, or feedback that you provide to our Services ("Content"). Communication Information : If you communicate with us, we collect your name, contact information, and the contents of any messages you send ("Communication Information"). Social Media Information : We have pages on social media sites like Instagram, Facebook, Medium, Twitter, YouTube and LinkedIn. When you interact with our social media pages, we will collect Personal Information that you elect to provide to us, such as your contact details (collectively, "Social Information"). In addition, the companies that host our social media pages may provide us with aggregate information and analytics about our social media activity. Other Information You Provide : We collect other information that you may provide to us, such as when you participate in our events or surveys or provide us with information to establish your identity (collectively, "Other Information You Provide" Personal information we receive automatically from your use of the Services : When you visit, use, or interact with the Services, we receive the following information about your visit, use, or interactions ("Technical Information"): Log Data : Information that your browser or device automatically sends when you use our Services. Log data includes your Internet Protocol address, browser type and settings, the date and time of your request, and how you interact with our Services. Usage Data : We may automatically collect information about your use of the Services, such as the types of content that you view or engage with, the features you use and the actions you take, as well as your time zone, country, the dates and times of access, user agent and version, type of computer or mobile device, and your computer connection. Device Information : Includes name of the device, operating system, device identifiers, and browser you are using. Information collected may depend on the type of device you use and its settings. Cookies : We use cookies to operate and administer our Services, and improve your experience. A "cookie" is a piece of information sent to your browser by a website you visit. You can set your browser to accept all cookies, to reject all cookies, or to notify you whenever a cookie is offered so that you can decide each time whether to accept it. However, refusing a cookie may in some cases preclude you from using, or negatively affect the display or function of, a website or certain areas or features of a website. For more details on cookies, please visit All About Cookies (opens in a new window) . Analytics : We may use a variety of online analytics products that use cookies to help us analyze how users use our Services and enhance your experience when you use the Services. 2. How we use personal information We may use Personal Information for the following purposes: To provide, administer, maintain and/or analyze the Services; To improve our Services and conduct research; To communicate with you; including to send you information about our Services and events; To develop new programs and services; To prevent fraud, criminal activity, or misuses of our Services, and to protect the security of our IT systems, architecture, and networks; To carry out business transfers; and To comply with legal obligations and legal process and to protect our rights, privacy, safety, or property, and/or that of our affiliates, you, or other third parties. Aggregated or de-identified information . We may aggregate or de-identify Personal Information so that it may no longer be used to identify you and use such information to analyze the effectiveness of our Services, to improve and add features to our Services, to conduct research and for other similar purposes. In addition, from time to time, we may analyze the general behavior and characteristics of users of our Services and share aggregated information like general user statistics with third parties, publish such aggregated information or make such aggregated information generally available. We may collect aggregated information through the Services, through cookies, and through other means described in this Privacy Policy. We will maintain and use de-identified information in anonymous or de-identified form and we will not attempt to reidentify the information, unless required by law. As noted above, we may use Content you provide us to improve our Services, for example to train the models that power ChatGPT. Read our instructions (opens in a new window) on how you can opt out of our use of your Content to train our models. 3. Disclosure of personal information In certain circumstances we may provide your Personal Information to third parties without further notice to you, unless required by the law: Vendors and Service Providers : To assist us in meeting business operations needs and to perform certain services and functions, we may provide Personal Information to vendors and service providers, including providers of hosting services, customer service vendors, cloud services, email communication software, web analytics services, and other information technology providers, among others. Pursuant to our instructions, these parties will access, process, or store Personal Information only in the course of performing their duties to us. Business Transfers : If we are involved in strategic transactions, reorganization, bankruptcy, receivership, or transition of service to another provider (collectively, a "Transaction"), your Personal Information and other information may be disclosed in the diligence process with counterparties and others assisting with the Transaction and transferred to a successor or affiliate as part of that Transaction along with other assets. Legal Requirements : We may share your Personal Information, including information about your interaction with our Services, with government authorities, industry peers, or other third parties (i) if required to do so by law or in the good faith belief that such action is necessary to comply with a legal obligation, (ii) to protect and defend our rights or property, (iii) if we determine, in our sole discretion, that there is a violation of our terms, policies, or the law; (iv) to detect or prevent fraud or other illegal activity; (v) to protect the safety, security, and integrity of our products, employees, or users, or the public, or (vi) to protect against legal liability. Affiliates : We may disclose Personal Information to our affiliates, meaning an entity that controls, is controlled by, or is under common control with OpenAI. Our affiliates may use the Personal Information we share in a manner consistent with this Privacy Policy. Business Account Administrators : When you join a ChatGPT Enterprise or business account, the administrators of that account may access and control your OpenAI account. In addition, if you create an account using an email address belonging to your employer or another organization, we may share the fact that you have an OpenAI account and certain account information, such as your email address, with your employer or organization to, for example, enable you to be added to their business account. Other Users and Third Parties You Share Information With : Certain features allow you to display or share information with other users or third parties. For example, you may share ChatGPT conversations with other users via shared links or send information to third-party applications via custom actions for GPTs. Be sure you trust any user or third party with whom you share information. 4. Your rights Depending on location, individuals may have certain statutory rights in relation to their Personal Information. For example, you may have the right to: Access your Personal Information and information relating to how it is processed. Delete your Personal Information from our records. Rectify or update your Personal Information. Transfer your Personal Information to a third party (right to data portability). Restrict how we process your Personal Information.
ADDEDFor individuals in the European Economic Area, United Kingdom, and Switzerland, you can read this version of our Privacy Policy We at OpenAI OpCo, LLC (together with our affiliates, "OpenAI", "we", "our" or "us") respect your privacy and are strongly committed to keeping secure any information we obtain from you or about you. This Privacy Policy describes our practices with respect to Personal Data that we collect from or about you when you use our website, applications, and services (collectively, "Services"). This Privacy Policy does not apply to content that we process on behalf of customers of our business offerings, such as our API. Our use of that data is governed by our customer agreements covering access to and use of those offerings. For information about how we collect and use training information to develop our language models that power ChatGPT and other Services, and your choices with respect to that information, please see this help center article (opens in a new window) . 1. Personal Data we collect We collect personal data relating to you ("Personal Data") as follows: Personal Data You Provide: We collect Personal Data if you create an account to use our Services or communicate with us as follows: Account Information: When you create an account with us, we will collect information associated with your account, including your name, contact information, account credentials, date of birth, payment information, and transaction history, (collectively, "Account Information"). User Content: We collect Personal Data that you provide in the input to our Services ("Content"), including your prompts and other content you upload, such as files (opens in a new window) , images (opens in a new window) , and audio (opens in a new window) , depending on the features you use. Communication Information : If you communicate with us, such as via email or our pages on social media sites, we may collect Personal Data like your name, contact information, and the contents of the messages you send ("Communication Information"). Other Information You Provide : We collect other information that you may provide to us, such as when you participate in our events or surveys or provide us with information to establish your identity or age (collectively, "Other Information You Provide"). Personal Data We Receive from Your Use of the Services: When you visit, use, or interact with the Services, we receive the following information about your visit, use, or interactions ("Technical Information"): Log Data : We collect information that your browser or device automatically sends when you use our Services. Log data includes your Internet Protocol address, browser type and settings, the date and time of your request, and how you interact with our Services. Usage Data : We collect information about your use of the Services, such as the types of content that you view or engage with, the features you use and the actions you take, as well as your time zone, country, the dates and times of access, user agent and version, type of computer or mobile device, and your computer connection. Device Information : We collect information about the device you use to access the Services, such as the name of the device, operating system, device identifiers, and browser you are using. Information collected may depend on the type of device you use and its settings. Location Information: We may determine the general area from which your device accesses our Services based on information like its IP address for security reasons and to make your product experience better, for example to protect your account by detecting unusual login activity or to provide more accurate responses. In addition, some of our Services allow you to choose to provide more precise location information from your device, such as location information from your device's GPS. Cookies and Similar Technologies : We use cookies and similar technologies to operate and administer our Services, and improve your experience. If you use our Services without creating an account, we may store some of the information described in this policy with cookies, for example to help maintain your preferences across browsing sessions. For details about our use of cookies, please read our Cookie Notice . Information We Receive from Other Sources: We receive information from our trusted partners, such as security partners, to protect against fraud, abuse, and other security threats to our Services, and from marketing vendors who provide us with information about potential customers of our business services. We also collect information from other sources, like information that is publicly available on the internet, to develop the models that power our Services. For more information on the sources of information used to develop the models that power ChatGPT and other Services, please see this help center article (opens in a new window) . 2. How we use Personal Data We may use Personal Data for the following purposes: To provide analyze, and maintain our Services, for example to respond to your questions for ChatGPT; To improve and develop our Services and conduct research, for example to develop new product features; To communicate with you, including to send you information about our Services and events, for example about changes or improvements to the Services; To prevent fraud, illegal activity, or misuses of our Services, and to protect the security of our systems and Services; To comply with legal obligations and to protect the rights, privacy, safety, or property of our users, OpenAI, or third parties. We may also aggregate or de-identify Personal Data so that it no longer identifies you and use this information for the purposes described above, such as to analyze the way our Services are being used, to improve and add features to them, and to conduct research. We will maintain and use de-identified information in de-identified form and not attempt to reidentify the information, unless required by law. As noted above, we may use Content you provide us to improve our Services, for example to train the models that power ChatGPT. Read our instructions (opens in a new window) on how you can opt out of our use of your Content to train our models. 3. Disclosure of Personal Data We may disclose your Personal Data in the following circumstances: Vendors and Service Providers : To assist us in meeting business operations needs and to perform certain services and functions, we may disclose Personal Data to vendors and service providers, including providers of hosting services, customer service vendors, cloud services, content delivery services, support and safety monitoring services, email communication software, web analytics services, payment and transaction processors, and other information technology providers. Pursuant to our instructions, these parties will access, process, or store Personal Data only in the course of performing their duties to us. Business Transfers : If we are involved in strategic transactions, reorganization, bankruptcy, receivership, or transition of service to another provider (collectively, a "Transaction"), your Personal Data may be disclosed in the diligence process with counterparties and others assisting with the Transaction and transferred to a successor or affiliate as part of that Transaction along with other assets. Government Authorities or Other Third Parties : We may share your Personal Data, including information about your interaction with our Services, with government authorities, industry peers, or other third parties in compliance with the law (i) if required to do so to comply with a legal obligation, or in the good faith belief that such action is necessary to comply with a legal obligation, (ii) to protect and defend our rights or property, (iii) if we determine, in our sole discretion, that there is a violation of our terms, policies, or the law; (iv) to detect or prevent fraud or other illegal activity; (v) to protect the safety, security, and integrity of our products, employees, users, or the public, or (vi) to protect against legal liability. Affiliates : We may disclose Personal Data to our affiliates, meaning an entity that controls, is controlled by, or is under common control with OpenAI. Our affiliates may use this Personal Data in a manner consistent with this Privacy Policy. Business Account Administrators : When you join a ChatGPT Enterprise or business account, the administrators of that account may access and control your OpenAI account, including being able to access your Content. In addition, if you create an account using an email address belonging to your employer or another organization, we may share the fact that you have an account and certain account information, such as your email address, with your employer or organization to, for example, enable you to be added to their business account. Other Users and Third Parties You Interact or Share Information With : Certain features allow you to interact or share information with other users or third parties. For example, you can share ChatGPT conversations with other users via shared links (opens in a new window) . You can also send information to third-party applications, such as via custom actions for GPTs, or for searching the web to help answer questions that benefit from more recent information. Information you share with third parties is governed by their own terms and privacy policies, and you should make sure you understand those terms and policies before sharing information with them. 4. Retention We'll retain your Personal Data for only as long as we need in order to provide our Services to you, or for other legitimate business purposes such as resolving disputes, safety and security reasons, or complying with our legal obligations. How long we retain Personal Data will depend on a number of factors, such as: Our purpose for processing the data (such as whether we need to retain the data to provide our Services); The amount, nature, and sensitivity of the information; The potential risk of harm from unauthorized use or disclosure; Any legal requirements that we are subject to. In some cases, the length of time we retain data depends on your settings. For example, ChatGPT temporary chats will not appear in your history and will be kept up to 30 days for safety purposes. You can find more information on data controls here (opens in a new window) . 5. Your rights Depending on where you live, you may have certain statutory rights in relation to your Personal Data. For example, you may have the right to: Access your Personal Data and information relating to how it is processed. Delete your Personal Data from our records. Update or correct your Personal Data. Transfer your Personal Data to a third party (right to data portability). Restrict how we process your Personal Data.
Withdraw your consent-where we rely on consent as the legal basis for processing at any time.
REMOVEDObject to how we process your Personal Information.
ADDEDObject to how we process your Personal Data.
Lodge a complaint with your local data protection authority.
REMOVEDYou can exercise some of these rights through your OpenAI account. If you are unable to exercise your rights through your account, please submit your request through privacy.openai.com (opens in a new window) or to dsar@openai.com . A note about accuracy: Services like ChatGPT generate responses by reading a user's request and, in response, predicting the words most likely to appear next. In some cases, the words most likely to appear next may not be the most factually accurate. For this reason, you should not rely on the factual accuracy of output from our models. If you notice that ChatGPT output contains factually inaccurate information about you and you would like us to correct the inaccuracy, you may submit a correction request through privacy.openai.com (opens in a new window) or to dsar@openai.com . Given the technical complexity of how our models work, we may not be able to correct the inaccuracy in every instance. In that case, you may request that we remove your Personal Information from ChatGPT's output by filling out this form (opens in a new window) . For information on how to exercise your rights with respect to data we have collected from the internet to train our models, please see this help center article (opens in a new window) . 5. Additional U.S. state disclosures The following table provides additional information about the categories of Personal Information we collect and how we disclose that information. You can read more about the Personal Information we collect in "Personal information we collect" above, how we use Personal Information in "How we use personal information" above, and how we retain Personal Information in "Security and Retention" below. Category of Personal Information Disclosure of Personal Information
ADDEDYou can exercise some of these rights through your OpenAI account. If you are unable to exercise your rights through your account, please submit your request through privacy.openai.com (opens in a new window) or to dsar@openai.com . You can contact our data protection officer at privacy@openai.com . A note about accuracy: Services like ChatGPT generate responses by reading a user's request and, in response, predicting the words most likely to appear next. In some cases, the words most likely to appear next may not be the most factually accurate. For this reason, you should not rely on the factual accuracy of output from our models. If you notice that ChatGPT output contains factually inaccurate information about you and you would like to request a correction or removal of the information, you can submit these requests through privacy.openai.com (opens in a new window) or to dsar@openai.com , and we will consider your request based on applicable law and the technical capabilities of our models. For information on how to exercise your rights with respect to data we have collected from the internet to train our models, please see this help center article (opens in a new window) . OpenAI processes your Personal Data for the purposes described in this Privacy Policy on servers located in various jurisdictions, including processing and storing your Personal Data in our facilities and servers in the United States. While data protection law varies by country, we apply the protections described in this policy to your Personal Data regardless of where it is processed, and only transfer that data pursuant to legally valid transfer mechanisms. 6. Children Our Services are not directed to, or intended for, children under 13. We do not knowingly collect Personal Data from children under 13. If you have reason to believe that a child under 13 has provided Personal Data to OpenAI through the Services, please email us at privacy@openai.com . We will investigate any notification and, if appropriate, delete the Personal Data from our systems. Users under 18 must have permission from their parent or guardian to use our Services. 7. Security We implement commercially reasonable technical, administrative, and organizational measures designed to protect Personal Data from loss, misuse, and unauthorized access, disclosure, alteration, or destruction. However, no Internet or email transmission is ever fully secure or error free. Therefore, you should take special care in deciding what information you provide to the Services. In addition, we are not responsible for circumvention of any privacy settings or security measures contained on the Service, or third-party websites. 8. Additional U.S. state disclosures Some U.S. state privacy laws require specific disclosures. The following table provides additional information about the categories of Personal Data we collect and how we use and disclose that information. You can read more about the Personal Data we collect and where we collect it from in "Personal Data we collect" above, how we use Personal Data in "How we use Personal Data" above, and how we retain Personal Data in "Security and Retention" below. Category of Personal Data Use of Personal Data Disclosure of Personal Data We collect the following information, as described above:
Identifiers, such as your name, contact details, IP address, and other device identifiers
REMOVEDWe may disclose this information to our affiliates, vendors and service providers to process in accordance with our instructions; to law enforcement and other third parties for the legal reasons described above; to parties involved in Transactions; to corporate administrators of enterprise or team accounts; and to other users and third parties you choose to share it with. Commercial Information, such as your transaction history We may disclose this information to our affiliates, vendors and service providers to process in accordance with our instructions; to law enforcement and other third parties for the legal reasons described above; to parties involved in Transactions; and to corporate administrators of enterprise or team accounts. Network Activity Information, such as Content and how you interact with our Services We may disclose this information to our affiliates, vendors and service providers to process in accordance with our instructions; to law enforcement and other third parties for the legal reasons described above; to parties involved in Transactions; and to other users and third parties you choose to share it with. Geolocation Data We may disclose this information to our affiliates, vendors and service providers to process in accordance with our instructions; to law enforcement and other third parties for the legal reasons described above; and to parties involved in Transactions. Your account login credentials and payment card information (Sensitive Personal Information) We disclose this information to our affiliates, vendors and service providers, law enforcement, and parties involved in Transactions. To the extent provided for by local law and subject to applicable exceptions, individuals may have the following privacy rights in relation to their Personal Information: The right to know information about our processing of your Personal Information, including the specific pieces of Personal Information that we have collected from you; The right to request deletion of your Personal Information; The right to correct your Personal Information; and
ADDEDCommercial information, such as your transaction history Network activity information, such as Content and how you interact with our Services Communication information, such as your contact information when you send us email Geolocation data, such as the general area from which your device accesses our Services based on information like its IP address, or precise location information you choose to provide Your account credentials and payment information We use this information for the following purposes, as described above: Provide, analyze, and maintain our Services Improve and develop our Services and conduct research Communicate with you, including to send you information about our Services and events Prevent fraud, illegal activity, or misuses of our Services, and to protect the security of our systems and Services Comply with legal obligations and protect the rights, privacy, safety, or property of our users, OpenAI, or third parties We may disclose this information in the following circumstances, as described above: Vendors, service providers, and affiliates to process in accordance with our instructions Government authorities or other third parties for the legal reasons described above Parties involved in Transactions Business account administrators for the reasons described above Other users and third parties you interact or share information with Depending on where you live and subject to applicable exceptions, you may have the following privacy rights in relation to your Personal Data: The right to know information about our processing of your Personal Data, including the right to access your Personal Data, often in a portable format; The right to request deletion of your Personal Data; The right to correct your Personal Data; and
The right to be free from discrimination relating to the exercise of any of your privacy rights.
REMOVEDWe don't "sell" Personal Information or "share" Personal Information for cross-contextual behavioral advertising (as those terms are defined under applicable local law). We also don't process sensitive Personal Information for the purposes of inferring characteristics about a consumer. Exercising your rights. To the extent applicable under local law, you can exercise privacy rights described in this section by submitting a request through privacy.openai.com (opens in a new window) or to dsar@openai.com . Verification. In order to protect your Personal Information from unauthorized access, change, or deletion, we may require you to verify your credentials before you can submit a request to know, correct, or delete Personal Information. If you do not have an account with us, or if we suspect fraudulent or malicious activity, we may ask you to provide additional Personal Information and proof of residency for verification. If we cannot verify your identity, we will not be able to honor your request. Authorized agents. You may also submit a rights request through an authorized agent. If you do so, the agent must present signed written permission to act on your behalf and you may also be required to independently verify your identity and submit proof of your residency with us. Authorized agent requests can be submitted to dsar@openai.com . Appeals. Depending on where you live, you may have the right to appeal a decision we make relating to requests to exercise your rights under applicable local law. To appeal a decision, please send your request to dsar@openai.com . 6. Children Our Service is not directed to children under the age of 13. OpenAI does not knowingly collect Personal Information from children under the age of 13. If you have reason to believe that a child under the age of 13 has provided Personal Information to OpenAI through the Service, please email us at legal@openai.com . We will investigate any notification and if appropriate, delete the Personal Information from our systems. If you are 13 or older, but under 18, you must have permission from your parent or guardian to use our Services. 7. Links to other websites The Service may contain links to other websites not operated or controlled by OpenAI, including social media services ("Third Party Sites"). The information that you share with Third Party Sites will be governed by the specific privacy policies and terms of service of the Third Party Sites and not by this Privacy Policy. By providing these links we do not imply that we endorse or have reviewed these sites. Please contact the Third Party Sites directly for information on their privacy practices and policies. 8. Security and retention We implement commercially reasonable technical, administrative, and organizational measures to protect Personal Information both online and offline from loss, misuse, and unauthorized access, disclosure, alteration, or destruction. However, no Internet or email transmission is ever fully secure or error free. In particular, email sent to or from us may not be secure. Therefore, you should take special care in deciding what information you send to us via the Service or email. In addition, we are not responsible for circumvention of any privacy settings or security measures contained on the Service, or third-party websites. We'll retain your Personal Information for only as long as we need in order to provide our Service to you, or for other legitimate business purposes such as resolving disputes, safety and security reasons, or complying with our legal obligations. How long we retain Personal Information will depend on a number of factors, such as the amount, nature, and sensitivity of the information, the potential risk of harm from unauthorized use or disclosure, our purpose for processing the information, and any legal requirements. 9. International users By using our Service, you understand and acknowledge that your Personal Information will be processed and stored in our facilities and servers in the United States and may be disclosed to our service providers and affiliates in other jurisdictions. Legal basis for processing . Our legal bases for processing your Personal Information include: Performance of a contract with you when we provide and maintain our Services. When we process Account Information, Content, and Technical Information solely to provide our Services to you, this information is necessary to be able to provide our Services. If you do not provide this information, we may not be able to provide our Services to you. Our legitimate interests in protecting our Services from abuse, fraud, or security risks, or in developing, improving, or promoting our Services, including when we train our models. This may include the processing of Account Information, Content, Social Information, and Technical Information. Read our instructions (opens in a new window) on how you can opt out of our use of your information to train our models. Your consent when we ask for your consent to process your Personal Information for a specific purpose that we communicate to you. You have the right to withdraw your consent at any time. Compliance with our legal obligations when we use your Personal Information to comply with applicable law or when we protect our or our affiliates', users', or third parties' rights, safety, and property. Data transfers. Where required, we will use appropriate safeguards for transferring Personal Information outside of certain countries. We will only transfer Personal Information pursuant to a legally valid transfer mechanism. Data protection officer. You can contact our data protection officer at privacy@openai.com in matters related to Personal Information processing. 10. Changes to the privacy policy We may update this Privacy Policy from time to time. When we do, we will post an updated version on this page, unless another type of notice is required by applicable law. 11. How to contact us Please contact support (opens in a new window) if you have any questions or concerns not already addressed in this Privacy Policy.
ADDEDWe do not "sell" Personal Data or "share" Personal Data for cross-contextual behavioral advertising, and we do not process Personal Data for "targeted advertising" purposes (as those terms are defined under state privacy laws). We also do not process sensitive Personal Data for the purposes of inferring characteristics about a consumer. Exercising Your Rights. You can exercise privacy rights described in this section by submitting a request through privacy.openai.com (opens in a new window) or to dsar@openai.com . Verification. In order to protect your Personal Data from unauthorized access, change, or deletion, we may require you to verify your credentials before you can submit a request to know, correct, or delete Personal Data. If you do not have an account with us, or if we suspect fraudulent or malicious activity, we may ask you to provide additional Personal Data for verification. If we cannot verify your identity, we will not be able to honor your request. Authorized Agents. You may also submit a rights request through an authorized agent. If you do so, the agent must present signed written permission to act on your behalf and you may also be required to independently verify your identity with us. Authorized agent requests can be submitted to dsar@openai.com. Appeals. Depending on where you live, you may have the right to appeal a decision we make relating to requests to exercise your rights. To appeal a decision, please send your request to dsar@openai.com . 9. Changes to the privacy policy We may update this Privacy Policy from time to time. When we do, we will publish an updated version and effective date on this page, unless another type of notice is required by applicable law. 10. How to contact us Please contact support (opens in a new window) if you have any questions or concerns not already addressed in this Privacy Policy.