Scorecard › ChatGPT
Does ChatGPT train on my data?
The short answer depends on your plan. Here's each ChatGPT plan, graded from OpenAI's own policy pages.
C ChatGPT Free
Why this grade: Trains on your chats unless you opt out. Thumbs-up/down feedback can still send the whole chat for training even after opting out. No business contract.
| Trains on your data by default | yes (opt-out available) |
|---|---|
| Can you opt out? | yes |
| How to opt out | Settings → Data controls → Improve the model for everyone → off, or Privacy Portal → Do not train on my content. |
| Admin can enforce settings | no |
| How long data is kept | Temporary Chats up to 30 days; regular chats until you delete them (unknown otherwise) |
| Human review | unknown |
| DPA available | not listed (OpenAI's DPA covers Business, Enterprise, API) |
| SOC 2 | unknown |
"When you use our services for individuals (Free, Plus, Pro), we may use your content to train our models."
Source: https://help.openai.com/en/articles/5722486-how-your-data-is-used-to-improve-model-performance · checked 2026-10-16
C ChatGPT Plus
Why this grade: Same as Free: trains unless you opt out, with the feedback exception. No business contract.
| Trains on your data by default | yes (opt-out available) |
|---|---|
| Can you opt out? | yes |
| How to opt out | Settings → Data controls → Improve the model for everyone → off. |
| Admin can enforce settings | no |
| How long data is kept | Temporary Chats up to 30 days (unknown otherwise) |
| Human review | unknown |
| DPA available | not listed (OpenAI's DPA covers Business, Enterprise, API) |
| SOC 2 | unknown |
"When you use our services for individuals (Free, Plus, Pro), we may use your content to train our models."
Source: https://help.openai.com/en/articles/5722486-how-your-data-is-used-to-improve-model-performance · checked 2026-10-16
A ChatGPT Business
Why this grade: No training by default (feedback doesn't change that), admin-controlled retention, DPA, SOC 2 Type 2.
| Trains on your data by default | no |
|---|---|
| Can you opt out? | n/a |
| How to opt out | unknown |
| Admin can enforce settings | yes |
| How long data is kept | Admin-controlled; deleted chats removed within 30 days |
| Human review | Limited: authorized staff and contractors for support/abuse |
| DPA available | yes |
| SOC 2 | yes (Type 2) |
"We do not train our models on your data by default"
Source: https://openai.com/enterprise-privacy/ · checked 2026-10-16
A ChatGPT Enterprise
Why this grade: No training by default, admin retention controls, SSO, DPA, SOC 2 Type 2.
| Trains on your data by default | no |
|---|---|
| Can you opt out? | n/a |
| How to opt out | unknown |
| Admin can enforce settings | yes |
| How long data is kept | Admin-controlled; deleted chats removed within 30 days |
| Human review | Only for incidents, recovery with permission, or legal requirement |
| DPA available | yes |
| SOC 2 | yes (Type 2) |
"We do not train our models on your data by default"
Source: https://openai.com/enterprise-privacy/ · checked 2026-10-16
Which AI tools are safe for your business data, and what changed this week. Plain English, 3-minute read.