x.com/OSHBuilt/status/2102213426168975383

OpenAI’s published policies contradict the blanket statement that it keeps all customer information private.

According to OpenAI’s Privacy Policy, OpenAI discloses personal data to:

• vendors and service providers such as hosting, cloud, customer service, and IT providers;
• government authorities or other third parties when required by law or for safety/fraud/legal reasons;
• affiliates;
• business account administrators, who may access and control account content in ChatGPT Enterprise or business accounts;
• and in some cases other users or third-party partners when users choose to share information.

OpenAI’s published sub-processor list also names outside companies that process customer data for functions like customer support, moderation, authentication, and infrastructure. That directly contradicts the idea that all customer information is simply kept private and never shared beyond OpenAI.

For business customers specifically, OpenAI’s Business Terms also say OpenAI may share information related to abusive customer content when required by law or reasonably necessary to protect the service or third parties from harm.

So while OpenAI does make significant privacy commitments, the post’s absolute wording is inaccurate: OpenAI’s own terms show that customer information can be disclosed in defined circumstances.