Does ChatGPT train on your data? Free vs Plus vs Enterprise
ChatGPT has different data terms on personal and business plans. Personal: Free, Plus, Pro. Business: ChatGPT Enterprise / Business. Every value links to OpenAI's own page. Last verified .
ChatGPT (Free / Plus / Pro)
Trains by default
Trains on business data unless you opt out.
Full personal-plan page →ChatGPT Enterprise / Business
Doesn't train
Doesn't train on business data by default.
Full business-plan page →Side by side
| What we checked | Personal ChatGPT (Free / Plus / Pro) | Business ChatGPT Enterprise / Business |
|---|---|---|
| Trains on your data by default | Yes, opt-out Free, Plus and Pro: OpenAI may train on your chats unless you turn off "Improve the model for everyone". Opt-out covers new chats only. Thumbs up/down feedback can still send the whole conversation to training even after opting out. Source: help.openai.com/en/articles/5722486-how-your-data-is-used-to-improve-model-performance (checked Oct 17, 2026) | No "By default, we do not use your business data for training our models." Feedback you explicitly share may be used. Source: openai.com/enterprise-privacy/ (checked Oct 17, 2026) |
| Can you turn training off? | Yes Settings > Data controls > Improve the model for everyone (off), or 'Do not train on my content' in the OpenAI Privacy Portal. Applies to new conversations. Source: help.openai.com/en/articles/5722486-how-your-data-is-used-to-improve-model-performance (checked Oct 17, 2026), help.openai.com/en/articles/7730893-data-controls-faq (checked Oct 17, 2026) | Not tracked for business plans |
| Data retention | Until you delete; deleted chats purged within 30 days Saved and archived chats stay until you delete them. Deleted chats are removed from view immediately and purged within 30 days, unless already de-identified or kept for security/legal reasons. Source: help.openai.com/en/articles/8809935-deleting-and-archiving-chats-in-chatgpt (checked Oct 17, 2026) | Admin-configurable Workspace admins control how long data is retained (Enterprise, Edu, Healthcare). Source: openai.com/enterprise-privacy/ (checked Oct 17, 2026) |
| Retention after you delete | Up to 30 days (longer for security/legal; de-identified training data not removed) Content already de-identified for training is not removed by deleting the chat. Source: openai.com/policies/us-privacy-policy/ (checked Oct 17, 2026) | Not tracked for business plans |
| Human review of chats | Yes Authorized OpenAI staff and contractors may access content for abuse/security investigations, support, legal matters, and model improvement (the last one stops if you opt out). Source: help.openai.com/en/articles/7039943-how-openai-handles-data-in-consumer-services (checked Oct 17, 2026) | Not tracked for business plans |
| Temporary / incognito chat | Yes: Temporary Chat New chat > Temporary. Not in history, not used for training while temporary, copy kept up to 30 days for safety. Saving it turns it into a regular chat under your normal settings. Source: help.openai.com/en/articles/8914046-temporary-chat-faq (checked Oct 17, 2026) | Not tracked for business plans |
| Data location / residency | US and other countries (no consumer region choice stated) Consumer content is stored in the US and elsewhere. The help pages describe data residency only for business workspaces. Source: help.openai.com/en/articles/7039943-how-openai-handles-data-in-consumer-services (checked Oct 17, 2026), openai.com/policies/us-privacy-policy/ (checked Oct 17, 2026) | Yes Data residency at rest for eligible Enterprise/Edu/Healthcare customers in multiple regions; optional in-region GPU inference (US/Europe). Source: openai.com/business-data/ (checked Oct 17, 2026) |
| SOC 2 Type II | Not checked yet Not checked in this personal-plan research pass (consumer/business compliance docs not reviewed). | Yes SOC 2 Type 2 examination covering API and ChatGPT business products. Source: openai.com/security-and-privacy/ (checked Oct 17, 2026) |
| ISO/IEC 42001 | Not checked yet Not checked in this personal-plan research pass (consumer/business compliance docs not reviewed). | Yes ISO/IEC 42001:2023 AI Management System covering consumer and business products. Source: openai.com/security-and-privacy/ (checked Oct 17, 2026) |
| DPA available | Not checked yet Not checked in this personal-plan research pass (consumer/business compliance docs not reviewed). | Yes DPA available for ChatGPT Business, Enterprise and the API. Source: openai.com/enterprise-privacy/ (checked Oct 17, 2026) |
| BAA / HIPAA | Not checked yet Not checked in this personal-plan research pass (consumer/business compliance docs not reviewed). | Yes OpenAI offers a BAA; ChatGPT for Healthcare is the HIPAA-oriented workspace. Source: openai.com/security-and-privacy/ (checked Oct 17, 2026) |
| Zero-retention option | Not checked yet Not checked in this personal-plan research pass (consumer/business compliance docs not reviewed). | Unknown Zero data retention is described for the API platform; not stated for ChatGPT workspaces. Source: openai.com/business-data/ (checked Oct 17, 2026) |
Verbatim quotes from each source are on the personal and business pages.
How to turn off training on a personal ChatGPT account
Turn off "Improve the model for everyone". Step-by-step instructions →
See also: Why AI training on your data matters · How we source and verify this