Moduuli 15: EU:n yleinen tietosuoja-asetus ja ChatGPT
Moduuli 15: EU:n yleinen tietosuoja-asetus ja ChatGPT

EU:n tietosuoja-asetus
Osiot 1-4 perustuvat Helsingin yliopiston kurssilla vuonna 2019 tekemääni esseeseen.
1. Johdanto GDPR:ään ja asetuksen tarkoitus
GDPR tulee sanoista General Data Protection Regulation. EU:n yleinen tietosuoja-asetus hyväksyttiin jo toukokuussa 2016, kahden vuoden siirtymäajalla [1]. Se koskee EU-maita ja lisäksi myös tahoja, jotka tallentavat EU-kansalaisten henkilötietoja EU:n ulkopuolella. Asetus on Euroopan komission, Euroopan parlamentin ja Euroopan unionin neuvoston yhteinen pyrkimys yhtenäistää tietosuojaa koskeva lainsäädäntö kaikkien EU:n jäsenmaiden kesken, ensisijaisesti yksinkertaistaa sääntely-ympäristöä sekä vahvistaa kansalaisten oikeuksia omiin henkilötietoihinsa. Suomen kansallinen lainsäädäntö [2] on jo varsin hyvin EU:n tietosuoja-asetuksen mukainen.
2. Mikä muuttui suhteessa vanhaan henkilötietolakiin?
Käyttämäni sana ”muutoskokonaisuus” ei tule asetustekstistä, vaan pyrin tällä sanalla auttamaan lukijaa hahmottamaan asetuksen tuomia muutoksia. Ensimmäinen muutoskokonaisuus vanhaan henkilötietolakiin nähden on, että GDPR tuo lisää oikeuksia yksityishenkilölle [3]. Näkyvin muutos on nettisurffaajalle lienee jo harmittaviksikin käyneet tietosuoja-asetuksen hyväksymisspyynnöt, joita alati joutuu sivustoilla klikkaamaan. Muutos, jota ei ehkä tule ajatelleeksi, on vaikkapa niinkin arkinen, että pizzaa kotiin tilatessa asiakas tietää nyt paremmin, miten hänen ruokatilauksiensa tietoja käsitellään, tallennetaanko näitä tietoja ja millä tavoin. Edellä kerrotun esimerkin tapaus ei lienee komissiolla ollut mielessä asetusta säädettäessä. Uuden asetuksen myötä yksityishenkilöllä on oikeus saada kaikki
tallennetut henkilötiedot, tietyillä ehdoilla pyytää oikeutta tulla unohdetuksi (pyytää haltijaa poistamaan kaikki henkilötiedot) ja oikeus kuulla tietosuojarikkomuksista.
Toinen muutoskokonaisuus vanhaan henkilötietolakiin verraten on, että GDPR:n käyttöönottoa tehostetaan tuntuvilla rangaistuksilla [3]. Törkeimmistä väärinkäytöksistä voi joutua maksamaan sakkoa 4% yrityksen globaalista liikevaihdosta tai 20 miljoonaa euroa, joista valitaan korkeampi. Ennen sakkoa toimijalle annetaan varoitus todennäköisestä lainvastaisuudesta, sitten huomautus asetuksen vastaisesta käsittelystä ja vasta lopulta tulee toimenpidemääräys. Sakkoa käytetään kuitenkin vain viimeisenä keinona. Sitä ennen toimijan tulee osoittaa, että on tehnyt kaikkensa asetuksen toteutumisen eteen. Tosin Tietosuojavaltuutetun toimiston kanssa käymäni puhelinkeskustelun mukaan [4] heidän ensisijainen toimintatapa mahdollista loukkausta epäiltäessä on ystävällinen yhteydenotto, neuvonta ja palvelu. Ainakin Suomessa palvelu ja neuvonta kuuluvat siis ensisijaiseen keinovalikoimaan.
Kolmas muutoskokonaisuutena on, että yritysten tarvitsee jatkossa ottaa huomioon vain yksi henkilötietojen käsittelyyn liittyvä laki [3]. Aikaisemmin EU:n ulkopuoliset yritykset saivat käsitellä dataa vapaammin, mutta nyt asetus on voimassa aina, kun henkilötietojen käsittely tapahtuu Euroopan unionissa. Neljäs muutoskokonaisuus liittyy ”privacy by design” -konseptiin, joka tulee pakolliseksi eri tietojärjestelmiä suunniteltaessa. Tällä konseptilla tarkoitetaan tapaa suunnitella ja kehittää tietojärjestelmiä, joissa tietoturva on järjestelmän ydinvaatimus.
Luvanvaraisuus on osa viidettä muutoskokonaisuutta. GDPR:ssä on erityyppisiä luvanvaraisuustasoja, joista suostumus, sopimus ja oikeutettu etu ovat yleisimpiä. Luvan pyytäminen pitää olla selkeä ja lupaa kysyessä pitää tehdä selväksi tietojen käyttötarkoitus. Yritykset eivät voi enää ns. kätkeä näitä tietoja loppukäyttäjän lisenssisopimukseen tai verkkosivustolle sijoitettujen lakitekstioiden alle. Luvan peruminen on tehtävä yhtä helpoksi kuin sen antaminenkin ja käsittelykäytänteiden muuttuessa pitää saada uusi lupa.
Jos henkilötietojen käsittelyä suorittaa viranomainen tai julkishallinnon elin [5], on tietosuojavastaavan nimittäminen pakollista. Tietosuojavastaavia näkyy kuitenkin yllättäen olevan jopa parturien ja pizzerioiden nettisivuilla, vaikka se on ilmeisen tarpeetonta asetuksen kannalta, pakollista tietosuojavastaavan nimittäminen on näet vain eräissä poikkeustapauksissa.
4. Direktiivin ja asetuksen ero lyhyesti
Kaikki mitä EU tekee, perustuu perussopimuksiin [6]. Direktiivin ja asetuksen erona on tiivistetysti se, että direktiivi tulee saattaa osaksi kansallista lainsäädäntöä, se velvoittaa saavuttamaan tavoitteet ja EU-maa saa päättää itse keinoista. Asetus taasen astuu voimaan heti, sitä ei tarvitse erikseen saattaa osaksi kansallista lainsäädäntöä. Lukijan on ensin hyvä ymmärtää kaksi eri EU:n säädösten tyyppiä. Määräyksen tyyppejä on yhteensä 8, mutta tässä esseessä käsitellään direktiiviä ja asetusta [7]. Direktiivi on EU-maita velvoittava, mutta joustavuutta direktiivin käsittelyyn tuo se, että maat saavat päättää itse keinoista miten tavoitteisiin päästään; lopulta kuitenkin EU-maiden pitää saavuttaa direktiivissä säädetyt tavoitteet [5]. Direktiivi on saatettava osaksi EU-maiden kansallista lainsäädäntöä. Kansallisten viranomaisten on myös ilmoitettava näistä kansallisista laeista Euroopan komissiolle.
Toinen EU:n säädösten tyyppi on asetus. Asetukset ovat säädöksiä ja niitä sovelletaan yhtälaisesti ja automaattisesti kaikissa Euroopan Unionin jäsenmaissa heti niiden tultua voimaan. Asetukset sitovat kaikkia EU-maita koko laajuudessaan ja niitä ei tarvitse erikseen saattaa osaksi kansallista lainsäädäntöä.
Voit lukea lisää EU:n tietosuoja-asetuksesta täältä: EU:n tietosuoja-asetus - usein kysyttyjä kysymyksiä | Tietosuojavaltuutetun toimisto
Näkökulmia ChatGPT:n käytön kannalta
EU:n tietosuoja-asetus sitoo OpenAI:ta, joka ChatGPT:n on tuottanut. Toisaalta jos käytät ChatGPT:tä esim. työkäytössä, tulee tällöin myös sinun ja mahdollisesti työnantajasi huomioida EU:n tietosuoja-asetus.
Henkilötietoja ovat kaikki tiedot, jotka liittyvät tunnistettuun tai tunnistettavissa olevaan henkilöön.
Henkilötietoja ovat esimerkiksi
nimi
kotiosoite
sähköpostiosoite, kuten etunimi.sukunimi@yritys.com
puhelinnumero
henkilökortin numero
auton rekisterinumero
paikannustiedot
IP-osoite
potilastiedot
isovanhempien perinnöllisiä sairauksia koskevat tiedot.
Käytännön soveltamisohjeita ChatGPT:n käytössä
- Keskustele työnantajasi kanssa ChatGPT:n käytöstä ja sen eduista
- Tärkeintä on, ettei tunnistettuun tai tunnistettavissa olevaan henkilöön liittyviä tietoja päädy ChatGPT:lle (kts yllä listatut "Henkilötietoja ovat esimerkiksi...")
- Tulkintani mukaan jos ChatGPT:lle syötetyistä tiedoista ei voida tunnistaa henkilöä, voidaan niitä tällöin käyttää. Mahdollisesti voit esim. editoida pois henkilötiedot ja korvata ne omalla tunnistetiedolla ja ajaa tehtävän läpi ChatGPT:ssä, tällöin varsinainen henkilötieto pysyisi yrityksen hallussa, johon henkilötiedon antaja onkin antanut luvan.
- Jos esim. haluat analysoida työnhakijan CV:n ChatGPT:llä, tällöin tulkintani mukaan riittäisi, että poistat siitä henkilötiedot. Esimerkiksi harvoin ihmistä voi tunnistaa tekstidatasta sen perusteella, että vuonna 2000 työskennellyt Burger Inissä 5 vuotta ja 3 vuotta Alepassa, sen lisäksi avoimen yliopiston opintoja 4 vuotta.
- "Maalaisjärjen" käyttö on mielestäni hyvä nyrkkisääntö. Samoin kuin empatia: haluaisitko itse, että nimesi pyörisi hetken aikaa palvelussa X?
Tässä moduulissa tai kurssilla esitetyt ohjeet eivät kuitenkaan ole juridisia ohjeita, keskustele tarvittaessa työpaikan lakimiehen kanssa ChatGPT:n soveltamisesta.
Tietosuoja
Useat merkittävät yritykset kuten Apple, Amazon ja Samsung ovat ottaneet maailmanlaajuisesti käyttöön rajoituksia työntekijöidensä ChatGPT-käytölle, koska liikesalaisuuksien vuotamisen riski on liian suuri. Verkossa on esimerkkejä siitä, miten ChatGPT:tä ja muita vastaavia palveluita voidaan käyttää huijaustarkoituksiin, kuten haittaohjelmien tuottamiseen, tai tuottamaan uskottavaa suomenkielistä sisältöä esimerkiksi kalastelusähköposteihin. Euroopassa on herännyt keskustelua ChatGPT:n ja vastaavien palveluiden käyttäjien henkilötietojen käsittelystä. Italia on esimerkiksi aiemmin kieltänyt ChatGPT:n käytön kokonaan. OpenAI on käynyt keskusteluja Italian tietosuojaviranomaisten kanssa, minkä seurauksena palvelun käyttö on jälleen sallittu Italiassa.
Katsotaan seuraavaksi, millaiset ChatGPT:n käyttöehdot ovat. Ensin englanniksi:
Terms of use
Effective: January 31, 2024 (previous version)
Thank you for using OpenAI!
These Terms of Use apply to your use of ChatGPT, DALL·E, and OpenAI’s other services for individuals, along with any associated software applications and websites (all together, “Services”). These Terms form an agreement between you and OpenAI, L.L.C., a Delaware company, and they include our Service Terms and important provisions for resolving disputes through arbitration. By using our Services, you agree to these Terms.
If you reside in the European Economic Area, Switzerland, or the UK, your use of the Services is governed by these terms.
Our Business Terms govern use of ChatGPT Enterprise, our APIs, and our other services for businesses and developers.
Our Privacy Policy explains how we collect and use personal information. Although it does not form part of these Terms, it is an important document that you should read.
Who we are
OpenAI is an AI research and deployment company. Our mission is to ensure that artificial general intelligence benefits all of humanity. For more information about OpenAI, please visit https://openai.com/about.
Registration and access
Minimum age. You must be at least 13 years old or the minimum age required in your country to consent to use the Services. If you are under 18 you must have your parent or legal guardian’s permission to use the Services.
Registration. You must provide accurate and complete information to register for an account to use our Services. You may not share your account credentials or make your account available to anyone else and are responsible for all activities that occur under your account. If you create an account or use the Services on behalf of another person or entity, you must have the authority to accept these Terms on their behalf.
Using our Services
What you can do. Subject to your compliance with these Terms, you may access and use our Services. In using our Services, you must comply with all applicable laws as well as our Sharing & Publication Policy, Usage Policies, and any other documentation, guidelines, or policies we make available to you.
What you cannot do. You may not use our Services for any illegal, harmful, or abusive activity. For example, you may not:
-
Use our Services in a way that infringes, misappropriates or violates anyone’s rights.
-
Modify, copy, lease, sell or distribute any of our Services.
-
Attempt to or assist anyone to reverse engineer, decompile or discover the source code or underlying components of our Services, including our models, algorithms, or systems (except to the extent this restriction is prohibited by applicable law).
-
Automatically or programmatically extract data or Output (defined below).
-
Represent that Output was human-generated when it was not.
-
Interfere with or disrupt our Services, including circumvent any rate limits or restrictions or bypass any protective measures or safety mitigations we put on our Services.
-
Use Output to develop models that compete with OpenAI.
Software. Our Services may allow you to download software, such as mobile applications, which may update automatically to ensure you’re using the latest version. Our software may include open source software that is governed by its own licenses that we’ve made available to you.
Corporate domains. If you create an account using an email address owned by an organization (for example, your employer), that account may be added to the organization's business account with us, in which case we will provide notice to you so that you can help facilitate the transfer of your account (unless your organization has already provided notice to you that it may monitor and control your account). Once your account is transferred, the organization’s administrator will be able to control your account, including being able to access Content (defined below) and restrict or remove your access to the account.
Third party Services. Our services may include third party software, products, or services, (“Third Party Services”) and some parts of our Services, like our browse feature, may include output from those services (“Third Party Output”). Third Party Services and Third Party Output are subject to their own terms, and we are not responsible for them.
Feedback. We appreciate your feedback, and you agree that we may use it without restriction or compensation to you.
Content
Your content. You may provide input to the Services (“Input”), and receive output from the Services based on the Input (“Output”). Input and Output are collectively “Content.” You are responsible for Content, including ensuring that it does not violate any applicable law or these Terms. You represent and warrant that you have all rights, licenses, and permissions needed to provide Input to our Services.
Ownership of content. As between you and OpenAI, and to the extent permitted by applicable law, you (a) retain your ownership rights in Input and (b) own the Output. We hereby assign to you all our right, title, and interest, if any, in and to Output.
Similarity of content. Due to the nature of our Services and artificial intelligence generally, output may not be unique and other users may receive similar output from our Services. Our assignment above does not extend to other users’ output or any Third Party Output.
Our use of content. We may use Content to provide, maintain, develop, and improve our Services, comply with applicable law, enforce our terms and policies, and keep our Services safe.
Opt out. If you do not want us to use your Content to train our models, you can opt out by following the instructions in this Help Center article(opens in a new window). Please note that in some cases this may limit the ability of our Services to better address your specific use case.
Accuracy. Artificial intelligence and machine learning are rapidly evolving fields of study. We are constantly working to improve our Services to make them more accurate, reliable, safe, and beneficial. Given the probabilistic nature of machine learning, use of our Services may, in some situations, result in Output that does not accurately reflect real people, places, or facts.
When you use our Services you understand and agree:
-
Output may not always be accurate. You should not rely on Output from our Services as a sole source of truth or factual information, or as a substitute for professional advice.
-
You must evaluate Output for accuracy and appropriateness for your use case, including using human review as appropriate, before using or sharing Output from the Services.
-
You must not use any Output relating to a person for any purpose that could have a legal or material impact on that person, such as making credit, educational, employment, housing, insurance, legal, medical, or other important decisions about them.
-
Our Services may provide incomplete, incorrect, or offensive Output that does not represent OpenAI’s views. If Output references any third party products or services, it doesn’t mean the third party endorses or is affiliated with OpenAI.
Our IP rights
We and our affiliates own all rights, title, and interest in and to the Services. You may only use our name and logo in accordance with our Brand Guidelines.
Paid accounts
Billing. If you purchase any Services, you will provide complete and accurate billing information, including a valid payment method. For paid subscriptions, we will automatically charge your payment method on each agreed-upon periodic renewal until you cancel. You’re responsible for all applicable taxes, and we’ll charge tax when required. If your payment cannot be completed, we may downgrade your account or suspend your access to our Services until payment is received.
Service credits. You can pay for some Services in advance by purchasing service credits. All service credits are subject to our Service Credit Terms.
Cancellation. You can cancel(opens in a new window) your paid subscription at any time. Payments are non-refundable, except where required by law. These Terms do not override any mandatory local laws regarding your cancellation rights.
Changes. We may change our prices from time to time. If we increase our subscription prices, we will give you at least 30 days’ notice and any price increase will take effect on your next renewal so that you can cancel if you do not agree to the price increase.
Termination and suspension
Termination. You are free to stop using our Services at any time. We reserve the right to suspend or terminate your access to our Services or delete your account if we determine:
-
You breached these Terms or our Usage Policies.
-
We must do so to comply with the law.
-
Your use of our Services could cause risk or harm to OpenAI, our users, or anyone else.
We also may terminate your account if it has been inactive for over a year and you do not have a paid account. If we do, we will provide you with advance notice.
Appeals. If you believe we have suspended or terminated your account in error, you can file an appeal with us by contacting our Support team(opens in a new window).
Discontinuation of Services
We may decide to discontinue our Services, but if we do, we will give you advance notice and a refund for any prepaid, unused Services.
Disclaimer of warranties
OUR SERVICES ARE PROVIDED “AS IS.” EXCEPT TO THE EXTENT PROHIBITED BY LAW, WE AND OUR AFFILIATES AND LICENSORS MAKE NO WARRANTIES (EXPRESS, IMPLIED, STATUTORY OR OTHERWISE) WITH RESPECT TO THE SERVICES, AND DISCLAIM ALL WARRANTIES INCLUDING, BUT NOT LIMITED TO, WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, SATISFACTORY QUALITY, NON-INFRINGEMENT, AND QUIET ENJOYMENT, AND ANY WARRANTIES ARISING OUT OF ANY COURSE OF DEALING OR TRADE USAGE. WE DO NOT WARRANT THAT THE SERVICES WILL BE UNINTERRUPTED, ACCURATE OR ERROR FREE, OR THAT ANY CONTENT WILL BE SECURE OR NOT LOST OR ALTERED.
YOU ACCEPT AND AGREE THAT ANY USE OF OUTPUTS FROM OUR SERVICE IS AT YOUR SOLE RISK AND YOU WILL NOT RELY ON OUTPUT AS A SOLE SOURCE OF TRUTH OR FACTUAL INFORMATION, OR AS A SUBSTITUTE FOR PROFESSIONAL ADVICE.
Limitation of liability
NEITHER WE NOR ANY OF OUR AFFILIATES OR LICENSORS WILL BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR EXEMPLARY DAMAGES, INCLUDING DAMAGES FOR LOSS OF PROFITS, GOODWILL, USE, OR DATA OR OTHER LOSSES, EVEN IF WE HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. OUR AGGREGATE LIABILITY UNDER THESE TERMS WILL NOT EXCEED THE GREATER OF THE AMOUNT YOU PAID FOR THE SERVICE THAT GAVE RISE TO THE CLAIM DURING THE 12 MONTHS BEFORE THE LIABILITY AROSE OR ONE HUNDRED DOLLARS ($100). THE LIMITATIONS IN THIS SECTION APPLY ONLY TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW.
Some countries and states do not allow the disclaimer of certain warranties or the limitation of certain damages, so some or all of the terms above may not apply to you, and you may have additional rights. In that case, these Terms only limit our responsibilities to the maximum extent permissible in your country of residence.
OPENAI’S AFFILIATES, SUPPLIERS, LICENSORS, AND DISTRIBUTORS ARE INTENDED THIRD PARTY BENEFICIARIES OF THIS SECTION.
Indemnity
If you are a business or organization, to the extent permitted by law, you will indemnify and hold harmless us, our affiliates, and our personnel, from and against any costs, losses, liabilities, and expenses (including attorneys’ fees) from third party claims arising out of or relating to your use of the Services and Content or any violation of these Terms.
Dispute resolution
YOU AND OPENAI AGREE TO THE FOLLOWING MANDATORY ARBITRATION AND CLASS ACTION WAIVER PROVISIONS:
MANDATORY ARBITRATION. You and OpenAI agree to resolve any claims arising out of or relating to these Terms or our Services, regardless of when the claim arose, even if it was before these Terms existed (a “Dispute”), through final and binding arbitration. You may opt out of arbitration within 30 days of account creation or of any updates to these arbitration terms within 30 days after the update has taken effect by filling out this form(opens in a new window). If you opt out of an update, the last set of agreed upon arbitration terms will apply.
Informal dispute resolution. We would like to understand and try to address your concerns prior to formal legal action. Before either of us files a claim against the other, we both agree to try to resolve the Dispute informally. You agree to do so by sending us notice through this form(opens in a new window). We will do so by sending you notice to the email address associated with your account. If we are unable to resolve a Dispute within 60 days, either of us has the right to initiate arbitration. We also both agree to attend an individual settlement conference if either party requests one during this time. Any statute of limitations will be tolled during this informal resolution process.
Arbitration forum. If we are unable to resolve the Dispute, either of us may commence arbitration with National Arbitration and Mediation (“NAM”) under its Comprehensive Dispute Resolution Rules and Procedures and/or Supplemental Rules for Mass Arbitration Filings, as applicable (available here(opens in a new window)). OpenAI will not seek attorneys’ fees and costs in arbitration unless the arbitrator determines that your claim is frivolous. The activities described in these Terms involve interstate commerce and the Federal Arbitration Act will govern the interpretation and enforcement of these arbitration terms and any arbitration.
Arbitration procedures. The arbitration will be conducted by videoconference if possible, but if the arbitrator determines a hearing should be conducted in person, the location will be mutually agreed upon, in the county where you reside, or as determined by the arbitrator, unless the batch arbitration process applies. The arbitration will be conducted by a sole arbitrator. The arbitrator will be either a retired judge or an attorney licensed to practice law in the state of California. The arbitrator will have exclusive authority to resolve any Dispute, except the state or federal courts of San Francisco, California have the authority to determine any Dispute about enforceability, validity of the class action waiver, or requests for public injunctive relief, as set out below. Any settlement offer amounts will not be disclosed to the arbitrator by either party until after the arbitrator determines the final award, if any. The arbitrator has the authority to grant motions dispositive of all or part of any Dispute.
Exceptions. This section does not require informal dispute resolution or arbitration of the following claims: (i) individual claims brought in small claims court; and (ii) injunctive or other equitable relief to stop unauthorized use or abuse of the Services or intellectual property infringement or misappropriation.
CLASS AND JURY TRIAL WAIVERS. You and OpenAI agree that Disputes must be brought on an individual basis only, and may not be brought as a plaintiff or class member in any purported class, consolidated, or representative proceeding. Class arbitrations, class actions, and representative actions are prohibited. Only individual relief is available. The parties agree to sever and litigate in court any request for public injunctive relief after completing arbitration for the underlying claim and all other claims. This does not prevent either party from participating in a class-wide settlement. You and OpenAI knowingly and irrevocably waive any right to trial by jury in any action, proceeding, or counterclaim.
Batch arbitration. If 25 or more claimants represented by the same or similar counsel file demands for arbitration raising substantially similar Disputes within 90 days of each other, then you and OpenAI agree that NAM will administer them in batches of up to 50 claimants each (“Batch”), unless there are less than 50 claimants in total or after batching, which will comprise a single Batch. NAM will administer each Batch as a single consolidated arbitration with one arbitrator, one set of arbitration fees, and one hearing held by videoconference or in a location decided by the arbitrator for each Batch. If any part of this section is found to be invalid or unenforceable as to a particular claimant or Batch, it will be severed and arbitrated in individual proceedings.
Severability. If any part of these arbitration terms is found to be illegal or unenforceable, the remainder will remain in effect, except that if a finding of partial illegality or unenforceability would allow class arbitration, class action, or representative action, this entire dispute resolution section will be unenforceable in its entirety.
Copyright complaints
If you believe that your intellectual property rights have been infringed, please send notice to the address below or fill out this form(opens in a new window). We may delete or disable content that we believe violates these Terms or is alleged to be infringing and will terminate accounts of repeat infringers where appropriate.
OpenAI, L.L.C.
3180 18th St.
San Francisco, California 94110
Attn: General Counsel / Copyright Agent
Written claims concerning copyright infringement must include the following information:
-
A physical or electronic signature of the person authorized to act on behalf of the owner of the copyright interest
-
A description of the copyrighted work that you claim has been infringed upon
-
A description of where the allegedly infringing material is located on our site so we can find it
-
Your address, telephone number, and e-mail address
-
A statement by you that you have a good-faith belief that the disputed use is not authorized by the copyright owner, its agent, or the law
-
A statement by you that the above information in your notice is accurate and, under penalty of perjury, that you are the copyright owner or authorized to act on the copyright owner’s behalf
General Terms
Assignment. You may not assign or transfer any rights or obligations under these Terms and any attempt to do so will be void. We may assign our rights or obligations under these Terms to any affiliate, subsidiary, or successor in interest of any business associated with our Services.
Changes to these Terms or our Services. We are continuously working to develop and improve our Services. We may update these Terms or our Services accordingly from time to time. For example, we may make changes to these Terms or the Services due to:
-
Changes to the law or regulatory requirements.
-
Security or safety reasons.
-
Circumstances beyond our reasonable control.
-
Changes we make in the usual course of developing our Services.
-
To adapt to new technologies.
We will give you at least 30 days advance notice of changes to these Terms that materially adversely impact you either via email or an in-product notification. All other changes will be effective as soon as we post them to our website. If you do not agree to the changes, you must stop using our Services.
Delay in enforcing these Terms. Our failure to enforce a provision is not a waiver of our right to do so later. Except as provided in the dispute resolution section above, if any portion of these Terms is determined to be invalid or unenforceable, that portion will be enforced to the maximum extent permissible and it will not affect the enforceability of any other terms.
Trade controls. You must comply with all applicable trade laws, including sanctions and export control laws. Our Services may not be used in or for the benefit of, or exported or re-exported to (a) any U.S. embargoed country or territory or (b) any individual or entity with whom dealings are prohibited or restricted under applicable trade laws. Our Services may not be used for any end use prohibited by applicable trade laws, and your Input may not include material or information that requires a government license for release or export.
Entire agreement. These Terms contain the entire agreement between you and OpenAI regarding the Services and, other than any Service-specific terms, supersedes any prior or contemporaneous agreements between you and OpenAI.
Governing law. California law will govern these Terms except for its conflicts of laws principles. Except as provided in the dispute resolution section above, all claims arising out of or relating to these Terms will be brought exclusively in the federal or state courts of San Francisco, California.
Seuraavaksi pyydän ChatGPT:tä kääntämään yllä luetellut suomeksi:
Käyttöehdot Voimassa: 31. tammikuuta 2024 (edellinen versio)
Kiitos OpenAI:n käytöstä!
Nämä käyttöehdot koskevat ChatGPT:n, DALL·E:n ja muiden OpenAI:n yksilöille tarjoamien palveluiden käyttöä, mukaan lukien niihin liittyvät ohjelmistosovellukset ja verkkosivustot (yhteisesti "Palvelut"). Nämä ehdot muodostavat sopimuksen sinun ja OpenAI, L.L.C:n, Delaware-yhtiön, välille, ja ne sisältävät palveluehdot sekä tärkeitä säännöksiä riitojen ratkaisemisesta välimiesmenettelyn kautta. Käyttäessäsi palveluitamme hyväksyt nämä ehdot.
Mikäli asut Euroopan talousalueella, Sveitsissä tai Isossa-Britanniassa, palveluiden käyttösi sääntyy näiden ehtojen mukaan.
Liiketoimintaehdoillamme säännellään ChatGPT Enterprise -käyttöä, rajapintojamme ja muita yrityksille ja kehittäjille suunnattuja palveluitamme.
Tietosuojakäytäntömme selittää, miten keräämme ja käytämme henkilökohtaisia tietoja. Vaikka se ei ole osa näitä ehtoja, se on tärkeä asiakirja, jonka sinun tulisi lukea.
Kuka me olemme OpenAI on tekoälytutkimukseen ja -toteutukseen erikoistunut yritys. Missiomme on varmistaa, että yleinen tekoäly hyödyttää koko ihmiskuntaa. Lisätietoja OpenAI:sta löydät osoitteesta https://openai.com/about.
Rekisteröityminen ja pääsy Vähimmäisikä. Sinun on oltava vähintään 13 vuotta täyttänyt tai maasi vaatiman vähimmäisiän ikä, jotta voit suostua käyttämään palveluitamme. Mikäli olet alle 18-vuotias, sinun on saatava vanhempien tai huoltajan lupa palveluiden käyttöön.
Rekisteröityminen. Sinun on annettava tarkat ja täydelliset tiedot tilin rekisteröimiseksi palveluidemme käyttöä varten. Et saa jakaa tilisi tunnistetietoja tai tehdä tiliäsi kenenkään muun saataville ja olet vastuussa kaikista tililläsi tapahtuvista toiminnoista. Mikäli luot tilin tai käytät palveluitamme toisen henkilön tai organisaation puolesta, sinun on oltava valtuutettu hyväksymään nämä ehdot heidän puolestaan.
Palveluidemme käyttö Mitä voit tehdä. Nämä ehdot huomioiden voit käyttää palveluitamme. Käyttäessäsi palveluitamme sinun on noudatettava kaikkia soveltuvia lakeja sekä jakamis- ja julkaisukäytäntöjämme, käyttösääntöjä ja muita sinulle saatavilla olevia asiakirjoja, ohjeita ja politiikkoja.
Mitä et voi tehdä. Et saa käyttää palveluitamme lainvastaisiin, vahingollisiin tai väärinkäyttöön perustuviin toimintoihin. Esimerkiksi et saa:
Käyttää palveluitamme tavalla, joka loukkaa tai rikkoo kenenkään oikeuksia.
Muokata, kopioida, vuokrata, myydä tai levittää mitään palveluistamme.
Yrittää tai auttaa ketään purkamaan, dekompiloimaan tai selvittämään palveluidemme lähdekoodia tai niiden taustalla olevia osia, mukaan lukien mallit, algoritmit tai järjestelmät (paitsi siltä osin kuin tämä rajoitus on kielletty soveltuvalla lailla).
Automaattisesti tai ohjelmallisesti kerätä tietoja tai tulosteita (määritelty alla).
Väittää, että tuloste on ihmisen luomaa, kun se ei ole.
Häiritä tai estää palveluidemme toimintaa, kiertää minkäänlaisia rajoituksia tai ohittaa turvatoimenpiteitä, joita olemme asettaneet palveluidemme suojaksi.
Käyttää tulosteita kehittääksesi malleja, jotka kilpailevat OpenAI:n kanssa.
Ohjelmisto. Palvelumme saattavat mahdollistaa ohjelmiston, kuten mobiilisovellusten, lataamisen, jotka saattavat päivittyä automaattisesti varmistaakseen, että käytät aina uusinta versiota. Ohjelmistomme saattaa sisältää avoimen lähdekoodin ohjelmistoja, joita hallitsevat omat lisenssinsä, jotka olemme tehneet sinulle saataville.
Yrityksen toimialueet. Mikäli luot tilin organisaation (esimerkiksi työnantajasi) omistamalla sähköpostiosoitteella, tilisi saattaa liittyä organisaation liiketoimintatiliin meidän kanssamme, jolloin ilmoitamme sinulle asiasta, jotta voit auttaa tilisi siirrossa (ellei organisaatiosi ole jo ilmoittanut sinulle, että se saattaa valvoa ja hallita tiliäsi). Kun tilisi on siirretty, organisaation ylläpitäjä voi hallita tiliäsi, mukaan lukien pääsy sisältöön (määritelty alla) ja oikeuksien rajoittaminen tai poistaminen tililtä.
Kolmannen osapuolen palvelut. Palvelumme saattavat sisältää kolmannen osapuolen ohjelmistoja, tuotteita tai palveluita ("Kolmannen osapuolen palvelut"), ja osa palveluistamme, kuten selausominaisuutemme, saattavat sisältää tuotoksia näistä palveluista ("Kolmannen osapuolen tuloste"). Kolmannen osapuolen palvelut ja Kolmannen osapuolen tuloste ovat omanlaisiaan ehtoja noudattavia, emmekä ole niistä vastuussa.
Palaute. Arvostamme palautettasi, ja hyväksyt, että voimme käyttää sitä rajoituksetta tai korvausta vastaan.
Sisältö Oma sisältösi. Voit antaa syötettä palveluihimme ("Syöte") ja vastaanottaa syötteestäsi perustuvia tulosteita palveluistamme ("Tuloste"). Syöte ja Tuloste ovat yhdessä "Sisältöä". Olet vastuussa Sisällöstäsi ja varmistat, että se ei riko soveltuvaa lakia tai näitä ehtoja. Vakuutat ja takaat, että sinulla on kaikki tarvittavat oikeudet, lisenssit ja luvat Syötteen antamiseen palveluihimme.
Sisällön omistusoikeus. Sinun ja OpenAI:n välillä, ja sovellettavan lain sallimissa rajoissa, (a) säilytät omistusoikeutesi Syötteeseen ja (b) omistat Tulosteen. Luovutamme täten sinulle kaikki mahdolliset oikeutemme Tulosteeseen.
Sisällön samankaltaisuus. Palveluidemme ja tekoälyn luonteen vuoksi tuloste ei välttämättä ole uniikki, ja muut käyttäjät saattavat saada samankaltaisia tulosteita palveluistamme. Yllä oleva luovutus ei ulotu muiden käyttäjien tulosteisiin tai mihinkään Kolmannen osapuolen tulosteisiin.
Sisältömme käyttö. Voimme käyttää Sisältöä palveluidemme tarjoamiseen, ylläpitämiseen, kehittämiseen ja parantamiseen, sovellettavan lain noudattamiseen, ehtojemme ja politiikkojemme täytäntöönpanoon sekä palveluidemme turvallisuuden ylläpitämiseen.
Opt out. Mikäli et halua meidän käyttävän Sisältöäsi mallien kouluttamiseen, voit kieltäytyä seuraamalla tämän Ohje-keskuksen artikkelin ohjeita. Huomaa, että joissakin tapauksissa tämä saattaa rajoittaa palveluidemme kykyä vastata paremmin tiettyihin käyttötarkoituksiisi.
Tarkkuus. Tekoäly ja koneoppiminen ovat nopeasti kehittyviä tutkimusalueita. Työskentelemme jatkuvasti parantaaksemme palveluitamme niiden tarkkuuden, luotettavuuden, turvallisuuden ja hyödyllisyyden lisäämiseksi. Ottaen huomioon koneoppimisen probabilistisen luonteen palveluidemme käyttö voi joissakin tilanteissa johtaa Tulosteeseen, joka ei täysin vastaa todellisia henkilöitä, paikkoja tai faktoja.
Kun käytät palveluitamme, ymmärrät ja hyväksyt:
Tuloste ei aina ole täysin tarkka. Sinun ei tulisi luottaa palveluidemme Tulosteeseen ainoana totuuden lähteenä tai faktatietona eikä korvaavana ammattilaisten neuvolle.
Sinun on arvioitava Tuloste tarkkuuden ja soveltuvuuden oman käyttötarkoituksesi kannalta, mukaan lukien ihmisen arviointi tarvittaessa, ennen kuin käytät tai jaat Tulostetta palveluiden antamasta Sisällöstä.
Et saa käyttää minkään henkilön Tulostetta mihinkään tarkoitukseen, joka voisi olla laillinen tai vaikuttaa merkittävästi kyseiseen henkilöön, kuten luottopäätökset, koulutus, työllisyys, asuminen, vakuutus, lakiasiat, lääketieteelliset tai muut tärkeät päätökset heistä.
Palvelumme voivat tuottaa puutteellista, virheellistä tai loukkaavaa Tulostetta, joka ei edusta OpenAI:n näkemyksiä. Mikäli Tuloste viittaa mihinkään kolmannen osapuolen tuotteisiin tai palveluihin, se ei tarkoita, että kyseinen kolmas osapuoli kannattaa OpenAI:ta tai on siihen liittynyt.
IP-oikeutemme Me ja kumppanimme omistamme kaikki oikeudet, otsikot ja edut palveluihin. Voit käyttää nimeämme ja logoamme vain noudattaen brändiohjeitamme.
Maksulliset tilit Laskutus. Mikäli ostat palveluita, sinun on annettava täydelliset ja tarkat laskutustiedot, mukaan lukien voimassa oleva maksutapa. Maksullisista tilauksista veloitamme automaattisesti maksutavan mukaiset maksut sovitun kausittaisen uusimisen yhteydessä, kunnes peruutat tilauksen. Olet vastuussa kaikista sovellettavista veroista, ja veloitamme veron tarvittaessa. Mikäli maksusi ei onnistu, voimme laskea tilisi tasoa alaspäin tai keskeyttää pääsysi palveluihimme, kunnes maksu on vastaanotettu.
Palvelupisteet. Voit maksaa joistakin palveluista etukäteen ostamalla palvelupisteitä. Kaikki palvelupisteet ovat sovellettavien palvelupistesopimustemme alaisia.
Peruutus. Voit peruuttaa maksullisen tilauksesi milloin tahansa. Maksuja ei palauteta, paitsi mikäli laki sitä vaatii. Nämä ehdot eivät syrjäytä pakollisia paikallisia lakeja koskien peruutusoikeuttasi.
Muutokset. Voimme muuttaa hintojamme aika ajoin. Mikäli nostamme tilaushintojamme, ilmoitamme sinulle vähintään 30 päivän varoitusajalla, ja hinnankorotus tulee voimaan seuraavalla uusimisellasi, jotta voit peruuttaa tilauksesi, mikäli et hyväksy hinnankorotusta.
Päättäminen ja keskeytys Päättäminen. Voit lopettaa palveluidemme käytön milloin tahansa. Pidätämme oikeuden keskeyttää tai päättää pääsysi palveluihimme tai poistaa tilisi, mikäli päätämme:
Olet rikkonut näitä ehtoja tai käyttösääntöjämme.
Meidän on toimittava lain mukaisesti.
Palveluidemme käyttösi voisi aiheuttaa riskin tai haittaa OpenAI:lle, käyttäjillemme tai kenellekään muulle.
Voimme myös lopettaa tilisi, mikäli se on ollut yli vuoden ajan epäaktiivinen ja sinulla ei ole maksullista tiliä. Mikäli näin teemme, ilmoitamme sinulle etukäteen.
Valitukset. Mikäli uskot, että olemme keskeyttäneet tai päättäneet tilisi virheellisesti, voit tehdä valituksen ottamalla meihin yhteyttä tukitiimimme kautta.
Palveluiden lopettaminen Voimme päättää lopettaa palveluidemme tarjoamisen, mutta mikäli niin teemme, annamme sinulle etukäteisilmoituksen ja hyvityksen kaikista ennakkoon maksetuista, käyttämättömistä palveluista.
Vastuuvapauslauseke PALVELUMME TARJOTAAN "SELLAISENAAN". LAIN SALLIMASSA LAJISSA ME JA KUMPPANIMME JA LISENSIOIJAMME EMME ANNA MITÄÄN TAKUITA (EXPRESS, IMPLIED, STATUTORY TAI MUUTEN) PALVELUJEN SUHTEEN, JA KIELTÄMME KAIKKI TAKUUT, MUKAAN LUKIEN, MUTTA EI RAJOITETTEN, KAUPANKÄYNTIKELPOISUUSTAKUU, TIETYKSI MÄÄRÄTTYYN KÄYTTÖTARKOITUKSEEN SOVELTUVUUS, TYYDYTTÄVÄ LAATU, OIKEUKSIEN RIITTÄVYYS JA HÄIRIÖTÖN KÄYTTÖ, JA MITKÄÄN TAKUUT EIVÄT PERUSTU MINKÄÄNKAISEEN KÄYTÄNNÖN SOVELTAMISEEN TAI KAUPANKÄYNTIIN. EMME TAKAA, ETTÄ PALVELUT OVAT KESKEYTYKSETTÖMIÄ, TARKKOJA TAI VIRHEETTÖMIÄ, TAI ETTÄ MIKÄÄN
SISÄLTÖMME TÄYTTÄÄ TARPEITASI, SOPII SINUN KÄYTTÖTARKOITUKSEESI TAI ON VAPAA VIRUKSISTA TAI MUUSTA HAITALLISESTA KOODISTA.
Vastuunrajoitus EI OPENAI TAI SEN KUMPPANIT TAI LISENSIOIJAT MISSÄÄN TAPAUKSESSA OLE VASTUUSSA MISTÄÄN ERITYISISTÄ, EPÄSUORISTA, VÄLILLISESTÄ TAI ESIMERKILLISESTÄ VAHINGOSTA, JOKA LIITTYY PALVELUIDEN KÄYTTÖÖN TAI KYVYTTÖMYYTEEN KÄYTTÄÄ PALVELUITA, MUKAAN LUKIEN, MUTTA EI RAJOITETTEN, HYÖTYJEN MENETYS, LIKVIDIN VÄHENTÄMINEN TAI HÄIRIÖT, TAI LIIKEVAHINKO, JOKA LIITTYY KAIKKIIN KÄYTTÖEHTOJEN RIKKOMUKSIIN.
Yleistä Lainsäädäntö. Nämä ehdot hallitaan ja tulkitaan Kalifornian lainsäädännön mukaisesti ilman sen lainvalintakonfliktien sääntöjen soveltamista.
Muutokset. Voimme ajoittain päivittää nämä ehdot ilmoittamalla niistä sivustollamme tai palveluissamme. Jatkamalla palveluiden käyttöä näiden muutosten jälkeen hyväksyt päivitetyt ehdot.
Valitus. Mikäli sinulla on kysyttävää tai kommentteja näihin ehtoihin liittyen, ota meihin yhteyttä osoitteeseen legal@openai.com.
Lopetus. Nämä ehdot pysyvät voimassa, kunnes niiden voimassaolo päättyy niiden mukaisesti.
Kiitos, kun tutustuit käyttöehtoihimme.
SISÄLTÖMME TÄYTTÄÄ TARPEITASI, SOPII SINUN KÄYTTÖTARKOITUKSEESI TAI ON VAPAA VIRUKSISTA TAI MUUSTA HAITALLISESTA KOODISTA.
Vastuunrajoitus EI OPENAI TAI SEN KUMPPANIT TAI LISENSIOIJAT MISSÄÄN TAPAUKSESSA OLE VASTUUSSA MISTÄÄN ERITYISISTÄ, EPÄSUORISTA, VÄLILLISESTÄ TAI ESIMERKILLISESTÄ VAHINGOSTA, JOKA LIITTYY PALVELUIDEN KÄYTTÖÖN TAI KYVYTTÖMYYTEEN KÄYTTÄÄ PALVELUITA, MUKAAN LUKIEN, MUTTA EI RAJOITETTEN, HYÖTYJEN MENETYS, LIKVIDIN VÄHENTÄMINEN TAI HÄIRIÖT, TAI LIIKEVAHINKO, JOKA LIITTYY KAIKKIIN KÄYTTÖEHTOJEN RIKKOMUKSIIN.
Yleistä Lainsäädäntö. Nämä ehdot hallitaan ja tulkitaan Kalifornian lainsäädännön mukaisesti ilman sen lainvalintakonfliktien sääntöjen soveltamista.
Muutokset. Voimme ajoittain päivittää nämä ehdot ilmoittamalla niistä sivustollamme tai palveluissamme. Jatkamalla palveluiden käyttöä näiden muutosten jälkeen hyväksyt päivitetyt ehdot.
Valitus. Mikäli sinulla on kysyttävää tai kommentteja näihin ehtoihin liittyen, ota meihin yhteyttä osoitteeseen legal@openai.com.
Lopetus. Nämä ehdot pysyvät voimassa, kunnes niiden voimassaolo päättyy niiden mukaisesti.
Kiitos, kun tutustuit käyttöehtoihimme.
Tietosuojakäytäntö
ChatGPT:n tietosuojakäytäntö on seuraava. Katsotaan ensin englanninkielinen versio:
Updated: November 14, 2023
Privacy policy
Effective: January 31, 2024
We’ve updated our Privacy Policy below. These updates do not apply to individuals located in the European Economic Area, UK, and Switzerland. If you reside in those areas, this version of our Privacy Policy applies to you.
We at OpenAI OpCo, LLC (together with our affiliates, “OpenAI”, “we”, “our” or “us”) respect your privacy and are strongly committed to keeping secure any information we obtain from you or about you. This Privacy Policy describes our practices with respect to Personal Information we collect from or about you when you use our website, applications, and services (collectively, “Services”). This Privacy Policy does not apply to content that we process on behalf of customers of our business offerings, such as our API. Our use of that data is governed by our customer agreements covering access to and use of those offerings.
For information about how we collect and use training information to develop our language models that power ChatGPT and other Services, and your choices with respect to that information, please see this help center article(opens in a new window).
1. Personal information we collect
We collect personal information relating to you (“Personal Information”) as follows:
Personal information you provide: We collect Personal Information if you create an account to use our Services or communicate with us as follows:
-
Account Information: When you create an account with us, we will collect information associated with your account, including your name, contact information, account credentials, payment card information, and transaction history, (collectively, “Account Information”).
-
User Content: When you use our Services, we collect Personal Information that is included in the input, file uploads, or feedback that you provide to our Services (“Content”).
-
Communication Information: If you communicate with us, we collect your name, contact information, and the contents of any messages you send (“Communication Information”).
-
Social Media Information: We have pages on social media sites like Instagram, Facebook, Medium, Twitter, YouTube and LinkedIn. When you interact with our social media pages, we will collect Personal Information that you elect to provide to us, such as your contact details (collectively, “Social Information”). In addition, the companies that host our social media pages may provide us with aggregate information and analytics about our social media activity.
-
Other Information You Provide: We collect other information that you may provide to us, such as when you participate in our events or surveys or provide us with information to establish your identity (collectively, “Other Information You Provide”
Personal information we receive automatically from your use of the Services: When you visit, use, or interact with the Services, we receive the following information about your visit, use, or interactions (“Technical Information”):
-
Log Data: Information that your browser or device automatically sends when you use our Services. Log data includes your Internet Protocol address, browser type and settings, the date and time of your request, and how you interact with our Services.
-
Usage Data: We may automatically collect information about your use of the Services, such as the types of content that you view or engage with, the features you use and the actions you take, as well as your time zone, country, the dates and times of access, user agent and version, type of computer or mobile device, and your computer connection.
-
Device Information: Includes name of the device, operating system, device identifiers, and browser you are using. Information collected may depend on the type of device you use and its settings.
-
Cookies: We use cookies to operate and administer our Services, and improve your experience. A “cookie” is a piece of information sent to your browser by a website you visit. You can set your browser to accept all cookies, to reject all cookies, or to notify you whenever a cookie is offered so that you can decide each time whether to accept it. However, refusing a cookie may in some cases preclude you from using, or negatively affect the display or function of, a website or certain areas or features of a website. For more details on cookies, please visit All About Cookies(opens in a new window).
-
Analytics: We may use a variety of online analytics products that use cookies to help us analyze how users use our Services and enhance your experience when you use the Services.
2. How we use personal information
We may use Personal Information for the following purposes:
-
To provide, administer, maintain and/or analyze the Services;
-
To improve our Services and conduct research;
-
To communicate with you; including to send you information about our Services and events;
-
To develop new programs and services;
-
To prevent fraud, criminal activity, or misuses of our Services, and to protect the security of our IT systems, architecture, and networks;
-
To carry out business transfers; and
-
To comply with legal obligations and legal process and to protect our rights, privacy, safety, or property, and/or that of our affiliates, you, or other third parties.
Aggregated or de-identified information. We may aggregate or de-identify Personal Information so that it may no longer be used to identify you and use such information to analyze the effectiveness of our Services, to improve and add features to our Services, to conduct research and for other similar purposes. In addition, from time to time, we may analyze the general behavior and characteristics of users of our Services and share aggregated information like general user statistics with third parties, publish such aggregated information or make such aggregated information generally available. We may collect aggregated information through the Services, through cookies, and through other means described in this Privacy Policy. We will maintain and use de-identified information in anonymous or de-identified form and we will not attempt to reidentify the information, unless required by law.
As noted above, we may use Content you provide us to improve our Services, for example to train the models that power ChatGPT. Read our instructions(opens in a new window) on how you can opt out of our use of your Content to train our models.
3. Disclosure of personal information
In certain circumstances we may provide your Personal Information to third parties without further notice to you, unless required by the law:
-
Vendors and Service Providers: To assist us in meeting business operations needs and to perform certain services and functions, we may provide Personal Information to vendors and service providers, including providers of hosting services, customer service vendors, cloud services, email communication software, web analytics services, and other information technology providers, among others. Pursuant to our instructions, these parties will access, process, or store Personal Information only in the course of performing their duties to us.
-
Business Transfers: If we are involved in strategic transactions, reorganization, bankruptcy, receivership, or transition of service to another provider (collectively, a “Transaction”), your Personal Information and other information may be disclosed in the diligence process with counterparties and others assisting with the Transaction and transferred to a successor or affiliate as part of that Transaction along with other assets.
-
Legal Requirements: We may share your Personal Information, including information about your interaction with our Services, with government authorities, industry peers, or other third parties (i) if required to do so by law or in the good faith belief that such action is necessary to comply with a legal obligation, (ii) to protect and defend our rights or property, (iii) if we determine, in our sole discretion, that there is a violation of our terms, policies, or the law; (iv) to detect or prevent fraud or other illegal activity; (v) to protect the safety, security, and integrity of our products, employees, or users, or the public, or (vi) to protect against legal liability.
-
Affiliates: We may disclose Personal Information to our affiliates, meaning an entity that controls, is controlled by, or is under common control with OpenAI. Our affiliates may use the Personal Information we share in a manner consistent with this Privacy Policy.
-
Business Account Administrators: When you join a ChatGPT Enterprise or business account, the administrators of that account may access and control your OpenAI account. In addition, if you create an account using an email address belonging to your employer or another organization, we may share the fact that you have an OpenAI account and certain account information, such as your email address, with your employer or organization to, for example, enable you to be added to their business account.
-
Other Users and Third Parties You Share Information With: Certain features allow you to display or share information with other users or third parties. For example, you may share ChatGPT conversations with other users via shared links or send information to third-party applications via custom actions for GPTs. Be sure you trust any user or third party with whom you share information.
4. Your rights
Depending on location, individuals may have certain statutory rights in relation to their Personal Information. For example, you may have the right to:
-
Access your Personal Information and information relating to how it is processed.
-
Delete your Personal Information from our records.
-
Rectify or update your Personal Information.
-
Transfer your Personal Information to a third party (right to data portability).
-
Restrict how we process your Personal Information.
-
Withdraw your consent—where we rely on consent as the legal basis for processing at any time.
-
Object to how we process your Personal Information.
-
Lodge a complaint with your local data protection authority.
You can exercise some of these rights through your OpenAI account. If you are unable to exercise your rights through your account, please submit your request through privacy.openai.com(opens in a new window) or to dsar@openai.com.
A note about accuracy: Services like ChatGPT generate responses by reading a user’s request and, in response, predicting the words most likely to appear next. In some cases, the words most likely to appear next may not be the most factually accurate. For this reason, you should not rely on the factual accuracy of output from our models. If you notice that ChatGPT output contains factually inaccurate information about you and you would like us to correct the inaccuracy, you may submit a correction request through privacy.openai.com(opens in a new window) or to dsar@openai.com. Given the technical complexity of how our models work, we may not be able to correct the inaccuracy in every instance. In that case, you may request that we remove your Personal Information from ChatGPT’s output by filling out this form(opens in a new window).
For information on how to exercise your rights with respect to data we have collected from the internet to train our models, please see this help center article(opens in a new window).
5. Additional U.S. state disclosures
The following table provides additional information about the categories of Personal Information we collect and how we disclose that information. You can read more about the Personal Information we collect in “Personal information we collect” above, how we use Personal Information in “How we use personal information” above, and how we retain Personal Information in “Security and Retention” below.
|
Category of Personal Information |
Disclosure of Personal Information |
|
Identifiers, such as your name, contact details, IP address, and other device identifiers |
We may disclose this information to our affiliates, vendors and service providers to process in accordance with our instructions; to law enforcement and other third parties for the legal reasons described above; to parties involved in Transactions; to corporate administrators of enterprise or team accounts; and to other users and third parties you choose to share it with. |
|
Commercial Information, such as your transaction history |
We may disclose this information to our affiliates, vendors and service providers to process in accordance with our instructions; to law enforcement and other third parties for the legal reasons described above; to parties involved in Transactions; and to corporate administrators of enterprise or team accounts. |
|
Network Activity Information, such as Content and how you interact with our Services |
We may disclose this information to our affiliates, vendors and service providers to process in accordance with our instructions; to law enforcement and other third parties for the legal reasons described above; to parties involved in Transactions; and to other users and third parties you choose to share it with. |
|
Geolocation Data |
We may disclose this information to our affiliates, vendors and service providers to process in accordance with our instructions; to law enforcement and other third parties for the legal reasons described above; and to parties involved in Transactions. |
|
Your account login credentials and payment card information (Sensitive Personal Information) |
We disclose this information to our affiliates, vendors and service providers, law enforcement, and parties involved in Transactions. |
To the extent provided for by local law and subject to applicable exceptions, individuals may have the following privacy rights in relation to their Personal Information:
-
The right to know information about our processing of your Personal Information, including the specific pieces of Personal Information that we have collected from you;
-
The right to request deletion of your Personal Information;
-
The right to correct your Personal Information; and
-
The right to be free from discrimination relating to the exercise of any of your privacy rights.
We don’t “sell” Personal Information or “share” Personal Information for cross-contextual behavioral advertising (as those terms are defined under applicable local law). We also don’t process sensitive Personal Information for the purposes of inferring characteristics about a consumer.
Exercising your rights. To the extent applicable under local law, you can exercise privacy rights described in this section by submitting a request through privacy.openai.com(opens in a new window) or to dsar@openai.com.
Verification. In order to protect your Personal Information from unauthorized access, change, or deletion, we may require you to verify your credentials before you can submit a request to know, correct, or delete Personal Information. If you do not have an account with us, or if we suspect fraudulent or malicious activity, we may ask you to provide additional Personal Information and proof of residency for verification. If we cannot verify your identity, we will not be able to honor your request.
Authorized agents. You may also submit a rights request through an authorized agent. If you do so, the agent must present signed written permission to act on your behalf and you may also be required to independently verify your identity and submit proof of your residency with us. Authorized agent requests can be submitted to dsar@openai.com.
Appeals. Depending on where you live, you may have the right to appeal a decision we make relating to requests to exercise your rights under applicable local law. To appeal a decision, please send your request to dsar@openai.com.
6. Children
Our Service is not directed to children under the age of 13. OpenAI does not knowingly collect Personal Information from children under the age of 13. If you have reason to believe that a child under the age of 13 has provided Personal Information to OpenAI through the Service, please email us at legal@openai.com. We will investigate any notification and if appropriate, delete the Personal Information from our systems. If you are 13 or older, but under 18, you must have permission from your parent or guardian to use our Services.
7. Links to other websites
The Service may contain links to other websites not operated or controlled by OpenAI, including social media services (“Third Party Sites”). The information that you share with Third Party Sites will be governed by the specific privacy policies and terms of service of the Third Party Sites and not by this Privacy Policy. By providing these links we do not imply that we endorse or have reviewed these sites. Please contact the Third Party Sites directly for information on their privacy practices and policies.
8. Security and retention
We implement commercially reasonable technical, administrative, and organizational measures to protect Personal Information both online and offline from loss, misuse, and unauthorized access, disclosure, alteration, or destruction. However, no Internet or email transmission is ever fully secure or error free. In particular, email sent to or from us may not be secure. Therefore, you should take special care in deciding what information you send to us via the Service or email. In addition, we are not responsible for circumvention of any privacy settings or security measures contained on the Service, or third-party websites.
We’ll retain your Personal Information for only as long as we need in order to provide our Service to you, or for other legitimate business purposes such as resolving disputes, safety and security reasons, or complying with our legal obligations. How long we retain Personal Information will depend on a number of factors, such as the amount, nature, and sensitivity of the information, the potential risk of harm from unauthorized use or disclosure, our purpose for processing the information, and any legal requirements.
9. International users
By using our Service, you understand and acknowledge that your Personal Information will be processed and stored in our facilities and servers in the United States and may be disclosed to our service providers and affiliates in other jurisdictions.
Legal basis for processing. Our legal bases for processing your Personal Information include:
-
Performance of a contract with you when we provide and maintain our Services. When we process Account Information, Content, and Technical Information solely to provide our Services to you, this information is necessary to be able to provide our Services. If you do not provide this information, we may not be able to provide our Services to you.
-
Our legitimate interests in protecting our Services from abuse, fraud, or security risks, or in developing, improving, or promoting our Services, including when we train our models. This may include the processing of Account Information, Content, Social Information, and Technical Information. Read our instructions(opens in a new window) on how you can opt out of our use of your information to train our models.
-
Your consent when we ask for your consent to process your Personal Information for a specific purpose that we communicate to you. You have the right to withdraw your consent at any time.
-
Compliance with our legal obligations when we use your Personal Information to comply with applicable law or when we protect our or our affiliates’, users’, or third parties’ rights, safety, and property.
Data transfers. Where required, we will use appropriate safeguards for transferring Personal Information outside of certain countries. We will only transfer Personal Information pursuant to a legally valid transfer mechanism.
Data protection officer. You can contact our data protection officer at privacy@openai.com in matters related to Personal Information processing.
10. Changes to the privacy policy
We may update this Privacy Policy from time to time. When we do, we will post an updated version on this page, unless another type of notice is required by applicable law.
11. How to contact us
Please contact support(opens in a new window) if you have any questions or concerns not already addressed in this Privacy Policy.
Updated: November 14, 2023
Privacy policy
Effective: January 31, 2024
We’ve updated our Privacy Policy below. These updates do not apply to individuals located in the European Economic Area, UK, and Switzerland. If you reside in those areas, this version of our Privacy Policy applies to you.
We at OpenAI OpCo, LLC (together with our affiliates, “OpenAI”, “we”, “our” or “us”) respect your privacy and are strongly committed to keeping secure any information we obtain from you or about you. This Privacy Policy describes our practices with respect to Personal Information we collect from or about you when you use our website, applications, and services (collectively, “Services”). This Privacy Policy does not apply to content that we process on behalf of customers of our business offerings, such as our API. Our use of that data is governed by our customer agreements covering access to and use of those offerings.
For information about how we collect and use training information to develop our language models that power ChatGPT and other Services, and your choices with respect to that information, please see this help center article(opens in a new window).
1. Personal information we collect
We collect personal information relating to you (“Personal Information”) as follows:
Personal information you provide: We collect Personal Information if you create an account to use our Services or communicate with us as follows:
-
Account Information: When you create an account with us, we will collect information associated with your account, including your name, contact information, account credentials, payment card information, and transaction history, (collectively, “Account Information”).
-
User Content: When you use our Services, we collect Personal Information that is included in the input, file uploads, or feedback that you provide to our Services (“Content”).
-
Communication Information: If you communicate with us, we collect your name, contact information, and the contents of any messages you send (“Communication Information”).
-
Social Media Information: We have pages on social media sites like Instagram, Facebook, Medium, Twitter, YouTube and LinkedIn. When you interact with our social media pages, we will collect Personal Information that you elect to provide to us, such as your contact details (collectively, “Social Information”). In addition, the companies that host our social media pages may provide us with aggregate information and analytics about our social media activity.
-
Other Information You Provide: We collect other information that you may provide to us, such as when you participate in our events or surveys or provide us with information to establish your identity (collectively, “Other Information You Provide”
Personal information we receive automatically from your use of the Services: When you visit, use, or interact with the Services, we receive the following information about your visit, use, or interactions (“Technical Information”):
-
Log Data: Information that your browser or device automatically sends when you use our Services. Log data includes your Internet Protocol address, browser type and settings, the date and time of your request, and how you interact with our Services.
-
Usage Data: We may automatically collect information about your use of the Services, such as the types of content that you view or engage with, the features you use and the actions you take, as well as your time zone, country, the dates and times of access, user agent and version, type of computer or mobile device, and your computer connection.
-
Device Information: Includes name of the device, operating system, device identifiers, and browser you are using. Information collected may depend on the type of device you use and its settings.
-
Cookies: We use cookies to operate and administer our Services, and improve your experience. A “cookie” is a piece of information sent to your browser by a website you visit. You can set your browser to accept all cookies, to reject all cookies, or to notify you whenever a cookie is offered so that you can decide each time whether to accept it. However, refusing a cookie may in some cases preclude you from using, or negatively affect the display or function of, a website or certain areas or features of a website. For more details on cookies, please visit All About Cookies(opens in a new window).
-
Analytics: We may use a variety of online analytics products that use cookies to help us analyze how users use our Services and enhance your experience when you use the Services.
2. How we use personal information
We may use Personal Information for the following purposes:
-
To provide, administer, maintain and/or analyze the Services;
-
To improve our Services and conduct research;
-
To communicate with you; including to send you information about our Services and events;
-
To develop new programs and services;
-
To prevent fraud, criminal activity, or misuses of our Services, and to protect the security of our IT systems, architecture, and networks;
-
To carry out business transfers; and
-
To comply with legal obligations and legal process and to protect our rights, privacy, safety, or property, and/or that of our affiliates, you, or other third parties.
Aggregated or de-identified information. We may aggregate or de-identify Personal Information so that it may no longer be used to identify you and use such information to analyze the effectiveness of our Services, to improve and add features to our Services, to conduct research and for other similar purposes. In addition, from time to time, we may analyze the general behavior and characteristics of users of our Services and share aggregated information like general user statistics with third parties, publish such aggregated information or make such aggregated information generally available. We may collect aggregated information through the Services, through cookies, and through other means described in this Privacy Policy. We will maintain and use de-identified information in anonymous or de-identified form and we will not attempt to reidentify the information, unless required by law.
As noted above, we may use Content you provide us to improve our Services, for example to train the models that power ChatGPT. Read our instructions(opens in a new window) on how you can opt out of our use of your Content to train our models.
3. Disclosure of personal information
In certain circumstances we may provide your Personal Information to third parties without further notice to you, unless required by the law:
-
Vendors and Service Providers: To assist us in meeting business operations needs and to perform certain services and functions, we may provide Personal Information to vendors and service providers, including providers of hosting services, customer service vendors, cloud services, email communication software, web analytics services, and other information technology providers, among others. Pursuant to our instructions, these parties will access, process, or store Personal Information only in the course of performing their duties to us.
-
Business Transfers: If we are involved in strategic transactions, reorganization, bankruptcy, receivership, or transition of service to another provider (collectively, a “Transaction”), your Personal Information and other information may be disclosed in the diligence process with counterparties and others assisting with the Transaction and transferred to a successor or affiliate as part of that Transaction along with other assets.
-
Legal Requirements: We may share your Personal Information, including information about your interaction with our Services, with government authorities, industry peers, or other third parties (i) if required to do so by law or in the good faith belief that such action is necessary to comply with a legal obligation, (ii) to protect and defend our rights or property, (iii) if we determine, in our sole discretion, that there is a violation of our terms, policies, or the law; (iv) to detect or prevent fraud or other illegal activity; (v) to protect the safety, security, and integrity of our products, employees, or users, or the public, or (vi) to protect against legal liability.
-
Affiliates: We may disclose Personal Information to our affiliates, meaning an entity that controls, is controlled by, or is under common control with OpenAI. Our affiliates may use the Personal Information we share in a manner consistent with this Privacy Policy.
-
Business Account Administrators: When you join a ChatGPT Enterprise or business account, the administrators of that account may access and control your OpenAI account. In addition, if you create an account using an email address belonging to your employer or another organization, we may share the fact that you have an OpenAI account and certain account information, such as your email address, with your employer or organization to, for example, enable you to be added to their business account.
-
Other Users and Third Parties You Share Information With: Certain features allow you to display or share information with other users or third parties. For example, you may share ChatGPT conversations with other users via shared links or send information to third-party applications via custom actions for GPTs. Be sure you trust any user or third party with whom you share information.
4. Your rights
Depending on location, individuals may have certain statutory rights in relation to their Personal Information. For example, you may have the right to:
-
Access your Personal Information and information relating to how it is processed.
-
Delete your Personal Information from our records.
-
Rectify or update your Personal Information.
-
Transfer your Personal Information to a third party (right to data portability).
-
Restrict how we process your Personal Information.
-
Withdraw your consent—where we rely on consent as the legal basis for processing at any time.
-
Object to how we process your Personal Information.
-
Lodge a complaint with your local data protection authority.
You can exercise some of these rights through your OpenAI account. If you are unable to exercise your rights through your account, please submit your request through privacy.openai.com(opens in a new window) or to dsar@openai.com.
A note about accuracy: Services like ChatGPT generate responses by reading a user’s request and, in response, predicting the words most likely to appear next. In some cases, the words most likely to appear next may not be the most factually accurate. For this reason, you should not rely on the factual accuracy of output from our models. If you notice that ChatGPT output contains factually inaccurate information about you and you would like us to correct the inaccuracy, you may submit a correction request through privacy.openai.com(opens in a new window) or to dsar@openai.com. Given the technical complexity of how our models work, we may not be able to correct the inaccuracy in every instance. In that case, you may request that we remove your Personal Information from ChatGPT’s output by filling out this form(opens in a new window).
For information on how to exercise your rights with respect to data we have collected from the internet to train our models, please see this help center article(opens in a new window).
.
5. Additional U.S. state disclosures
The following table provides additional information about the categories of Personal Information we collect and how we disclose that information. You can read more about the Personal Information we collect in “Personal information we collect” above, how we use Personal Information in “How we use personal information” above, and how we retain Personal Information in “Security and Retention” below.
|
Category of Personal Information |
Disclosure of Personal Information |
|
Identifiers, such as your name, contact details, IP address, and other device identifiers |
We may disclose this information to our affiliates, vendors and service providers to process in accordance with our instructions; to law enforcement and other third parties for the legal reasons described above; to parties involved in Transactions; to corporate administrators of enterprise or team accounts; and to other users and third parties you choose to share it with. |
|
Commercial Information, such as your transaction history |
We may disclose this information to our affiliates, vendors and service providers to process in accordance with our instructions; to law enforcement and other third parties for the legal reasons described above; to parties involved in Transactions; and to corporate administrators of enterprise or team accounts. |
|
Network Activity Information, such as Content and how you interact with our Services |
We may disclose this information to our affiliates, vendors and service providers to process in accordance with our instructions; to law enforcement and other third parties for the legal reasons described above; to parties involved in Transactions; and to other users and third parties you choose to share it with. |
|
Geolocation Data |
We may disclose this information to our affiliates, vendors and service providers to process in accordance with our instructions; to law enforcement and other third parties for the legal reasons described above; and to parties involved in Transactions. |
|
Your account login credentials and payment card information (Sensitive Personal Information) |
We disclose this information to our affiliates, vendors and service providers, law enforcement, and parties involved in Transactions. |
To the extent provided for by local law and subject to applicable exceptions, individuals may have the following privacy rights in relation to their Personal Information:
-
The right to know information about our processing of your Personal Information, including the specific pieces of Personal Information that we have collected from you;
-
The right to request deletion of your Personal Information;
-
The right to correct your Personal Information; and
-
The right to be free from discrimination relating to the exercise of any of your privacy rights.
We don’t “sell” Personal Information or “share” Personal Information for cross-contextual behavioral advertising (as those terms are defined under applicable local law). We also don’t process sensitive Personal Information for the purposes of inferring characteristics about a consumer.
Exercising your rights. To the extent applicable under local law, you can exercise privacy rights described in this section by submitting a request through privacy.openai.com(opens in a new window) or to dsar@openai.com.
Verification. In order to protect your Personal Information from unauthorized access, change, or deletion, we may require you to verify your credentials before you can submit a request to know, correct, or delete Personal Information. If you do not have an account with us, or if we suspect fraudulent or malicious activity, we may ask you to provide additional Personal Information and proof of residency for verification. If we cannot verify your identity, we will not be able to honor your request.
Authorized agents. You may also submit a rights request through an authorized agent. If you do so, the agent must present signed written permission to act on your behalf and you may also be required to independently verify your identity and submit proof of your residency with us. Authorized agent requests can be submitted to dsar@openai.com.
Appeals. Depending on where you live, you may have the right to appeal a decision we make relating to requests to exercise your rights under applicable local law. To appeal a decision, please send your request to dsar@openai.com.
6. Children
Our Service is not directed to children under the age of 13. OpenAI does not knowingly collect Personal Information from children under the age of 13. If you have reason to believe that a child under the age of 13 has provided Personal Information to OpenAI through the Service, please email us at legal@openai.com. We will investigate any notification and if appropriate, delete the Personal Information from our systems. If you are 13 or older, but under 18, you must have permission from your parent or guardian to use our Services.
7. Links to other websites
The Service may contain links to other websites not operated or controlled by OpenAI, including social media services (“Third Party Sites”). The information that you share with Third Party Sites will be governed by the specific privacy policies and terms of service of the Third Party Sites and not by this Privacy Policy. By providing these links we do not imply that we endorse or have reviewed these sites. Please contact the Third Party Sites directly for information on their privacy practices and policies.
8. Security and retention
We implement commercially reasonable technical, administrative, and organizational measures to protect Personal Information both online and offline from loss, misuse, and unauthorized access, disclosure, alteration, or destruction. However, no Internet or email transmission is ever fully secure or error free. In particular, email sent to or from us may not be secure. Therefore, you should take special care in deciding what information you send to us via the Service or email. In addition, we are not responsible for circumvention of any privacy settings or security measures contained on the Service, or third-party websites.
We’ll retain your Personal Information for only as long as we need in order to provide our Service to you, or for other legitimate business purposes such as resolving disputes, safety and security reasons, or complying with our legal obligations. How long we retain Personal Information will depend on a number of factors, such as the amount, nature, and sensitivity of the information, the potential risk of harm from unauthorized use or disclosure, our purpose for processing the information, and any legal requirements.
9. International users
By using our Service, you understand and acknowledge that your Personal Information will be processed and stored in our facilities and servers in the United States and may be disclosed to our service providers and affiliates in other jurisdictions.
Legal basis for processing. Our legal bases for processing your Personal Information include:
-
Performance of a contract with you when we provide and maintain our Services. When we process Account Information, Content, and Technical Information solely to provide our Services to you, this information is necessary to be able to provide our Services. If you do not provide this information, we may not be able to provide our Services to you.
-
Our legitimate interests in protecting our Services from abuse, fraud, or security risks, or in developing, improving, or promoting our Services, including when we train our models. This may include the processing of Account Information, Content, Social Information, and Technical Information. Read our instructions(opens in a new window) on how you can opt out of our use of your information to train our models.
-
Your consent when we ask for your consent to process your Personal Information for a specific purpose that we communicate to you. You have the right to withdraw your consent at any time.
-
Compliance with our legal obligations when we use your Personal Information to comply with applicable law or when we protect our or our affiliates’, users’, or third parties’ rights, safety, and property.
Data transfers. Where required, we will use appropriate safeguards for transferring Personal Information outside of certain countries. We will only transfer Personal Information pursuant to a legally valid transfer mechanism.
Data protection officer. You can contact our data protection officer at privacy@openai.com in matters related to Personal Information processing.
10. Changes to the privacy policy
We may update this Privacy Policy from time to time. When we do, we will post an updated version on this page, unless another type of notice is required by applicable law.
11. How to contact us
Please contact support(opens in a new window) if you have any questions or concerns not already addressed in this Privacy Policy.
Ja sitten suomeksi: