OpenAI Deployment Company Privacy Policy

Last Updated: May 22, 2026

This Privacy Policy describes how the OpenAI Deployment Company, LLC (“DeployCo,” “we,” or “us”) collect, use, disclose, and otherwise process information about you when you access or use our websites (collectively, our “Sites”) and when you otherwise interact with us, such as at events or if you sign up for our marketing communications.

This privacy policy covers DeployCo, a consultancy that helps companies deploy AI tools at scale], but it does not apply to your use of ChatGPT or other services offered by OpenAI OpCo, LLC. For data protection terms governing those services, please review the personal data terms your enterprise agreement.

We may update this Privacy Policy from time to time. When we do, we will publish an updated version and effective date on this page, unless another type of notice is required by applicable law. We may provide different or additional notices of our privacy practices for certain offerings, in which case those notices will supplement or replace the disclosures in this Privacy Policy.

Collection of Information

The information we collect about you depends on how you interact with us.

Information You Provide to Us

We collect information you provide directly to us. For example, we collect information directly from you when you fill out a form on our Sites or at an event, create an account with us, sign up for our marketing communications, or otherwise communicate with us. The types of information that we collect directly from you include your name, email address, postal address, phone number, job title and company information, and any other information you choose to provide.

Information We Collect Automatically

We automatically collect information about your device and your interactions with us or our Sites. We collect information about how you access our Sites, including data about the device and network you use, such as your hardware model, operating system version, mobile network, IP address, browser type, and unique device identifiers. We also collect information the route by which you access our Sites, access dates and times, and your activity on our Sites, such as pages viewed and links clicked. We use tracking technologies, such as cookies and pixels, to collect information some of the information about your interactions with the Sites and our marketing communications. We use these technologies to analyze activity on our Sites and interactions with marketing communications, including to see which areas and features of our Sites are popular and count visits. We describe how we use tracking technologies for marketing purposes below.

Information We Collect from Other Sources

We obtain information from other sources. For example, we may collect information from data analytics and mailing list providers, as well as from public sources like professional networking websites. This information includes, for example, your contact information and information about your company and job title.

Information We Derive

We may derive information or draw inferences about you based on the information we collect. For example, we may make inferences about your approximate location based on your IP address.

Use of Information

We use the information we collect to provide our Sites and communicate with you. We also use the information we collect to:

  • Provide, maintain, and improve our services and offerings;

  • Develop new products and services;

  • Send you marketing communications;

  • Monitor and analyze trends, usage, and activities in connection with our products and services;

  • Target marketing for our own services to you on third-party platforms and websites;

  • Detect, investigate, respond to, prosecute, and help protect against security incidents and other malicious, deceptive, fraudulent, or illegal activity, and help protect the rights and property of DeployCo and others;

  • Comply with our legal and financial obligations; and

  • To create de-identified and aggregate data that cannot reasonably be linked to you.

Disclosure of Information

We disclose information about you in the following scenarios:

  • Vendors and Service Providers. We make personal information available to our vendors, service providers, contractors and consultants who perform services on our behalf, such as companies that assist us with web hosting, fraud prevention, analytics, and marketing.

  • For Marketing Purposes. We may make personal information available to marketing partners that help us show you ads about DeployCoon third-party sites and services. These partners may use cookies, pixels, SDKs, and similar technologies to collect information about your use of our Sites, such as your IP address, web browser and mobile network information, pages viewed, time spent on pages or in mobile apps, and links clicked.

  • Law Enforcement Authorities and Individuals Involved in Legal Proceedings. We disclose personal information in response to a request for information if we believe that disclosure is in accordance with, or required by, any applicable law, regulation, or legal process, including lawful requests by public authorities to meet national security or law enforcement requirements.

  • To Protect the Rights of DeployCo and Others. We may disclose personal information if we believe that your actions are inconsistent with our user agreements or policies, if we believe that you have violated the law, or if we believe it is necessary to protect the rights, property, and safety of DeployCo, our users, the public, or others.

  • Professional Advisors. We disclose personal information to our legal, financial, insurance, and other professional advisors where necessary to obtain advice or otherwise protect and manage our business interests.

  • Corporate Transactions. We disclose personal information in connection with, or during negotiations of, certain corporate transactions, including a merger, sale of company assets, financing, or acquisition of all or a portion of our organization by another company.

  • With Your Consent or at Your Direction. We make personal information available to third parties when we have your consent or you intentionally direct us to do so.

We also disclose aggregated or de-identified information that cannot reasonably be used to identify you. We maintain and use this information only in a de-identified fashion and will not attempt to re-identify such information, except as permitted by law.

Data Retention

We store personal information for as long as necessary to carry out the purposes for which we originally collected it and for other business purposes explained in this Privacy Policy.

Your Choices

Cookies and Similar Tracking Technologies

DeployCo uses cookies and similar tracking technologies for analytics and marketing purposes described above In addition, you can usually adjust your browser settings to remove or reject browser cookies.

Communications Preferences

You may opt out of receiving promotional communications from DeployCo by following the instructions in those communications. If you opt out, we may still send you non-promotional emails, such as those about our ongoing business relationship.

Additional Information for Specific Jurisdictions

Individuals Residing in Certain U.S. States

Some U.S. states have enacted privacy laws that grant their residents certain rights and require specific disclosures (“State Privacy Laws”). To the extent these laws apply to DeployCo, if you reside in California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island. Tennessee, Texas, Utah, or Virginia, this section applies to you. This section also serves as our California notice at collection.

Additional Disclosures

Our Privacy Policy explains how we collect, use, and disclose information about you. As required by certain State Privacy Laws, we use the tables below to explain this same information.

Use and Disclosure of Personal Information for Business Purposes

Category of Personal Information

Categories of Recipients

Use of Personal Information

  • Identifiers (such as your name, email, and IP address)
  • Internet or Other Electronic Network Information (such as about your activity on our Sites)
  • Professional Information (such as your job title and employer)
  • Inferences (such as your city of residence derived from your IP address)
  • Other information you choose to provide
  • Vendors and service providers
  • Law enforcement authorities and individuals involved in legal proceedings
  • Where necessary to Protect the Rights of DeployCo and others
  • Professional advisors
  • Recipients in connection with corporate transactions
  • With your consent or at your direction
  • Provide our Sites;
  • Communicate with you;
  • Provide, maintain, and improve our services and offerings;
  • Develop new products and services;
  • Send you marketing communications;
  • Monitor and analyze trends, usage, and activities in connection with our products and services;
  • Detect, investigate, respond to, prosecute, and help protect against security incidents and other malicious, deceptive, fraudulent, or illegal activity, and help protect the rights and property of DeployCo and others;
  • Comply with our legal and financial obligations; and
  • To create de-identified and aggregate data that cannot reasonably be linked to you.

We collect information that is considered “sensitive” under State Privacy Laws and we do not use or disclose sensitive personal information for the purpose of inferring characteristics about you.

As described in the Collection of Information section above, we collect personal information from various sources, including directly from you, automatically when you access or use our Sites, and from third-party sources.

We retain personal information for as long as necessary to carry out the purposes for which we originally collected it and for other purposes described in this Privacy Policy.

Targeted Advertising and Sharing for Cross-Context Behavioral Advertising

We may disclose identifiers (like your IP address, cookie IDs, and a hashed version of your email address), and information about your activity on our Sites to advertising and marketing networks to show you ads about DeployCo on third-party properties. These disclosures may be considered “sharing,” for “cross-context behavioral advertising” or use of personal information for “targeted advertising” under State Privacy Laws. We do not engage in these activities using personal information about individuals we know to be under the age of 18.

Your Rights under State Privacy Laws

Opt Out of Sales, Sharing, and Targeted Advertising

Prior to our engaging in activities that constitute “targeted advertising,” or “sharing” we will give you the ability to opt out of such activities and we will update this section of our privacy policy to describe to you the means by which you may opt out.

Access, Correction, and Deletion

You have the right to (1) request to know more about and access your personal information, including in a portable format, (2) request deletion of your personal information, and (3) request correction of inaccurate personal information.

To request access, correction, or deletion of your personal information, please email us at dsar@openai.com. We may request certain information from you to authenticate your request.

Nonretaliation

We will not retaliate against you for exercising your privacy rights.

Appeals

If we deny your request, you may appeal our decision by contacting us at dsar@openai.com. If you have concerns about the result of an appeal, you may contact the attorney general in the state where you reside.

Authorized Agents

If you reside in California, you may also designate an authorized agent to submit an access, deletion, or correction request on your behalf. We may ask authorized agents to submit proof of their authority to make a request, such as a valid power of attorney or proof that they have signed permission from the consumer who is the subject of the request. In some cases, we may contact the individual who is the subject of the request to verify their own identity or confirm the authorized agent has permission to submit the request. If you are an authorized agent seeking to make an access, correction, or deletion request on behalf of a California resident, contact us at dsar@openai.com.

International Transfers

DeployCo is based in the United States, and we and our service providers process and store personal information on servers located in the United States and other countries. The laws in these countries relating to data protection may not be the same as in your home country. Whenever we make restricted international transfers of personal information, we take steps to ensure that your personal information receives an adequate level of protection (by putting in place appropriate safeguards, such as contractual clauses) or ensure that we can rely on an appropriate derogation under data protection laws. Where relevant, you may request access to any safeguard which we use to transfer your personal information outside of the European Economic Area, the United Kingdom, or Switzerland (although we may need to redact data transfer agreements for confidentiality reasons).

Individuals in Europe

If you are located in Europe, this section applies to you.

Legal Basis for Processing

When we process your personal data as described in this Privacy Policy, we do so in reliance on the following lawful bases:

  • To perform our responsibilities under our contract with you (e.g., providing the services you requested);

  • When we have a legitimate interest in processing your personal information, and this interest is not overridden by the impact on your privacy or other rights (e.g., to provide, maintain, and improve our services, conduct data analytics, and communicate with you). Our legitimate interests include the need to operate and promote our organization, and protect our interests;

  • To comply with our legal obligations (e.g., to maintain a record of your consents and track those who have opted out of marketing communications); or

  • When we have your consent to do so (e.g., when you opt in to receive marketing communications from us). When consent is the legal basis for our processing of your personal information, you may withdraw such consent at any time.

Data Subject Requests

You have the right to (1) request access to your personal data (including in some cases in a portable format), (2) request erasure of your personal data, and (3) request correction of inaccurate personal data. In addition, you have the right to object to certain processing or request we restrict certain processing. To exercise any of these rights, please contact us at dsar@openai.com. Note that there may be circumstances in which we are not obliged to comply with your request because of legal conditions and exemptions provided for under the relevant data protection laws.

If you have a concern about our processing of personal data, we encourage you to contact us in the first instance, and we will seek to resolve your concern. However, if we are not able to resolve it, you have the right to lodge a complaint with the Data Protection Authority where you reside. Contact details for your Data Protection Authority can be found using the links below:

For individuals in the European Union: https://edpb.europa.eu/about-edpb/board/members_en

For individuals in the UK: https://ico.org.uk/global/contact-us/

For individuals in Switzerland: https://www.edoeb.admin.ch/edoeb/en/home/the-fdpic/contact.html

Contact Us

If you have questions about this Privacy Policy, please contact us at dsar@openai.com.