ChatGPT Wallet Privacy Notice

ChatGPT Wallet lets eligible users save an eligible payment card and direct ChatGPT to use a payment credential linked to that card to facilitate a user’s purchase from a merchant. This Wallet Privacy Notice explains how OpenAI OpCo, LLC (“OpenAI,” “we,” “our”) handles information when you use ChatGPT Wallet in the United States. It supplements the OpenAI Privacy Policy⁠. Some of the information collected for ChatGPT Wallet is also covered under the OpenAI Privacy Policy and used for other OpenAI services. This Wallet Privacy Notice covers how information is used for ChatGPT Wallet only.

When you first use ChatGPT Wallet, you will be presented with a secure card form, where our service provider collects the card number, expiration date, security code, billing address, and other verification data. OpenAI receives a tokenized payment credential and limited card details, such as network, issuer, card type, last four digits, expiration date, billing country or postal code, and eligibility/status signals. OpenAI does not receive the full credit card number or security code.

When you use ChatGPT Wallet, we also collect and use the following information:

• Contact Information and Identifiers: We collect your name and contact information, including your email, phone number, billing address, shipping address, and other contact or delivery information you provide or ask ChatGPT to use, along with your OpenAI account information, such as subscription type and a unique ID that we associate with your account.

• Purchase and Transaction Information: When you use ChatGPT Wallet to make a purchase, we collect information about the merchant, date and time of the transaction, amount and currency and other details of the purchase, including card eligibility, items or services, quantity, tax, fees, shipping, discounts, and product descriptions, recipient and delivery details, and order status information, such as  authorization, fulfillment, cancellation, refund, dispute, and chargeback status. We also collect records of the activities that involve ChatGPT Wallet, including the purchase request, the purchase action you approved or rejected, the authentication result, time and device used to make the purchase, and records of the request submitted to the merchant.

• Device, Security, and Fraud Information: We collect information for security and fraud purposes, including IP address, device and browser type, app version, device identifiers and settings, approximate location, ChatGPT Wallet activity, risk, fraud, identity, sanctions and security signals, passkey or authentication assertions, and information about suspected fraud, misuse, or security incidents.

We collect much of this information directly from you or through your use of ChatGPT Wallet and OpenAI’s services. We also receive some information described above from merchants, issuers, card networks and payment providers, such as card eligibility, token data, transaction data, and fraud, identity, sanction, and security signals, which we use in accordance with our agreements with such parties, where applicable.

We use the information that we collect for the purposes described in the OpenAI Privacy Policy⁠, subject to your Data Controls⁠(opens in a new window), and we also use it to:

• Set up and maintain your ChatGPT Wallet, including to add, verify, tokenize, display, update, and remove cards and credentials;

• Prepare, show for approval, submit, confirm, and keep records of purchases you direct using ChatGPT Wallet;

• Provide support for ChatGPT Wallet, including to help investigate failed or disputed transactions, and communicate with you about ChatGPT Wallet;

• Authenticate users and purchase approvals, prevent, detect, and investigate fraud, abuse, security incidents, and prohibited transactions in connection with ChatGPT Wallet; and

• Comply with law, sanctions, card-network rules, valid legal process, and contractual obligations, protect rights and safety, and enforce our terms.

We disclose information covered by this Wallet Privacy Notice in the circumstances described in the OpenAI Privacy Policy as well as to:

• Payment and Security Providers: We work with payment service providers that securely collect or store card details.  We also work with payment and security vendors that tokenize cards, create payment credentials, process or route transactions,  authenticate approvals, prevent fraud, provide cloud, analytics, support, or security services, and help us operate Wallet.

• Merchants and Their Providers: When you direct a purchase involving ChatGPT Wallet, we or our vendors provide the information needed to place and fulfill the purchase to merchants and their providers. We may also provide device, security, and fraud information to merchants to help them assess the legitimacy of transactions.

• Card Issuers and Payment Networks: We and our providers disclose certain information to card issuers and payment networks to determine card eligibility, create or manage a credential, authorize or process a transaction, prevent fraud, and resolve disputes.

We do not sell information collected in connection with ChatGPT Wallet or share it for cross-context behavioral advertising or targeted advertising purposes. Third parties such as merchants, issuers, networks, and their service providers handle information under their own terms and privacy notices when acting for their own purposes.

A payment card will remain in your ChatGPT Wallet for a limited time after you have removed it as needed to deactivate the credential, complete pending transactions, prevent fraud, or meet legal obligations. Our service provider retains underlying card data under its contract and applicable card-network and legal requirements.

We retain other information described in this Wallet Privacy Notice as long as reasonably necessary for the purposes described above, and in many cases subject to your settings. Please see the Retention section in the OpenAI Privacy Policy for more information.

You can choose whether to add a card or approve a purchase. You can remove a card and manage ChatGPTWallet settings in your OpenAI account settings. Removing a card does not cancel a purchase already submitted or result in deleting records we must retain for the purposes described above.

Please review the Data controls and Your rights sections of the OpenAI Privacy Policy⁠ to understand the additional choices and privacy rights available to you and how to exercise them.

Wallet is intended for adults in the United States and is not available to anyone under 18.

We may update this Wallet Privacy Notice when the ChatGPT Wallet changes. When we do, we will publish an updated version and effective date on this page, unless another type of notice is required by applicable law.